{"report_id":"9205015d-f5cb-4ccd-8183-57bae8866635","version":6,"status":"done","tags":[],"date":"2026-01-02T16:06:01Z","url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wnecsk06hq26g8af3v4147b2","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"title":"LEON Bet Casinò Online in Italia","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"58fd429c4b1f258b6a885c3fe76d0e0f","sha1":"7a5badea4a84029225ce363221a628d078b66298","sha256":"27ef51cf1336160acdc136f21c058cca15d608b894c889fafb6c1bc54ad55559","sha512":"b07f9774c8ae8bb29b394cffb03c46e491466750233d1b81c3b98f50a99dd13439c75f771ad4d22f106d74c26da440bb468cdc71d4b014cc485817822d6eeae2","ssdeep":"","tlshash":"78f09edb1c718509468207c8c0f1e4299808735a1450dc8574fea16cbbd5d5b8c1c2d9","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wnecsk06hq26g8af3v4147b2","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T16:06:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-02T16:05:33Z","timestamp":1767369933,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.2","port":56529,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-01-02T16:05:33.974717+0000\",\"flow_id\":293255749951357,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":56529,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-02T16:05:33.974717+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"js.intercomcdn.com","ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-12-29T02:51:59.996783Z","alert_count":0,"request_count":3,"received_data":1711064,"sent_data":1392,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":152102,"sent_data":1828,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.54","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2025-12-29T08:07:41.042925Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":744,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-01","domain_rank":0,"first_seen":"2025-02-23T03:47:42.85381Z","last_seen":"2026-01-02T00:51:04.089372Z","alert_count":0,"request_count":1,"received_data":1245,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-28T22:22:58.360429Z","alert_count":0,"request_count":3,"received_data":2553,"sent_data":5550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i64cl3er5t.com","ip":{"addr":"104.21.59.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-23","domain_rank":4837675,"first_seen":"2025-10-18T07:34:49.497184Z","last_seen":"2025-12-27T21:36:10.201572Z","alert_count":0,"request_count":1,"received_data":42276,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d1cr9zxt7u0sgu.cloudfront.net","ip":{"addr":"54.192.209.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-05-17T11:07:13Z","last_seen":"2026-01-01T13:23:10.064524Z","alert_count":0,"request_count":1,"received_data":183162,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"leoncasino.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2022-07-05T10:57:06Z","last_seen":"2026-01-02T16:06:10.189847Z","alert_count":0,"request_count":92,"received_data":7733331,"sent_data":43371,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel-us.r2drtb.com","ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-07-08","domain_rank":5001008,"first_seen":"2024-07-30T23:22:43Z","last_seen":"2025-12-28T17:05:08.38594Z","alert_count":0,"request_count":4,"received_data":1951,"sent_data":1898,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":11,"received_data":360897,"sent_data":5999,"comment":"","tags":null,"fingerprints":null},{"fqdn":"leon-italy.casino","ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-08","domain_rank":0,"first_seen":"2025-12-04T12:03:57.106339Z","last_seen":"2026-01-02T16:06:10.39916Z","alert_count":0,"request_count":23,"received_data":2359872,"sent_data":27804,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ps.l.liftdsp.com","ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":602474,"first_seen":"2024-10-13T05:47:12.053455Z","last_seen":"2025-12-27T03:22:50.127779Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"98.91.123.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-12-29T12:06:33.378667Z","alert_count":0,"request_count":3,"received_data":16746,"sent_data":1603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-12-29T01:29:50.11518Z","alert_count":0,"request_count":1,"received_data":8345,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnimages3.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-01-02T00:51:05.035982Z","alert_count":0,"request_count":1,"received_data":4582,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-28T22:19:36.894477Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":784,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":902860,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"track.liftdsp.com","ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-16T05:39:57.442139Z","last_seen":"2026-01-01T18:38:01.938456Z","alert_count":0,"request_count":2,"received_data":10249,"sent_data":2538,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"cdnimages2.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-01-02T00:51:04.238222Z","alert_count":0,"request_count":39,"received_data":463967,"sent_data":18102,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn0.match2one.net","ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-08","domain_rank":743950,"first_seen":"2018-10-09T19:50:01Z","last_seen":"2025-12-29T00:06:21.754147Z","alert_count":0,"request_count":1,"received_data":5877,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pool.liftdsp.com","ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-12T16:56:20.115696Z","last_seen":"2025-12-27T03:22:51.011254Z","alert_count":0,"request_count":2,"received_data":920,"sent_data":1140,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.5CrZ84a6.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"884a1b0b43a0ae1cb61348c3174a9e32","sha1":"55e822b78da9e0119e52afd6347b8dcca2a08d98","sha256":"ee6e6f58369877c9768eaf201befd7c1a65ee2552a144039ba96ee787dc7b2bc","sha512":"67c9b262d498cf732ef29907546cf7888718f7dbbc956a49500bd05616e00208033c513c8d1641d6a5215b46ecbc10fa5894124da606d1427bbdaf32063eff7a","ssdeep":"768:Q6/vLQXAH+dxsPZYq5iFNokZrOEbHJULQMB3ZeaYwy9aOgWC/:rHLQXeiFNo/EbHJU8MNZpYwZf/","tlshash":"c9e22b2832a57d3181abe5bdd0a1383055294a5a92134ec0b7bcbb7552fe9b94337f0f","size":32513,"data":"","first_seen":"2025-12-20T03:09:17.612678Z","last_seen":"2026-01-03T10:01:28.314488Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-06T08:27:08.322737Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fde762892a133b7e9b5fe78c10a8829f","sha1":"0ea5fe2dd52a0ac4dc7fd7c1380f229f8ffe36c7","sha256":"923db43808690ee9aa0446a0a52d6356ffa4a868e1b9dd5d68cd3dbf729b7c50","sha512":"5de8ab00f03e62b53407c48046cc29d5c78134be361fcd9215c235fc5b73b1048c9f03fa6aff0d15f6c93116b06f22113496ec25b6edd229fcae7d49f5767b21","ssdeep":"6144:0BdNtcFikOGxQ7KGZeh3Lep2ZS3wtURfCrrbAIhFk6oN1Omd4hk2GUjeum5eD:CDcFxlwAqfOrbAINQF5k","tlshash":"a7d44b5a7251783647b241e9806f0646b3391a2e9448c85cb6a8e9ef38fdc4531bff7c","size":649978,"data":"","first_seen":"2025-12-20T03:09:17.528049Z","last_seen":"2026-01-05T18:44:37.718747Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9880decbec604ca45dc8c1313fe71636","sha1":"a3193da690b564fa4dad3a83857b36f54ad69411","sha256":"ba5c354fc590490855811c9578dfd1cbe500597b6d3b31536e5b86914fecc3f8","sha512":"506933e7caf71549d5cfe89c98f01723723b549ba6184686b4d2a3b5423170a0a9652200825e7132014d65e9d89500893cf76291878f616b71d9109a4a689802","ssdeep":"3072:G614onULeOrakzX/yYJ5SfTlJaweqMQ5I9BeH0WBtG:51hUyOrakzvyYJ5Sb1k9BeH0WBtG","tlshash":"8004fa166a4438ff4f710e2e5b2a7aa462330d98fa21c073d2b69f3e2f5b401f197595","size":186466,"data":"","first_seen":"2025-12-20T03:09:17.532066Z","last_seen":"2026-01-03T10:01:28.339038Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.Dn9W2zzb.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0bb624871c476cc9448de8d6d76c6092","sha1":"e6bfb472c08a75e86feaeadaf311d6dd065e7292","sha256":"c8f0142eca710c0037be63229442e73763a4af814baa771167ed8b579da19e66","sha512":"d0ce80810a873df0192e4cbe4ac62a38b5891c3530f22f7806d756579b7c85c7b4ec3d1f124bd7d9a0b8a313ee1ad0988073ac147686a2847259ee041f957866","ssdeep":"96:Y0JN+a+8Toy1lF0KkUZ0Fk62QJ9uy8SisBBGRX:YQ4yDvCKYk62QJ978c2RX","tlshash":"52b1120b7625f3f986ad2a28d9c422305a3d2fcd631404d1eafec0197249679c5b5bcf","size":5384,"data":"","first_seen":"2025-12-20T03:09:17.529877Z","last_seen":"2026-01-03T10:01:28.303475Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.5CrZ84a6.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"884a1b0b43a0ae1cb61348c3174a9e32","sha1":"55e822b78da9e0119e52afd6347b8dcca2a08d98","sha256":"ee6e6f58369877c9768eaf201befd7c1a65ee2552a144039ba96ee787dc7b2bc","sha512":"67c9b262d498cf732ef29907546cf7888718f7dbbc956a49500bd05616e00208033c513c8d1641d6a5215b46ecbc10fa5894124da606d1427bbdaf32063eff7a","ssdeep":"768:Q6/vLQXAH+dxsPZYq5iFNokZrOEbHJULQMB3ZeaYwy9aOgWC/:rHLQXeiFNo/EbHJU8MNZpYwZf/","tlshash":"c9e22b2832a57d3181abe5bdd0a1383055294a5a92134ec0b7bcbb7552fe9b94337f0f","size":32513,"data":"","first_seen":"2025-12-20T03:09:17.612678Z","last_seen":"2026-01-03T10:01:28.314488Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.C8-ZPrna.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8b662a6bde101ab90f4eb084e82efb","sha1":"b0a61862f6bdb003bcf9bb007d13d446a2dc4a53","sha256":"25d54cefc9dad74e43281fd6b5a82cd65cee563c6a9076ba8619f05ceb018a27","sha512":"d12694d1fe9221bc54d50cbfcfa74b4005d2cd1b8f16547c49208936d44daae1f26e7251b94240bbc7ddeeb78755f272b6f5251c3ab6161ba508b253a9b602c2","ssdeep":"1536:xWOoPHMorDC8EYfWo//0VFiZBHS+/tIyUEJajYN2Uwc:xjorOvYJ/OqIyUEJa02U3","tlshash":"6f63620ded0c55f9a3e650b9f0f54e0a6518ae47f2784580bab5cc1f9488fa8a36f34d","size":68977,"data":"","first_seen":"2025-12-20T03:09:17.488718Z","last_seen":"2026-01-03T10:01:28.241155Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-06T08:27:08.322737Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-04-05T09:02:54.826445Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","size":1926,"data":"","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","size":1926,"data":"","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CxxbCUUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a1acf28d407bee53298538053e42007e","sha1":"b709acab1d70f0f569e596683a3202ae4ed9e68a","sha256":"3cae12fbeec3d3b3200c7410a86f7d740b4cebb2b760561535ef5f53848473c9","sha512":"b03986a36418e86de4271a8106cd0a927a84b59ab5dc81816d99814ce42d17ddace139271a1f3fec657a812a44e323d171a642f429e8cdc0ae145713686e7e68","ssdeep":"","tlshash":"da61b59b6206e370c1166094d02f2c00e95806cdb3b47590adfd58aed9a213ae17bb5e","size":3358,"data":"","first_seen":"2025-12-20T03:09:17.611272Z","last_seen":"2026-01-03T10:01:28.349763Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","size":1756,"data":"","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.BAcgzTvt.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c1b80461b89d40e24f6902cf0fc98550","sha1":"68451fd065ed14d6a5eba9d2ee737a013242bb4e","sha256":"a4a010edbc41c9578a1e0dfd9666c36b642ca785dc21fdcc7a563cbe764ea6ff","sha512":"c83fe841d06831e171414980a258d036fe33ffb31ede92e2a0d293808a4cdcf8b96a3458b49e2fa302cf3bfe4eb46109556ccca58860f1f6905bad02f11f141a","ssdeep":"96:ftJnqGgAaycByHKC5mTsOURWSwmSiQ5ZpJLZejQg4sc9GDhDKTAoExk0uIOVPIMg:TqJKAAZqmoztVxW2lgLJwsmKWa9r","tlshash":"5ec1db9d7fbea13115d949e160aeb047d33950d8f019c061a06caab83913ede89f7f4e","size":5967,"data":"","first_seen":"2025-12-20T03:09:17.55371Z","last_seen":"2026-01-03T10:01:28.31875Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.D3m7uDVe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a765ff0c69e024d5f5fbed235354a3a","sha1":"0a044d0488491aedb2c12f5c54d35098bded3447","sha256":"c5045228151c9709611e101a23cf0609efd689dfbcd39c242beccf280317017f","sha512":"b14c24c178508ac9f85d17b6361383d88c1e485ea1333ad8bb8c37a26f0caa97bfdde005ca60fa16b739eb46051d42da37e9a4838ae4a1c738d724beedff1261","ssdeep":"","tlshash":"cd4196b9b080f438437f84bfe876d1d4572462507267d5f1a06e269d09a8cd6c2b8f8f","size":2346,"data":"","first_seen":"2025-12-20T03:09:17.496082Z","last_seen":"2026-01-03T10:01:28.335206Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6808b734a8226f932ccbed46abd4c3","sha1":"e99369c89962018d66d6d9d6ab2e044957a72c83","sha256":"e906c2f60e55c9f55751ee306c0c8d68f1b4b5dafadbdfba9f866b116b01c299","sha512":"8eb79da7d960c77acedc69726b2d30bf7aa2db055bc89869c0309e8f07bf9df2d76d9f2a3c2314c7fb27dda571c8bab56ec2dfd518710e7159c5fd42b75f01fc","ssdeep":"","tlshash":"b3f0970e9cc503a043f800c483bbff1df29f210c881c8264c3c78882760aa9398323e8","size":487,"data":"","first_seen":"2023-11-07T14:36:47Z","last_seen":"2026-04-05T09:02:54.922718Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5bcd0b3ca0cf09560b81d4bafa81657","sha1":"72b03ba7ced6ab3ea90e0e954ae5cb61856457f5","sha256":"3f457aaf2a3ef735edfbd93a4ec1b211643b67e31730899980981f9582fb13b8","sha512":"3b318cb8a61f498261593efb47ff275bd2be805b8208294535859b5c3636a80ad91ac67e76879daa87738b0482814319d8beb504d56fc10359eae14ac32c1360","ssdeep":"6144:tDIe7ma2bulKY/1u99xHDmHYmyBFzvnsUGnWoePad4FpC1JF:mC8bu7/1mbrnsdWmMp8","tlshash":"6e84188e73c670269396e078503f118ba57b29e2f45cc895f189cce42e746aa4277f7c","size":399427,"data":"","first_seen":"2026-01-02T16:06:22.569695Z","last_seen":"2026-01-02T16:06:23.512199Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9880decbec604ca45dc8c1313fe71636","sha1":"a3193da690b564fa4dad3a83857b36f54ad69411","sha256":"ba5c354fc590490855811c9578dfd1cbe500597b6d3b31536e5b86914fecc3f8","sha512":"506933e7caf71549d5cfe89c98f01723723b549ba6184686b4d2a3b5423170a0a9652200825e7132014d65e9d89500893cf76291878f616b71d9109a4a689802","ssdeep":"3072:G614onULeOrakzX/yYJ5SfTlJaweqMQ5I9BeH0WBtG:51hUyOrakzvyYJ5Sb1k9BeH0WBtG","tlshash":"8004fa166a4438ff4f710e2e5b2a7aa462330d98fa21c073d2b69f3e2f5b401f197595","size":186466,"data":"","first_seen":"2025-12-20T03:09:17.532066Z","last_seen":"2026-01-03T10:01:28.339038Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"631036c478b6a0b0aaa7d71707779f0f","sha1":"94053f2e94b305e3dda29c04d3ce22346a8336cf","sha256":"0c390ae44fb3e39f9e23de7e61857f53e78be006a2c17cfcd0e583d073fa3762","sha512":"a62202769c20f2ed1686a8fa7c619fc9ae2cf0c3cf33ba268f901422dcce0f910f1ced698eba91c9348863f385c16e9bfa4392c3e220c1fa7d589750fd35a8f4","ssdeep":"","tlshash":"c3f00255790b513d47a3607047ffc20b2827a0a711c1c849d916c8b81fe5ac8c59fbef","size":625,"data":"","first_seen":"2024-03-29T05:33:40Z","last_seen":"2026-04-05T09:02:54.918366Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","size":6067,"data":"","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd43e72a.d.m.vfSsdjxl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"abe1ce4231382d5b2139f5c5980deee9","sha1":"236a426039842cb375e77fccccc05dcc255226ca","sha256":"608d4f64b5b27661a92ecb393e215a3928520a9b85ea746628d7e254b0ec4e75","sha512":"07e1746c5afbabf9946e6df0c242e617c335dcbbe34171ad0739f844eaa4522ae3ac0478cf59fdf746257ab66399e1e60d39eec9a77b26f7a7923b8196c31ed4","ssdeep":"","tlshash":"7bf059cd76c3b46806a71479c03fdc5ef63b7d947acec4d0e50aa0752a3446a8133a69","size":512,"data":"","first_seen":"2025-12-20T03:09:17.600449Z","last_seen":"2026-01-05T18:44:37.832773Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"de67a6c6aaaf800dd47099cb738c73da","sha1":"dbfad2730311def8f2720b5a8e0a669d09d41d0d","sha256":"acf908b14f29165de87dbc1c3ec37b7f04935cb917921ec280b8c4e3ab7af31b","sha512":"0c50673ce74683ef2377c054805c7438a18d6da1c60a37f0e157c2eb635800ff904104b5b4de7c96474c3cdada07b8f63c3e31b1e9a8293d76440c65872360f7","ssdeep":"","tlshash":"07f0270e9cc507a457f810c453bbff1df29f210c985d8665c3c68892761af9798363e8","size":484,"data":"","first_seen":"2023-12-10T15:49:15Z","last_seen":"2026-04-05T09:02:54.927143Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ed8abb594b0fa6f0b8fc90b411d0901","sha1":"1c0a7a42df841fc4f32ab15893bfbc37bfc1551d","sha256":"dea8d793257ef5d158fcb0303f74aa21ba70deb851469db39067278c70873b37","sha512":"8e581891ce0ccee25e5e19ec34d2eae024594244add970e4b483a32c67909ffda0e57c6eb99f5ba3fe7863e096299b82645e37680572384860498d12a898371c","ssdeep":"","tlshash":"88e0c046e0a041bfd6a982d4f505bb963f758924d48a69b7e04e2c89508d74255c0e0c","size":355,"data":"","first_seen":"2026-01-02T16:06:23.58549Z","last_seen":"2026-01-02T16:06:23.58549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.CYcOP7Rp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6578f48b5497db0058aa08288e6eb033","sha1":"26cf6e1e59376fe6c1aa646386453a6cf92f73b0","sha256":"f18a508cbd365f76e6b3e3d66284b5ae76f17a29cb0317f597a31a869eb8b787","sha512":"2099b9c200f8280762c9a25853d5300f31643d418ea0d57d136c2118a72a3c02fbb953459f248244263acc8f5964d3ca404dab6456a89172e7964cb76b0fe016","ssdeep":"384:PeQdrY5tu5oHRRYF7XLA+McCw4hDfGPNPjN3uw+:PbdrYPuGHROrMcvcGPNPR+w+","tlshash":"1eb2880b32bd9ff911a655a9c4813020892c8eca92715dc1d9ffcf65264ce61d2b6bcf","size":23572,"data":"","first_seen":"2025-12-20T03:09:17.490186Z","last_seen":"2026-01-03T10:01:28.349279Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","size":78915,"data":"","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.AxOEJzb9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"eedbe56ec5f87538d02bf66916759300","sha1":"7f6abe19844c6cc6eab778065c2279a2b02d8b90","sha256":"3c909f45684d0a9d66311deac3d809f8cb1e0233a0efc11793f0dcc2b34a27b5","sha512":"6c0b24c6b85dd4c4095a625f59ea58909e2a23d9628ff62e8cfa327e4189299f9d9e6da2bd4311ce7b1dc1d6f008ac2bff4c484865d56655e422fa4bb7810e72","ssdeep":"384:jORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6x:jORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFl","tlshash":"196208f170ed657043e616e0a0b70106e5a9552830c9c4e0f59fcafe45eb980a9a7f7e","size":14743,"data":"","first_seen":"2025-12-20T03:09:17.555247Z","last_seen":"2026-01-05T18:44:37.72314Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47542f5453b926ee31b84dcec583f01","sha1":"a98be511b95f998eb3f3524eb98351da0283f769","sha256":"215c51760bb486283b7da84887bc192f3dd0697ca55556af3c570222488767fb","sha512":"c57b1e4a0e522dd714f5eddf1c2c2e851d03d3055b0590f37d3de8e9168962660adf38639779650ee2246ed322d79609e64dc253ae5eab3baaf94a670abd6a6f","ssdeep":"","tlshash":"a0f0c01360937471cf3368b8271f4365d99b406f89d25869f7bf8412af35e4460abc1c","size":571,"data":"","first_seen":"2025-11-15T07:52:07.145608Z","last_seen":"2026-04-05T09:02:54.918953Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd43e72a.d.m.vfSsdjxl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"abe1ce4231382d5b2139f5c5980deee9","sha1":"236a426039842cb375e77fccccc05dcc255226ca","sha256":"608d4f64b5b27661a92ecb393e215a3928520a9b85ea746628d7e254b0ec4e75","sha512":"07e1746c5afbabf9946e6df0c242e617c335dcbbe34171ad0739f844eaa4522ae3ac0478cf59fdf746257ab66399e1e60d39eec9a77b26f7a7923b8196c31ed4","ssdeep":"","tlshash":"7bf059cd76c3b46806a71479c03fdc5ef63b7d947acec4d0e50aa0752a3446a8133a69","size":512,"data":"","first_seen":"2025-12-20T03:09:17.600449Z","last_seen":"2026-01-05T18:44:37.832773Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d149774ffbb78a07e247c35650f3001","sha1":"868a6a07b03fd690f17c640181f9dbd549e952e2","sha256":"7b86f12a8e32c2fbf1a8e718da7341171c85ffec361790b4cfc2122379ebcf76","sha512":"7d38c231fc92b17af8fd0707a1ce102f9c01d33dfc84cc3554ca3d9aa1fed44e0bbe9271cbf4bd1a1b43df3436081ce0bf73423c99d03faaad3b129dbfd0f321","ssdeep":"","tlshash":"b3e0c046f0a002ffd2a9c3d4f5057b563f698920e0c969b3a00e3889508d78311c090d","size":359,"data":"","first_seen":"2026-01-02T16:06:23.58679Z","last_seen":"2026-01-02T16:06:23.58679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.CdrhA9JU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"847e7824816a0e12381d97caa0e7de7b","sha1":"e852c2bbbad7b928f65a7123832af9c857a39de4","sha256":"554fb834f32d541f0af623f28956fe98f4ea516a70c121f9bf634f50509e9184","sha512":"fcc825f759db14145f3946055e57f5490b4033eaa8386eecf4ba6db786b53ae1391db6b30a182ebf6a2f6f6dc6a9c5e60bd8e51a1852a67bf2b3b9f3cbe594a7","ssdeep":"","tlshash":"a931044edd44ecb5d69bc8adc0140403800f7c55f3e5c6bce6ada6fcc7b41a8a125725","size":1636,"data":"","first_seen":"2025-12-20T03:09:17.574046Z","last_seen":"2026-01-03T10:01:28.320104Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","size":370,"data":"","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40c4c4e55219263fe4df7152228e343e","sha1":"2cc17572360a509d764cf051510e70e0cee3f4e8","sha256":"96b3c8dca206c36e199bfdd5d31bf00326f909dd3847ce767297d6b89b6b78c6","sha512":"ed32fabf2876dea0c517d51c2c5cbdb126e066f01cbbc245ed2c03722ed31ee9486c6bc982e5b4273b6f3832908164b23ede9cf0786a90d6ddd4e7137d7f35f9","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpG7yo31WOzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOdoYOMSdZ935pqUP","tlshash":"75f175feb6c2793806a71576623b770c7f3b654428494490d065c8c87976dcbc12bfae","size":7591,"data":"","first_seen":"2026-01-02T15:57:29.706959Z","last_seen":"2026-01-02T16:40:42.960435Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.BP-k0whF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"36f6d0b22111f97c588506c7591b95d2","sha1":"5da3263f225bc1362133c928f7ecd6b1d38a3ecd","sha256":"979fa6f1d25cf02333cd9d2d40311a9b98b2116983a391dfe15a65bfca6d4d4d","sha512":"528c30580359fe289101a8275bf008e355799574df3e676759755d087398b458340488d2a30044f2534baaaf7dba2c12719d571af9779c9979b06fe29979bf3c","ssdeep":"192:VOAriZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrCM:0evFuABGBVMsZ//eEq","tlshash":"0c32459def68a0b204839c55816c70c3c5e994a0a2362fd1940d1ebafe9f565633fc7e","size":11484,"data":"","first_seen":"2025-12-20T03:09:17.576203Z","last_seen":"2026-01-03T10:01:28.230612Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.Tzri-LZp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b8d69905f1747be711fabb9ab3bd169","sha1":"4ff631aa01e9e892af42c2d9971d2e95dc06d86d","sha256":"73b175a8301195d1ae4b77c095a940d8e32e954a9668e4a7df479b8144c16648","sha512":"7d7488024d3e432efd1eaf59b84ca14bb051cc6d3303c75af146321a19044f85b9542ee590b9675ddc0aa489091d74b9a90af9935e7b80511659c9a350de7533","ssdeep":"","tlshash":"764146ada464ba765643c5a8f2644053213b36f3e284085c7bbd3ed9c3ef541f261b36","size":1896,"data":"","first_seen":"2025-12-20T03:09:17.583092Z","last_seen":"2026-01-03T10:01:28.304172Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.BP-k0whF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"36f6d0b22111f97c588506c7591b95d2","sha1":"5da3263f225bc1362133c928f7ecd6b1d38a3ecd","sha256":"979fa6f1d25cf02333cd9d2d40311a9b98b2116983a391dfe15a65bfca6d4d4d","sha512":"528c30580359fe289101a8275bf008e355799574df3e676759755d087398b458340488d2a30044f2534baaaf7dba2c12719d571af9779c9979b06fe29979bf3c","ssdeep":"192:VOAriZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrCM:0evFuABGBVMsZ//eEq","tlshash":"0c32459def68a0b204839c55816c70c3c5e994a0a2362fd1940d1ebafe9f565633fc7e","size":11484,"data":"","first_seen":"2025-12-20T03:09:17.576203Z","last_seen":"2026-01-03T10:01:28.230612Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.ZPsoGAno.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"662163b38865e6b3065404628673994a","sha1":"6601f693f2f11be635d48a0aa924baa058822598","sha256":"8d984cd090a0999e2e85193b8562a0acb360fe6f37a25cea1a74f5ec38101008","sha512":"f8cbe558d89d3e2cb4a1d14748164636af2ec71097d214d695a55ec566decc966c1d7620c074a8b0b4addadef9807b2b5fd55a94e35fef7dcb00a5538a97582a","ssdeep":"","tlshash":"a25121c035f17621966b2af3c67f012bf57a1994fa0e64c2b816ed9d7834032935fe89","size":2572,"data":"","first_seen":"2025-12-20T03:09:17.627822Z","last_seen":"2026-01-03T10:01:28.336634Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.ClHRgnnw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86f4eeccb5d51d8afcb04f2378e5798","sha1":"4c6ac7ba698e877f7c8b59738937f5c5709d69c4","sha256":"96da6abf1fa091fde6d333c7bcf53e1b5c175450deba4af4f3947975d7168851","sha512":"5cd34421381b50e79e3cb909b38104558e66cdfdd22e75188d562bbc11690df98d201fbf8d8e50557523fb19ec8de35e0c987d69ed78573c6825f7f028111c83","ssdeep":"","tlshash":"eb51960f997a143352c560fee95710220619d24c3798a0a8f7fd754715bbca5233bf8a","size":2966,"data":"","first_seen":"2025-12-20T03:09:17.598881Z","last_seen":"2026-01-03T10:01:28.353747Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","size":9327,"data":"","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","size":78915,"data":"","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.B0q2ui3m.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dd198e44c4f78f0c8a1655ffc5491cb2","sha1":"64ff495b9de2976b518e79eed1de631a3a95ee3a","sha256":"fd1ba13f4d1f13b0a6f1dacb811a8243ef37ed050002707f01bb11d1c2d56de1","sha512":"de17a7b73e46b49f5d6b7c62848145e9b06cb6c30543eabf477fcb33360877282d392499dc1a93e0472512b60073c2a1f44bd6d20fa658dd3f2fff4f964384fa","ssdeep":"96:P2MSRJIzZ35CjC+pPuF3KlQ0Dg9hAAur0wZxalsAHmn1WSUtdySUxqdxiPdr7d+Z:PhS3IzZ3H+pPuF3KlQSGhAlr0wrso1Wx","tlshash":"5291d9cd77087afe43e30cbdb962000196356a92a6704a89f1ae4dfa1357494f137a87","size":4502,"data":"","first_seen":"2025-12-20T03:09:17.58082Z","last_seen":"2026-01-03T10:01:28.316373Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.D08Ub31-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aae4d6f522e01f5f4727e6c119557bd1","sha1":"477c50e50589134aa549511e49b4b79222efea68","sha256":"32e5b64d15e1de3999233bde04c56741515f5d759794b567e642c2f7994b6709","sha512":"d3448ffc0bdeaaccd41c03664a3dc3150f84a192f2463581e016b019bda0b4239ed67a06712657c845eb586ec6b25c6778e93e254cb39585342d19f3e0610664","ssdeep":"768:QF3wXo0ogDqGZVBSL7e0nP0620T0s8Bvm3OvTtnRLIT:i+o0RJJIjP1OhmT","tlshash":"2cb2089cba125cf3d7e3444ea9020901607a1e4166b84ac3e3bd8bb639eac1497777d7","size":24928,"data":"","first_seen":"2025-12-20T03:09:17.584878Z","last_seen":"2026-01-03T10:01:28.354246Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7684080d11e3504cf398f8c59f864bde","sha1":"c49a51903e85ddaa82672ff8cc53243d6c0a09cb","sha256":"ef0152f0fdd420e7110c05b6aeeec8399c17173906606b3feb9720a8471ee73e","sha512":"62f74d26830f0c59e1df6a9367541618bb203174c9ccd49e170b0d2dedb50dc8c48f041212780af880efbc2d3f57a0968b80433a474b2e4c039ea6f030519249","ssdeep":"","tlshash":"75416d2f35f1102241a3b17d07dbd25173338303584eed683e5c13557f969aa89a6f9c","size":2065,"data":"","first_seen":"2025-12-20T03:09:17.651547Z","last_seen":"2026-01-03T10:01:28.361866Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/baa7435a.d.m.BbiSxHJn.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"17f0344e1d0f109f0c2c75da7d646bc3","sha1":"a7ac565a7af3d5e8ea4242862618fdb57b561197","sha256":"299bca3929dafddc8329ae7cf329519b6f0a153f87eb02fd50a1794838b5b6ab","sha512":"969df9f5471c7ba8aa0d0fed9d831e1bdc30ffcca9b8815c4be0d895e5b0c260ab8297915d1ba3f5dbc314dc8f20c0112206119c92c88f25d97b1f73ac4702d6","ssdeep":"384:+QdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2i8:+QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRi","tlshash":"19b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d9d92bbf6d","size":23639,"data":"","first_seen":"2025-12-20T03:09:17.625008Z","last_seen":"2026-01-05T18:44:37.841251Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.Tzri-LZp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b8d69905f1747be711fabb9ab3bd169","sha1":"4ff631aa01e9e892af42c2d9971d2e95dc06d86d","sha256":"73b175a8301195d1ae4b77c095a940d8e32e954a9668e4a7df479b8144c16648","sha512":"7d7488024d3e432efd1eaf59b84ca14bb051cc6d3303c75af146321a19044f85b9542ee590b9675ddc0aa489091d74b9a90af9935e7b80511659c9a350de7533","ssdeep":"","tlshash":"764146ada464ba765643c5a8f2644053213b36f3e284085c7bbd3ed9c3ef541f261b36","size":1896,"data":"","first_seen":"2025-12-20T03:09:17.583092Z","last_seen":"2026-01-03T10:01:28.304172Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7684080d11e3504cf398f8c59f864bde","sha1":"c49a51903e85ddaa82672ff8cc53243d6c0a09cb","sha256":"ef0152f0fdd420e7110c05b6aeeec8399c17173906606b3feb9720a8471ee73e","sha512":"62f74d26830f0c59e1df6a9367541618bb203174c9ccd49e170b0d2dedb50dc8c48f041212780af880efbc2d3f57a0968b80433a474b2e4c039ea6f030519249","ssdeep":"","tlshash":"75416d2f35f1102241a3b17d07dbd25173338303584eed683e5c13557f969aa89a6f9c","size":2065,"data":"","first_seen":"2025-12-20T03:09:17.651547Z","last_seen":"2026-01-03T10:01:28.361866Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fde762892a133b7e9b5fe78c10a8829f","sha1":"0ea5fe2dd52a0ac4dc7fd7c1380f229f8ffe36c7","sha256":"923db43808690ee9aa0446a0a52d6356ffa4a868e1b9dd5d68cd3dbf729b7c50","sha512":"5de8ab00f03e62b53407c48046cc29d5c78134be361fcd9215c235fc5b73b1048c9f03fa6aff0d15f6c93116b06f22113496ec25b6edd229fcae7d49f5767b21","ssdeep":"6144:0BdNtcFikOGxQ7KGZeh3Lep2ZS3wtURfCrrbAIhFk6oN1Omd4hk2GUjeum5eD:CDcFxlwAqfOrbAINQF5k","tlshash":"a7d44b5a7251783647b241e9806f0646b3391a2e9448c85cb6a8e9ef38fdc4531bff7c","size":649978,"data":"","first_seen":"2025-12-20T03:09:17.528049Z","last_seen":"2026-01-05T18:44:37.718747Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","size":96750,"data":"","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-04-05T09:02:54.924859Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","size":130231,"data":"","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","size":96750,"data":"","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.YTabiTrz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0e878ef29d5437c02ef1e7545ecaecf6","sha1":"d3e561a4d07413d8afdc98561b02c0b787c51f72","sha256":"31c58b04a93cd88542f41d7d7525f52c89d06abefc56d86d32104a76a2f53a30","sha512":"7917def1844db22aa9c3ff9407076518adfb4fd31325143978e895d9fd4361e59e432325588970d6a8f9426feae1c27e9c42b8d1e39d33849ba08d27224c0c77","ssdeep":"384:kVxRK4+fn3zgUeIXi8RNK91Cke6cIVOpX1M1wfNkEyQ1ql6qgwdckHVzOCpG+tbJ:wK/z9eIS8RNKJVOplMSEQC6idckHVzO6","tlshash":"21a22cb7236293b246ab018a50770543d31407e5f148c4f179feadae35b58a2e326f7e","size":22656,"data":"","first_seen":"2025-12-20T03:09:17.620202Z","last_seen":"2026-01-03T10:01:28.319228Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.C8-ZPrna.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8b662a6bde101ab90f4eb084e82efb","sha1":"b0a61862f6bdb003bcf9bb007d13d446a2dc4a53","sha256":"25d54cefc9dad74e43281fd6b5a82cd65cee563c6a9076ba8619f05ceb018a27","sha512":"d12694d1fe9221bc54d50cbfcfa74b4005d2cd1b8f16547c49208936d44daae1f26e7251b94240bbc7ddeeb78755f272b6f5251c3ab6161ba508b253a9b602c2","ssdeep":"1536:xWOoPHMorDC8EYfWo//0VFiZBHS+/tIyUEJajYN2Uwc:xjorOvYJ/OqIyUEJa02U3","tlshash":"6f63620ded0c55f9a3e650b9f0f54e0a6518ae47f2784580bab5cc1f9488fa8a36f34d","size":68977,"data":"","first_seen":"2025-12-20T03:09:17.488718Z","last_seen":"2026-01-03T10:01:28.241155Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.FZtRXSGE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"07d17928317370d7b2c48fef997f2bb6","sha1":"b664549db260bf66861f0e0bf48de12e190cdc58","sha256":"f14a776d5ddfce1775a316998164372c81fa0cca80b83baee9a68f46d4b163e3","sha512":"4b188c81ad1e4140f4bf58468e0d55a2665cd5e2b7f56ba3fb1527303aa3cd94752d5908396a0fc290ed94abad051dc981ff26113d9f35fa8a8e1411234e37b5","ssdeep":"768:Q61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Z:vzmp7QA/BPWUZ","tlshash":"8a03fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2025-12-20T03:09:17.536096Z","last_seen":"2026-01-05T18:44:37.799318Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","size":334482,"data":"","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DJb-s6uV.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"445125924d5f1414f8cd92dd9ac3d587","sha1":"df94a1352382d988a83266f5f34081a99c3c9aac","sha256":"aef7d57247a23c2b56f0fd860d7c82dd446c15f2615d8024d6dcbc5c4ef61613","sha512":"8a2775f35a0c04f0afb3c282f40fd652139a261ea772e1fff31740094b50921e9f9124f20ffed3ae0e56de0470d28b742d30d7d036b5f0e0d213a2332258cc05","ssdeep":"96:cnJZI8IIO9UXcSU02DrJJQh9eC97Ae0E0hbDO92pli569p0gY72T4n5jda50w484:cJZI8YbSFArJJQh9eC97Ar3O92pli56A","tlshash":"10b1b72ece0946b882c758fae1ea4e4a501de947f13c0604b9a5dc6f8614fe9931bb4d","size":5422,"data":"","first_seen":"2025-12-20T03:09:17.492157Z","last_seen":"2026-01-03T10:01:28.347422Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-04-05T09:02:54.833827Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.AxOEJzb9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"eedbe56ec5f87538d02bf66916759300","sha1":"7f6abe19844c6cc6eab778065c2279a2b02d8b90","sha256":"3c909f45684d0a9d66311deac3d809f8cb1e0233a0efc11793f0dcc2b34a27b5","sha512":"6c0b24c6b85dd4c4095a625f59ea58909e2a23d9628ff62e8cfa327e4189299f9d9e6da2bd4311ce7b1dc1d6f008ac2bff4c484865d56655e422fa4bb7810e72","ssdeep":"384:jORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6x:jORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFl","tlshash":"196208f170ed657043e616e0a0b70106e5a9552830c9c4e0f59fcafe45eb980a9a7f7e","size":14743,"data":"","first_seen":"2025-12-20T03:09:17.555247Z","last_seen":"2026-01-05T18:44:37.72314Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CBcoeN-L.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"aaa5cf2126c20a300de73ffeb077cee7","sha1":"33a4bafc74ecfad8325555189ad30941bebd3512","sha256":"183498d58d05f19fd5f5545e118487a49bde0519527ee033e34efee9830fc5e7","sha512":"e26f9d48815298f2c50ebdd9830d476f00d86f05aac7488d1a4f46c088ac3a5d97effe195dce16d0efbced2c8e46d3ce868d6a7ed51130393c896161f5c3a195","ssdeep":"24576:9i4KN2yyH6LAD+d7sU/dBqaUT8A7Dued5mxahp52WuTOj6jvuzba0LoqhjoaThd2:9i4KN2yyH6LAD+d7sU/dBFUT8A7Dued4","tlshash":"fc554b8a7649347683f75599a0aa0401a23c0b45f5a48cd0f5fc8e7e2aaed309377f5f","size":1294171,"data":"","first_seen":"2025-12-20T03:09:17.632086Z","last_seen":"2026-01-03T10:01:28.367852Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.CdrhA9JU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"847e7824816a0e12381d97caa0e7de7b","sha1":"e852c2bbbad7b928f65a7123832af9c857a39de4","sha256":"554fb834f32d541f0af623f28956fe98f4ea516a70c121f9bf634f50509e9184","sha512":"fcc825f759db14145f3946055e57f5490b4033eaa8386eecf4ba6db786b53ae1391db6b30a182ebf6a2f6f6dc6a9c5e60bd8e51a1852a67bf2b3b9f3cbe594a7","ssdeep":"","tlshash":"a931044edd44ecb5d69bc8adc0140403800f7c55f3e5c6bce6ada6fcc7b41a8a125725","size":1636,"data":"","first_seen":"2025-12-20T03:09:17.574046Z","last_seen":"2026-01-03T10:01:28.320104Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc6b0e0b03d3446a8c2870ed674b8c77","sha1":"c6986dd3070cb4bcd32e1e83cf06e253d9877495","sha256":"6889bd65b39c3eba8e3198015d9746d2fd8196db4c064bd736a07095a029eca9","sha512":"ff780f0d9389e7e542569a58df95e2ce7c7484bed64c26795919019b5b16eb7e1bd2c9b9a1984ebf1da5ede23ece0f492d966ee365e66f6e4fbdc89b593840c0","ssdeep":"","tlshash":"f0113b5b5ed02fb2938303eb2c2f48c6fe15cd6438d2489e541095d63ce0519c76afb6","size":1000,"data":"","first_seen":"2025-10-14T16:37:55.419115Z","last_seen":"2026-03-08T12:35:28.060284Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-04-05T09:02:54.924859Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BkBx2rbZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fe1e2e0d470f50d85d90b6b64376c086","sha1":"d12d6111b6aff5809cab6b7c7322cf50dd137cd3","sha256":"d9c01594a2c1349a19e26d9cdbed915be6bd7551266c1debe191e10ea766b63a","sha512":"3ce5c3ec2d10cc5e9903a6d65d172143676d4dd98893cd23f0156d062932e35cedc68c80dc6d2c83c299794bcd8b040d2f2febba43eaa2fff170f11a2fcf03c9","ssdeep":"768:sxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDH:CYVEx+KqM+7rg8DH","tlshash":"48b2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","size":24689,"data":"","first_seen":"2025-12-20T03:09:17.577699Z","last_seen":"2026-01-03T10:01:28.253143Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","size":5052,"data":"","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-06T08:27:08.179945Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.ZPsoGAno.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"662163b38865e6b3065404628673994a","sha1":"6601f693f2f11be635d48a0aa924baa058822598","sha256":"8d984cd090a0999e2e85193b8562a0acb360fe6f37a25cea1a74f5ec38101008","sha512":"f8cbe558d89d3e2cb4a1d14748164636af2ec71097d214d695a55ec566decc966c1d7620c074a8b0b4addadef9807b2b5fd55a94e35fef7dcb00a5538a97582a","ssdeep":"","tlshash":"a25121c035f17621966b2af3c67f012bf57a1994fa0e64c2b816ed9d7834032935fe89","size":2572,"data":"","first_seen":"2025-12-20T03:09:17.627822Z","last_seen":"2026-01-03T10:01:28.336634Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-04-05T09:02:54.928534Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1e76c0711361f4daee05225a2596f0a9","sha1":"e7b13fb64c5d8725da097a7d60c4d7df9c3fe7b7","sha256":"4dac04747d077ea3b6b523652482727b9aa745293220e59a60fd813fa390e01b","sha512":"13792dbb6a0257a659a02c7e91375c7f851990ce398270f60f3feb8d2eba37c8df5758423721951006e0e71dabff5fbd1177623b591f9a7699d0c9c8536bf0d1","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fhcNe:/zjplrNZ06rCnLfwFrl","tlshash":"a864e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb5","size":331561,"data":"","first_seen":"2025-12-20T03:09:17.538841Z","last_seen":"2026-01-03T10:01:28.338065Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.D3m7uDVe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a765ff0c69e024d5f5fbed235354a3a","sha1":"0a044d0488491aedb2c12f5c54d35098bded3447","sha256":"c5045228151c9709611e101a23cf0609efd689dfbcd39c242beccf280317017f","sha512":"b14c24c178508ac9f85d17b6361383d88c1e485ea1333ad8bb8c37a26f0caa97bfdde005ca60fa16b739eb46051d42da37e9a4838ae4a1c738d724beedff1261","ssdeep":"","tlshash":"cd4196b9b080f438437f84bfe876d1d4572462507267d5f1a06e269d09a8cd6c2b8f8f","size":2346,"data":"","first_seen":"2025-12-20T03:09:17.496082Z","last_seen":"2026-01-03T10:01:28.335206Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6618497d7ed9d67fac08cea2509495ce","sha1":"a6ea8aa06409daa1458a82e97dbb6fb099cade14","sha256":"267c0f3a3a6a42543519c1e543756c7bf68a5e2ed805349bc082c9b92849d16b","sha512":"87c697fc5114ead3aeae93e1c1166011d2d4a43b84a11dee84eda5e55fe9a1d23bf387d67c40998e1c138bca3d5f7bd96fb16b215c5d9f3499da33469035ab79","ssdeep":"6144:87OVJHIkZm5RGfq/nXUBL5uz2opB4qcril:87OVJJk5RFex2l","tlshash":"8574c715ea516ef376f5385ef16a29e360325b123b50c27201ea5f3d3e2f80cb1664b6","size":349145,"data":"","first_seen":"2025-12-20T03:09:17.559616Z","last_seen":"2026-01-03T10:01:28.220017Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","size":519402,"data":"","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.BAcgzTvt.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c1b80461b89d40e24f6902cf0fc98550","sha1":"68451fd065ed14d6a5eba9d2ee737a013242bb4e","sha256":"a4a010edbc41c9578a1e0dfd9666c36b642ca785dc21fdcc7a563cbe764ea6ff","sha512":"c83fe841d06831e171414980a258d036fe33ffb31ede92e2a0d293808a4cdcf8b96a3458b49e2fa302cf3bfe4eb46109556ccca58860f1f6905bad02f11f141a","ssdeep":"96:ftJnqGgAaycByHKC5mTsOURWSwmSiQ5ZpJLZejQg4sc9GDhDKTAoExk0uIOVPIMg:TqJKAAZqmoztVxW2lgLJwsmKWa9r","tlshash":"5ec1db9d7fbea13115d949e160aeb047d33950d8f019c061a06caab83913ede89f7f4e","size":5967,"data":"","first_seen":"2025-12-20T03:09:17.55371Z","last_seen":"2026-01-03T10:01:28.31875Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6618497d7ed9d67fac08cea2509495ce","sha1":"a6ea8aa06409daa1458a82e97dbb6fb099cade14","sha256":"267c0f3a3a6a42543519c1e543756c7bf68a5e2ed805349bc082c9b92849d16b","sha512":"87c697fc5114ead3aeae93e1c1166011d2d4a43b84a11dee84eda5e55fe9a1d23bf387d67c40998e1c138bca3d5f7bd96fb16b215c5d9f3499da33469035ab79","ssdeep":"6144:87OVJHIkZm5RGfq/nXUBL5uz2opB4qcril:87OVJJk5RFex2l","tlshash":"8574c715ea516ef376f5385ef16a29e360325b123b50c27201ea5f3d3e2f80cb1664b6","size":349145,"data":"","first_seen":"2025-12-20T03:09:17.559616Z","last_seen":"2026-01-03T10:01:28.220017Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BkBx2rbZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fe1e2e0d470f50d85d90b6b64376c086","sha1":"d12d6111b6aff5809cab6b7c7322cf50dd137cd3","sha256":"d9c01594a2c1349a19e26d9cdbed915be6bd7551266c1debe191e10ea766b63a","sha512":"3ce5c3ec2d10cc5e9903a6d65d172143676d4dd98893cd23f0156d062932e35cedc68c80dc6d2c83c299794bcd8b040d2f2febba43eaa2fff170f11a2fcf03c9","ssdeep":"768:sxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDH:CYVEx+KqM+7rg8DH","tlshash":"48b2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","size":24689,"data":"","first_seen":"2025-12-20T03:09:17.577699Z","last_seen":"2026-01-03T10:01:28.253143Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DJb-s6uV.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"445125924d5f1414f8cd92dd9ac3d587","sha1":"df94a1352382d988a83266f5f34081a99c3c9aac","sha256":"aef7d57247a23c2b56f0fd860d7c82dd446c15f2615d8024d6dcbc5c4ef61613","sha512":"8a2775f35a0c04f0afb3c282f40fd652139a261ea772e1fff31740094b50921e9f9124f20ffed3ae0e56de0470d28b742d30d7d036b5f0e0d213a2332258cc05","ssdeep":"96:cnJZI8IIO9UXcSU02DrJJQh9eC97Ae0E0hbDO92pli569p0gY72T4n5jda50w484:cJZI8YbSFArJJQh9eC97Ar3O92pli56A","tlshash":"10b1b72ece0946b882c758fae1ea4e4a501de947f13c0604b9a5dc6f8614fe9931bb4d","size":5422,"data":"","first_seen":"2025-12-20T03:09:17.492157Z","last_seen":"2026-01-03T10:01:28.347422Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-04-05T09:02:54.833827Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CBcoeN-L.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"aaa5cf2126c20a300de73ffeb077cee7","sha1":"33a4bafc74ecfad8325555189ad30941bebd3512","sha256":"183498d58d05f19fd5f5545e118487a49bde0519527ee033e34efee9830fc5e7","sha512":"e26f9d48815298f2c50ebdd9830d476f00d86f05aac7488d1a4f46c088ac3a5d97effe195dce16d0efbced2c8e46d3ce868d6a7ed51130393c896161f5c3a195","ssdeep":"24576:9i4KN2yyH6LAD+d7sU/dBqaUT8A7Dued5mxahp52WuTOj6jvuzba0LoqhjoaThd2:9i4KN2yyH6LAD+d7sU/dBFUT8A7Dued4","tlshash":"fc554b8a7649347683f75599a0aa0401a23c0b45f5a48cd0f5fc8e7e2aaed309377f5f","size":1294171,"data":"","first_seen":"2025-12-20T03:09:17.632086Z","last_seen":"2026-01-03T10:01:28.367852Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-04-05T09:02:54.928534Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","size":1756,"data":"","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.D08Ub31-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aae4d6f522e01f5f4727e6c119557bd1","sha1":"477c50e50589134aa549511e49b4b79222efea68","sha256":"32e5b64d15e1de3999233bde04c56741515f5d759794b567e642c2f7994b6709","sha512":"d3448ffc0bdeaaccd41c03664a3dc3150f84a192f2463581e016b019bda0b4239ed67a06712657c845eb586ec6b25c6778e93e254cb39585342d19f3e0610664","ssdeep":"768:QF3wXo0ogDqGZVBSL7e0nP0620T0s8Bvm3OvTtnRLIT:i+o0RJJIjP1OhmT","tlshash":"2cb2089cba125cf3d7e3444ea9020901607a1e4166b84ac3e3bd8bb639eac1497777d7","size":24928,"data":"","first_seen":"2025-12-20T03:09:17.584878Z","last_seen":"2026-01-03T10:01:28.354246Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.CYcOP7Rp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6578f48b5497db0058aa08288e6eb033","sha1":"26cf6e1e59376fe6c1aa646386453a6cf92f73b0","sha256":"f18a508cbd365f76e6b3e3d66284b5ae76f17a29cb0317f597a31a869eb8b787","sha512":"2099b9c200f8280762c9a25853d5300f31643d418ea0d57d136c2118a72a3c02fbb953459f248244263acc8f5964d3ca404dab6456a89172e7964cb76b0fe016","ssdeep":"384:PeQdrY5tu5oHRRYF7XLA+McCw4hDfGPNPjN3uw+:PbdrYPuGHROrMcvcGPNPR+w+","tlshash":"1eb2880b32bd9ff911a655a9c4813020892c8eca92715dc1d9ffcf65264ce61d2b6bcf","size":23572,"data":"","first_seen":"2025-12-20T03:09:17.490186Z","last_seen":"2026-01-03T10:01:28.349279Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-it-json.87d963fe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b81b6985a6b44dc7a395aedf890025ed","sha1":"de9716672e529341cd27360666a0ba3819bc05a0","sha256":"93868e30712f1b1cab8f1d7d0fa9ad01fddd2cebd09717c40a2d7781dfd8de8c","sha512":"0c1d59cd17a6efa1674b06682810e3819c8684448e81d0ffd668ee96fd798c6fb60be9eea2fc100dd45614b249a4e860027a52e047a9d041f346de76b4aa7c82","ssdeep":"1536:yxccNWAKZ13KafYSrnwwMmO9H8SgpxrnB5/7u:yxNKqT0wwMmY6nB5zu","tlshash":"6973b42c4c64ac3106af03e7999a7c5aebf886debbc85514fd95861c11cdbc0e1af706","size":78866,"data":"","first_seen":"2025-12-25T07:42:43.803795Z","last_seen":"2026-01-05T18:44:37.831028Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","size":28371,"data":"","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","size":243879,"data":"","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.Dn9W2zzb.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0bb624871c476cc9448de8d6d76c6092","sha1":"e6bfb472c08a75e86feaeadaf311d6dd065e7292","sha256":"c8f0142eca710c0037be63229442e73763a4af814baa771167ed8b579da19e66","sha512":"d0ce80810a873df0192e4cbe4ac62a38b5891c3530f22f7806d756579b7c85c7b4ec3d1f124bd7d9a0b8a313ee1ad0988073ac147686a2847259ee041f957866","ssdeep":"96:Y0JN+a+8Toy1lF0KkUZ0Fk62QJ9uy8SisBBGRX:YQ4yDvCKYk62QJ978c2RX","tlshash":"52b1120b7625f3f986ad2a28d9c422305a3d2fcd631404d1eafec0197249679c5b5bcf","size":5384,"data":"","first_seen":"2025-12-20T03:09:17.529877Z","last_seen":"2026-01-03T10:01:28.303475Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.BnOlexKP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"94655193e678936dd084c673ed1848a3","sha1":"194512228328b66e7e9d7305ff5477a1980870fb","sha256":"01e3350f983a8f6ec91c99ad7a5a890564d4eab25680d4b37f0635365d52bba2","sha512":"6626c655fb54b7334d3e0a1c6f599cbf77932e682a7ee1edb48ea7b5b3fc6ee2a51c980dd42b7ea3da3fababa6ab6f4e4c420a916553ab6eeed70e5705aecf57","ssdeep":"96:rv2VxJwa0uGzXt8I2s0uGzLsJdcnwL8ZuGzhrMvyrPAXywWixn:ypw4UpzUL2dNUSKrYiwtxn","tlshash":"6091a78d3c7ed4b0abef588ff1690c099e6d0fa662254d4194bf14bb2bb7850e252427","size":4613,"data":"","first_seen":"2025-12-20T03:09:17.61411Z","last_seen":"2026-01-03T10:01:28.22297Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.FZtRXSGE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"07d17928317370d7b2c48fef997f2bb6","sha1":"b664549db260bf66861f0e0bf48de12e190cdc58","sha256":"f14a776d5ddfce1775a316998164372c81fa0cca80b83baee9a68f46d4b163e3","sha512":"4b188c81ad1e4140f4bf58468e0d55a2665cd5e2b7f56ba3fb1527303aa3cd94752d5908396a0fc290ed94abad051dc981ff26113d9f35fa8a8e1411234e37b5","ssdeep":"768:Q61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Z:vzmp7QA/BPWUZ","tlshash":"8a03fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2025-12-20T03:09:17.536096Z","last_seen":"2026-01-05T18:44:37.799318Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.BnOlexKP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"94655193e678936dd084c673ed1848a3","sha1":"194512228328b66e7e9d7305ff5477a1980870fb","sha256":"01e3350f983a8f6ec91c99ad7a5a890564d4eab25680d4b37f0635365d52bba2","sha512":"6626c655fb54b7334d3e0a1c6f599cbf77932e682a7ee1edb48ea7b5b3fc6ee2a51c980dd42b7ea3da3fababa6ab6f4e4c420a916553ab6eeed70e5705aecf57","ssdeep":"96:rv2VxJwa0uGzXt8I2s0uGzLsJdcnwL8ZuGzhrMvyrPAXywWixn:ypw4UpzUL2dNUSKrYiwtxn","tlshash":"6091a78d3c7ed4b0abef588ff1690c099e6d0fa662254d4194bf14bb2bb7850e252427","size":4613,"data":"","first_seen":"2025-12-20T03:09:17.61411Z","last_seen":"2026-01-03T10:01:28.22297Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","size":28371,"data":"","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.YTabiTrz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0e878ef29d5437c02ef1e7545ecaecf6","sha1":"d3e561a4d07413d8afdc98561b02c0b787c51f72","sha256":"31c58b04a93cd88542f41d7d7525f52c89d06abefc56d86d32104a76a2f53a30","sha512":"7917def1844db22aa9c3ff9407076518adfb4fd31325143978e895d9fd4361e59e432325588970d6a8f9426feae1c27e9c42b8d1e39d33849ba08d27224c0c77","ssdeep":"384:kVxRK4+fn3zgUeIXi8RNK91Cke6cIVOpX1M1wfNkEyQ1ql6qgwdckHVzOCpG+tbJ:wK/z9eIS8RNKJVOplMSEQC6idckHVzO6","tlshash":"21a22cb7236293b246ab018a50770543d31407e5f148c4f179feadae35b58a2e326f7e","size":22656,"data":"","first_seen":"2025-12-20T03:09:17.620202Z","last_seen":"2026-01-03T10:01:28.319228Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-04-05T09:02:54.826445Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CxxbCUUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a1acf28d407bee53298538053e42007e","sha1":"b709acab1d70f0f569e596683a3202ae4ed9e68a","sha256":"3cae12fbeec3d3b3200c7410a86f7d740b4cebb2b760561535ef5f53848473c9","sha512":"b03986a36418e86de4271a8106cd0a927a84b59ab5dc81816d99814ce42d17ddace139271a1f3fec657a812a44e323d171a642f429e8cdc0ae145713686e7e68","ssdeep":"","tlshash":"da61b59b6206e370c1166094d02f2c00e95806cdb3b47590adfd58aed9a213ae17bb5e","size":3358,"data":"","first_seen":"2025-12-20T03:09:17.611272Z","last_seen":"2026-01-03T10:01:28.349763Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.B0q2ui3m.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dd198e44c4f78f0c8a1655ffc5491cb2","sha1":"64ff495b9de2976b518e79eed1de631a3a95ee3a","sha256":"fd1ba13f4d1f13b0a6f1dacb811a8243ef37ed050002707f01bb11d1c2d56de1","sha512":"de17a7b73e46b49f5d6b7c62848145e9b06cb6c30543eabf477fcb33360877282d392499dc1a93e0472512b60073c2a1f44bd6d20fa658dd3f2fff4f964384fa","ssdeep":"96:P2MSRJIzZ35CjC+pPuF3KlQ0Dg9hAAur0wZxalsAHmn1WSUtdySUxqdxiPdr7d+Z:PhS3IzZ3H+pPuF3KlQSGhAlr0wrso1Wx","tlshash":"5291d9cd77087afe43e30cbdb962000196356a92a6704a89f1ae4dfa1357494f137a87","size":4502,"data":"","first_seen":"2025-12-20T03:09:17.58082Z","last_seen":"2026-01-03T10:01:28.316373Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b104f410e577555bf713d14b3e61cb5","sha1":"5648bba8e164d96ee568ece5fabc7ca82c7629e3","sha256":"1f83c86cadf595b7e55a7e9234b32b6afcb8c724c454a1a959190257e2f36581","sha512":"a692f8417a24c3ca7c87701f1845eafd88e600c7c317c422a3df01954a98bb1a0134cd4e3f0579e07717ed87b203fc7a246aff84e829afb4c911536a1b781309","ssdeep":"","tlshash":"fa1110b93230707dd5a30ac3a5eea746367694144407cce450e4ca4c7764dbd1af2e78","size":949,"data":"","first_seen":"2025-11-14T01:20:21.025653Z","last_seen":"2026-04-05T09:02:54.927683Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","size":130231,"data":"","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.uJdofHpS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c4133af70b970747c0f82d2b0a1e67f1","sha1":"cbb62c896e9777f7b1ba8bd692e4f53f6a8cf308","sha256":"15c2025e57f5474684826e21cc36d32a225ccb2f86b78ab3bd2a22789e8d464d","sha512":"d9ac0bd14b94e20bb8f9e97a5a21069a2dd17f0200ed090ef83a0f369d26777b5d5d9c438b4400a0adab001357e4a140c5e3c8375ebcd89a3b8749bb8f3bd156","ssdeep":"12288:y552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd50:y5dLfKGJvEvGdrSaV67dmcgUxHtDcAU8","tlshash":"eaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","size":458941,"data":"","first_seen":"2025-12-20T03:09:17.480306Z","last_seen":"2026-01-03T10:01:28.357961Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","size":334482,"data":"","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/baa7435a.d.m.BbiSxHJn.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"17f0344e1d0f109f0c2c75da7d646bc3","sha1":"a7ac565a7af3d5e8ea4242862618fdb57b561197","sha256":"299bca3929dafddc8329ae7cf329519b6f0a153f87eb02fd50a1794838b5b6ab","sha512":"969df9f5471c7ba8aa0d0fed9d831e1bdc30ffcca9b8815c4be0d895e5b0c260ab8297915d1ba3f5dbc314dc8f20c0112206119c92c88f25d97b1f73ac4702d6","ssdeep":"384:+QdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2i8:+QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRi","tlshash":"19b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d9d92bbf6d","size":23639,"data":"","first_seen":"2025-12-20T03:09:17.625008Z","last_seen":"2026-01-05T18:44:37.841251Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1e76c0711361f4daee05225a2596f0a9","sha1":"e7b13fb64c5d8725da097a7d60c4d7df9c3fe7b7","sha256":"4dac04747d077ea3b6b523652482727b9aa745293220e59a60fd813fa390e01b","sha512":"13792dbb6a0257a659a02c7e91375c7f851990ce398270f60f3feb8d2eba37c8df5758423721951006e0e71dabff5fbd1177623b591f9a7699d0c9c8536bf0d1","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fhcNe:/zjplrNZ06rCnLfwFrl","tlshash":"a864e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb5","size":331561,"data":"","first_seen":"2025-12-20T03:09:17.538841Z","last_seen":"2026-01-03T10:01:28.338065Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","size":243879,"data":"","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","size":6067,"data":"","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a01e6f7bce6dbf5d77e90a118c93b0e","sha1":"0dd49694ef9f526b54037573927940d4f49410ee","sha256":"633fe888d0ff0434ff5676b91027d7f70c3af306567d4f1b7d5f30fef585c184","sha512":"bcfd3614437320134d84c7aa5239c54f0ceb14caa75f2bc4199dd14487d248f32638037b41ea918fe8ed8f9d34f18a4dcea0a114499759bfd0d17b70ce2bd228","ssdeep":"","tlshash":"6de028da74110c7570ed05f533b1a11875431108780a5c23ddfdc9142c189c74c134cc","size":341,"data":"","first_seen":"2023-05-07T16:21:54Z","last_seen":"2026-04-05T09:02:54.920105Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.uJdofHpS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c4133af70b970747c0f82d2b0a1e67f1","sha1":"cbb62c896e9777f7b1ba8bd692e4f53f6a8cf308","sha256":"15c2025e57f5474684826e21cc36d32a225ccb2f86b78ab3bd2a22789e8d464d","sha512":"d9ac0bd14b94e20bb8f9e97a5a21069a2dd17f0200ed090ef83a0f369d26777b5d5d9c438b4400a0adab001357e4a140c5e3c8375ebcd89a3b8749bb8f3bd156","ssdeep":"12288:y552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd50:y5dLfKGJvEvGdrSaV67dmcgUxHtDcAU8","tlshash":"eaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","size":458941,"data":"","first_seen":"2025-12-20T03:09:17.480306Z","last_seen":"2026-01-03T10:01:28.357961Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","size":375,"data":"","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.baea22ee.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88bae13c8a9dac27b7c4e71cd040b88e","sha1":"806a720e0a0775fd75586e8c73c2fc84710f60e1","sha256":"c4e60391eb99692d9dd25451561dfca97a827aeae68ac3ad226f330919d53016","sha512":"d18fba1a35830010fc86aefabb76ff5ff213002308ab5ffc3d306b469011f1888aae27e46bd3026fc59e2d55bec03979e3bb373ac9e01540044421937989602b","ssdeep":"12288:kY2hzT5wJLfM1RsD54hTguKPFBuALEiGLomY1lN:Ecb1D54IPF31lN","tlshash":"1b35b5ccb2d2f06a43976575813f200bf33ea999b54d8050e629e8d1bcb958d9237f6c","size":1110101,"data":"","first_seen":"2026-01-02T15:57:29.741575Z","last_seen":"2026-01-02T16:06:23.594051Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"541aa61ba2c8587810da7a3c26acf98c","sha1":"20937b26869504d78af0c74bdf3c2c41972797a8","sha256":"9101680cada9b32ee78b590b748faaaf283e4aa27e10a191df401be4978edf90","sha512":"177ff855bbca60926b6a75ef7ac6a17dfce16c750093b70521bfd27722ff6a62d2412b5c7ee22be2dded6e2ff5d64efaf2a633af975adb55ac683eaf3deada9f","ssdeep":"6144:lJgteEaaWeJq2bulKYv9VHDmHYmyBFz0nsCqWrxRZt:JSbu7llAnsPWrx1","tlshash":"cbb4fa8e77d4a87ec3a65520643f060a657d20e2b24c9490f0daccd42e799797263bff","size":502199,"data":"","first_seen":"2026-01-02T16:06:22.629893Z","last_seen":"2026-01-02T16:06:23.498027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-06T08:17:28.644829Z","times_seen":63623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/spribe-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/spribe-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3761\r\ntraceparent: 00-9d344a5db7cd6a08b5bbe55a7664d6e8-612c607e6422a375-01\r\nlast-modified: Mon, 07 Feb 2022 08:39:55 GMT\r\netag: \"eb1-5d7698b78c1ab\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 10 Jan 2026 23:09:20 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1875373\r\ncache: HIT\r\nx-cached-since: 2025-12-11T23:09:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3761,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ebc2f9c306dbce541876c215cca0603","sha1":"32ef98f289c5404581c3930df790ec194a78c2fb","sha256":"f6e1e26c897ea8311b6f367d7e6967a086adcf9c3b151fcd59098bdb4ec1d6f6","sha512":"4e0fd678c996861d4eadc8a5de5c89a644005cb38c6c4e23b159cbbab1e4a59bacf415daac5d308c26bcb3a7f3d5a15aaf29190a46de7426dbf6f2fb02f5311a","ssdeep":"","tlshash":"e67153cc2369b1b4f409b7bed71a56ea792f2cee3604c48583f22d2b644452d89988d7","first_seen":"2025-09-23T04:33:55.391144Z","last_seen":"2026-01-05T18:44:37.810513Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/8a28bc4d.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/8a28bc4d.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-fca450f0e1c1d4cadbba1d240be13dd4-236f4d90177c4d39-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111493\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-04-05T09:02:54.895197Z","times_seen":130,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.DHDNCeYY.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-51d7abcd6f4b90bd6c76adfa34f5aa54-317b4bbd0999576e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-4039\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440)","md5":"4d87269e44c4639cad79282bd3e56c65","sha1":"31e83329fd260eea94486c9ce66b2df430dc53e0","sha256":"f361154c7c7c11401aa0e630dc90f18f717534457d9b610c16e51bd290701924","sha512":"b905a6a411088e9c3c2ec61d19fb0064b0debc191037dde41e112e61fd6de6cde224ad508f724319f6c2ec635880afb11a986e9812d8eb9dd83ce4c5de7a3663","ssdeep":"192:Jw7vLZ03o2kZVz8KGJCRjMiS7cZmnDA3tMHWF1vHOp8L803Y4FUfBFo7:K7vLCu3GWJYI153Y4FUfBFo7","tlshash":"b172a7d50d64367abb7bb11fc6e2aa0ca31acc46de9326d5b5e1e12c47c638142f3d04","first_seen":"2025-11-08T11:37:36.045292Z","last_seen":"2026-01-05T18:44:37.846257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:37.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"match2one.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 18:28:20 GMT","end":"Wed, 11 Feb 2026 18:28:19 GMT"},"fingerprint":{"sha1":"CC:37:F8:78:A1:C4:22:09:DF:4B:0F:4D:60:ED:61:8D:D1:C8:E4:6D","sha256":"DF:82:69:8A:77:10:A4:F5:5D:9C:BF:0D:7F:AC:26:67:3C:1F:F8:64:41:E7:97:A7:69:19:5A:9B:F7:9C:BF:A8"}}},"request":{"raw":"GET /tracking/m2oe.js HTTP/1.1\r\nHost: cdn0.match2one.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 16:05:37 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: b9vbybQ/rgRzK/X1ew0BoHyP8NhmQVOTKpCZtgNFWr2hatQSdfX9nKYqjsprMwjv3D8JN0fANwE=\r\nx-amz-request-id: JJ66B1CQNMM1RQC0\r\nlast-modified: Thu, 18 Sep 2025 07:53:55 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 41799\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRZ2s39rcd%2FuBHzKxsTZHi9qqeAKM5o4kwF35V%2BLOGdFA6yTww17hqIcONZ%2BjjHBvRIK62D0L7CBvocvsK0sore5zlxO18K46inVf14eHsQmONj%2BtcvBZDkisYhQ1Xb1Gz3YWW8EzUYHbP1WkEW8Fo%2Fh\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76401bdbcf3ea72cd04aa2d225f6bccf\"\r\ncontent-encoding: br\r\ncf-ray: 9b7b7fbeae54569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-06T08:27:08.179945Z","times_seen":373,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:37.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=d796s9\u0026event=regstarted\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 16:05:38 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 375\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":302,"dns":12,"connect":100,"send":0,"wait":100,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/mifiv-2-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/mifiv-2-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15983\r\ntraceparent: 00-b591afae674d915a562b936ec97669d9-db2e3696c819dc5d-01\r\nlast-modified: Mon, 21 Jul 2025 12:25:00 GMT\r\netag: \"3e6f-63a6f907e4c7f\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ef649593928afd942fcdac1df669467","sha1":"ce939d5cfbd0f360bbcf44f9c75e4a0ecfaede58","sha256":"4d63042b574d4117007b7cdbd165c36a1706ef569ce042a46dfb3f4610c7fba8","sha512":"4d2c766ceb42fa9bccfd85ca7744fa9e3d2e4d33fb608f3fe775c4b017e9e07c9838b5250e57e9746aed77ea08a0e1724560eda5ffd0953485b4f90293da08ce","ssdeep":"192:eqYmG7irXagYvKdGNbirHFWBtADpfcMho+9rIEf6/t9BiKgsydO87lwivO2VFqqx:WmGvJbiMBt8pPe+JIq6V9BiMANGDnev","tlshash":"cc7243ce7369d7f2d98ae3ecd9025424761940e2a6c0c7a0c3a4bf0f58474e6fc5aad5","first_seen":"2025-12-25T07:42:43.897728Z","last_seen":"2026-02-28T15:40:00.662739Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/it.BtPmDMVr.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/it.BtPmDMVr.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 185\r\ntraceparent: 00-1936d68933be8fc2205b3934f45e0ff1-8d14b1e0987dc6d2-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:03 GMT\r\netag: \"68e7b33b-b9\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6328120\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:16:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":320,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88ef43e7260c8216506e0e3ed238fb2c","sha1":"6057b1e0339f5b5704a22ab77e54e4f9bbb7573a","sha256":"9e8e565408f0ec25f85d3a5fde9dce39ef30107ec7b4096294c697aa734e25cb","sha512":"eb6af3fbbbc658beca79f9060ced10e60665bd2eebb9bd858833beb56e85fceab5c1611bf77ba120d63569066d8e83ac03894356ec195a0bd00d863ea282c264","ssdeep":"","tlshash":"94e0c2a8a7b86450e51483708a3c79e26aa1d0ab62ba5081f1c428a0260e5575cb3add","first_seen":"2025-12-25T07:42:43.861065Z","last_seen":"2026-01-05T18:44:37.811435Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/pixel?id=154038\u0026t=js\u0026sink_id=174316bf-745e-4689-ab81-a4ca9e04cdd7\u0026\u0026timestamp=2026-01-02T16:05:38.380Z\u0026fire_id=1767369938381-de0feccd-82b6-416a-9caf-dce57df8b050","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /pixel?id=154038\u0026t=js\u0026sink_id=174316bf-745e-4689-ab81-a4ca9e04cdd7\u0026\u0026timestamp=2026-01-02T16:05:38.380Z\u0026fire_id=1767369938381-de0feccd-82b6-416a-9caf-dce57df8b050 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\nlocation: https://pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=174316bf-745e-4689-ab81-a4ca9e04cdd7\u0026\u0026timestamp=2026-01-02T16:05:38.380Z\u0026fire_id=1767369938381-de0feccd-82b6-416a-9caf-dce57df8b050\r\nset-cookie: tuuid=56b247db-0261-40fd-98cd-fd524984d4dd; path=/; expires=Sat, 02-Jan-2027 16:05:39 GMT\nc=1767369939; path=/; expires=Sat, 02-Jan-2027 16:05:39 GMT\ntuuid_lu=1767369939; path=/; expires=Sat, 02-Jan-2027 16:05:39 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":360,"dns":230,"connect":26,"send":0,"wait":29,"receive":1,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/video_poker.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/video_poker.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\ntraceparent: 00-9703ad32975b40c0d499cf86c3777bc3-64019c0c232f8ee1-01\r\nlast-modified: Fri, 28 Jun 2024 13:45:12 GMT\r\netag: \"859-61bf374e1215d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f54a335dc512bfbb32a481dbe99fec65","sha1":"93be1232f742dfa382f3349b7ec5e0db9a8a2230","sha256":"13b710020acb4a4914b3773ceee2b981f8c96e443e66616feb8c449825aa0992","sha512":"4ea64bc628e9c2dc6c60b8bd360ac0ec75543190ea2cae33c41976733afa8a638595a6e009b6c1c5d58c8bd647cbfbd3ddc49f0d09d345180eabe080d50b1146","ssdeep":"","tlshash":"c94144e657d453d07d0feb61c9234d32f96b34b7e5bdd70d9120e99061232b68849cc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16732Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BkBx2rbZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/5f62684a.d.m.BkBx2rbZ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-5c6277e12d88e169b297e7bde94fde64-a72d2fa62648df14-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-6071\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13470)","md5":"fe1e2e0d470f50d85d90b6b64376c086","sha1":"d12d6111b6aff5809cab6b7c7322cf50dd137cd3","sha256":"d9c01594a2c1349a19e26d9cdbed915be6bd7551266c1debe191e10ea766b63a","sha512":"3ce5c3ec2d10cc5e9903a6d65d172143676d4dd98893cd23f0156d062932e35cedc68c80dc6d2c83c299794bcd8b040d2f2febba43eaa2fff170f11a2fcf03c9","ssdeep":"768:sxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDH:CYVEx+KqM+7rg8DH","tlshash":"48b2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","first_seen":"2025-12-20T03:09:17.577699Z","last_seen":"2026-01-03T10:01:28.253143Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/yggdrasil-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/yggdrasil-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5680\r\ntraceparent: 00-09bea58032825c49d1105446a2675a7a-a2eca1cc05384dba-01\r\nlast-modified: Mon, 07 Feb 2022 09:00:29 GMT\r\netag: \"1630-5d769d50b23e2\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 450042\r\ncache: HIT\r\nx-cached-since: 2025-12-28T11:04:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd8a7f223b63f0192c18663ed39840f6","sha1":"b722dea4a85f9119ab396f3310395e046457a423","sha256":"ebbd0c8ab07eaf201ba4f638e4b86a999d8423e0000fde6724076ab3abc8d774","sha512":"93cec700e5f964f0c68a21307f0632d9357b2eaf237eb698ec0677eddfa951c7fdfa924f3114b3c85c71fda52ecaead442304aa0b86fa811464ea9a2c8d9a61d","ssdeep":"96:pmMaelJ0mnwIfAYVX+6UJ5Z/lFHRQBcT2Jn+baSl+RMo56:pcejTIYh4BtFHyJ+bx+mH","tlshash":"9fc1c69d23a5a3fcf048f3b9d251d879bd9a5dd13212c16ecbe61c56c87106e95a0cc3","first_seen":"2025-12-25T07:42:43.784332Z","last_seen":"2026-01-05T18:44:37.724181Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 247378\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T09:11:35.796356Z","times_seen":718361,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"98.91.123.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 559\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":559,"data":"app_id=cnjqphyx\u0026v=3\u0026g=e0d8499007785b08ccf8673cc4eff54a1bdbc444\u0026s=73c54f40-db7e-4269-bf91-b7e0d50210ef\u0026r=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=d9ea4d31a231fad4\u0026internal=\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-intercom-version: a742c335d83ca5e81456c12b34bc8e41f878cc2c\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nx-request-queueing: 0\r\nx-request-id: 0000me00tcqjvgjok0tg\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\netag: W/\"99d2d22e73f6294f5757794db7f7fb84\"\r\nx-runtime: 0.027050\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17109fa821b45c3eaa81f9ce90f4ce59","sha1":"c97983b62b89fef9bd25ed70be3b59bda22b0292","sha256":"99d2d22e73f6294f5757794db7f7fb8418ab9b94e96ef0dc7b2a7004cbb3f5c5","sha512":"41c3f92f33606f21f1ea9adc24ed7dd0ee4677bead38782e05b47cc33dd8d4b840687194cc35ad0402b3ac7cf408e2468813dcf9e0d2a885748154746b9b5363","ssdeep":"","tlshash":"e5f0e1e9978c4c3537c547d9c22f6e0b0796459972501db0f0b4dd98d0eb6065989507","first_seen":"2026-01-02T16:06:22.639877Z","last_seen":"2026-01-03T10:01:28.260326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":202,"dns":1,"connect":98,"send":0,"wait":125,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CMuWNRWF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 827\r\ntraceparent: 00-f4606889052031ca3f069c118a6df89d-a37fcc531f35095e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-33b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303516\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/8a28bc4d.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/8a28bc4d.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-f5cf79b5ff9e92f8c4f574fdeb18743a-652567a6fcd4f1b2-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-04-05T09:02:54.895197Z","times_seen":130,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/megaways-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/megaways-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1021\r\ntraceparent: 00-7be2546ff74178687c82f8d3d5c26b64-4d5d958c27ebc8f4-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:33 GMT\r\netag: \"3fd-61bf36b728ef1\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 21 Jan 2026 20:31:49 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 934422\r\ncache: HIT\r\nx-cached-since: 2025-12-22T20:31:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cdbb1a91e3cd4e2e7727c66710a767","sha1":"67fd4051cf6236f406baa5b90f6ccbe5825867e7","sha256":"9f37e4d79b64613286fbf83e86ba1a2e41279be0c2ccbd076ca5b50f9386a8b5","sha512":"e582d46b1834fa9c5e03687e9bdd314ed39cafa5b632828c632a048f39e8215927330d17c810270671597a094f563bf7c0a2d5f1da788468d3064afac762ad93","ssdeep":"","tlshash":"c111abf7a1e5b6c4a60dcb71d926e5b41e1f38f93eda048293801ad0bda02719c8dcc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.152577Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8a28bc4d.d.m.Co4wPcz3.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 153546\r\ntraceparent: 00-e8303296ea017873936f1699aec716ad-1f81ce654755cb5b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-257ca\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 832700\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-24T00:47:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":649978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22587)","md5":"fde762892a133b7e9b5fe78c10a8829f","sha1":"0ea5fe2dd52a0ac4dc7fd7c1380f229f8ffe36c7","sha256":"923db43808690ee9aa0446a0a52d6356ffa4a868e1b9dd5d68cd3dbf729b7c50","sha512":"5de8ab00f03e62b53407c48046cc29d5c78134be361fcd9215c235fc5b73b1048c9f03fa6aff0d15f6c93116b06f22113496ec25b6edd229fcae7d49f5767b21","ssdeep":"6144:0BdNtcFikOGxQ7KGZeh3Lep2ZS3wtURfCrrbAIhFk6oN1Omd4hk2GUjeum5eD:CDcFxlwAqfOrbAINQF5k","tlshash":"a7d44b5a7251783647b241e9806f0646b3391a2e9448c85cb6a8e9ef38fdc4531bff7c","first_seen":"2025-12-20T03:09:17.528049Z","last_seen":"2026-01-05T18:44:37.718747Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 175\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"[{\"id\":\"ace6182f-4b71-435d-9b13-ef5d79010a64\",\"qKey\":\"5b49cd5e-162\",\"operationName\":\"getSpintaxMetaData\",\"variables\":{\"options\":{\"routeName\":\"home\",\"routeParams\":[],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"40801ecd6b299f9acfa83d16b2d13857","sha1":"8abd1761a0eb246cc89bc6f0e4b3f374c4aec0db","sha256":"6fc27a8d5f42601386dca590a5a6c7d70e9778d6d405d8693880e76c7c7fd43e","sha512":"917bc95bca04304fa86fdef4739332f8f2cf045da78fd86d37fe826ad4e1f5b14fabdcc37242e3a3ef18a91e7e418490c5927fb4afa9d410da4a3069b298322d","ssdeep":"","tlshash":"ade061132d413d351e46c9447eb6cc47cf727626554615544ec58a00428aafd3ba5dfd","first_seen":"2026-01-02T16:06:23.436862Z","last_seen":"2026-01-02T16:06:23.436862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"leon-italy.casino/subscriptions?platform=web\u0026skin=leoncasino","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /subscriptions?platform=web\u0026skin=leoncasino HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon-italy.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tfIK0SiLZ16lj47ZxGDKfw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 02 Jan 2026 16:05:30 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nupgrade: websocket\r\nsec-websocket-accept: pnAslOqSyBbDgoO9JEXOmMqo1Es=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":1,"connect":22,"send":0,"wait":65,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com/shield-fp/v1/api/web","fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","domain":"csftr.com","tld":"com"},"ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csftr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 22:33:13 GMT","end":"Sat, 28 Feb 2026 23:32:55 GMT"},"fingerprint":{"sha1":"98:20:2D:63:AD:53:07:94:C8:88:95:A6:88:61:6D:0D:54:8A:FF:17","sha256":"95:65:BA:45:B8:4A:84:21:E3:BA:11:06:09:12:EC:01:DD:78:90:90:1B:C3:85:B8:0A:EA:11:5A:EA:35:F5:A3"}}},"request":{"raw":"POST /shield-fp/v1/api/web HTTP/1.1\r\nHost: 5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24300\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24300,"data":"eVl6aHBycytFbGs5cldhMkttR0p2SlNHZUs0SkxaeGNNUjBaT1VJVHUvV0JEQjJiM0o4bGpPWWYxeUhpdzV4R2pVbUZ5V3dwTWxzaTdtS3B3TTkvSnhtSGRaNUdJWi80aHM0NXNmdzlnd1E1dnd6WU4vRm5mQnBTTE5mbkZQUXU5akdRVVk5Y0ZSMkFjbHNmN0VwbncyQmZ0Q1JCZmZlY2RLeWllODlYV1lJK0hsdVpmRlp1NTg0STlpc0NFa1l5UTFsdmNwaHU1RWZ4M3dEa01YSE03ejFyczkvY3FxZVNmNXlWQWcxMEN0akViTDZIMlViRnhZN1ozdjM4bzhlSGlQcUw1NlJ6bXBGaHVJaWg0bG10Q3RKQ096cDEzK0JINTZIRm5rUDQ2Qi9KamFVSFRvQVYxWHJrRHhKM1ozQTVuMG1KNVA0cmQ2RmxkWXNXWXl2NmVUN01mT3F3eFQzZGZhWGMvTW1ZUHh2MUpZY2pydHJrZlYwcFREOEJEbW53S1hnWmJHTXpvZkdycHZBVnJEVk9Kbm10bTBmVWIrd3hMYWdENEhYZ3dodGg2ZmFQaDI2MWlvQTd5T0FxK1I3VFJORUFLa2F0WHVJSFRmYTF1eFU0R3c1SS9Fa0RyL2NNRURpaW9YZ2I3V29nTHd4Z1VCTVhvVGdSSWhjT1Z6aURFWlcvKzVZMzR5cTJ4azRDTm1Jdlh0S0c5UmtzaDlvSVUxUlNkVzRVZmg4dEhtTy9qM2JqNEhSK3VaUTZKaEFqMlBPYjNmZ2llVEp4ckxGanlRQXNFL3QrWjBNd05HTitTNUs2b1lTSERBUitiTkdrdFNQaG1KUDRYaml6UHU2L0Y3QXlGUmo0cGswVnJRbkJvTnR5cmZOWTR1dVl4ZE9KbFlLeFBlWUo4bWhZSWNVUTlCU3g0eFRycDNLSXJSaDJMM3NJRE5mWGo5QjhmZkptc0I4U0djUEVRVkJNbSthS0pEZHd4aElmUTJ4OUpNbUdzUjlDL0IzS2lxdnd5Ulp6ZTF3dnlHbzVCV25Lc09PVnhwelgzRlpNRmIwbmh4NkQyMTFBSkltZVRmY3RidHN2V0lPbmIyR1UvSFRZNk1RYkQ2TkhYK2tVdzZlZXVZQ3NyQnNMQUV0WEFpVWhLRHdvNnJRelR0VGhKelZpQ1NSOG5KbXF4MWxRWWlQb3czemdZMnc0aGNrN3BiRHpXbXRqVDhxeVJBKzN2Q2dQL3h2YTRzMDBRWkYxbk1ScnNkQmR3NERka25aa005TU8zeEYwU3ZsR2hBQjlrdEZtaU1Cbm9vTWhuR25DaDgvNjEvZkZvUzlBS3JsVVMvcDN4NzhPSjNDTUZ6TmtieGgvMnZJbFhseUhBQkhPWjJZUFkrQVNJTHErdGZqMVQzL0R0TjM5SkhldEUxZExrM3JsalJyckNjaEMxVUJUazcydTFUWW55UVdmY1NqeFJrTzFGdFNqWVl5QWJsbWtoQmRqeElKS29ob1B1ZEw1MzNvd3FkdVVHR2s1WFNRTFFWZFZQT2IvTlFxa2ROcmU2dU1NS3FZMG5NQnFkMUhycStmSlVMRmdVMnM3RHY4emlUVno1YXBFSXg4UXF3L0ZWaXJZZUJFUUpGcXBDSzRUZ3FLbzd0TUlmMEtqZmdyUHIzYlRHcE56WXFhdzZwTzJnUVJLNTRJMGNveVdWQTJqRGVyNHEyZSsxV0FGVHMxUEZaa2t1ZnpXZ0dJSG4zMU5PNVVMTlZ2Ym9JVkZTcVgvblp3MG9OTjNvSTl3TjdQREk5YmQ2VDZtbzVwOVhpU1dsUzVtOFBHZ3hrUE1HbGg1SDdwWUZmdG4wdDJVSVB0b3dQWk5sYU03bnFKQkJWVTU4OFhzWENncXRETWIrMzFXYzBDek1tZVdZVzdXQ1NUd2JQNlpvOVF3MUlZOWtnN2J2WjE4THpxaTErd3VZZjMzREV2cCszOG1mWWFPNTFzd3hKMFhaNFZQR21sT2VjVHV2djVmMDl0ZnZ4YnpVajZPdjh1dTc4dCt2TEVjZ2pscWhTMHFOeWlLczRrZlV6OW8yVDdtSlhWV3NlTGFWOFJKaWVyWjRCc3dxcUxEVTFXUjZFaXdsOTlSSFAzcEp3TEk2L09LbGd2RE5FSXlST2JDWlhEck9md1dTNHk4RlczS09VRFA0cVZYbEdEZ3pJU1FwZU5uV3pJWVVMcm5va0JGck8xK2Vod2tJUUM3UTZnTGxsZkZZRXF5UlpuRVJwOUdNOUJyUmlpZzE5d1FJS3ZXUXhQUEV1UDREVVBxNm9Za1MyOWZMeHFybkllU1BVVUhKb3ExazI1R2ZOSWlsZXFrQUFjMGR6VHh0ZlBXTVgvRk1NQzIxcWxweXRqU2NWaURFc2tRTE4vaWpEL2pFaURtQ0pOdU51dkExNlkyUGFBVkg2aHVKR3FpcEVobTNNV0szclNsUXl4ejZVVW85Q0tGdzRBK1RNS3RnRGI0RWdZUVJjMlFYUk5ENEFnMWlOUXdLa0E5bkE2U3FsbHJyYlhQbnZlVy9VNExWWllLV1B1cHgzaFh0QUtxTjlHRndxUjJQSytQOFNDc2lWSzZEOElwUmRQMFl3ekVteVVBYnovZGZ5dmN0V2s0U2dINHRYbEFNQitiUzllcElOR1AyZWJ3c09iVFZSaGFjM0ZTWWJ3allMSVdwRFliSnBVMmVEak1xVE9JSlBiem5CV2tVWFJrK2wrNG1IdHY2VE11blViRi8vM0N5R1hzR3VBT0tqN2IzbnpWaGlyV3ptVEI5MkxCWldqRVlsdVRaYko3NWU1MGxHYXlFeFliTk01TnJhNVFlamtpL21LQkFFM2JWSkxoVWRTelJ2a2N3YWd2ZzlOYVJvSnJaVzlFWEdZZ01yamlab1JMdW5BTUpqWlJUeU9DVG16eFk5Z3hHWXplQmxLYzFmMDBzWTFEWHVhQ3had1g0cHZRWXZwWHNzV0JyZW5icDVWSnlRR3Z4QnRNRG5FbzUvejhHMGMzWnkzWEV6dWhKZVNGN3RhYzFCeUN3alE3RUd6WERQZjZqYUVhQllwUVZEZU9SbHF3Mm9ieUovTmRqcDd5Rkx4OUd5dTVEL0hpSWdXeXJhNEIrbThYbi81dnZtb0ZUb25lSE5MalRESXlpYlBIS0ovQnc3d3N4RkdEYWxPbXVhRHBRQ2I3S1RpYUtVdG9TVEdzeng1Rm1YZjBkY3ZqU0tYMlN3aS9LbE1ITUM3eHJPaDRDY3hkUHJrck9RMjBsRWNpMWsrSmljekUwQnZoOVoyaERJKzNuZmk2SjZOTDRsM1I4NUVFOURVTjhNSzRJTHEwa3FZYldUZzkyVDg4TlU2YzNlZERXenN0blNqK25XaEdqL2M1Rlp5WElVY0dRQjlDaG5ISitiKzZkbEdFTXowNHZXRWM1Y3UxS0xYaW9wd1d1V0JsemUvRTgrdDZuK1pWQk1oNlJUeVdVK2xOMVlOeEErcEQvazRKOWV1Y1RxZ0pwcDVlS1pVeWVIdDc1NEZaQm9xa2UyTFkyQzErVFp2ZGlmVHI5WHhhMWJtcU1hUzhKRWkvVE9mWEtRQVVheHphQXFueFd4WVpVYkhOL0ltTE1YZU5jdW1MKzcvVHBXQU0yQTZUR2g4NnFMd05ReWJGTDQ3RlM0WU5rU1hhYVJZOG0xVFFLSFZ6UEpKeVhUQmRZaUxYci9OQnQ1QnlVTnVWSTdieEhYZnhjc2lNSG5XWXR0TXBDOVVPU2IyL3JnRXdPSm1VSWN2cEp6TFZNZFRZdWRtMjBvL09BTVpjRWhHSmFyMURaSkNsMW9JWjZLUnhBaGVTLzlxaFFlQUxkRnN4dHRWSFIwS0RLZjlCOG1qSmcwVVAxLzdEVXdhV1htbjhRWURMNkYwUDRrTTY5TGxZay9UcTF3d25TZXBMRDV0em9RVjVVSXAxK2J0Wk12N0V6a2JYbDF0WmdTTUdDK2pVQ292cEhxbmhXRDZKN1FndlpXNGpJcnRHVWdHbXAxcFc5aVVNVEROdTVvR2hDbEs2bkZlK0dpcjJ1bGZkTjg0TlVGS2RlcVQ4UURVM09tNmo0Q3lqKzJJMVZVRjdaUWhiZldaaWgrejFFbTliaGYyUld4V0xzblZ4WE5FSGx2QW5XZmNETXZIODM5eXF4a2Fsak1KTGZjd0RIeDl6QXEyWEV1NzZhbDA2T3FEZUZFM2FIK3lYTEdHQkJHNnV6WXFUaGdOOCs1QWlkdlpmaVhKRkZVcFBxblVjcHVHdVhqT3dQSlVKUGJEVE9ZQ3dPNXJ2Z3ZsV2xtcDhwYU8zVU1BblhLR20vb1RzVHh4TlE5Z1c2ZWV0Mm13NFgzRVVzUExxUTVjTzNKbHJMMlZaeWl3UGFvR1dtRkQ3blJubEVvK3VKekhuS2dtaDV2ZG1Tb21hMnFYanVKdUVJbzFQM3gvMjNNM213dUp0TDVMOVpXNlpHbk5FOFU2cHNMbHNtNGc1ZVNSVnFWbWw5c1UxbFFOZ2ZZMGRHVXl3NkNjV0JieHQvV3NpWEQyYVBxUVZ3cW13TEtaTE84a0ZwWkJnbmxZK2dMeDJ0NlJ2VXVuRmk2dmtiWXo0cVpCNUc0bGp5N2Rsem1Za1VFLzhmSTR1YTdPTGV6b0NXbUQ3VjcwZkc4SXNuRTFZZkZEbXZpdVllS1JMOGR1cjZRM0h1cHVLTHhtUlY4dW1EZkdjcTJiSFpZc0F3N0ducDdrcFI1dTVLVEk1eml5RWZTR3lweHBheXdjNUpXaCtiSVRhd3JkU1NaNUVvcjlRME1CTHNydmdzQzdOV05HVXVweXlodDNUOXRLc1gvcTlIdW9IN1AxTnRwd0ltWWx5enAyeHd5bGQxaThBbFIvSDdlWU9RK0pxeDhjMmgyYmVyT09HZXIzakxmV3R0K042YjdTZUVyU1BpU0xxWldXdzM2YUdCQzd0WWRVQzFEZVRwalNvY2RLcFBMQWdLaEU3RXZQT1duTStnQ3N5TkJzcFVZU3F3VlBTbS8xOXRmWlNpdGZUNTRFR3dHR05PTHdBUm84VVhRWWFUWHdzZG9aKzNlNFpJaUswSjV2eVNZbzdobVF4M3JHMXZmNDFRUDZZOUQwUmVMSU5SMlZqTm9IQmhFaUJsekJCNVVvUmg1d3pxSjBuQUZIQXRBY25aRys0KzBoVURrOU9HYTJNTkRLSGVkSlN1N2Q3eVp1N1c4eWNZYWxZMlA4N0IzOUQxN0pXSHY3aGhJSzZjT1U3NnJ1bGkzSzBGTG9vVlNYWnI4NlJhdkFXd0xJbThTR0hsdmIvY2FoaW1nY0JKQ0F5RzVmWDNGQVlpL3VhcWpXSVYzTXluRlVVK1U5VGYwc285MHRNODlNMFJNZnl4ZkZDeTFKUVJxZ3J3RUdLQytDajNnVHdVRS8rdkNCK0RXSGNXVE9TcnBjdkFOMnVwMjlKaDQwTGJNQTFabEpuTGRKTmNDMVNNT3JzcnVBZ2djYUNUL1NWR0pXN2RTdGVWUkdKZVZCRHVibDNyLzhyczVTZ05jaFdqY05qNElKMjZZYlNsRXBYelJGcFdwSjhzR254UDMwQUZvWkMzRlRQdVRYM0p5VXl0NStIWSs1UkN2UVlCMHBmM3lsaFhSTU5NVW1FOS9RZTYyZythMFJ6YTRGNmxkYXRvekZGUFc4UHZkT3grQU02V3hnV29wU09US1NpbVRjbzlhSm9wc090WUdMVllFcVR1NTJHVEpOT2w4d1dJVGVqbVlzUk5GWVdHYWwxWGtxNVZjQThJYk1DSDEyclZkcTRJLzAwVEp0SEttY0trdGpNY2g4WTl0YitLR2FzdWRrWHdpQnlWQUFZZGhGVDAvelNhNlAyUmtpOHJsRGE5MFFXajQ4a1FwUkFPOUhkZkhCSkUrVmE4aTcvdW5vVmJ4amlSN1hTODBlUHlwcUNPTG1HQThmOW1VMmFBWFdadVlVQ0lLZWU5cStubjlDMUw0a3V0OGx2WkFlVFQyUXJGK0VJYzlFeklKV0x0Sk9PdktTMUVySHdvOWpRWjY2VkdISjhuaTZmVVRlWkhBT3JvV3RoN3k1aUs2Q2FoLy9kMkZPVldkMkRTeFZXZEFISS81eXM3c01sTlBVRnNHbGV3VXBXNjNXYkVYWkdCb252R251dG9aQ0JTYmdYTSs0VEc4WDB3MHpHVnBLWlpXeEk5UTdSUEdBTXRrWGlIVUdUb1F5MDZ6aEpGcU83T3Zkak9GZWJmL2REMDA3a2dETnJvc1BTTDVscHhOQXVrVFZOcjg4Nys4NWpTUGxlSnFBQUNsbkJoY1RzOGhzdDlGS1RLZ2RhU3UxcU9SVzk1eEVUMGZaODdlWWlnSnY5MzV4OEFuVDNXNUJtUjI4STR0RkxVY2ZnSCs5NGM3VDVVdDYzUlptUTRtQktMbGF0Tnh0cUJaNGhkeXFIeE1WdHdMcHZRb0UyWDhMTW9NQitud3N1eWxpdWJjNFA5NEdINHhJQ1Y5b1V0K1dLUTBCL0poTk5ORithayttemtvbmFhWlNOdnBoS3lmSktaN1JxK2dLdGlqV1A0OVJBUHd5MDdteHZqZ2FJc1A3ZnB5dUszd0VZS1VHbGRmQzNRNll0NlptMDJ6a2haZ2FvcUZMaG9xeHNqc2d5SEllV2FiNXlFblBsWHJnVjFKdWkyVEpMMllGc1k4VUxoVFd5ZTdmUnRsKy84Q2JLOGFCeE1TdWtXZllCSzU3YTV0N0NWaHd5T0thYVZaaFJEUFFiRWpxdFFIc3RZRUxxV2pJaEFDRmM0MGNnZEtGOUJZcEpSK1dHbzE4N09HSDk1ZFpJT3haODdmY1VqMGxISC9QVkNLb1ljU2Q2YzlHYmMzRHhWakpwT1l5TUUvZ2cvOWpPREZneWtXYmdUZVgzWWZsSEpObW5HdnRjeHczU0NMUTJ6S0U0SnJKTmV6T08zYkM2SlFBNkZhR1J6dFgvUzhjL0RKVjFYU2xMZVRrL3haTlJoaWlVMjlQR1hlZ1R4NDRib25oTkpvK1VDYlNUTlptT2JpWlcwUGlxU3ZLRXVXRmh2Tk9LdC9BNVB1TUZGOHh6dVFORm5ydithYlZHSFNwMmdmZHlMV0drUXJ3TmtnZDZZSG8wYTUyK0FBU2tQWklRaVRJL2hROWUzVU5xcHpxUm96VHBxalBBZ2VSclU2MmNQU3lIY201K1B3NlBMeW91TkJoRHc4MC9IOHR3VFRjcWx6bjFGQ1VIb0VnQTlmcGZabVp4L0lQbmp1YVZ6bklCRFJucVpDQ0tGQTA1MVlhVWJjUFNhdHJ1ZUxQZnUrTTRwOU5zNVJwVVZreUF5emRPSU9MUXhUcWZJTUIyQjQ3NGpRMjh6ZFNjWGM1c1hZYlVOWHhFVGhIbURLZFZDSkpqM2g3c3pBS2NHbW5PRXcvTVB1dnZTTjBRMlFlNENxKzNyZGlwR3VkYk9mTDRudVAwczlTOFgzRTFqcTdnZGE0WHlFa0JCYUx1NFdzbTk4dGFWanhNRHlJaTZ0cVgvZnVNZHFPTWo0SGdyYm9qd0dhZHl6YXJjdXBCQWR2Qno3aE5HbHNEOGFTNXJNKyt3NzZHZ3o5bkhleWNwOU1rYktvSnpVc0VtbFFkUzlSblE1UGdodUppbGFhZTBwWHhKWUR0MXBVMGg0R3hYZE1NaWRZcTQ4WWVFUmFaNGhCMWJBR2N2L1ZxZ2pNcEw1Z2g4dEE2aTNVZ3FDN0VRZWg1Vkc0TU1zaGlCSXFCQ0xRTUQ1dTlZT3VyYllsT0FwOTRnK3lDRkw4dmRnMkNnWTNLZFBhTU5yN0JneU5aS2dNTlNQN2VkTGgzSWxoSkxVMDdIaUZCRDdMRDJHK1RvNW9nWGxmaVFwSUtORmQyUWRrSGI3Y1I5T3lQU1lIeFBNZkJTR25IMDhUMVBaUWpldnlCS2VFM1dEajBNK1ZsWHRwOXJrL2h0VTE1cDJvaVhwQWRVNjlLNC82ZEN2TW4vVTcxT2QwcWJqVkJoTW9KL0w4aVdQSlpTcnBkK2ZXWng2NFlyeWNVc1kxWHJEMThJMG9jcW90dWFuQW5YRXRSNklISTJhdHRoMWI2aXNMNWlUcVVxNm82TG9vNStMYVloaVNIMVYyYXF3R2JFc1ZoSi91eEphOXh1cHJpeTdmaG03V0YzS3ZLV1NabWQwK3A2cTEwbExuM1FqWU54QTJTcEkvWlBjWmNlYkxmMTMrQlUrcDJFSTc2Y3VqY1hvbjR0Zjk3d2hOWjRMeWpMNGJjTEMyM0lUVTB4R0cyVHQ0SENTOGM1aEZlZkxzcFVYNVpkQnMxanY5V2NzL1Y4dy81RUlUT2VFdWVKNTZXRTMvR1laYmdzK3hhd2NjVjE0d2JUWjB6RFk4QjRsK3plZWFWaERXQkN2RUw1ZXNEeE93TmNSQk9ZUmdwYUtFN2hPWTlLN25WTmtqSWFJSE1uL3hyWVRjOC9uaVgwaGY4YXhKYjFWMFg5b0ZrSkdVN2o1d2xmaUdnUEM0YXJ1aVVrcFhHWTRsdGxwMDI4dzhERUNZZHEyOWhVSGpQQ0V4dllWSy9CMVRKZDNDa2JnM3l1NTBvUDdFTHJLb05lVkJQWHNRNXlvc2tXckhtdUhCUlJaZVBsRE9LeGJwbTdiWUNHenVnSzBzRnhzektCUGFrcklzK1VlTTJvWXh5U256aGp6TVZUVGt2ekFKVzh6TG5xUm96TXFUa0ViZlFpckQ2UjEvR0FwOEZtUFUxTjBpS2RVWDRSLzVYM0NTZS96ZDZvMFFEWk9BOWtnNG9JZDFXVVZobHkwdGFvMVdRS3hrRUkxRFAzNkZ3NFkwelJDaFAxZVJpaFgrZXJocmwvd3JDcU1HL1hSaFJHOVdxM3BxaURpRHg3VVQ1ckI1SkVuSXNYOVI4WDh3YktzU3NUNFc0VWhyaUM1Qm1ucldJUDlBcVdhdk56MDBIa2w5MVJPWUJSYnRvY3lNa3V5d205RzdvRWJiVW51YmYvUGFYeUd0YzNQSXFhalkrSkRmV09JSjQrOWg0S251UHUrMlNsdlE1N2l5MnJiTjgwMFdpNzBEOHpDRVlYbDdIWUtaK0Y5clgwRENxVkhTOUxRbGE2RWliS1pKb2VXWnBwV3hrczNCL3FHUWsyQlNQSHFiVzJobnRGS2dYOUhmSFlCTFlGUGlFOHhrV2l0Mml1SmkzbE1USlNVdVN2YXBtWTRQeDcrdEN6d2tiUWZLRU1aMnNldEFlRE92cXVXYkk4ZmZ5NU9JKzlja2ZxUUpkTEV6WHY1VTBmcjVMM0tqeGU5TVVTU3lvRGwxRzh3dU5pcm9jbzVzM3R0Z3RsZnY5Q2pybzlpMklodjFaVkpXR1VET3JOQmhzcy9iRCt0d0FjL1NOTjB2ZWxzRDJ2ZjBRU0RqalJHbGtITDMzSU11QkNESzBDYi9pUDkwbGFFMnZBNWpENndLaHlQTTZyUTNSRU9aOFJkdzJRSXo2MVZ0SGVWaFc2SnJGbkt6ZXMySFZwSGVpL3E2YnVQVUVPSko1VHBGY1pEYjFuQUxpeml1ZzROd2lkY3o0NGx5V0g2UFk4amxOb3NDS1p4YjFaMEE3b0RsSGhRRm1ubjhHc0ZVSTJWM2Z2ZjVRSnZnS004RE5qZk53cG1JUmZEc0hQYk0zNDFKSWw1cmUzamFjejB2ZnpCeE9IR05rQnJ0ckdyV2QrakhpdDlid0dqeW9qclRoTy9LQjhqMDJobHJZVXgvN2tLNkVhRGNiTG1Ca0QybEFnblJjYzZPTDVNaHRMQkNOcUdtaSszOTg2dWVlbmJMcUFBN2FjTW1vQWZqME55QUphTTV3WVZsT3ZSSnZ2V1FtbkFaT3JvQlFjc2dLWU0xa0syVE9uMDhzL2ZSTHNpYk00Tmc2dythOE8weVdwdlNtaU9SUFNZNEhDYWFDOHVTSkZrVzFsZEtCbytGd0N3WXFCU3NZaStJNUpsOUhEZUxzMWNYeFBCREtGN1o3NnFJaEZXM1JKOGE2NDdjT3ArUFJNTHFvN3BpeE93Q296dFRnZUJXbjIwN0NpZkhQRjRQU3RDR1dMM0lVSDNzUzFXMUE1MTBWVEV0RFdRTE1IWlVjZzQ4RTlDQUZ6Nkdrai8vbnIreVBlZDB6VGlINWpHK1VaS3U0cXJoK1FFK2lnQW1hUWRLZC9SLzN5eldCeWFPeVF3Lzlrbi9SZTlubVJyOXZYb0J0dGNZN09QT3duYk01MWdYVGMxem9jNXhSOThZcFh0MEp6YXk2ZVRaQ1hnS0NYMVVKTFBPS1dOeG1XSEhhMFlzSElHRSs0RDhUSncvemVtRmxnZ1FNbWRjcEVOdk1OY0JoUk1uRkFvU0lPbGRCcVpEZENjV3hRZU10c0I4TldnVnl6MmVZNDY1YVhJYzZZejJzOFRTaDdIQUF3TmEvOGVucWp6RXNyeG1ldVBnRWhwRU56NzhFV3lsQm8xMUFHNHBQWjFmTEpRYkVFNGlkc0hjYWRHK1VaZVY1WldCUzVVT0YwQWVnVmxoQ00rcW9wYjV2VFduNUhBOUZPNHU0eWlDejliQy9VZUR3Vm5YdnQwTjlEMVQxZWtFcjZFRWVndk8xTWlsaGdzRDJSZGh4MElqMW5pT3l3VXdJSmwwQVhKTFNCUGlvMTFwQjl5QnpyRktjTEJoWUJWYitXd25Vc0xEZDdoSFljQVR0MjVXUUJzNVZjU3dBRlVOTmlncnVPTElTMHZHLzJkNXl4Ukdmc2xIdisyWlQrdkpmK2RqUzNpN3hDcTJNOUpxOG1BWStkOFBXa1B6bWg4RnZIZXdxUWk5VmFiSzJPMEhnUEFRYkxpQVYyWkRaalI1cmhpWGJ0aGwybW9jR0R5dk0zTVVBaUtZV2prMmZVeUEyTTBzcUxmcy9hNlcybUhRaW5hQU1xU2F3VWhmTW9lSmR0aVI0MHJrVnFiemVYVWNKNFVlbWt4LzFzNUJ0MzNzRzZOci9ZR2phWXZHT3pnbStUNXVlSWU3NXFpUzM2K1ppcUhuNUpSRnhtSEIza0llYk4reW9qZEIzOWhPUXIyelFRRWJkWjVLS3FzdUN6SEpMTHVhOEpwMXdpNEh2bWRobm9HaXJDdTFUNkEwNzFNYWt1TnhFQXdhdE9INU5ub0xlNUhJeFg5S2xUVEFZNWNqWWJnSjFOeXFucWFpY0VCWWgzNXE3UVZreXNSSENhbEE1MEtDazY3V0Y3UE1sYmhFaExpN1NXeE50Y2thc01yRitoSDBBUUVUNWZrRkVoMlFuMFhtYVVGTy84U3pSWDMwQWpNYTdzQmJrM0JGeG1kVTlHMVliMTloZnQrWEEyR2orZU9mK25lc0duelZFb0tiS0tIcFJrWlRmbk9OSXU2c0JtdFdJZkMzV0hGZTF4L1hZVTlic2R6SUM5WWtpZHVLSXdmYUtIOGhhY2FpZ0ZrRHQwbk9aSmhyL0pFdGhKVW1yYmJhdGIweFlqWk5UaUVncEc0aGFnR0MyaWNkOFpyamdJY092TGYrc2RlM1ZKMmV3ZGZzOHgrV3dlMEZJZERoREhXcGhXdEh2cHd4aWtURUNrcktIRlprTkZQOVRjMURiNlBUY0hnNTJ2dnVEUHRram13M0NhODl1MjhyMXFhalNlWjBTR3ZYUVlDUzZMOXlralMrK2ZLNVV6enN3Y1cyTkRZRjdRb0RueUlKbHc3eVYyd1BUZUpYcWw5amNoQkVyeWZSVUpjdTQyT1pwcFFTa0IyNXNZWm5LS3V4am1pdFJUdzh5VnZscXl6bzBVQ3UvYTYyeDhBcE8vMXZDZzQzaUFicGZSYjFTOU96WmFobXdsVFJVa1BQWS9lbzdPVjYvR01qRVRsdndpeDQxZ2szUnVzbUJUUnhPN0E1ZVZRR1lpVFVQS2k2WkhLM3JrSkoycXhwUVpoYkxuQi9yZE82ZE8yRnI1MWFMYU45WERLcTlOL2owdFFpMmlIdEg3MVJBcVlxU04zQzFHZTBEaUJZa3dIL2pneGJhdVRCTmNDdzJhbityVHRZTFlqeVhSU2UySit5T3NjUVNnT1JMU3hCUGs2V1ZRLzk4d3JtWUZxdTJHK3UvcGdGOTlqbzg5QlNjVlc5WkpwNXI4NWlSRmNSRXNjcXlFcTdicUFoT0ljZkNqb1RCRzF1TFM1eXRpdGwza3ZnTWtPNkZreWkzK3JDMjNIaTVXUEt0UDdORjhNN0NhTFJUamxHVXdqbmJjMGFiM3RkUW1aSC9IdFFHUFByUy9Eb0FWWVY5Y1BYRUdOeE1SWHRjUU5URFFIUC8rNSt6SkU0b1dxTWg5UmlEd2ltTm1SakVUMHdyTnJicGxrV1J1dkROK2lhVy9PV3N3dk12RzdnOXlHK1VVTmszTUk2MVYwS3dtNUZJMXJ6NEs4emlvKzJDTnRsNlZ1VDJwMWdlSkFWUDQwcXMyTlV0aXA1MThUVFgyejZjVjJuSlZsZHRmaGh0QUxjajhKdkw4Q1FFSmdHSGloK2lPT3lwN0RnNTFkZS9XRG5Sd0xmcVFObitUMWIxUG0zbEUxTCs4WnVucGlXdXcwQjE3aWFBYVc0UGFMWFJSTmZrWmNFYXlNRlQvSU8vZVBrOWJJczh6OXpxUXFrbytpdFk5MzI4UmFPc2JNVEJRbVB0M1B1KzNITDJMOHo0L0E5VTBjNTZJVCtJSGtUQ3JtVjFVQVBUZHR5YU5vRFdoOFFjdjZEVjJRbW9BT1FpVUVvQVJ0QUx3d0tHK0grbjV6aDlxRk80SHEreGEydW5RbGNPaGJOMFRnQTNkYW5uVzlzcFlMWHI4eGh3WHpYMkdLbXlyTWZnM1NwRzd0NE5ubGZ5aWZHVHdZOTRrbnFoUWtDMmwvQ1h6N0IvdndkbHhIT3lManhuYWJkbDUxZmNVK25hcHg2emYwSDcvK2JsN3VSeUZBdWVsOFNRMFpUUDF6dng3ZXkrZjRvK3lLam5aUGdSZ0VVbHI3RkhQNFJkZUJoVTA1MEtVVXJjQm1lb2swT0duMEhmMkpQWWNVcVRNd3U0OXpOUXpWZFYzWHQ5K2kzUFVCdzEwRlRWNnE2blZkTEVXMmNGdTlqa1hrTFNLYzI5RTY5QnczRmYyZkhEYXFzeHlRZWQrU01qOGpxMERTR0wwMktpczVjZEQ2YmR6THQvYjZwa2J6Y2dseG82MHpqRStUQjNtTUxGZC9LcWIxOHV0NFArdEFsbHUrRjRMWUk0MlRUUWcyS1VzYnBzZ01FRVNlbVEzY2UrL3dJZXpjVHRJdTd0TEpiSGhKVGp0bWUwUjJKeXAwR09GUVR0SGVPeDRtZzBDdG9vdUxqb054elVZVzYvU1A4Q1pLYk1yQk40cGFvK1A3YjNDL1dMMUx5OXJ6MnFta1RnOHAzZmIzNlBjQjdUQmNYMzFmNmZZeHZBZm1qMjBCRDMwai9NZTdwemc2VmhYNXRnbjk0eUEwMWVKU24vd2VYZXdpUk1xUHo1UU1Xb24xakJVUFRzbThQejd0VnNsOU1ZdUJzNC9sWDJOVjFjZW84Q1R5VWFtRzV0UmRGQ0NYTlNoeWJ1Y0VFdkNZalR5U2JuQm5yY1YwSHNuVWlDSmtkaWpxblVLWjNKZW5jZHpKQWUzcGFHUTBVdzZXVEpHSElJZW5QQWY0YmNRcUpyaVVtVm5yVG9nL2o4bi9xSVcyR2M4THo3NlA2OFcydDNSTzA3ejVCc1U1R3QyL2JXOUpHbFNVdnFFZjNrNStHQ2JlM005eDlHWS96cEl3SHh2WWhWaFZYL2tWcjluQ3NJVEZEWW1oZU8wV0JyY28vWjhEQUZmdVYzeEVsL0VpOWtqaXNnUEYwVlJSZWpvQkhkUUlrSkpmOXZtcm5EckMxSkVLa29hOXp0RnhCQ1dPY3FqbDRxQ3owdTVwRGlxZmdoMXF5Sis3QUpXbHBGaDZBNlhDZng3d0VrL1Izcnhyd2JhbFg3eDdVdkxSN2JkT3J4RmEvb2VLVG5TdkExU2VHY0RUNlcrY2h4a2FpQjBrRGY2aVYydmNvdU1CSSthMk1XTGFuUGdhbUdrN2N1UkxEcDJlSTdYVC9jTk5SaG4yaU1aZ1ZVTmtVdTl2VU1pVkZKQ2VVNy80TnhUVHZhb3ZCbXlrU0dNMVN2K2hOMkZYWmdKcUNDUkpvZmxVK01Wcmt5bks1NXZ3dUtrWDF6bWRmVjNweVlGY3RlbWNCTERRZjIwZjdUbHR6RSt5UnltYmlwaDJPLzB5aWJ0N1JXbDB3YTZDTFRmbVFFdm9nNnc3SDNlcENGcWh5dTRwZ2ZoWmFoeXA1WVhROFJwRDlBaDBZL0JvV3FGNFZkZk1FWHVqRlhCaVJ2OUtVK0pCbjQ5MXh3ZjBDcmVzc1hkcDdJQVc4UElsdGxpdHZScEFlUmZEL2VjTkVNZ3B5ZXl0akpUTnVqd1Y2VEV3VVJHRjhMSW5QakhPZ0Z3V2dreCtZMDNBdXluSFk3RUJVSWtxMnRIUTlNVC93YkoxUldBL2pzaUJTRDdndzNLV1RQaWxYczI4K2x1QWczbmhxdE44eE5wN1cxT2sya0JCQ3BIdWRVZFB3Z3ZCWm5oNFBLRkxJTXFoYWRTQ3VuZnhGV25jYWM2SlF2alY2Mk1rTnhRYU83UDg4Qmp3ZFdJR3pMUFhNWEZJak5ZRjhnRG1EaEtqL2RDRjZhUlNMTjJna25xRHlidTV1RS96VnpuYzIwNDhmQ2kyaFlETHJLYmREY2s4RkR6MHpLQXR5S1RiTmg1bWRrZVV6dkpzZTJPd2JENDhONmpiOXlaeVJOZEQ2OXR6eEppTEQ0OTN5cnE2dmpBd3BGZDdJUTdiNXdqSEFKZUJSUmRyRzNjY0l6R0doeHd4QjQvU2hhYXQ1TDZyVVlnN3lOQStxTkdmbUxFM1dGbnZPbVpIY2daM0UwWEc1WE9lQzdpUlRuVi9BNzBuZElSMGRwYTBzdmJHR1plbXMyUHVPN1hnbm45bEFtencrcHVzMW5hTjhyQ1gxNXY1T3BXdXR4a0FrMXUydmZmaXdaNWVUd1RnRGNSZWord0Y5dklRcFQ0alQxdkRSSG4zTi9xb0RSUjhZRkNwc3dIbnFiWEdGcm5lSzVkemZIZHJ4MWx1dFJqMFNiMzQ4TWhPRWY2RjNLeVgzczJqc1R6SmpTSHNMUXROSHZQMitsemx0REFTR3lPbnV0eHVsTDdVdmZnN2k2VFFMNmpuTUVDTEpHK0NZbnUxemlyMDN6Ukpkb3M4WUdURnlWa2ozQmhWampGV1kyaDFLc1E2L3JCZ3YySW8rbzY2R045ajdtZlA3eW4rTndQb3JFOVRYT2pWM2JqNmxWa0FvdHNTaFhrNUYzL1dhblNMYzFZb0RyelkyRUhJbHgraGlVVFFwTkhTZnk2WDc4ZmRNTHAwQnc3VGNENk9DZ3V2ekZRV0ljL0J0OHUyUTVMbzFWeXZoc3BJcXdCaDM2VEd5NVVTQmZ1eUU2WGM4ajJQWisybDdMcUdYcStwRWdxYmtIbXZoaS9peXcxeGp5b2NTMjd5QUVBc3NrMmI0cGFLVVE0YWp0M2p5dVJGTER5eXJ6R1E0L2c4ZTMxdUlubEdBQlNQSFp0bkd5eVc0QnlwMzlQZE85MCtYbVJyNEUxSnNxN0xOclhHQTZhdFFlbUtTdnBTNzhaZzVsZjlkZzBIbDYzMkFwc0I2YUVNcmpCMFZHbG8yY3l4NkErRzJscDhJWjkvWlU1amFVRFppaE90UURYQjlsWUZYb081MUhnMWNwakE5bTArZnp4LzRQdHo5Z3NCOU9lTmJuT2xJbmdibTV0eDRxUm1uMXBiOTNRZlZpODdVUVg0dlhNbW5qTy9lSGxLYTRqazN4emFuSFZQa2dCQ3YxN01hTEc3Y0tpbTgzUjhBQkF0RmJJMklRT1JYekxRYkRjbzVSZWZzUXM3N0VmcUlCbCtERW9QNGhVU1R4czQvVUtsSTIxM2t2U1pCblU2RE10VlV6TWFkMVFXTG83c2NyY1VCMDcya2RYOXNuaHdvNTBIVWpOekNTcjJVWXpjMy9JRlhnaEhuNk5FYWhKbTVacHM1eG81WHlwQ3hYWmUvcGo5anRsUGl3TXhsVGhMWlhKUHF2bVJwTDhCamdGd1BndittVzNsSkVBTHVUdS9Tc05PT1lpck9pMVRhSjRFSDA1eUpKSHNzYjhmSUI3MWY3TVc5cEk2VDY1OVMvNW43YzRmekV6cUdpZXJSNHZGNGpRNGhhWW5ZNDlDeGhTLzZMTXJyUnhMZU5icTlmWUxTYXYxTWV1ZDZYaVJ1VkxEVzJuS1lXRUljV3M2MlpJQks1WURFMklVQlFDc25zQmhWVEhaam13cHpXckZ4MTJoaXJzNEh1dFdKenJNcjVuNFBMVU41TVJXNWJzNUF2RjlKVFFKYXhiM3YyeFo4ZHpTN3dBSnZ1KytFMER1VG5CTlQ3aE1icnhMNll2VFNBd1hiT2ZjdURFWlhHdEVFT1owZ2toTnJpRFgwQnNMS3EwVmE5OEgzS2s4NHYweStZWkc4Q21ucitQQUVCc25HNVk4a09WL2o4eUlaUEVyWEJGTlRMVEcrTzZmcU42WjZlY2dlckRxREticzlPWHJueWpmOTlpK0dYeGNQM3N6Rm1zK2oveG9OaWYxMkZwVTVRT0tadWl5dVAybDBpUzFTK3NQc2NqOEQ3TktNWTRRL1dybUt0YllTWHoweGg0SU9mcVN1Y0NLU1dhaytZWDBMbkprVFdYTXJOYmZGT3J4Qzd1VHlXcFYwU0VOVTlJUEhxMFNJMUwwV0w5VFJ6NnZwdUtZZFJDY041aUozKytFWGh1TWIzL1BhemxOeDBMN2ZOb1VnWEttQVhtOHlycEt6OE8rY1BObStwWitOQmxMMG9NMmwrYUNMbVRSQUxaT1NpR1V2cGFTWGViUGwyZXExbEozRVVtVFUyMUxMdlI3bGZVU0dOUFB1VTJTdFZqVkJtZWtidzYyZ0VpR1VsTEE5cHRrWTUrQjArR044b2JRUzRqTXRyTlViZ3lZTDNGRGxseFBhTzJ5cG5EOFN2Q01CK2xxVnRUOXkrcDNtM1ZqcCt2TFdtM2dRcGVCRHIwd05CZllqM25DcGtjMW9mK2Q3Z0NSN0wrRnZSVEVTeWlLd0gxUUxSNTk1emVjcVAwdU1CZTh3SFVBcWdUTXloaWJYOWd0VjR0UkNrTWJpMHBPV1FveEF6ai81NVRJSEowZFlIVGJ6UnhpaXhzZUlKb1YrRlNwa2ZReU0ya3VuV1dlc0RxcjRFTndQVnRHMmlUSXJOS1R1eTl2blB4YzJDZW02di9ST0lxQW0zTUJpM3FvcnVYQ2g1QUM3QStZQ1FLdGd4emJmWUJBTDVwek1GSHZDSlZHYitrWVdnQ2RweTMzMDJEOFdPby9xN1JvVTlqVityeDNuU05TMmRFVmd2YjMySkRLbWdvMlRVWitMSm1XRU9qZCtkbXlwS01Nc2pQZ25vSXZzT2hMRjhwTGppRmU2U1htTS91UlBUUFZIWG5NR1NibHEzVzljME5pL2p2TEtaMWNDdm9KNUxEM0NESnoyTGhvNVA0VTRWbGt6OW05TWxUK0drZHYyNDdDWHU0YmZjamFocXM0UFRpeW5SVGg2RjNpUE1hNXdzOWdjU0FjOVFEeEwxQmhZWGRCTXBoZi9uY1JFa0Y2Vm9LcjVBUW5qN0REWDRiQ0pmY3VxUXVWNlJVMy9PMmEySVpIeVVuSDJVNHIyT3FGVzc4c1NzVHRpaXpWdytrMTY2UVpHS0ttNEpSYlM1WjQ3M0x4MHJuRjFNQVQwVlhxWkdHVFd4aW43M0tFdHpZVXVOYy95S2hZWTB5b0diSFRGNFB1OHFPdmhOb3crL2ZNSldoSXJxNXNVVFRXUHJsWHhULzBEN2ZQck1idTA1UmY4bitQMjZzeFhnMS9xdzNnT1BTT1gyVVc4MEU2VHE1YXFZZzUyL2x2TnhOYWVkUW5wblpUQmxoUWJVZlB6aEQzVnhEUFEyWGxRdVNwOGZMOERob3Z4TUhyNktXb01FVU5GNERnRTlyMlBROXpFK3YyaExlUFp4aXFTZkhFakdKbWk4Qm1obTFkRnlNc2EvbGQ3bTZtY3RCdlU3Skl1Zjk1b24yN0YwM2VGU0x2d20yYWN6aVpGRklKL3JmWlJ2Y3hBdDNqRlFieUVESjhXRWVaTlN0by9XT25VLzRZRHB3a0dvbmxGbHRLSllDUXo0M2JaUE1RaWcrT1dQUG5WVzBBamFOYzIrSnY0WVpzV2tveU5aSkJKTkxrR3duSlVtQ2h0b0p6NWU3b0tyTjFXa0hmSEZLcnU5RE83Q3NBcG5NVkxoUkI5aFRheHFCbGl1bHp6V00rSVhYUFpmOVBoOW5YdHlvRjBKUXJEejQydW05cUVaRnp4Y2drcEJzTTVLbUtuQUhGTGVrYTA4dHJMZ284TjNHYnVqdmtCN1dGLzRoRjMwWEhUMXdhM2Z0ZXhQQjVsRmxxZWxqRlpvRzZpTDVxYUlXdjM3dGVDRHZIb1U2eTRReDNxazV3Y2Y2VjlCQU9vVTNIRHdnSnVVL2NMTzArYkhjTVNXTFFPQlAvTm82OUg0TGUzUzNBbFltQkVCT1FodlVLT056UzdhVEJlWmtIcWIzMS81SzFXUmppRWxTeE5xbHQ3Y3dWMjY0elcrZ3BtdHZpQm5ZT2pHaTI4MG1zTGZYaWlITjhKSVIzWUc2aGVGQVFtamZ3RFkreldZUnFIWVM2L2haMnNvT2JhYkMrR0hKNHQwRjQ0NlZobHJkb0ZLWi9YMkNwaXJ3ekN6YWVtRGZJbXdVL05LbUhud2huL05QeHBoWEtYbzVpczRNRmdqSm96T3pJdlAxWFY5ZDhsNldweXZYMjVGWXVoQ2xVelA1Q3hZdDlzTkN1OGFOaVBNUEhqOGdnTThxbWRLdjZGZ2lTR1pJdm42UGZqWTNqNkZEeTF1cFRUc3lyVDJ6TUxKN0R1em95Qy9naWpETnRUVU9pZ2xZcWdML09sWGk4ZlN6Ly9MT3ZyRmpPUGMzZ1FFeVFyalRhMEdMTU1tZE0vMzhVWGRzbGJuWkFoaVdxL1lPRkNoRGszNjVVbkM3TTdHZGRIUGhOb3FoZ3loT0cvVkVuL3lIVmYzUGZ3ditOcllDZFdtczBTSGxQdXlkcWluQzY1TFJCMjNRMWhzN3RpaG9RRjBpaE1FT044Q3JMTnR1eWtseEFqOXo1am13cXd0SW0vbDhMZmNCMHd0WnFUTVA0TEk2WmFMRzY2c2xtMkFYSks3QTJHOXZnVWc1aEttbWhTaUEyYkd6czlQeDRwdzNQelVJK0JKT09xS3hJUWFUQ3lhak5RaE5HTEN5dnU1V0hYcEFDSTBTblB4S1NFcEtrRHl0Rzh3SUdmZUJ4bFYxY3g0U1J4cW1TbXpQbnpIZDdhQTlxZ2k1Yit4V09EZUM1LzFiSWpaQW1PRjN5RmdlaG96cFRpcWJ6Ym02b3U1MExJWGFUSE1wQ2MvaGtrbURMaHppalRJd0lvZzNxaXZnZk1iT2UvUkpMa040RTJScjNrY2d5Zmdob3hwLzZzNmp1VzlKWkl5MlY2Qmc1QkpaWSswMExkTXhTMzlMTGVBWWJGeTRqdmJBUk5LSTllc0ZHbzJmNkFNb2xaWVYvdGJ0c1hRaUhMUUxWK1Foc211MjlqTXE0c25RRHFRUkplbS9oY3VBMUxZeHZXVXRJMkx1bnYwaXhtV3pnWG5rYzJ1cC9Wb2pBZ1VQODhTbTFES3hTelVUekx6Witib1pON2IybTJoTExLWFFHeE9aUEJ4NU1iNWtmazBVSUlaU3JqR2YzcGNya0RWWWw5MHFkYXlyTktFY1Y4R2lua0x3QTBWV1Q5SktKRStxUFpJK0JNanRSVFhHdjI0bXcrdEZMRFNYR0FPcVpKV1FtQnovb0R3UnNpWlEzRUQzQkNQZ3dYVSsralI4KzZiRW5vcTlLU3NRanpxb1h0ZnZOOXNPd2JNSDNKUG9idktIVHN2VWlFMEVrVE5STGxqM0ZYeVhQSEtrY3FVbkcySVVNNk1xbGl1U2ZDRG1VN3FZc2I2WlVva0tOSXNrc2Erb3hraEFrR0pMUG1FWGo4UzlaeFpiWjZxYk9Tc1o0ZUZDS0RjL0ZNODVaUkV6WTRHRjhUWVJXeVpJNjFMeFRvU3RUam0rME5wMG5UUUFQSC8rSUVISVMwL3NKekZhRzNSc1FqM2x6b2k3cGZHVUlpWkp5cXBmM0grWlpqZlNiSlRxSHFSbnlXQkxiSU5sbW15MWZBNjFxbFZseDI5RENubG55L3FPQ1ZJN1NWeW9rUytvZXpQYkxkT1k2WWxsRk9jNjJpL1lTNkFTVHR3SnJmQ2hqNi8wZkpSSi9sRWJJM2x5SGJhR1Z0QkF6eE5EcTdmdUtZeXBoSDVnNUNrcTNmRnlSMEtFTzhRNUdjVkVTaGwzUEg0RGpwNjNiRUZZNjZoZnQweXB4VUFOOXR3RWE1UkQyZ3g4aFNpZjEwVDBwRXBqbi9LZ3BJaUpjY01iUk4xSWttZGx0YnlFeHdZU1o3d0gvMlpielJ1bW9EejFDUm1VNkRteGhSQldHSk1za1FUQk10ZkVnNSttK0hHT0Eza3U1ZmV0N0xlTnh5NzhZN0gxMnZIMFJwTXVTTFFnSlZwRkF5bGNsOG1YM3JNdldXME5LbTRTOWlKWWFFd1IxN1R3alRiT04yOVBsYUVSbnloK1JqSm1aWTRySWdiQ0ZOTmJHSFFFT1UrVXlqRlViRXRYVE9OZVRWbWM3Vm8wU3pEdnJaTGN4b1NUNTJkUGxSdnlKZTVJMHNEMXNNUk1vcmFLOVJaeWQ4NEg5ZW1WOUpBQUx5TlFkd0RYNStKZDhIbk9hclRGQ0NiQ05DNlZtQklCRHZtZ3lXT0xWR25Oemc0Wk10SkxidVg2dFV1QnFUNExpNk50M0lkVnhjLzBGMzc5YWxpYml0TVZSV3drRHhrRkVoRkJoZFpNaVhtVGd4RzUvYTJTRVFYMXJFMmZvM2hYNzJvS2Ivc0JDVWY2YWdhcnpObnRkRndZbytZU1VRYTBSN1N0V0dZWGZySnEva3duZ1cyamZlZlVISGhIeFJlSmpaRGd2czdVenRMUkVxU3ZRZFJNWUM4VlZsWG1GZTZ1empLSEZHbUdsaXpPcEZhSitlTE5EQUJibjVBaFl2WFVETVNyWXQwMlI2SDg0Znp2dE11ODlwbUtVZXdzUFhQakt5T3RxQS9OWWVyM1FPVWYwTU12dU9YV1l5R0JIcGEwYTM4VVJ5UDRETW1hNnlMSk4zYjI4c3JJK1U3RkY1WkdIZ3V1N3R6dTZQTGRBaUZ0bEN2Lytjb1FOVkxqM0JYNVlraUFYUWZ5ZlJ5SnFMZXVLQ2pZWng0emVkUVFXVml1bm90R0VYVlQ4Unhkb3pEQ01PN1F2Umd0R3pJaHA5UXN1VUh5RTk1RWJWRkZNZ0pvUmZkQ0lCYjc0L1BuR1AyYThtSEJvQklZOWZKc0tCZ0JRRExpUmN6cDhxZXdwRTN0ajkrTHhRMndwYzd1MVB1VE5IUjFLMzV2cmtSSVFwcEpVcFV1bVNYNnNYaFo0dFE3cmMrU3lVNGlXMUVpM1Bnak9Xa0FDZEF6cmhVN0swWnFVMEtSZ2d1U1JPRGxPZ05NaHgrSHNqK0c3OXF3WVVETThJWWNIcW11bnJiZWx4YkZTMW1CSFZkS0F4ZENZYjVXSEZEUm5YeEFKZkZIRVhOUHhNSStLcXhocXgxVG9SQko1VzVmTi81eTVvRmptazcyVzZwYWxyZzhLMEI3SHBNVERhejJQcEtXdGNkUHVXblFmb2xyUGlkVzBhQ1VxYTFtQW5Nd1E2aytJcngzUHpSb0ZuZUh0akJBNVJiZG9VeHRjRUp2VWVTNTlHMmt4NWY3SXR2V3BUb2xCaisrbzBKdmdxaUlzaUMzdk0xZmVUa0lwMHdJWGFZR1RUeWFROU1UeHNoM0FSa2lLTjljQ0t4a3dZVHBqcTZFaE1ZcHhBZG1qZ1dKdk5VVCtySEhzTTRzenFXNEN6dmlzNENpVWpGbkF5bjRFbXJoNXZlOHVkc3EyL3UyTWNqbHczN0JaSVRPWkU0R045S2JvY3JMVzA3MFZ6d0U1WVg3WC9ML0x1Z0Q1c1lEbUhnRm5QWTFLWGVnZllXbWQ0R3FnbXF0M3UxeWZkMlRYVTlnWGNiZ2hUSi90eVN3REZISUx2bzJMcW85T2tweVFIV0loc2hjaGVtRDErdFZXZWt5LzQwNCtsamJ4c3ZBbVY3dysrcURjaXptSk52clhVZ2xOTi9rblU0YzF1WHZGNCswMUdYQXVTUVZGc0s5SEs3OG9TWFBDZk9Md3NRMlZaVWFKSU9JZTU4ODd0VXNsMjlNNHIwYVozek1qN3laTThPRTlrK2ZyeTFQNW5peVRaWCtxNWtIVDdRem5Cc3pIVThVUjVGVUlpY0c3ckRFbnp5ZnVsdmlOdENRNEpSRTc0WnFJeU9zeFVKM2VaZXlWdVA5N0NOaEsxVW0rS1ZMWGNQbEhRZzMxNTJ5eVo4eFA5dVgvMWJ4dWN6K0ZZWEZDb3Z5R1REeU93aW1zaVdPcy9MQUQ5RzVidmJBSGtTYmRRb3VybHhVcWlJcTBsSnIvMGRvVUttT2pVcERaYnE5ZHVFSXVWOGlEVVVKeXBsMzdEOVR6Q0dReTlydVdpV25TcjN6M3hkVEllbWVVZFpwaUtBSnV1VDFsR3dyTlFWMW9Lc3F5ZU9mTXM4aVRUak5idnNxUUVIcHpmMDA2aTBIdW0rVHk5NnM5QmdocHBUSmNzdzVvRU9POHp2bGtNYWlSdmVQQ2s4QmJjaFBHeU9wczkzOXRyNTByNXRRRDcvS3RNeEI3Y0Q5VTZoQXdKU3hvSnpWNzdhK2Fud2t3aXJOakxndDNLU3pPQ0ltdE9VTnlhQ2pFUS9FNERlNFljWEFpazdBQ3YvZHU4S2Z1aXRyM3ZPQm02djI4VnRBdnZvYXVHYm9xaG5sVGJpWnd2OVhrQmVSd0RoNVg3R09OdEhWQUxMUTY4KzZucWZTNVB3NVNiaU8xWE1BNVQybitqajBsZXVIRktwWWZHY2FscExCbHV4Y0VCK2tSMkxySmVRMm0yek5BYjkyWEZjV3o3TXZ2K1FzQmF6Ymtoc1NEeExzSEVsWlFjUmtXN0Nvb2RKWSsvb3lnZ29rR2NWQnFJVlkwMGI0cTlkMFp5RG1WYTdzbjQweFpuZ3hueEMvdEY3eS9maUh5NFI2Q1FMZTEyLzVnZEtWQ21PWUJkck9hTURVbGJ1cWorYmVPVEptZzJVc0U0TG5ENERsWFR5eWpGNE0wWGZmMmJDUEJMM3ptZGdmVnVCSlVxd2dpVTZLS1FLMjk5T21YdjVKYmp5N3IzYzQxblZENm1reE0xcVN1MTZVVndRRUE4TURoNWk3K1hrVTgzbHZBMjZIVUgxUEpsTUdWMXc1NG5lUDZaRURZS2IvR3dFUDRCNkVOcnc5UUVNMUJaaVRkbzYyMEdJWUpyRFU5anVhNUJsSHlYZndNOHZsQStjaEUzVXZyODc2R0xQWDhNaUpoKzFnRjZZMGxKUXF1Zi9qSytHVFNFMGRuZXFwR1B4ekxRUnVMMy9ERFBIRExzN2h3ME1wd0x5RVgrTld0V2sxSTd2aitQK2c3TkJSUEJ3U1gvRWFWRkNFSlB3ZEpQMTNNVHVSMmV6ckt4TFJxMDRpU3VBQ3Fkb2hCTWppQllMTXNUNFA5aXJzMDBoQjRMN3kyMVJrcUxzL2F5MXc4Slh3Zz09Okp1SEd3bjYwQzNINC8xanNCalppVERsTldpWDJ1c01rQjh6OUo5U25YR29SaWcwRVY2dm82NktuZDFwL2lWUnBpWlArb3Z4bHpuUE5DeDc5RXh1VXF1WlJQZEcxWkpZNzZtb3gwTDFneXV1b3JLaXlWNXdGQS94VnZlUWNpT3pIdkwyQnJjcVM3OEFWNGYzSkE5L2U0SnltM0tOT2lvNlJrWVRNRGw0Ymh2SzF2eEhCU3BjcGFRcEZMM2lXNzN5d0dlRXRKZHV5NVIxb2d6UGlaQ2doNHV1b1FOUk5ZYXFPZ0twTmtJb1NKUjlodzMxMkNQeHYyNkwrYXBnZDJHVWk5RU9kam9nckxCUWI4U3dtU1ZRUFg5YlhIMUpoUjRULy9BK1JVM3JaRDlsSmZpcmFZd1NsYjVaNGIvMjFEL1JYQnRoTFNKVmV0MzkxVEJKcFM3OHdBUT09"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://leon-italy.casino\r\nset-cookie: shd_persistent=10295e4a-262c-4d0c-a10a-7cc1cbae866c; Path=/; Max-Age=63072000; HttpOnly; Secure; SameSite=None\n__cf_bm=CZ4kTiGch6SeHIYwoYHodROl85uQYewQkTYqU2coS9o-1767369938-1.0.1.1-UycN9xf3pkNMjqkDPmM0uwM4oJ_aCBFPNEsvWRNrj6wrvVUUpODIXzsDwiWVK7EkwUh4PCTxPvTEdVknNM3hFmecwueeuZ5KH5CrSomNnH8; path=/; expires=Fri, 02-Jan-26 16:35:38 GMT; domain=.csftr.com; HttpOnly; Secure; SameSite=None\r\nx-request-id: ffe7f2d9-1f97-4de6-bdb7-44d689776bad\r\nx-envoy-upstream-service-time: 19\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b7b7fc3781b56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa1a29f2c5577797ab338f471373258f","sha1":"c8b97eb04c699ff27040e80fc96ff6dbc77ce70a","sha256":"8ae7eeb57ed96d46c7d3a42966a141f01069b0864b8d8e2e45c33f226ebb90c3","sha512":"134cd34a760b6ce899139c3891dbddc748601f8fb0bf70780a38a3c926c922853e53e1536806ab7e8a1334f7b138e0b23e179b926b93100420d68649afbdf735","ssdeep":"","tlshash":"4ae0684407ec68bac2b78646a6053e547f3905726884341cd8bd8a5809e3682322d567","first_seen":"2026-01-02T16:06:23.437741Z","last_seen":"2026-01-02T16:06:23.437741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":32,"dns":8,"connect":1,"send":0,"wait":82,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/moonSw.DTmx5t_S.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/moonSw.DTmx5t_S.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 209\r\ntraceparent: 00-921d3af38e32c5aa88bee36f8d7af62b-6dd57a1b52c66b78-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:03 GMT\r\netag: \"68e7b33b-d1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6327087\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f673be269667167e50ad29b3c8d4ca22","sha1":"1884d32e417962d76ad00b4b342243ee5c5ee813","sha256":"1248692f89afc35d90d402e22d5db4ddccd51391372bb1db5ecc317385255fe9","sha512":"0d12c27d1bcd3109bccb82f486e6b817aa7f9c14290c8979d68d4ddb5b8443f7c73a83d478cceffbd14e6aa8c83437863b4befabcbaf2a7a492c946e7fb4acca","ssdeep":"","tlshash":"00e07df24689880c342bcd72575146a523cf00fc346808e6d5ceca7af0c7a94e61bd44","first_seen":"2025-02-07T04:57:00.93733Z","last_seen":"2026-04-05T09:02:54.878332Z","times_seen":106,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 5434\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; shield_FPC=SChTauQUdcc6F0pzFyIkCuxuq48xxDfya8; _ga_JZZNGY93CC=GS2.1.s1767369938$o1$g1$t1767369938$j60$l0$h0; _ga=GA1.1.17336208.1767369938; pixelsink_uid=174316bf-745e-4689-ab81-a4ca9e04cdd7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5434,"data":"[{\"id\":\"e2dbdfab-3f21-4435-9564-2c446b1daeb4\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.128.2\",\"level\":\"ERROR\",\"line\":0,\"column\":0,\"error\":\"YandexMetrika registration error: config={\\\"counterId\\\":71598811,\\\"isDevIP\\\":false,\\\"accurateTrackBounce\\\":false,\\\"clickmap\\\":false,\\\"trackLinks\\\":false,\\\"webvisor\\\":true}\",\"file\":\"\",\"url\":\"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\",\"ts\":0,\"stacktrace\":\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js:1:2713\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:4:4291\\n_R@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:5:2092\\nonerror@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148548\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:1:44334\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:1:43597\\nBo/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148688\\nBo@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148279\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:150020\\nregister@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:150599\\n$o@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151560\\nYo@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151223\\nm_/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151496\\nemitFrom@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:1:24327\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:1:24196\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:91\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3777\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:2836\\ngo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3248\\nsetTimeout handler*go@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3183\\npl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3995\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18235\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18305\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52331\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53325\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53538\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53647\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52062\\npl@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3953\\nIp@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:10:109140\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1283\\npromise callback*g@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1262\\nasync*@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1315\\n\",\"payload\":\"{\\\"name\\\":\\\"_R\\\",\\\"message\\\":\\\"Script failed to load: filename=https://mc.yandex.ru/metrika/tag.js; message=Possible cause: blocked by an ad blocker\\\",\\\"code\\\":\\\"SCRIPT_ERROR\\\",\\\"metaData\\\":{},\\\"stack\\\":\\\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js:1:2713\\\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:4:4291\\\\n_R@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:5:2092\\\\nonerror@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148548\\\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:1:44334\\\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js:1:43597\\\\nBo/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148688\\\\nBo@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:148279\\\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:150020\\\\nregister@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:150599\\\\n$o@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151560\\\\nYo@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151223\\\\nm_/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:151496\\\\nemitFrom@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:1:24327\\\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:1:24196\\\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js:2:91\\\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3777\\\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:2836\\\\ngo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3248\\\\nsetTimeout handler*go@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3183\\\\npl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3995\\\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18235\\\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18305\\\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52331\\\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53325\\\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53538\\\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53647\\\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52062\\\\npl@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:6:3953\\\\nIp@https://leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js:10:109140\\\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1283\\\\npromise callback*g@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1262\\\\nasync*@https://leoncasino.gcdn.co/js/app.CMuWNRWF.js:2:1315\\\\n\\\",\\\"silent\\\":false,\\\"interactive\\\":false,\\\"cause\\\":\\\"null\\\"}\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d305a712abe9e4499b9e65c55471be4e","sha1":"5eff627aa21f44b2cf9160d4c8e44203f7cd0411","sha256":"f518a449d8aee1e0f0646d96408e344b7777a0e31cdb1b696a2e12d0aff53ff2","sha512":"23f69d0e4cffaf60ef37b53d6b93805a5f15c627a3b2e8152bf9ee383d055fdcebb33dc01a597486bdae4016f6b57bbd761b5459b7e505705bb07390e48e4f69","ssdeep":"","tlshash":"c6c092887856c14b4d49ce8bae36de11eba8b0d987446d148af8a50881c5a6c2e8bd62","first_seen":"2026-01-02T16:06:23.440367Z","last_seen":"2026-01-02T16:06:23.440367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/f06cd424.Dd74Yc_c.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/f06cd424.Dd74Yc_c.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ntraceparent: 00-bedbc236d215d672f55c8bfd65404a2d-4ee6e72779ffca06-01\r\nlast-modified: Sun, 14 Dec 2025 13:23:19 GMT\r\netag: \"693eba47-1ce\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1523496\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-16T00:53:46+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1431)","md5":"6cbf540dd2a6c89fc9e82a987e8c628f","sha1":"4370f7b310a28065a6f37b039edbb6ab60f7c577","sha256":"f3cd42fd3531448a70732cfd5b1b308395116a6b0e199d0bfd4e4b44aff806c7","sha512":"0c2f430ab4002f2839fe83266b95e826c9f27bcea6a1742f58bb3001740b32e6b523bdd43c18d3a3484a5b8e2f7af52ad5a44e9bbf39d2b4daffa8f8194ffc35","ssdeep":"","tlshash":"05219ef3054de1394807b68b6470ca4ec52ad165ba6b16b812ff712f41cfef05e116ac","first_seen":"2025-09-19T02:19:58.389648Z","last_seen":"2026-01-05T18:44:37.74079Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nContent-Type: application/json\r\nX-App-Version: 6.128.2\r\nContent-Length: 47\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"196\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-7c6169003e4cb2abbd067621183e8690-fd301ed64f9dc58b-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: \"68e7b338-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6336472\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T07:57:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-04-05T09:02:54.833827Z","times_seen":158,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.Dn9W2zzb.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/ce584242.d.m.Dn9W2zzb.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1640\r\ntraceparent: 00-eff6ed88f8207eff7cb552ddcbb64469-94dea78fe4a7e043-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-668\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303514\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5333)","md5":"0bb624871c476cc9448de8d6d76c6092","sha1":"e6bfb472c08a75e86feaeadaf311d6dd065e7292","sha256":"c8f0142eca710c0037be63229442e73763a4af814baa771167ed8b579da19e66","sha512":"d0ce80810a873df0192e4cbe4ac62a38b5891c3530f22f7806d756579b7c85c7b4ec3d1f124bd7d9a0b8a313ee1ad0988073ac147686a2847259ee041f957866","ssdeep":"96:Y0JN+a+8Toy1lF0KkUZ0Fk62QJ9uy8SisBBGRX:YQ4yDvCKYk62QJ978c2RX","tlshash":"52b1120b7625f3f986ad2a28d9c422305a3d2fcd631404d1eafec0197249679c5b5bcf","first_seen":"2025-12-20T03:09:17.529877Z","last_seen":"2026-01-03T10:01:28.303475Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.Tzri-LZp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2491c3d3.d.m.Tzri-LZp.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 728\r\ntraceparent: 00-930f07472a1f32162f1fd7972a147ce4-e44001a78ffa9a87-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2d8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1845)","md5":"5b8d69905f1747be711fabb9ab3bd169","sha1":"4ff631aa01e9e892af42c2d9971d2e95dc06d86d","sha256":"73b175a8301195d1ae4b77c095a940d8e32e954a9668e4a7df479b8144c16648","sha512":"7d7488024d3e432efd1eaf59b84ca14bb051cc6d3303c75af146321a19044f85b9542ee590b9675ddc0aa489091d74b9a90af9935e7b80511659c9a350de7533","ssdeep":"","tlshash":"764146ada464ba765643c5a8f2644053213b36f3e284085c7bbd3ed9c3ef541f261b36","first_seen":"2025-12-20T03:09:17.583092Z","last_seen":"2026-01-03T10:01:28.304172Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.5CrZ84a6.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d39bd125.d.m.5CrZ84a6.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-36b59d1db52875af05cbe396ee72af15-0788ef19d7ff7cf6-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-7f01\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16458\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32513,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32462)","md5":"884a1b0b43a0ae1cb61348c3174a9e32","sha1":"55e822b78da9e0119e52afd6347b8dcca2a08d98","sha256":"ee6e6f58369877c9768eaf201befd7c1a65ee2552a144039ba96ee787dc7b2bc","sha512":"67c9b262d498cf732ef29907546cf7888718f7dbbc956a49500bd05616e00208033c513c8d1641d6a5215b46ecbc10fa5894124da606d1427bbdaf32063eff7a","ssdeep":"768:Q6/vLQXAH+dxsPZYq5iFNokZrOEbHJULQMB3ZeaYwy9aOgWC/:rHLQXeiFNo/EbHJU8MNZpYwZf/","tlshash":"c9e22b2832a57d3181abe5bdd0a1383055294a5a92134ec0b7bcbb7552fe9b94337f0f","first_seen":"2025-12-20T03:09:17.612678Z","last_seen":"2026-01-03T10:01:28.314488Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-jackpot-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-jackpot-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7254\r\ntraceparent: 00-bcef4186114c0af153dfef3cc0d4cfc8-1b9105aa245f7a7a-01\r\nlast-modified: Fri, 03 May 2024 13:47:51 GMT\r\netag: \"1c56-6178cf7491cfe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4570ae06b8ad61194283284076493ee1","sha1":"49664b96846ccfc818cf2dbb254d1e88a9f80080","sha256":"fe94ea56b20d7c1b1f1822d1f8c4033e576bc98c886881a51a52e6b5601b2cc1","sha512":"f639b70d1d94856da07411783f7e6bcb653d0ba03111bd072a6235e923d4622ae84e1b496666bf0a503b24f05c474d7e8651aa1447986760f4d8e4a68995ec0d","ssdeep":"96:wPxQNjGPj5YZFIua0lo616bJ5XWq65F7UIcGcYafN+FyXl8fUFi+n91Mj/HbuhC:wPvj5YZh5NyNWq65F7UhfBiiM/HbuhC","tlshash":"f2e173eb66e475e48a40eb90d9272c65f19f247e7f338390c340d7a1a6a44f84f4e8d8","first_seen":"2024-12-31T04:55:51.407987Z","last_seen":"2026-03-14T07:22:16.736618Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/cnjqphyx HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3157\r\nlast-modified: Fri, 02 Jan 2026 15:12:15 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Kw4TkEDcKykV0IXW2reOCXPiteAiXuT1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 02 Jan 2026 16:02:20 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"3451d957942f4388d114d88a898fcb77\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 5Z2s5bgBF1dFZvacPfAAV0guryKR9krM9oSC-Mh4wYaib1QXN27-Vg==\r\nage: 200\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"40c4c4e55219263fe4df7152228e343e","sha1":"2cc17572360a509d764cf051510e70e0cee3f4e8","sha256":"96b3c8dca206c36e199bfdd5d31bf00326f909dd3847ce767297d6b89b6b78c6","sha512":"ed32fabf2876dea0c517d51c2c5cbdb126e066f01cbbc245ed2c03722ed31ee9486c6bc982e5b4273b6f3832908164b23ede9cf0786a90d6ddd4e7137d7f35f9","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpG7yo31WOzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOdoYOMSdZ935pqUP","tlshash":"75f175feb6c2793806a71576623b770c7f3b654428494490d065c8c87976dcbc12bfae","first_seen":"2026-01-02T15:57:29.706959Z","last_seen":"2026-01-02T16:40:42.960435Z","times_seen":8,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a48612de.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a48612de.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-b0675d8c4f3ab3f6c406367ca4047e07-15d82b2db0c0ff82-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2435688\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T11:30:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BkBx2rbZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/5f62684a.d.m.BkBx2rbZ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-14bd31e35928a6a4b6b0be84cefcfaf0-83da4aabb77ad9ff-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-6071\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13470)","md5":"fe1e2e0d470f50d85d90b6b64376c086","sha1":"d12d6111b6aff5809cab6b7c7322cf50dd137cd3","sha256":"d9c01594a2c1349a19e26d9cdbed915be6bd7551266c1debe191e10ea766b63a","sha512":"3ce5c3ec2d10cc5e9903a6d65d172143676d4dd98893cd23f0156d062932e35cedc68c80dc6d2c83c299794bcd8b040d2f2febba43eaa2fff170f11a2fcf03c9","ssdeep":"768:sxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDH:CYVEx+KqM+7rg8DH","tlshash":"48b2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","first_seen":"2025-12-20T03:09:17.577699Z","last_seen":"2026-01-03T10:01:28.253143Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:22 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537787\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-06T05:46:53.19078Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages3.gcdn.co/HRJLWPLB/files/top-nav/vip-ic.svg","fqdn":"cdnimages3.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /HRJLWPLB/files/top-nav/vip-ic.svg HTTP/1.1\r\nHost: cdnimages3.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-3ec39f7a79cbe60d6b9bb12d0861f3bd-d9486a2994570fb1-01\r\nlast-modified: Mon, 29 Jul 2024 11:38:11 GMT\r\netag: W/\"106a-61e614bbda1cd\"\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 257379\r\ncache: HIT\r\nx-cached-since: 2025-12-30T16:35:51+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ef082510b46a6aeb00c0df559b2de18","sha1":"b483a67c1a80a1db0afdd67246d5faf47f846f42","sha256":"155705ad90a321b396a52fbab695bc92f9a2046aac18371fb9a172657e97c2a6","sha512":"b23cde6916243bb8bd8695e5a97722d815217395a2727cd39aa9f459f344b88c951a260a56557d6bab22af21307f9765e408b8f67d310970747131cd6fdb2d11","ssdeep":"48:e8O6IHpZU+i2/zId7HoWsiN0thXLiJpwO/b37IvgFLQLZi/hABNFkg62venBHcA2:go0kMWsA03i/bYgF0I/hABLkrQeBB5K","tlshash":"c681892aa144d61d5883e24dcbbf91e1134e4066f1ea92dc7affd3aca10f4d4f946834","first_seen":"2024-08-31T07:43:54Z","last_seen":"2026-04-05T09:02:54.888889Z","times_seen":109,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/table.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/table.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2051\r\ntraceparent: 00-74e63e45055aba65fad8d1628ff580d4-39d94ff99504f871-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:09 GMT\r\netag: \"803-61bf3666cddb9\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4739eca3bf889f229641c474aca34a5a","sha1":"275e4368643608ce9466984958ef31f8884495a0","sha256":"533cc1795d0f8c05ba575368c4a1d156021e74d1e72c1e48f6a54c1f9c8c7b06","sha512":"7f012c42f67d4577d02227fa0e9ef5d7cd4be62762f17a67edd0589e4959b4d65ee617e75384af07749832ba09c33c27bd402a76adbe8be5c22c2b3778525da2","ssdeep":"","tlshash":"614154f2e3d480ecce07d360d937b8a63a6e5cf9c79b8764a041f680b05969549c8d84","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.242854Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/slots-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/slots-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1832\r\ntraceparent: 00-7dccaaba84eb85f07a63cd059601106c-03399354294d30d9-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:39 GMT\r\netag: \"728-61bf3682e8cd6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64ccc1ab66cb91bd441d3cb46cd948b","sha1":"9608b42a44b67da4be82d09c933f09b5ea3110cc","sha256":"1ae73f949ce1ca94b58f32ac5fab711d948e93073d8432e06228d5dc3a69321a","sha512":"43b77ebaf033ddf4d15d21492facc9ad846cbf57ebe6b406193891a8f029340c10f92bc5ff4e6ea165342aa0cc36037bcb7f086fa38d85d054e06f0a98dd7c7a","ssdeep":"","tlshash":"be3100fa97c0bae4f04bebe9c439d5a9729f34f93fb492810144a788b75506d8c8de04","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.147581Z","times_seen":62,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/playngo-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/playngo-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4058\r\ntraceparent: 00-12f842583ba3cb9dcc73ac5c16f82006-5dce0f551b32129f-01\r\nlast-modified: Wed, 05 Nov 2025 12:40:59 GMT\r\netag: \"fda-642d842b1b8f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 07:55:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 201973\r\ncache: HIT\r\nx-cached-since: 2025-12-31T07:59:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd546e671acbd8904107f0a12ac564b7","sha1":"594c51208445a8a0350a0685744afddb7e20d7f5","sha256":"1dece0fa8fbd1f198d0c430a18a735fd44114f6d7ca896870682f2287a712e0b","sha512":"57024c021efc18027ef79d5143379a6d622195a79ce5eaf7ebf2465538ac73b7dd63b92b849158573da21df26d49733ac6e32c601b2517d9560042a1bb825ec6","ssdeep":"","tlshash":"e48142deaf5896f4f149a3b9661ad07bbf4305e56f818968cf140f07b80489c5ca84eb","first_seen":"2025-12-03T23:02:23.146767Z","last_seen":"2026-03-31T00:45:46.1678Z","times_seen":23,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.BAcgzTvt.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.BAcgzTvt.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-dfb55251028ac67233cfb87aa6d17e4d-610e65d9d202bc31-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-174f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16459\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5967,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5916)","md5":"c1b80461b89d40e24f6902cf0fc98550","sha1":"68451fd065ed14d6a5eba9d2ee737a013242bb4e","sha256":"a4a010edbc41c9578a1e0dfd9666c36b642ca785dc21fdcc7a563cbe764ea6ff","sha512":"c83fe841d06831e171414980a258d036fe33ffb31ede92e2a0d293808a4cdcf8b96a3458b49e2fa302cf3bfe4eb46109556ccca58860f1f6905bad02f11f141a","ssdeep":"96:ftJnqGgAaycByHKC5mTsOURWSwmSiQ5ZpJLZejQg4sc9GDhDKTAoExk0uIOVPIMg:TqJKAAZqmoztVxW2lgLJwsmKWa9r","tlshash":"5ec1db9d7fbea13115d949e160aeb047d33950d8f019c061a06caab83913ede89f7f4e","first_seen":"2025-12-20T03:09:17.55371Z","last_seen":"2026-01-03T10:01:28.31875Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fb4472f4.B8JPjuzh.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fb4472f4.B8JPjuzh.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-c52476a94849e77cf97429ed6c52ae55-3cdd2d4239888665-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-1f7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16458\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (502)","md5":"410b14377b050450a589c7412599323c","sha1":"861729bcfdaffd5e3e3a9513319a1ea8df0c9da8","sha256":"1105e16f27b75f5d90f31b036bedc1e82d1b0a480da3b85f1aa81fa30a988ac2","sha512":"0027fb899fa855187b7bfe9d683ec7275a497a5b7cf45cbbd1e5cfa6af96dead9b77bbed87ca5e4d97471050018c42ddf1820716a3d0c741d07afd431a6026fe","ssdeep":"","tlshash":"a7f0b4d50d406b3bfb37688ec0e3359163499d11e18245899a50187d0ea434241b1a3c","first_seen":"2025-12-08T11:02:52.76845Z","last_seen":"2026-01-25T14:09:20.094523Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=174316bf-745e-4689-ab81-a4ca9e04cdd7\u0026\u0026timestamp=2026-01-02T16:05:38.380Z\u0026fire_id=1767369938381-de0feccd-82b6-416a-9caf-dce57df8b050","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=174316bf-745e-4689-ab81-a4ca9e04cdd7\u0026\u0026timestamp=2026-01-02T16:05:38.380Z\u0026fire_id=1767369938381-de0feccd-82b6-416a-9caf-dce57df8b050 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ncontent-type: text/javascript; charset=UTF-8\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon/favicon-228.png","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-04-05T09:02:54.909985Z","times_seen":118,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 483\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":483,"data":"[{\"id\":\"031d476f-d9e4-49f1-aab3-4b05c07b17e7\",\"qKey\":\"feb2448d-302\",\"operationName\":\"getSearchGroups\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"3a41fabd-710d-4793-b8b6-16a5cfb36d23\",\"qKey\":\"f48f5ccb-276\",\"operationName\":\"getEgsCategories\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"f49e6e42-b91e-40ba-a2f3-05319b9e86b0\",\"qKey\":\"ab83c8e6-3794\",\"operationName\":\"getLobby\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"sportlineFlags\":\"reg,urlv2,mm2,rrc\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":907645,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8403049b1c2e58584933b39c65d712b5","sha1":"cc8da85009804e345ac1bcbedd186612e73f4e59","sha256":"fc7ee1a444a172480a79899ea7665e0bd8944fa133886b4dabf995df5647e1fa","sha512":"5bcbd66cb32e8bfa5d8b87100c52439cd886fabd4b3ad92d6e48a0b3fc6d0029311c780d925b9af306f712140848220eb17f040ca9b31f5a844fe6e6efd9d093","ssdeep":"12288:rTPT3SAH8T1Le9YdynTjLe9YdyOTwThT3:rTPTmTgTvTwThT3","tlshash":"8315ee7b6688782fc38953943caf38c8a21e34177a40e756b31e59654bb4dfa30b719c","first_seen":"2026-01-02T16:06:23.455173Z","last_seen":"2026-01-02T16:06:23.455173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369936822\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=10476","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369936822\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=10476 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":48,"dns":0,"connect":11,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=17336208.1767369938\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026z=1078852783","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:22 GMT","end":"Wed, 25 Feb 2026 15:59:21 GMT"},"fingerprint":{"sha1":"E3:8A:B3:9D:E4:8B:53:E7:04:0F:DC:F1:FF:B6:DA:2F:A5:13:E7:D1","sha256":"3D:CC:25:A1:DF:57:5C:E5:5E:62:8C:3E:4C:9E:BF:21:67:03:6E:09:DE:4F:C1:38:17:4D:91:E4:81:A1:1D:6E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=17336208.1767369938\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026z=1078852783 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-06T09:11:51.53597Z","times_seen":772245,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":99,"dns":23,"connect":7,"send":0,"wait":23,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:43:04 GMT\r\nexpires: Sun, 27 Dec 2026 10:43:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537745\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-04-06T01:21:32.009624Z","times_seen":2434,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/other.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/other.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1220\r\ntraceparent: 00-6854a842a7b588b1a4d18d8b7201ff20-da646eb93f43d1e5-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:21 GMT\r\netag: \"4c4-61bf367262f3c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04de3fb1fb28c7e3a6d905cfaec4e513","sha1":"7823b05f9bc9f0a16145f9468fc8e5df9d573ce6","sha256":"3c584108e1d8685d12332171f34879003c01a21d55ae5bf753b8e034bc020e2c","sha512":"f1c62e53cd1d6d4e3a72345e59903656acdee191038db1c1f7bb85d0763d785dc98f414531b61161aa045aa575b6dc52a95117c893a158d43f2ed8c7871b00fc","ssdeep":"","tlshash":"f121e0f196606350a0099b6fba2ab56271eb3cfe3e624dce93e0fe1210050d98c4d986","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.257946Z","times_seen":58,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CMuWNRWF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 827\r\ntraceparent: 00-2dec413092036d49d0706e58a5740f3a-ff6b485775e6dbd5-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-33b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303510\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":38,"dns":8,"connect":1,"send":0,"wait":1,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nContent-Type: application/json\r\nX-App-Version: 6.128.2\r\nContent-Length: 34\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"metricType\":\"TTFB\",\"value\":\"76\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369930884\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.event_label=Country%20not%20allowed\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026tfd=10520","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369930884\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.event_label=Country%20not%20allowed\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026tfd=10520 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":56,"dns":0,"connect":20,"send":0,"wait":27,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/relaxgaming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/relaxgaming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8614\r\ntraceparent: 00-8964090c11dd5f6b6059f344504eede6-a8ed2f958eb69fb4-01\r\nlast-modified: Mon, 07 Feb 2022 08:56:54 GMT\r\netag: \"21a6-5d769c83e0ba8\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 24 Jan 2026 21:21:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 672240\r\ncache: HIT\r\nx-cached-since: 2025-12-25T21:21:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8614,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e86876e277d57242e3f3373702a465a","sha1":"5ce1072f579aa8d8253823d9ba9055af6ccb9019","sha256":"ccb89eeb30313827e5a41e1a154817c14e05c1abeafdacee077d76cb789bd4a3","sha512":"44147e2200c4bfde425aec490e37cf5058b083242b1522f194fcf796f7920729cc4eb90a64d712079fc64a42b699fdd2092fe022882e2f1e2b70aa80f07e99d6","ssdeep":"192:4w/gfQqBQycfTV1yhroh/gzWS+K2vBnpQRmofIgpZAQzH:AfQqBHcfTV1BY4StH","tlshash":"bf0271cb335e42e9f10663fd401741747e6aecd2ba81da61c3486d1bbad286c6c90cdb","first_seen":"2025-09-23T04:33:55.389849Z","last_seen":"2026-01-05T18:44:37.753945Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:36.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244237\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-06T05:41:43.026681Z","times_seen":56222,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 247373\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T09:11:35.796356Z","times_seen":718361,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.CbYR40R8.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.CbYR40R8.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-caef3d989208c2e494d64a62a294e4d1-f0c4e77a5ba6048b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-1e481\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eceb615fc6e2c7c7d59e1f65d00a686","sha1":"f4ec48f6cda4262c372bd2e8c2e4b08c0a057c22","sha256":"1d34801f854a544218192a107303baa8ee5f3b727a6db519213b5832c04c6f46","sha512":"59d3b06590f05ddabb5e970129011f4811dad4c9a5f76c54deb3f2cf014815ab9c67813b4a634b08e82e25e7d7878b22b37cbf55b2d030e5b6353dae04678513","ssdeep":"3072:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10k","tlshash":"7bc3a8ff8e50a27bf767ec9dc3e5b648724eac03cc921d66d1b212ac42d63919394b05","first_seen":"2025-12-08T11:02:52.82182Z","last_seen":"2026-01-05T18:44:37.843621Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.BLXpMgS1.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38391\r\ntraceparent: 00-4979adf89f4fcfbfa34cebc2575f8486-ad678eaf6ad5909d-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-95f7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 841330\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-23T22:23:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186466,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (52553)","md5":"9880decbec604ca45dc8c1313fe71636","sha1":"a3193da690b564fa4dad3a83857b36f54ad69411","sha256":"ba5c354fc590490855811c9578dfd1cbe500597b6d3b31536e5b86914fecc3f8","sha512":"506933e7caf71549d5cfe89c98f01723723b549ba6184686b4d2a3b5423170a0a9652200825e7132014d65e9d89500893cf76291878f616b71d9109a4a689802","ssdeep":"3072:G614onULeOrakzX/yYJ5SfTlJaweqMQ5I9BeH0WBtG:51hUyOrakzvyYJ5Sb1k9BeH0WBtG","tlshash":"8004fa166a4438ff4f710e2e5b2a7aa462330d98fa21c073d2b69f3e2f5b401f197595","first_seen":"2025-12-20T03:09:17.532066Z","last_seen":"2026-01-03T10:01:28.339038Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.FZtRXSGE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a538a99f.d.m.FZtRXSGE.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11557\r\ntraceparent: 00-1dd5e31ba25e2ab694f5d3d356f1a873-228084b0c8cadb0a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2d25\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"07d17928317370d7b2c48fef997f2bb6","sha1":"b664549db260bf66861f0e0bf48de12e190cdc58","sha256":"f14a776d5ddfce1775a316998164372c81fa0cca80b83baee9a68f46d4b163e3","sha512":"4b188c81ad1e4140f4bf58468e0d55a2665cd5e2b7f56ba3fb1527303aa3cd94752d5908396a0fc290ed94abad051dc981ff26113d9f35fa8a8e1411234e37b5","ssdeep":"768:Q61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Z:vzmp7QA/BPWUZ","tlshash":"8a03fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2025-12-20T03:09:17.536096Z","last_seen":"2026-01-05T18:44:37.799318Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/wiserpay-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/wiserpay-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26529\r\ntraceparent: 00-356a3e1f6fae712d17ec0ed4c1d8f8df-952cca3b8d50e3c9-01\r\nlast-modified: Mon, 22 Sep 2025 15:20:15 GMT\r\netag: \"67a1-63f655b4532de\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26529,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a27de659b3a3edc408674078133fc8ca","sha1":"40442f7b78ef16267e44ca235ead66fd329a3eb5","sha256":"6b7f16702e861ae2e0ab2414dbeed14c9f57582b333875975645454afdc2350a","sha512":"db8e5379137f176bd1f51ead57408b9f1964d0febc741636f6af0524ae0c16cfde68e94fe3eb161e927bb66689cb3077a1351c08a548ca2f290a91be47cf7788","ssdeep":"384:DDzNSTkwOxNGkozy+Z6uuEWNe7quDa2QJONlJXVmlfNvb/I6PsWDL:zwdtYWT7quD7BgfZI60k","tlshash":"ddc296f6b3e9a3f4b00af3e4981684757e5738fa7b56db998350ad94e70205c88c9cc1","first_seen":"2025-12-25T07:42:43.885768Z","last_seen":"2026-02-28T15:40:00.689997Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/playson-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/playson-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9145\r\ntraceparent: 00-41ee4901f12a732ff97717110e66c162-155d8116de0574fd-01\r\nlast-modified: Wed, 30 Mar 2022 07:52:27 GMT\r\netag: \"23b9-5db6ad3a46f5d\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 03 Jan 2026 23:19:26 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2479567\r\ncache: HIT\r\nx-cached-since: 2025-12-04T23:19:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1f134499d36d20d70b3f58aab002b63","sha1":"16befd4d66337d68a9d7b01cedefeef19060737e","sha256":"0bcb1cc873fe86a184304ae3bf51dfb62d9d28027ac9f0c78f1df94e11a2485e","sha512":"bf62dea7f37164a95ea5f45ae89a56e81c0e424578b2b45fc6e8366680bd0be1526b4058786b857e5c6c1480a59628a516072396376a709e63d6873ce5d8772e","ssdeep":"192:pQK8s2HSiydBG4FN15H+7NwlDwADjxRtBx+OcGrBkclEGTKC:p6hyiyj3rHxNBRtBIOccBkc5uC","tlshash":"2412c5dc1bb500bce180b7bbd703047eb54ea5e22e50af28cba94f1a908186ded55cc3","first_seen":"2025-09-23T04:33:55.355552Z","last_seen":"2026-03-08T14:14:44.242253Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/18+dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/18+dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2763\r\ntraceparent: 00-130d4a57ace9015fcda6c73a097542da-35c6f5e4aa2da94c-01\r\nlast-modified: Mon, 21 Jul 2025 12:15:35 GMT\r\netag: \"acb-63a6f6edbe355\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e9bdf84336ba2f0d7fd0116bbc47e0","sha1":"5f1882ed3aa41267bbdb1c083902955e2a965022","sha256":"2c0b2b2f7ac364b363a152aeddf08ad89a3b4043e3347cead0206158492c8a2a","sha512":"f59720c3a786afb91c58de81a4097faebb49e15008f2918805b041afa60d8e790d2296ccc3b01b008992ca92135c59135f27b7c5760542999f8a5c7089e9b5cb","ssdeep":"","tlshash":"145101efa7d4b2c0d807e3b094094a793adf287f77158744425aaee6fb02094484e8c4","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-04-05T09:02:54.845912Z","times_seen":123,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.BP-k0whF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1bb7e2cc.d.m.BP-k0whF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3527\r\ntraceparent: 00-eaa23e61ef209caad656977879f8cc35-238187b6c6f63ae8-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-dc7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303515\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11433)","md5":"36f6d0b22111f97c588506c7591b95d2","sha1":"5da3263f225bc1362133c928f7ecd6b1d38a3ecd","sha256":"979fa6f1d25cf02333cd9d2d40311a9b98b2116983a391dfe15a65bfca6d4d4d","sha512":"528c30580359fe289101a8275bf008e355799574df3e676759755d087398b458340488d2a30044f2534baaaf7dba2c12719d571af9779c9979b06fe29979bf3c","ssdeep":"192:VOAriZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrCM:0evFuABGBVMsZ//eEq","tlshash":"0c32459def68a0b204839c55816c70c3c5e994a0a2362fd1940d1ebafe9f565633fc7e","first_seen":"2025-12-20T03:09:17.576203Z","last_seen":"2026-01-03T10:01:28.230612Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-originals.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-originals.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1955\r\ntraceparent: 00-ea182679bdf26b91095186b7e7c48adc-d18265c164de3751-01\r\nlast-modified: Tue, 01 Jul 2025 11:02:44 GMT\r\netag: \"7a3-638dc157b9648\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 07 Jan 2026 19:26:12 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2147959\r\ncache: HIT\r\nx-cached-since: 2025-12-08T19:26:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"702b03a00b38c08b38d63d5ab58702ba","sha1":"bd5aebde1dc0e3ae5f0b6a6820123e1167e8b50e","sha256":"faac8568e1e3f31fd222cf39b2fd2bd2c3a23c3d00c008551edf1e83df355e78","sha512":"a616af84acb3a46ed9e01b77877e73da6688a36be4116bf2b15b01453d68fd9fbc0bcaaa0870e9e458e558e37020c59d970b7d919ccaa215aa6cdb1a34ef9449","ssdeep":"","tlshash":"ac4152f9d7ec81e49407e792c9f3992978af34b2eb45cdc6c0306a81f16b884ca05c50","first_seen":"2025-07-09T00:32:09.400099Z","last_seen":"2026-03-14T07:22:16.733341Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CMuWNRWF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 827\r\ntraceparent: 00-02b021df74af1479274a5e2291167b14-a5a6c7ffc5499daf-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-33b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303510\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":37,"dns":9,"connect":1,"send":0,"wait":1,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:36.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 21:55:05 GMT\r\nexpires: Wed, 30 Dec 2026 21:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238231\r\nlast-modified: Tue, 18 Nov 2025 19:00:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40688, version 1.0","md5":"c2110c4e3bb5388e5dde190a6f732b70","sha1":"980adaf6f9b3fe70a95494ebc40dd13151533366","sha256":"0ac2bd2955bce37b4b57866fb20d9b2a9d40efe46eafc7276a9995b36dc4b34a","sha512":"3502853dde0e4032b350c80e015823042985b82097eacba12b9ce3852ca37b1c76b24aea4bfae4fb351935e01dae55790159bd5ab6ea5925b29aee30dbcd4424","ssdeep":"768:5HzWnpfBrQBT/nZyGY8OyYgBlyz9LVm3I7Rv+A1n49NfG37v7R+G:5sfBaF5rOhkly5LyGN+Mh37DR+G","tlshash":"9b0301eef3f58673fd1d9224f25284ef602e9744004d64b5ac2243734eda6b1f1e46a5","first_seen":"2025-11-19T00:33:03.039122Z","last_seen":"2026-04-06T04:41:28.28475Z","times_seen":16920,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 269\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"[{\"id\":\"b8a0416c-9e8f-4e0b-b24c-69163fbf306b\",\"qKey\":\"39df8872-1248\",\"operationName\":\"getBanners\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"5b0980bb-7aa6-441d-9f14-5ee15d030c92\",\"qKey\":\"6352b886-793\",\"operationName\":\"getAvailableForms\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":52651,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e9c1aa6133044a128a64a58d2cddeadc","sha1":"52f4e1f7ad3891dec1d6e7e5d76adbf9b180c923","sha256":"48153d8646d32c8d43c0892bbc569b545930e7b04a007d87e6834c8968be91c2","sha512":"962836853b5dfd534e2e18abd1c837ef34c924906f8e0f515ff83a316d4e8077fb78e25d7eb5b4de6e12bfb87bdc968f6b4bad978a900fb04bd6883775319f0d","ssdeep":"1536:BEju2RefkDNXm5MBCcLClI1mPgnM5m1yEToV65Z2RefkDAAHsZGVXUDYFqpOwX8T:D2RefkDNXm5MBCcLClI1mPgnM5m1yETw","tlshash":"bd33359e5598bc7fd389a28638bf3e25650e3017b280ff74a19d9f6452f4aba013305d","first_seen":"2026-01-02T16:06:23.469586Z","last_seen":"2026-01-02T16:06:23.469586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T16:05:27.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD= HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:27 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; Max-Age=2147483647; Expires=Wed, 20 Jan 2094 19:19:34 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.CMuWNRWF.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":41280,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (21561)","md5":"e82e4eca38ae4dba8c74990210f11728","sha1":"1b75a6e0faf2a55800b2aef8a8be9ec45ad29b9c","sha256":"3fa303991669a3242e5f4f0ebf139e6f181225f10d6101119c91a6e142b6d404","sha512":"3802b06c0c12a50db52aa368fb835cc63115c6eb35823a7466135ff4256008b9bf8a275467f45b587c271a8315068683c566d689997008cc5588adaf366b1bcd","ssdeep":"384:TGmj1NN4Rwy1MfOjzB6oQlaKD6UQm6uaQtGokYbMHuAO5sz2J3SBCW:TGmxNN4RwXgzByHD6zm6vokSMQs6JE","tlshash":"e6032cfe1f0495f9fb1293ffe756208c6a09b467dd418d74f26c729877c7a9048a2182","first_seen":"2026-01-02T16:06:23.470458Z","last_seen":"2026-01-02T16:06:23.470458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/no.s6YevAOV.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/no.s6YevAOV.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-6e0b34985eb06b0871e6a1c049448fe3-a46fd7ccb0e3c6b8-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-14a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6328177\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2072cb659bfe23b3d0163006af1aee6c","sha1":"693c27833ee0647755f2b13021bedaeb59c23662","sha256":"b90d2629e1cea6a55bc55ab7cf2edbff2d1a593cb252cf20ddaff8525f97426b","sha512":"bde0651392ad6f40c0d2890f8c74032eb7faea38ef00b7c1c87318cbe04ab6cb577655325606c92257b3470319e415c1bf890f81091cbb649ba01b30b929230e","ssdeep":"","tlshash":"7ae0c2dde37cb820cb1083510f2d72f29695f4dea2d521d7f94069a8212e6878ee3ec4","first_seen":"2025-02-23T03:47:48.678197Z","last_seen":"2026-03-14T07:22:16.769304Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/exclusive.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/exclusive.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5618\r\ntraceparent: 00-10261730c15fd87e74ac21e69186113f-045a9e0ca997862e-01\r\nlast-modified: Fri, 05 Apr 2024 10:28:02 GMT\r\netag: \"15f2-61556e915c6e7\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 10 Jan 2026 22:20:18 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1878313\r\ncache: HIT\r\nx-cached-since: 2025-12-11T22:20:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f310f82bd99f64d82ebd1f091658ca17","sha1":"de9c07b5b5f3f4635a9e825a14af16e2c184ebcb","sha256":"7fed836409217f5ac8eddc5f8193b5c0c5e4e02bc3af1d18b4bc00287b8cfa33","sha512":"4bca13f43a59c62f670079fef9ff73ad9feb04c01784604b3d5af29d0984401e5c788e1fae0f68baea530c0b21b1a5b85cb5d9318e8d3d99b074209f56a85bcd","ssdeep":"96:wN7lHxPap1jRULBVUkiaBn/G0kOvw6rXtrbFY2W8RikDwrkCK3P:wN79ZapNRUlV2a+Ov1JnFY2BRfC2P","tlshash":"46c150f6a3e872e48147db90d8275876ba5a38fb3f9183c94240ee90b561095cdcecc8","first_seen":"2024-12-31T04:55:51.41943Z","last_seen":"2026-03-14T07:22:16.75251Z","times_seen":45,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:37.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=4jg3s6\u0026event=visit\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 16:05:38 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 370\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/kvwallet-1-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/kvwallet-1-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9231\r\ntraceparent: 00-75b6fa3082c8586ee9347680932e7322-c9d791f23a5499c2-01\r\nlast-modified: Mon, 21 Jul 2025 12:26:10 GMT\r\netag: \"240f-63a6f94b147ba\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c6521d56c98481fc34c7cf527f0917","sha1":"04f15a895bbc206e2d9ea53736e8370ed7bf7259","sha256":"9f3cca8ec80bf39a6ee39e9c42b3224261c565cbbf00603430b684b234e6800f","sha512":"ea15832ccdfb1d41489b1789b82d6359b147c613d7fa3bcd3c53c99d2ccdf28077a5a7ac7f3cbd8fe51d8230c2950247a81dfcf9684193bd78dc935aea6c51f5","ssdeep":"192:EehVkfBR7M9e6Emh32J7I5TtOetReqMLLxMQ+Asf:R3kfnF6pdC+TtFMLjZsf","tlshash":"381255dc3f7993e8fc95e2faeb331465b90714e96d92aa89c3614e0878864041dcdce7","first_seen":"2025-12-25T07:42:43.819314Z","last_seen":"2026-01-05T18:44:37.767692Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/assets/sprite.DrTllidW.svg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /assets/sprite.DrTllidW.svg HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-e5f6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":941930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b0ea40a7f7ef98347083ab77a513aec","sha1":"6fd9f4b3592912648de03ce50c8c091dcfb1a3b1","sha256":"107d9035331c79d90ad39b5e146978cdd2ad1ed7aeb7816ffcf071755b6dcd98","sha512":"b04f82936b1497104472645db83524167ce0090a45359d656531bea5a6d9ed35ecdc9eadbe8ea8682398045f6ef6f5974939a7a1a30bac702de2f13d03206831","ssdeep":"6144:lZWDijAXtLUHMqeEXTPYUrIVfV+LcPLiD6aL9oJ2OYHNAMoJj7a+:lZfeipIacD+y2fc","tlshash":"c115dcc51128538ca04bba6ddb7ffec0172f30a7795545821bafc79c915f680fb8a868","first_seen":"2025-12-08T11:02:52.856127Z","last_seen":"2026-01-25T14:09:20.139525Z","times_seen":17,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.baea22ee.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.baea22ee.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 237276\r\ndate: Fri, 02 Jan 2026 15:12:19 GMT\r\nlast-modified: Fri, 02 Jan 2026 15:09:05 GMT\r\netag: \"ecb49fbb0ada9c58ffb9ebcc4617aa09\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: d6a7OuAh3Q.rMAnKol.4k5nR9LokcAjf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3fef473b9069c3a6b17fb47d4e1f2460.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: GUH0OFhESkYJ1_j39W45fzPOMyvl0y9-yLCYWBrY0pSWQULnO8676g==\r\nage: 3200\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1110101,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"cc35112d89373ff81792276e23b48aa6","sha1":"c62974ba3933568d63abd6a6d861fe6c74deaa5a","sha256":"bbcce1dd888a234f885d8af7db2746cb78ca1fd09c82110b4a069265529d0efb","sha512":"c4b16b4a300ac3b4b06c2e96eb86011b6488fde3f0efcfdc25b4c1e925dfdfa397df2e74db60f4cf082155cf13918609b6f4ffcb5071ddd23f7d7823fa767028","ssdeep":"12288:kY2hzT5wJLfM1RsD54hTguKPFBuALEiGLK:Ecb1D54IPF9","tlshash":"5e25b5ccb2d2f06a43976575812f200bf33ea999b54d8050e629d8d1bcb958da237f7c","first_seen":"2026-01-02T15:57:29.652749Z","last_seen":"2026-01-02T16:06:23.477592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":25,"dns":1,"connect":8,"send":0,"wait":11,"receive":29,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.BnOlexKP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/71c69379.d.m.BnOlexKP.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1724\r\ntraceparent: 00-22069abc6e4998c6a06edca8e6696c9f-8ff7472970d61d16-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-6bc\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16456\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4562)","md5":"94655193e678936dd084c673ed1848a3","sha1":"194512228328b66e7e9d7305ff5477a1980870fb","sha256":"01e3350f983a8f6ec91c99ad7a5a890564d4eab25680d4b37f0635365d52bba2","sha512":"6626c655fb54b7334d3e0a1c6f599cbf77932e682a7ee1edb48ea7b5b3fc6ee2a51c980dd42b7ea3da3fababa6ab6f4e4c420a916553ab6eeed70e5705aecf57","ssdeep":"96:rv2VxJwa0uGzXt8I2s0uGzLsJdcnwL8ZuGzhrMvyrPAXywWixn:ypw4UpzUL2dNUSKrYiwtxn","tlshash":"6091a78d3c7ed4b0abef588ff1690c099e6d0fa662254d4194bf14bb2bb7850e252427","first_seen":"2025-12-20T03:09:17.61411Z","last_seen":"2026-01-03T10:01:28.22297Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a48612de.d.m.JQTJKyR8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 59368\r\ntraceparent: 00-2085da75d827d34956636c42ad2224d1-1c4e2fa3d2d9ffd4-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-e7e8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37484)","md5":"6618497d7ed9d67fac08cea2509495ce","sha1":"a6ea8aa06409daa1458a82e97dbb6fb099cade14","sha256":"267c0f3a3a6a42543519c1e543756c7bf68a5e2ed805349bc082c9b92849d16b","sha512":"87c697fc5114ead3aeae93e1c1166011d2d4a43b84a11dee84eda5e55fe9a1d23bf387d67c40998e1c138bca3d5f7bd96fb16b215c5d9f3499da33469035ab79","ssdeep":"6144:87OVJHIkZm5RGfq/nXUBL5uz2opB4qcril:87OVJJk5RFex2l","tlshash":"8574c715ea516ef376f5385ef16a29e360325b123b50c27201ea5f3d3e2f80cb1664b6","first_seen":"2025-12-20T03:09:17.559616Z","last_seen":"2026-01-03T10:01:28.220017Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/27d773af.d.m.CsHdeP6r.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b5185c4510f5dd8c5d64ab01de5fbb84-e63630eb6fac51d1-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-179ee\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96750,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.CYcOP7Rp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cc513c94.d.m.CYcOP7Rp.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-aea3fcd2a754b88f3f1996b3e2b2164f-851bb1c8f34b8990-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-5c14\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 96735\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T13:13:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23572,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23521)","md5":"6578f48b5497db0058aa08288e6eb033","sha1":"26cf6e1e59376fe6c1aa646386453a6cf92f73b0","sha256":"f18a508cbd365f76e6b3e3d66284b5ae76f17a29cb0317f597a31a869eb8b787","sha512":"2099b9c200f8280762c9a25853d5300f31643d418ea0d57d136c2118a72a3c02fbb953459f248244263acc8f5964d3ca404dab6456a89172e7964cb76b0fe016","ssdeep":"384:PeQdrY5tu5oHRRYF7XLA+McCw4hDfGPNPjN3uw+:PbdrYPuGHROrMcvcGPNPR+w+","tlshash":"1eb2880b32bd9ff911a655a9c4813020892c8eca92715dc1d9ffcf65264ce61d2b6bcf","first_seen":"2025-12-20T03:09:17.490186Z","last_seen":"2026-01-03T10:01:28.349279Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/720cf670.ZU_Xpxpa.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/720cf670.ZU_Xpxpa.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 817\r\ntraceparent: 00-b8e02c89bf7b40328cd9b2317b2368f2-0f19c3255b564f69-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-331\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16456\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3517)","md5":"9b46394706e510a8fd1f2fbb47fc8237","sha1":"4e83ee048b5bcbbfd37763b76f55c34afcf82b43","sha256":"088c87a98e272dd2e676c65c1ab60ef74b17b50eee9de957c720fd25703bbe9e","sha512":"397002abd00bb15782be5c38599c770a516e8faf61a4cc9af90f331a2bfcda5b6b7b22fc35867a14e2c6725119c5a0901dded61ebde5be67a5817b7b75e09224","ssdeep":"","tlshash":"8d7110d90f18e977e4d7580ec982a788b1335c438c56855bd77ab3bc8b466912363b84","first_seen":"2025-08-16T06:41:47.002789Z","last_seen":"2026-01-23T03:09:51.682112Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.ClHRgnnw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:35.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/b3b80119.d.m.ClHRgnnw.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1186\r\ntraceparent: 00-885db13751cdfac2d2b5e01878bf1f1d-e50c1732ab6d9df5-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-4a2\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16455\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2915)","md5":"e86f4eeccb5d51d8afcb04f2378e5798","sha1":"4c6ac7ba698e877f7c8b59738937f5c5709d69c4","sha256":"96da6abf1fa091fde6d333c7bcf53e1b5c175450deba4af4f3947975d7168851","sha512":"5cd34421381b50e79e3cb909b38104558e66cdfdd22e75188d562bbc11690df98d201fbf8d8e50557523fb19ec8de35e0c987d69ed78573c6825f7f028111c83","ssdeep":"","tlshash":"eb51960f997a143352c560fee95710220619d24c3798a0a8f7fd754715bbca5233bf8a","first_seen":"2025-12-20T03:09:17.598881Z","last_seen":"2026-01-03T10:01:28.353747Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CBcoeN-L.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.CBcoeN-L.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-4dbb370aa5685c29fcc9c3e4cd5555e2-7c7f3f3ff026b8fc-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-13bf5b\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/88582821.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2322\r\ntraceparent: 00-60b9c7fac42195cfb3396b080c5707b3-00456f049db8f501-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-912\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303509\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3d6acc57.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-3a6ab640f877128be6cbadd61d8f1bee-830aca33edaf7c8d-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-fb7f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-61bef05b4c0f1d3d17499b90c571762f-d69a17d8199ebb08-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: \"68e7b338-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6336466\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T07:57:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-04-05T09:02:54.833827Z","times_seen":158,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":31,"dns":3,"connect":1,"send":0,"wait":1,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nContent-Length: 830\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":830,"data":"[{\"id\":\"d65dfc03-57aa-4711-be72-799844a4b35e\",\"qKey\":\"93dd9da9-132\",\"operationName\":\"getCookie\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"19702f69-a18d-439a-8b77-059fe15f259f\",\"qKey\":\"790886e7-467\",\"operationName\":\"getRootSettingsInternational\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"bbc2125a-5891-413a-a00c-669330c54b60\",\"qKey\":\"b120a8be-122\",\"operationName\":\"getApiSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"631c263f-7702-45f1-99e9-1e1d4d4c082b\",\"qKey\":\"7f2ddfa6-16000\",\"operationName\":\"getSiteConfigSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"e0fc0152-73cf-4a54-ab2a-1b7610ce8ff7\",\"qKey\":\"f9753f3f-92\",\"operationName\":\"getRoutingConfigs\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"555857c2-9bb0-4c77-af00-47cabe59dc12\",\"qKey\":\"c2e6684f-112\",\"operationName\":\"getNavigationConfig\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; Max-Age=2592000; Expires=Sun, 01 Feb 2026 16:05:29 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nreferer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; Max-Age=31536000; Expires=Sat, 02 Jan 2027 16:05:29 GMT; Path=/; Secure; SameSite=Lax\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139822,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65464), with no line terminators","md5":"7f166720b1b7c02a7e9770b3fafd8587","sha1":"1e8a170232f193838b51a6f0a044d98e976aa4bf","sha256":"5256af695a741173803676cc8beaf9ddbe8b3fb6b7594373185277cad499ec39","sha512":"dde53082e7195d797031cbef090dfe276bc9f6bfada60ce0132f8a4f675c1242e32e5849a3d37582766c22271c21d62c79a838c63f12ad5c94504d853308ab9b","ssdeep":"3072:WD0a0Two00Gk0a0TwPMFj9bYJ4RuXSYxA52f62gvmxKvWT2/gZs5KVML8pfAPGRg:WKMFiJ4RuXSYxA52f62gvmxKvWT2/gZm","tlshash":"efd3ea3a721cdd6fc4874a8d637f2e36003dd06a21caa89cdd4dca6991ef2f8613155b","first_seen":"2026-01-02T16:06:23.490945Z","last_seen":"2026-01-02T16:06:23.490945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.l.liftdsp.com/ac786b28-283a-4d76-a40b-23e03f94ae14.json","fqdn":"ps.l.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ps.l.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sun, 05 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:FF:93:7A:39:16:1E:F6:27:5B:22:3F:5F:C7:A6:C3:6A:22:BF:62","sha256":"0E:06:CF:4F:55:41:8D:9F:FF:83:14:09:B2:03:4C:67:98:C5:19:10:75:CB:52:BB:6F:5A:2C:81:E1:FF:B2:29"}}},"request":{"raw":"GET /ac786b28-283a-4d76-a40b-23e03f94ae14.json HTTP/1.1\r\nHost: ps.l.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 50\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 07 Aug 2024 15:08:37 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 02 Jan 2026 15:58:55 GMT\r\ncache-control: public,max-age=900\r\netag: \"e96cd5af6f065e5048b3ddd2913dac50\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AWZTYu14FywrCZgixI9P3p8jHvFVr-oVevj6b5IDdvj50ig-DZExWw==\r\nage: 622\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e96cd5af6f065e5048b3ddd2913dac50","sha1":"98f5fff6913c150009fb01c2cf5bbe83c250f80c","sha256":"88c38dd5fd1531be2d044c85bfd00517c41ce29b03c514d620d80a80241a1f11","sha512":"9478fcbed66ba6836ed9bccc5f3f3c1681d7527489c521c85566a2368089191fe173735d89f1277a5f86da659be50879b9e0ac7f62c1d7a1d4a905af8c49f990","ssdeep":"","tlshash":"6790041740037457c457c75041443d55d75d0d370c170f7404551d4503f53777540117","first_seen":"2024-08-31T07:43:55Z","last_seen":"2026-04-05T09:02:54.85114Z","times_seen":104,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":86,"dns":66,"connect":1,"send":0,"wait":3,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 190\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":190,"data":"[{\"id\":\"0f33af81-4134-4baa-91a6-919ffebf1879\",\"qKey\":\"33368f52-237\",\"operationName\":\"getCmsContentSpintaxBatchTranslations\",\"variables\":{\"options\":{\"contentKeys\":[\"WEB2_SEO_HOME\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38681,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fb3c76a6581c02c10b7e66fec10b97b8","sha1":"5030e0becd9aea288acd3a3fdfc27de09754c253","sha256":"5eaa4313576de139396da67fc174466161a304c9c1cce313d23aad47204a770c","sha512":"3b8e89aef84e9e1feb5b5ef2f9875352aebb681fea42a3fd576c20a8d6d4751f7ad9c10929e234915cd7109770bd75f1300546612a80c50d99606cd04a5341ba","ssdeep":"768:eLQPlI7bnF2zceDxVlwQZxTq4IWJhyqq9:oQPWbnF2zceFVWQjTqkJkl","tlshash":"6403a651f7dca117380bc281676343d5a95d48dcfb9561e2befac6e4e28ca00ac7c58e","first_seen":"2026-01-02T16:06:23.492725Z","last_seen":"2026-01-02T16:06:23.492725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8a28bc4d.d.m.Co4wPcz3.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 153546\r\ntraceparent: 00-b29f02e8afb4fa34cdd576b0a29c5e2f-ffd58bcb4b6cb32e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-257ca\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 832694\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-24T00:47:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7fd5867.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 748\r\ntraceparent: 00-7d4484e754481839c15eab11e9d9f238-5830dc86182a3a3a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2ec\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.DHDNCeYY.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-3c2bf0cfc90bf427089474d7534913b7-c20f99696fd7a1f4-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-4039\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111493\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440)","md5":"4d87269e44c4639cad79282bd3e56c65","sha1":"31e83329fd260eea94486c9ce66b2df430dc53e0","sha256":"f361154c7c7c11401aa0e630dc90f18f717534457d9b610c16e51bd290701924","sha512":"b905a6a411088e9c3c2ec61d19fb0064b0debc191037dde41e112e61fd6de6cde224ad508f724319f6c2ec635880afb11a986e9812d8eb9dd83ce4c5de7a3663","ssdeep":"192:Jw7vLZ03o2kZVz8KGJCRjMiS7cZmnDA3tMHWF1vHOp8L803Y4FUfBFo7:K7vLCu3GWJYI153Y4FUfBFo7","tlshash":"b172a7d50d64367abb7bb11fc6e2aa0ca31acc46de9326d5b5e1e12c47c638142f3d04","first_seen":"2025-11-08T11:37:36.045292Z","last_seen":"2026-01-05T18:44:37.846257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 140\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; shield_FPC=SChTauQUdcc6F0pzFyIkCuxuq48xxDfya8; _ga_JZZNGY93CC=GS2.1.s1767369938$o1$g0$t1767369938$j60$l0$h0; _ga=GA1.1.17336208.1767369938; pixelsink_uid=174316bf-745e-4689-ab81-a4ca9e04cdd7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[{\"id\":\"6033a425-d65e-4fc2-a813-2431fa0b8ece\",\"qKey\":\"1a804ae7-152\",\"operationName\":\"getIntercomUserHash\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b9979b82befa7517c4562592c345fa8c","sha1":"00746f21ee8a6dae697dd263641c040ce9b1446b","sha256":"d90745410b576b9df5bafd698e57252337e3aa237035fd1dcdfd3740b55ccf74","sha512":"a53b2877e77a8a9e7694b9375c4379048b2d47f015292b25e3ff52c58ef16d120ff12ea1da6335a513fe572fe164518730c4a7c4eafe4d89e851a06bbd9b5c86","ssdeep":"","tlshash":"2ed022c2944a09059e0da8c14074f58b092d203245983824c5c9fb09ccdbc7c53c8f28","first_seen":"2026-01-02T16:06:23.495776Z","last_seen":"2026-01-02T16:06:23.495776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:36.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGLDT3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 02 Jan 2026 16:05:36 GMT\r\nexpires: Fri, 02 Jan 2026 16:05:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 02 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123103\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44354)","md5":"541aa61ba2c8587810da7a3c26acf98c","sha1":"20937b26869504d78af0c74bdf3c2c41972797a8","sha256":"9101680cada9b32ee78b590b748faaaf283e4aa27e10a191df401be4978edf90","sha512":"177ff855bbca60926b6a75ef7ac6a17dfce16c750093b70521bfd27722ff6a62d2412b5c7ee22be2dded6e2ff5d64efaf2a633af975adb55ac683eaf3deada9f","ssdeep":"6144:lJgteEaaWeJq2bulKYv9VHDmHYmyBFz0nsCqWrxRZt:JSbu7llAnsPWrx1","tlshash":"cbb4fa8e77d4a87ec3a65520643f060a657d20e2b24c9490f0daccd42e799797263bff","first_seen":"2026-01-02T16:06:22.629893Z","last_seen":"2026-01-02T16:06:23.498027Z","times_seen":2,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":69,"dns":2,"connect":7,"send":0,"wait":19,"receive":23,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/f06cd424.Dd74Yc_c.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/f06cd424.Dd74Yc_c.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ntraceparent: 00-4e8f3abd00e39eeb3c8b82e89d0536ea-8c53810ec278068a-01\r\nlast-modified: Sun, 14 Dec 2025 13:23:19 GMT\r\netag: \"693eba47-1ce\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1523502\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-16T00:53:46+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1431)","md5":"6cbf540dd2a6c89fc9e82a987e8c628f","sha1":"4370f7b310a28065a6f37b039edbb6ab60f7c577","sha256":"f3cd42fd3531448a70732cfd5b1b308395116a6b0e199d0bfd4e4b44aff806c7","sha512":"0c2f430ab4002f2839fe83266b95e826c9f27bcea6a1742f58bb3001740b32e6b523bdd43c18d3a3484a5b8e2f7af52ad5a44e9bbf39d2b4daffa8f8194ffc35","ssdeep":"","tlshash":"05219ef3054de1394807b68b6470ca4ec52ad165ba6b16b812ff712f41cfef05e116ac","first_seen":"2025-09-19T02:19:58.389648Z","last_seen":"2026-01-05T18:44:37.74079Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/713ac740.d.m.Cm8iaGeB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 64711\r\ntraceparent: 00-cf5f062296c017485800e5565b052659-8bc383322e10cc9b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-fcc7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24850)","md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a17a5642.d.m.d2egGL5n.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76432\r\ntraceparent: 00-c1621593b4bbb49ee57e415005fb17dc-4b1ff4d830c12dec-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-12a90\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19927)","md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 183\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"[{\"id\":\"bbeadfc8-044b-4729-9bd5-ed2f136c65e0\",\"qKey\":\"1a9cc015-159\",\"operationName\":\"getCmsContentTranslations\",\"variables\":{\"options\":{\"key\":\"WEB2_REGISTRATION_CAUTION_V2\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":579,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"571e0d05095b074078ad489e46a007f4","sha1":"02f8ba2b2e7f1e1bb53db99096e337fdc6c65e6c","sha256":"463f351845fa771f4fddf3ad3d5cc7c8a536f60bf751e41408708c2ae82fd774","sha512":"cc563ddae74c637b16099cf42203f9b41652812d06fe97b69ca3814e2ce2cbaa99f8939239bb1c7fd7c5ac08a855ff3e687045c405fb2a34743a4e604a3aa5ed","ssdeep":"","tlshash":"13f0e125b4a24c620ec342c67b93c449e635b440a4417317a39c47103b9ff2c712badb","first_seen":"2026-01-02T16:06:23.508611Z","last_seen":"2026-01-02T16:06:23.508611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/713ac740.d.m.Cm8iaGeB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 64711\r\ntraceparent: 00-3852478f67b31f9d76ec6419ed42c0fd-34b6f18da6453f1f-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-fcc7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24850)","md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd43e72a.d.m.vfSsdjxl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cd43e72a.d.m.vfSsdjxl.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 304\r\ntraceparent: 00-ca6aec2069b10591f19c3dce46fa45ce-cadb1327e1bb0d1a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-130\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"abe1ce4231382d5b2139f5c5980deee9","sha1":"236a426039842cb375e77fccccc05dcc255226ca","sha256":"608d4f64b5b27661a92ecb393e215a3928520a9b85ea746628d7e254b0ec4e75","sha512":"07e1746c5afbabf9946e6df0c242e617c335dcbbe34171ad0739f844eaa4522ae3ac0478cf59fdf746257ab66399e1e60d39eec9a77b26f7a7923b8196c31ed4","ssdeep":"","tlshash":"7bf059cd76c3b46806a71479c03fdc5ef63b7d947acec4d0e50aa0752a3446a8133a69","first_seen":"2025-12-20T03:09:17.600449Z","last_seen":"2026-01-05T18:44:37.832773Z","times_seen":7,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 462\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; shield_FPC=SChTauQUdcc6F0pzFyIkCuxuq48xxDfya8; _ga_JZZNGY93CC=GS2.1.s1767369938$o1$g1$t1767369938$j60$l0$h0; _ga=GA1.1.17336208.1767369938; pixelsink_uid=174316bf-745e-4689-ab81-a4ca9e04cdd7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":462,"data":"[{\"id\":\"508301ad-4081-47d9-b166-60f9f7b2291a\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.128.2\",\"level\":\"WARN\",\"line\":0,\"column\":0,\"error\":\"[shield][success] {\\\"session_id\\\":\\\"dd003460e7f411f0bbc3a75b08509c37\\\",\\\"helmetId\\\":\\\"0ff7726d76e908fd17280debd423a80e\\\"}\",\"file\":\"\",\"url\":\"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\",\"ts\":0,\"stacktrace\":\"\",\"payload\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a2b8f06220efed4493f0c9c6c4ceb18","sha1":"b95998bb3c456dacd30aefe6bbddbb008750ab96","sha256":"96d977ea59b1c98a113bd97cf3f54b63c830b672ec12c5ebd65a11b01aa6bc6c","sha512":"d4430fb2be9e8904092389159b58fd59c9801364a3ffae26aa9d4a670f7ae7263d713f61f4a9a6e50a02370800fe37e85f84761d48f50589d4fd5c32772a95c5","ssdeep":"","tlshash":"bec09b90396181141d0cca576732d9a19b61b95341177c0487d87d51458896c764fd51","first_seen":"2026-01-02T16:06:23.510809Z","last_seen":"2026-01-02T16:06:23.510809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:37.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 02 Jan 2026 16:05:37 GMT\r\nexpires: Fri, 02 Jan 2026 16:05:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134959\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c5bcd0b3ca0cf09560b81d4bafa81657","sha1":"72b03ba7ced6ab3ea90e0e954ae5cb61856457f5","sha256":"3f457aaf2a3ef735edfbd93a4ec1b211643b67e31730899980981f9582fb13b8","sha512":"3b318cb8a61f498261593efb47ff275bd2be805b8208294535859b5c3636a80ad91ac67e76879daa87738b0482814319d8beb504d56fc10359eae14ac32c1360","ssdeep":"6144:tDIe7ma2bulKY/1u99xHDmHYmyBFzvnsUGnWoePad4FpC1JF:mC8bu7/1mbrnsdWmMp8","tlshash":"6e84188e73c670269396e078503f118ba57b29e2f45cc895f189cce42e746aa4277f7c","first_seen":"2026-01-02T16:06:22.569695Z","last_seen":"2026-01-02T16:06:23.512199Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:41:40 GMT\r\nexpires: Sun, 27 Dec 2026 10:41:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537829\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-04-06T08:28:40.514293Z","times_seen":18250,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Dec 2025 19:09:22 GMT\r\nexpires: Sat, 26 Dec 2026 19:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 593768\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-06T08:35:58.400362Z","times_seen":22618,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CMuWNRWF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CMuWNRWF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 827\r\ntraceparent: 00-9d77de34df2b3bb9d8ff8beb53c82e2c-45b17166c0e6868e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-33b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303516\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"473aeea418b3f46cb4359f2478fa1bec","sha1":"0c166fa830686a37371566353f3fab26746a94a6","sha256":"67cfe959c68b8de2945af065e2857b082b692fccd830be3a1272545a9111a0c6","sha512":"5ccf699affca2e29fc3111caaf95016c62d9fa7b4a901a79283d4cd8f46185c4e3ff9c4a7cdf12df367b91d0ff63ba3afd3a35fea5650aa7c4ef65ac8faf623c","ssdeep":"","tlshash":"b831850a6282557586a604fec21b3621b3219f90396cc6e1e1bc3c6a3d72817c52afd6","first_seen":"2025-12-20T03:09:17.486701Z","last_seen":"2026-01-03T10:01:28.227227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.DeLV3XWm.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a5e1c77791d519ce219488dd5d6c5920-f643fcf3944ae82e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-12b9e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303515\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/054854ad.Ex9bFnwt.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/054854ad.Ex9bFnwt.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 4339\r\ntraceparent: 00-4e48459b7951d4d92564a29371f9ec41-9a154ff5cbbbc6ab-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-10f3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29029)","md5":"9ef912c6ec728a533890823bedb1e1af","sha1":"c5d089da28a137d084180e0b6faaccfb70a6b03a","sha256":"88485b3782bc80bff39059bb9d03b975c29f23bf1a4ca9bc5ec244fe553a6e5a","sha512":"0015b833f2ab3478c2ebcf220abed9c28d02799d09fb0a4df9b0724dbba824ba2e99c73ce85e6c0d8fac2e726726a1d7cffcf419b580613c088679658b607f82","ssdeep":"768:vTkc5vK1Y/sI9DyNyg3T1S3bpmEFOwmUQ7:Lkm/8qFF6","tlshash":"e5d2102ede1862a9b4a6907af5e45f4f6404e847e5364659fd51be2ec0c3fa2332730c","first_seen":"2025-11-22T11:34:49.830209Z","last_seen":"2026-01-25T14:09:20.087519Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.DeLV3XWm.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9dd1242c485c16a288dc8471885c883c-8f6d367c794f5d3e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-12b9e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303509\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-it-json.87d963fe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~locale-it-json.87d963fe.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 19832\r\nlast-modified: Sat, 20 Dec 2025 14:31:41 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Q3RwIm2jDW23Qp6T0jmXuAHl76s1fmey\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 02 Jan 2026 15:09:10 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"42f97b700e7475d2f086831ae1d56f03\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3fef473b9069c3a6b17fb47d4e1f2460.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: zOGKeyt91JvsssE-c4OiODlzYEpND63XGjDpIlwvai-2lUx_LBWXpw==\r\nage: 3390\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":78870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65387), with no line terminators","md5":"b81b6985a6b44dc7a395aedf890025ed","sha1":"de9716672e529341cd27360666a0ba3819bc05a0","sha256":"93868e30712f1b1cab8f1d7d0fa9ad01fddd2cebd09717c40a2d7781dfd8de8c","sha512":"0c1d59cd17a6efa1674b06682810e3819c8684448e81d0ffd668ee96fd798c6fb60be9eea2fc100dd45614b249a4e860027a52e047a9d041f346de76b4aa7c82","ssdeep":"1536:yxccNWAKZ13KafYSrnwwMmO9H8SgpxrnB5/7u:yxNKqT0wwMmY6nB5zu","tlshash":"6973b42c4c64ac3106af03e7999a7c5aebf886debbc85514fd95861c11cdbc0e1af706","first_seen":"2025-12-25T07:42:43.803795Z","last_seen":"2026-01-05T18:44:37.831028Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/01f20af8.d.m.CSMfGuoz.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38548\r\ntraceparent: 00-3d7063753598686afc715576f8610207-8eac56b8c72dd357-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-9694\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303509\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.cbc30eba.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 159489\r\nlast-modified: Wed, 24 Dec 2025 06:08:13 GMT\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: CLx7I6ze5OPCML8KBiNqMA_ol4MUznuf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 02 Jan 2026 15:11:05 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"191c7e2dad000d47bc07a26e6c6b4158\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3fef473b9069c3a6b17fb47d4e1f2460.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: SepFADx-kn-M5sEzZN_G-UXWLf8-SYGCknlUED7wiyqg8RuqheWwkA==\r\nage: 3274\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":519402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":25,"dns":0,"connect":7,"send":0,"wait":37,"receive":6,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 16:05:22 GMT\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a0c6ee06b96a7406eed6e54bf1b64c78","sha1":"f69e8081aa551d26f3eb46672a79a4d7cb4b4657","sha256":"260af81791823a8b9f855ede4e9b6d1220238b62c22859594d8cf2216dd0348e","sha512":"761fb8e6ed1e28f98d11da236d244f38ecbf08e43f410918ca8048b08e04b115bafcd9fa4fe2977e123a7efc2f251be8f02f88e981aba28d3e1fca0968746276","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqaVyIAa3LZlfCJmwBUiRDfMTcfFBhiEymDcTYn:KuGH72NFEIwLzieZxrAwR","tlshash":"7b73eda1041b9440eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2025-11-19T19:15:03.775253Z","last_seen":"2026-01-25T14:09:20.059844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":286,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.ZPsoGAno.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7c9eab67.d.m.ZPsoGAno.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 916\r\ntraceparent: 00-43cab6e11cd736f4041de820c504219e-fb5e38466fbc6b51-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-394\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2572,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2521)","md5":"662163b38865e6b3065404628673994a","sha1":"6601f693f2f11be635d48a0aa924baa058822598","sha256":"8d984cd090a0999e2e85193b8562a0acb360fe6f37a25cea1a74f5ec38101008","sha512":"f8cbe558d89d3e2cb4a1d14748164636af2ec71097d214d695a55ec566decc966c1d7620c074a8b0b4addadef9807b2b5fd55a94e35fef7dcb00a5538a97582a","ssdeep":"","tlshash":"a25121c035f17621966b2af3c67f012bf57a1994fa0e64c2b816ed9d7834032935fe89","first_seen":"2025-12-20T03:09:17.627822Z","last_seen":"2026-01-03T10:01:28.336634Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nContent-Type: application/json\r\nX-App-Version: 6.128.2\r\nContent-Length: 46\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; referer=https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"metricType\":\"VUE_APP_LOADED\",\"value\":\"1551\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.D3m7uDVe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/17ff6b76.d.m.D3m7uDVe.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1101\r\ntraceparent: 00-dbb107d7c3657578ab6b8aa5331d9468-d18711f025977ce4-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-44d\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2346,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2295)","md5":"2a765ff0c69e024d5f5fbed235354a3a","sha1":"0a044d0488491aedb2c12f5c54d35098bded3447","sha256":"c5045228151c9709611e101a23cf0609efd689dfbcd39c242beccf280317017f","sha512":"b14c24c178508ac9f85d17b6361383d88c1e485ea1333ad8bb8c37a26f0caa97bfdde005ca60fa16b739eb46051d42da37e9a4838ae4a1c738d724beedff1261","ssdeep":"","tlshash":"cd4196b9b080f438437f84bfe876d1d4572462507267d5f1a06e269d09a8cd6c2b8f8f","first_seen":"2025-12-20T03:09:17.496082Z","last_seen":"2026-01-03T10:01:28.335206Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/top-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/top-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\ntraceparent: 00-0fbd8b6215c9d8fb6f0fc82f302da246-793fe8c377dda23d-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:31 GMT\r\netag: \"2b9-61bf36429d66e\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 17 Jan 2026 21:31:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1276433\r\ncache: HIT\r\nx-cached-since: 2025-12-18T21:31:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0848796581e9266f80f9c559e3de8a8","sha1":"cf5f98440ce0f2c0edfcd5985dcaaa90da3d419f","sha256":"7e3f1836401d8d45ae3f406467c7bc7b78193dc00028d63d7659a7809bc4c083","sha512":"9f131505c274a867ed7ec98f409ebebd5a59edc16f5c7428b0e237b72d54ff24eac3e164c60047c6b7610c9fb054c60eb74b0064eb08c86ffb47d5b8d307a422","ssdeep":"","tlshash":"730170e797a451a1d7098ba12794b66e2edf3df136d14b868044b9b8d6042d5cd8c8cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.172779Z","times_seen":62,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/ce584242.BQGIdFSo.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/ce584242.BQGIdFSo.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-d413b7075de61781c762dc4dc90a8f44-3f0ee55b8d7dc419-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-b6e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2925)","md5":"04a6e5a2ff1a33ec1917960d1b3360b4","sha1":"a83affb77304a190bb6755e0048c453852f944c4","sha256":"9f1fd6fe6354bdc41ff1d4c2876905831f761f77b3b2fbfe749c9b4d1a2104d6","sha512":"5693129d96b4421d88e881c6500297d7eb0d969efc3867ef3077c669769701bbe19648252f1d076c0e2eb28caa83309d195dc73d1524885292f8655451c694b1","ssdeep":"","tlshash":"8f5112536930733dbdbfa53dc9d4778a6119addbca134288e8ebd02c80ca68259707cc","first_seen":"2025-09-29T03:15:31.287684Z","last_seen":"2026-01-23T03:09:51.677066Z","times_seen":33,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.D08Ub31-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/720cf670.d.m.D08Ub31-.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7745\r\ntraceparent: 00-afbf4bc3a6356cc80760cdd04e3d17cc-b1e9e643d88dccec-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-1e41\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16456\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24928,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24877)","md5":"aae4d6f522e01f5f4727e6c119557bd1","sha1":"477c50e50589134aa549511e49b4b79222efea68","sha256":"32e5b64d15e1de3999233bde04c56741515f5d759794b567e642c2f7994b6709","sha512":"d3448ffc0bdeaaccd41c03664a3dc3150f84a192f2463581e016b019bda0b4239ed67a06712657c845eb586ec6b25c6778e93e254cb39585342d19f3e0610664","ssdeep":"768:QF3wXo0ogDqGZVBSL7e0nP0620T0s8Bvm3OvTtnRLIT:i+o0RJJIjP1OhmT","tlshash":"2cb2089cba125cf3d7e3444ea9020901607a1e4166b84ac3e3bd8bb639eac1497777d7","first_seen":"2025-12-20T03:09:17.584878Z","last_seen":"2026-01-03T10:01:28.354246Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/baa7435a.d.m.BbiSxHJn.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/baa7435a.d.m.BbiSxHJn.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8819\r\ntraceparent: 00-3c3b3cc198488b6f5929d3958e7d62fc-969120174d9d1eb6-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2273\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23588)","md5":"17f0344e1d0f109f0c2c75da7d646bc3","sha1":"a7ac565a7af3d5e8ea4242862618fdb57b561197","sha256":"299bca3929dafddc8329ae7cf329519b6f0a153f87eb02fd50a1794838b5b6ab","sha512":"969df9f5471c7ba8aa0d0fed9d831e1bdc30ffcca9b8815c4be0d895e5b0c260ab8297915d1ba3f5dbc314dc8f20c0112206119c92c88f25d97b1f73ac4702d6","ssdeep":"384:+QdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2i8:+QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRi","tlshash":"19b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d9d92bbf6d","first_seen":"2025-12-20T03:09:17.625008Z","last_seen":"2026-01-05T18:44:37.841251Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/cc513c94.BJAIjynr.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/cc513c94.BJAIjynr.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 1936\r\ntraceparent: 00-b7a31a86235e4e30e63491f1bd43c2be-e483ade53685fd11-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-790\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13338)","md5":"016069031e7836416684b4fb2dddfec4","sha1":"5e771371191b81757569cc8336ac5e8fad09ba35","sha256":"28321db2f0d1a637d77569d81bdcf80e67dd0bce04590f992e2d55ace1380663","sha512":"2b63cbeb355714d2f0975e975cbb622a4c5faab7443096ff908c3a417ac67ccca503aa9820857e9794b690bcb70fd1c63774d7d3ee15be1b4ab9217209061803","ssdeep":"192:2iVjJbk5LLXw88g+7PB6AQ+TPDqGD8t7T2pb8v13qud6:rjJMftKaIHD42b","tlshash":"1b5240c71878a76f35a7a03fdac1364c022aecd384136ad5d9f6ea5491c6a8241737cd","first_seen":"2025-11-14T01:20:20.946447Z","last_seen":"2026-01-23T03:09:51.740928Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:37.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 11:01:42 GMT\r\ncontent-encoding: br\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\ndate: Fri, 02 Jan 2026 16:05:37 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"246f-19aa613b9f0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: LJV6nFMt7pt54Q79nYQ0E23PdvH_SbJDsissLxaj_VQGLw7Q_IrRpA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9284)","md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":10,"dns":6,"connect":1,"send":0,"wait":4,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/06b1eb38.d.m.Cmy5yogU.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28943\r\ntraceparent: 00-4d036f850c5f35efbb7270584f305254-2dc7358de60760e9-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-710f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111493\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/88582821.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2322\r\ntraceparent: 00-f8cd15321b96bbb0a1a237dc33034e26-0e1a0d2bde42d24b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-912\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303515\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/collect?data=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","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /collect?data=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 HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 0\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\netag: W/\"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk\"\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: IHfuYmXdZawTLmxAE7vcnQVfdVUxREvk8pr49EMm25IMVa5o7t7MAg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/christmas-hat.CqSVa5RO.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/christmas-hat.CqSVa5RO.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1889\r\ntraceparent: 00-cd17408be880ae1efb29ab7d94ee1750-1d033575e0ad3c8c-01\r\nlast-modified: Fri, 28 Nov 2025 11:14:08 GMT\r\netag: \"69298400-761\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2787671\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-01T09:44:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a081da84bcc4af12476a3687f3924dc","sha1":"6ccdb53c50f18696092cfbf8ba91ac3f8ce34082","sha256":"6c40ffd117394e57b25ce999a53b4c3aa3b6f86ac110ccdad94a168182f70fb0","sha512":"324cdbe5f0d1bf42f520d69dbef3b97d89341e82cb1d613500c5439daf12919f2b0c2a80ab50f0d5655952cf3da3a3d534f6ef2e8f2e8594c8240e46a93d1637","ssdeep":"96:Ubh4jZI5oU88CRAEtxDKABir/KLU+zQSg1uO2xQDJduqhaWpu0:0h4aSUdCGsVVQR87y","tlshash":"2b9172d82338538c59878a9d9f7decd4930ef0fd356682c516afe698904b9c4fb0b850","first_seen":"2025-12-03T17:22:24.016579Z","last_seen":"2026-01-05T18:44:37.871126Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.BP-k0whF.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1bb7e2cc.d.m.BP-k0whF.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3527\r\ntraceparent: 00-a1fa373913d181725cf7f0210d1422cb-7fbaba6c823a0b29-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-dc7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303509\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11433)","md5":"36f6d0b22111f97c588506c7591b95d2","sha1":"5da3263f225bc1362133c928f7ecd6b1d38a3ecd","sha256":"979fa6f1d25cf02333cd9d2d40311a9b98b2116983a391dfe15a65bfca6d4d4d","sha512":"528c30580359fe289101a8275bf008e355799574df3e676759755d087398b458340488d2a30044f2534baaaf7dba2c12719d571af9779c9979b06fe29979bf3c","ssdeep":"192:VOAriZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrCM:0evFuABGBVMsZ//eEq","tlshash":"0c32459def68a0b204839c55816c70c3c5e994a0a2362fd1940d1ebafe9f565633fc7e","first_seen":"2025-12-20T03:09:17.576203Z","last_seen":"2026-01-03T10:01:28.230612Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/holdandwin.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/holdandwin.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1193\r\ntraceparent: 00-347f7bf120793cb1a9cc5f7c51c3fdbc-c054753af3ee381f-01\r\nlast-modified: Mon, 25 Nov 2024 15:44:32 GMT\r\netag: \"4a9-627be9be373f6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e6b24f8e1304a6d30fcf66915302f8e","sha1":"fd521e2f3e992e8f4421212496441e288ed82588","sha256":"d1d27a4fa7dfa49d65591ad727ea33e2739418dd6975b6cbbe0844e03101d179","sha512":"5e97f4c5fb96dd6b29e3a7affcb7bd03c2bd4d5def50338d59a8d5e83605978bf6b8d10daf1c33c4d973ce723d9d6f5fd656af52ad7d79052e83abdf134e983a","ssdeep":"","tlshash":"8f21cbf7e3584bc1c1038342f53aa8b1803f587cb3e58ed580797de28114987ca88481","first_seen":"2024-12-31T04:55:51.414787Z","last_seen":"2026-03-31T00:45:46.283415Z","times_seen":58,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nContent-Type: application/json\r\nX-App-Version: 6.128.2\r\nContent-Length: 34\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"metricType\":\"TTFB\",\"value\":\"78\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon/favicon-228.png","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-04-05T09:02:54.909985Z","times_seen":118,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/drops_wins.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/drops_wins.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12382\r\ntraceparent: 00-f0b42398f9056e533fd2266d90ff2cc8-92d548984e9786ee-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:50 GMT\r\netag: \"305e-61bf36c739963\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 24 Jan 2026 21:56:17 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 670154\r\ncache: HIT\r\nx-cached-since: 2025-12-25T21:56:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c33bfc0a66981351db0da8fb6c69da55","sha1":"55b49d3376218cce5808e9f5a434b6f6d99d62a8","sha256":"62b722eca58786138391eee4ef1d2d49b184341f1a4ba35c5513b40af52b5c18","sha512":"6659c986c63d1114a99119c8cb1414dafeea1db8e51327649da42936514ea4a0f7176fe1e0abbee2cf0705aca3c5fccb7f61aa94324920a61bc50fc58efa3e0a","ssdeep":"384:MslV4bttY5l8mzagkwtzzVS4klR+VHWZWFvsC:vWt2l/Kyz+IF","tlshash":"824285f7a2e8b1e4e047e7b0d83295b1f65f38ff3faa97854294dad46714198848cc50","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.205158Z","times_seen":63,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wnecsk06hq26g8af3v4147b2","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T16:05:21.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"i64cl3er5t.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 20:48:21 GMT","end":"Sun, 22 Mar 2026 21:46:50 GMT"},"fingerprint":{"sha1":"BC:33:3D:E2:A7:D7:9F:D2:52:EE:B1:25:32:E1:79:21:68:E0:ED:BD","sha256":"06:6F:CE:56:A2:BB:79:97:F3:83:48:6F:45:B4:52:23:75:8B:4E:6C:B0:80:E8:D6:34:44:72:88:02:7F:56:F4"}}},"request":{"raw":"GET /?serial=39258\u0026creative_id=2574\u0026anid=wnecsk06hq26g8af3v4147b2 HTTP/1.1\r\nHost: i64cl3er5t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 296d4f0200e570c7b2bbea2addcd60fd\r\nx-runtime: 0.041225\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYuvQEKcQO6IdNqOaYmfQa9D6OeAGc8EaP3K6XegOK1QT8cOB525R58gmXu4yz1Sfv6ZjL3QmP4HlxtQ8EMet9DlF4Wj4f3HR0RIqw%3D%3D\"}]}\r\ncf-ray: 9b7b7f5b4cb556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":238,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nContent-Type: application/json\r\nX-App-Version: 6.128.2\r\nContent-Length: 47\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"189\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/i18n/it-it/1767191642762.ff9ce.js","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /api-2/i18n/it-it/1767191642762.ff9ce.js HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.2\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncache-control: max-age=315360000, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174929,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"9046c283a5bc34746e4c16c6de9ef8f9","sha1":"2e47f9b38220070522487d444f5973e504128037","sha256":"5ecc1e606f5fa0db26a7793614f783046a29c518841dabcb33d7a0d635ddf373","sha512":"625d4e636c1544d6141ec109525c83dfe7d5e2aebac77fd298aef6b5770287a459fe6d3b81cbd61fcb0d5832a4852d82d1e78aa8670625234a557fa0e5f4f56a","ssdeep":"3072:awBaktaQYmrbAc2Zl+tqymR1ZV8aMsfGxc6qa7eJWtloXGZd1nUSylB0bf0ojXEJ:a0aktahmHAc2DEqymXZV8aMsfGxc6qaO","tlshash":"a604fa38ebd2dbd3be96370831222981b1b1c75fbb8c529a41da052c31df65c31b95e9","first_seen":"2025-12-25T07:42:43.844661Z","last_seen":"2026-01-05T18:44:37.736197Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/books-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/books-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1804\r\ntraceparent: 00-65d8016a2835b4be3b30370defd69584-1cbe0eb81c338318-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:41 GMT\r\netag: \"70c-61bf36bec16f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21f4a5481d615224b3062e2bda5a69d7","sha1":"2587846cdae3aadc39f9168b4a62c4ca50cc2bb9","sha256":"049e51bec3a57f5d4f4ff4d0a592ce5a25e418fa08841f345cc7b7ba2e6b1581","sha512":"7e52fd485a521bc2683434cd1159d6d2e624c4a87916df5584f8b3224a98f683de62f7e467b9aef7cc15f4be4c15a096d049542f648653aebbc60ed70169a497","ssdeep":"","tlshash":"0b3165e94fd870dca615a7c1ad2f892bb89f28f97303cf4653c09a54b8120c4cd8ec10","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.237177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/casino_newyear.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/casino_newyear.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3367\r\ntraceparent: 00-d321120846be7a780a287f2065c4360d-2e6ff11a4d732412-01\r\nlast-modified: Tue, 26 Nov 2024 10:08:14 GMT\r\netag: \"d27-627ce0707e2b2\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 14:31:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 178385\r\ncache: HIT\r\nx-cached-since: 2025-12-31T14:32:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19393058de2d299f14dcd9439cb762ab","sha1":"4b9a78c3b7738f3ada7c397ae9c7d4f87d085bd7","sha256":"d23d83deb8bcd63f043c012d6d12ec3887ce3624bb8c4516969d4b3dac38730e","sha512":"60403502f97443eed822bce940dd5991905a3ef664eb8cb02011ea6bda28bbe983948fadc4b482bf737026f5197bb10686a79f649f00f8cc93149552e2fe9695","ssdeep":"","tlshash":"556160f3e3d8e0e48543efe8d5232926bb6b38bd3f92d7890194d9442a552b589c4c94","first_seen":"2024-12-31T04:55:51.416247Z","last_seen":"2026-01-05T18:44:37.822823Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DJb-s6uV.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fd2fd3f8.d.m.DJb-s6uV.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1792\r\ntraceparent: 00-227b52a2f97c17f545b66bd4fd548126-b3182ef278ee8ef3-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-700\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5422,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5371)","md5":"445125924d5f1414f8cd92dd9ac3d587","sha1":"df94a1352382d988a83266f5f34081a99c3c9aac","sha256":"aef7d57247a23c2b56f0fd860d7c82dd446c15f2615d8024d6dcbc5c4ef61613","sha512":"8a2775f35a0c04f0afb3c282f40fd652139a261ea772e1fff31740094b50921e9f9124f20ffed3ae0e56de0470d28b742d30d7d036b5f0e0d213a2332258cc05","ssdeep":"96:cnJZI8IIO9UXcSU02DrJJQh9eC97Ae0E0hbDO92pli569p0gY72T4n5jda50w484:cJZI8YbSFArJJQh9eC97Ar3O92pli56A","tlshash":"10b1b72ece0946b882c758fae1ea4e4a501de947f13c0604b9a5dc6f8614fe9931bb4d","first_seen":"2025-12-20T03:09:17.492157Z","last_seen":"2026-01-03T10:01:28.347422Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/instant_win-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/instant_win-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 413\r\ntraceparent: 00-5413eb83b06ad3a3609ab6d3b06c4e86-609d55cc343c80b5-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:59 GMT\r\netag: \"19d-61bf36cf7dfa0\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 03 Jan 2026 19:03:24 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2494927\r\ncache: HIT\r\nx-cached-since: 2025-12-04T19:03:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d8467444ec8a15407dd22a104df3c8","sha1":"c57ff6a14e02b2d2b88bda518f2ca548254d9fbc","sha256":"9e8fadb0932ffc1f1a4937d9ab37505a34a35b6d0c05fdcb7f00f8290934c9d6","sha512":"3a2e6ee1c391dcb602d2767169dac90216669c2d8279d0f6d4877c03f86c91b1e1df688ab5b75a0ad6088801337f3fa1bf1b59496ffa3e5784ab03a16d6cc84e","ssdeep":"","tlshash":"77e0abb9c448b7d4ea08c7f1a32c6b6da2bd70c2b37009d592c1760961060bfac8a888","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16463Z","times_seen":61,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/quickspin-dark-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/quickspin-dark-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6486\r\ntraceparent: 00-7d8b68f99b47094e671d2944173a3eca-b82af63c7d7b9ca2-01\r\nlast-modified: Wed, 03 Dec 2025 10:21:49 GMT\r\netag: \"1956-64509949205f3\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 09 Jan 2026 18:34:19 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1978274\r\ncache: HIT\r\nx-cached-since: 2025-12-10T18:34:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6486,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a89cee4a0cc8b4c6103f49a19f29c96","sha1":"c3be46c5f04f2df3266c866571b0485e56320aa6","sha256":"4ba17716ca8f712aa1f5bf02f6c0577a4d11195c1268ebe5393f85585d1e9095","sha512":"e2412ff50ea18b400310c2d0a60118ec442b467c6c3a511fa5f5c844d6f03bf967e38464aabbe62928a3349b8cb811e9c4256270b23cba54bf11e1c4d594e8db","ssdeep":"192:TB8P9EWU6JeJ/yGT4EABRX1TxLtxzNJxgFG:TBqwazEABRX1TxLtJxx","tlshash":"bfd195d8bb9e82b8f044f2fec9064479b9466dd63543c5e4c3c42d5af8489a94eadcc3","first_seen":"2025-12-25T07:42:43.845636Z","last_seen":"2026-01-05T18:44:37.881447Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon.ico","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlSvVePRA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqHujZ5hnwmBQvB2Kn0vvY1IfoUxBLoI; ABTestSeed=3; qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2; qtag_rfrr=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 18 Dec 2025 12:05:43 GMT\r\netag: W/\"6943ee17-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-04-05T09:02:54.885352Z","times_seen":278,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/208a717f.IEG3RMnx.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/208a717f.IEG3RMnx.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 213\r\ntraceparent: 00-ab488ccc9914c9cae0bdc538355d12f5-be0d50fd31b33de0-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-d5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (518)","md5":"2503e514bb973cf99d45b28178d290fc","sha1":"c096c1cd6280ff0fb242188e3e61d55aa4f56e6a","sha256":"03a5fda0dedb4bc1630184c5f31da408e9655a2a8a2a33ef27be0e96d88970a7","sha512":"8e86ac1e134673a406d1b0c29a3f57aa545d372e948805fc552eec0b563869941ce1f5c1ab2d32a6eddc8e79edbd8c2f7d5d97c6f5a6e595e047fdacd41ed438","ssdeep":"","tlshash":"88f0506b0d41d32e64b76419d5eb7e4c922d0cc726831b6c5c7870ad919569c50316c9","first_seen":"2025-07-09T00:32:09.424202Z","last_seen":"2026-01-23T03:09:51.680767Z","times_seen":40,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/86620776.DXw6KDyO.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 43080\r\ntraceparent: 00-ee454fa83ad7be56c64653b40beb8bde-d7b612982ff8e2b8-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-a848\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"01c9b0fbcaf965cf12a126adc871cceb","sha1":"70af6ca3b0d02c7fabdfb36d7015a50570a2fc6c","sha256":"a0e2fab0f43faff90cd9aa3f4ebc4afd542decb4778c55f29149d9344aca72a0","sha512":"dac3731307bcd384f4c8f674a9a18b4f43c1bb6434c0fae9d620b11da0bd67522c84e26ef0a0804342b2a87da2503fed9d24a0037e6e16e946af471102e9489d","ssdeep":"6144:6fLfAo1BvreQyY7t35lPJB3VKIN506LU+HnuISH7A45GiaYw6vNZqMX6Q25aTxFQ:6frAo/vreQyY7t35lPJB3VKIN506LU+9","tlshash":"4e64d7ab8e60613ef5b3b92ee1d9be5d7108dc03c9a30655e5a1972cc2c77d25336b08","first_seen":"2025-12-20T03:09:17.556946Z","last_seen":"2026-01-05T18:44:37.873632Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.YTabiTrz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f06cd424.d.m.YTabiTrz.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7389\r\ntraceparent: 00-c9c5da14410665ec4ac8b080b8e97ef8-f0114fecb50a0526-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-1cdd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22656,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22605)","md5":"0e878ef29d5437c02ef1e7545ecaecf6","sha1":"d3e561a4d07413d8afdc98561b02c0b787c51f72","sha256":"31c58b04a93cd88542f41d7d7525f52c89d06abefc56d86d32104a76a2f53a30","sha512":"7917def1844db22aa9c3ff9407076518adfb4fd31325143978e895d9fd4361e59e432325588970d6a8f9426feae1c27e9c42b8d1e39d33849ba08d27224c0c77","ssdeep":"384:kVxRK4+fn3zgUeIXi8RNK91Cke6cIVOpX1M1wfNkEyQ1ql6qgwdckHVzOCpG+tbJ:wK/z9eIS8RNKJVOplMSEQC6idckHVzO6","tlshash":"21a22cb7236293b246ab018a50770543d31407e5f148c4f179feadae35b58a2e326f7e","first_seen":"2025-12-20T03:09:17.620202Z","last_seen":"2026-01-03T10:01:28.319228Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/sunSw.DL-onBB5.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/sunSw.DL-onBB5.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 240\r\ntraceparent: 00-ec02ca38138ee391c72a2dc5acb6c1be-ca52705cab9f4f9f-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:04 GMT\r\netag: \"68e7b33c-f0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6327087\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0811eb7ab652dc7ee7bee06fed53671","sha1":"1192b619f776177819ebc73c6f6f31b11b891d24","sha256":"0565ef51f5934a1fc6f8a6e25f958de335b791559e5e0c100b2649acbe64f92b","sha512":"89bdfee5cd795ad373e227320ee5ad9b5509e9e1321726170fd93642d694389df569212784af41ed18a6a21f578507ea65d15cfe5d599e168ed956eae70f4ac9","ssdeep":"","tlshash":"d8e068d34b0af6ac92418636d9a83ae0321e64aa107420a8846e05a020569cee207ce8","first_seen":"2025-02-07T04:57:00.938579Z","last_seen":"2026-04-05T09:02:54.855109Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/bonus_buy.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/bonus_buy.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1496\r\ntraceparent: 00-96e6a3491afc447b53bb43c3b91628f0-557494ddf44fa27e-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:52 GMT\r\netag: \"5d8-61bf3656318b7\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 22 Jan 2026 17:12:22 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 859989\r\ncache: HIT\r\nx-cached-since: 2025-12-23T17:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cc7ff5133430a2bb78f34c3442b720","sha1":"0b8442472d38d17efdbf59c2849d0362c3b90687","sha256":"22eb05f821c7cc95e715dc17de449edd34c22e15cd62eeb916824dc6b87b31aa","sha512":"f70c09ab0097bbb5e75b417860f3d09d41032654af0f8a967bab915228f284cb3b4fe35b4e7b3c99bace421f1f3e428d39b9c3b3931612f7734bbdab203ad54d","ssdeep":"","tlshash":"2631a7d2564c60f4570ed774c526ff967baf34ba7adc8bcc61400a844e20188b98d9c0","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.250859Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/vegas.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/vegas.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3456\r\ntraceparent: 00-a633f8b8b7af5a3967b3818cc566f8b5-6f0971cd98b474f0-01\r\nlast-modified: Mon, 07 Feb 2022 08:59:03 GMT\r\netag: \"d80-5d769cff1f764\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:08 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 452524\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a710024692d92eb9bffbd1a702336855","sha1":"125596c7cdcc5865f9c7a3824647caca7beb2192","sha256":"c7be15965dae1df109391c7dd4e88fb2070ccdafd55d4f5b2739ce4c618fc8a3","sha512":"784ae4fd878e39538228739de6ff4dce3117394ce6e6b832b61284a0f2bec2e1e6382561e1a87136e384a8f549ff7e5f6149944cb03e766f117af85c4d3ce3a3","ssdeep":"","tlshash":"f061f35c8a2a4260d11113deec4ef0b4bd89295c27529df187382e0379758fceca68eb","first_seen":"2025-12-25T07:42:43.787519Z","last_seen":"2026-01-05T18:44:37.827908Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T16:05:22.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR; Max-Age=2147483647; Expires=Wed, 20 Jan 2094 19:19:29 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.CMuWNRWF.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (21561)","md5":"9210cc2c561204fda10ff6f8240a5576","sha1":"9aab784bdb553748c5d1ad1babf60c5869508e89","sha256":"25ef5ff4b6bcb386c07ef25c648e901c2b8dc7278536311b3933691dfd27bf18","sha512":"2aa2221744736f8f65efffc47465d18e0cd4501e09fe611dfa2729432c053ae374e2d70c492efec5fef2710e0ffd16a0e9b2298d0df2f86c1fe8527f2093d8ef","ssdeep":"384:9Gmj1NN4Rwy1MfOjzB6oQlaKD6UQm6uaQtGokYbMHuAO5sz2J3SBCW:9GmxNN4RwXgzByHD6zm6vokSMQs6JE","tlshash":"2d032cfe1f0495f9fb1293ffe756208c6a09b467dd418d74f25c729877c7a9048a2182","first_seen":"2026-01-02T16:06:23.552287Z","last_seen":"2026-01-02T16:06:23.552287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":51,"dns":1,"connect":21,"send":0,"wait":79,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/new_slots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/new_slots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1699\r\ntraceparent: 00-3143e0828699278cfd5c1cd6eae3fe51-e6a07fcebe5907f2-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:41 GMT\r\netag: \"6a3-61bf364b9c54c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccbd6c3b7279dc7e0c3e32460b07d77b","sha1":"d8400d43aa8abf54af0ba8a052192f1f1331e259","sha256":"98596f703ec5e76243f01c178e27e944f494fbda0e8e4dacd6291739b078ac8b","sha512":"bd75a96f89454b29baf742ebe76c471f2744d5e79f44ff64051d04ae236c1f08bb4270cb34b63933232213688b0e55c798b132e0e737bb9dc69beef92b003f0e","ssdeep":"","tlshash":"8a3102f7d3a952d0970bcbd5e22ab62674a73cf77c82679442006a4432535e9c88ec90","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.270025Z","times_seen":61,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-EJQ7a5yv0bE2sMoNie3Dd13HYSxPQHKUjsRtjKkBrTaCHYdyRTQcqobRbNSud8K0NsABH7BTz1rLrxwKQq3vDCfPzJ8CFP_jg3Le?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.54","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-EJQ7a5yv0bE2sMoNie3Dd13HYSxPQHKUjsRtjKkBrTaCHYdyRTQcqobRbNSud8K0NsABH7BTz1rLrxwKQq3vDCfPzJ8CFP_jg3Le?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon-italy.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LzQLvQ9pJDAF8mgBOrE46w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 16:05:39 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: muXxGJai3xL8iOwlXW0R2E8tp7w=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":1,"connect":93,"send":0,"wait":93,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/logo.CTzo9Wgk.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/logo.CTzo9Wgk.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-e8b4b347703035a8ddd4e4fa8dbb56af-9eb58ed47188be15-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-3dd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6328204\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c084e668671b35036439f1639690ef75","sha1":"9988516ab917ea62df37ef9136a9ee89da7e049c","sha256":"6516e9411efd44270ddd1ed1af1523a9c63a61a1bf29b697e1aac53302963b36","sha512":"edec61a2a75471788a707cabe122822827b51e7ae00390f54c00b36dc201a0885b035718ea7f4ec9b2e6344dc485b7d2182c142019daa3fd17f1cae14864a80f","ssdeep":"","tlshash":"0c1121eb861062bcab55afa5ea307416b10f547e3f4a86acc26c830014939d4e40cc54","first_seen":"2025-02-12T21:05:05.539064Z","last_seen":"2026-04-05T09:02:54.908329Z","times_seen":97,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/redtiger.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/redtiger.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 18002\r\ntraceparent: 00-78526c38950225a3b1da6a3c711aaadd-ad5b3c8b30398686-01\r\nlast-modified: Mon, 07 Feb 2022 08:56:39 GMT\r\netag: \"4652-5d769c75205df\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 452524\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b06c7f96c431e2fffee0ef9bb247f3e4","sha1":"402f658a55b47b9c7dba8659f731eac68164d43c","sha256":"163b80055bbb0b162d2b1a3f9ade2441ec3abe6a7e0c04505631f773e8982133","sha512":"1d0116aff4b9a4b722fe8bf0252d6ea1eaa5f5949f034f3e3f2613d01022ea5a9e854896bee4be5999b599e5a7bd207f18224a6e2484d94cd53ece972bb52e18","ssdeep":"384:6cBAgARcqrqj+5K4axmFXWjcy1MgvH/7pfq9U+Ld+Lhbf6MvhQvC/INqKG82d:hK8Ck4azjcGDfdWULhbf6OQKSy","tlshash":"7982a7c9a7f5e3fcf005f3f8826798b476935ce23922ca5583e95c51e6a202c45a9cd3","first_seen":"2024-12-31T04:55:51.598659Z","last_seen":"2026-03-31T00:45:46.202611Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.CbYR40R8.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.CbYR40R8.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-0f90947693469529f301f16c42d43c90-1dd7f5d46e044beb-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-1e481\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111493\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eceb615fc6e2c7c7d59e1f65d00a686","sha1":"f4ec48f6cda4262c372bd2e8c2e4b08c0a057c22","sha256":"1d34801f854a544218192a107303baa8ee5f3b727a6db519213b5832c04c6f46","sha512":"59d3b06590f05ddabb5e970129011f4811dad4c9a5f76c54deb3f2cf014815ab9c67813b4a634b08e82e25e7d7878b22b37cbf55b2d030e5b6353dae04678513","ssdeep":"3072:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10k","tlshash":"7bc3a8ff8e50a27bf767ec9dc3e5b648724eac03cc921d66d1b212ac42d63919394b05","first_seen":"2025-12-08T11:02:52.82182Z","last_seen":"2026-01-05T18:44:37.843621Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 11:02:04 GMT\r\nexpires: Sun, 27 Dec 2026 11:02:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 536605\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-06T06:00:19.915907Z","times_seen":5164,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.CdrhA9JU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fb4472f4.d.m.CdrhA9JU.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 737\r\ntraceparent: 00-700a38f8d27b111a2936cfd52768a752-0af4c9ba93b112d1-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2e1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1585)","md5":"847e7824816a0e12381d97caa0e7de7b","sha1":"e852c2bbbad7b928f65a7123832af9c857a39de4","sha256":"554fb834f32d541f0af623f28956fe98f4ea516a70c121f9bf634f50509e9184","sha512":"fcc825f759db14145f3946055e57f5490b4033eaa8386eecf4ba6db786b53ae1391db6b30a182ebf6a2f6f6dc6a9c5e60bd8e51a1852a67bf2b3b9f3cbe594a7","ssdeep":"","tlshash":"a931044edd44ecb5d69bc8adc0140403800f7c55f3e5c6bce6ada6fcc7b41a8a125725","first_seen":"2025-12-20T03:09:17.574046Z","last_seen":"2026-01-03T10:01:28.320104Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/utorg.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/utorg.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2382\r\ntraceparent: 00-713cdfcde9dbb29c2827f048826850d3-700d7336d4526b0e-01\r\nlast-modified: Mon, 22 Sep 2025 15:19:30 GMT\r\netag: \"94e-63f65588cf917\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86be8991a4c69dd7889a23bbf7f85f06","sha1":"f95de34fe087609ad985280738cde8ffa6c3efae","sha256":"882c5b1272dd98cd1dc2f3eaf7b1b313c5d0dbde559abd8a568ee7d4958a62a0","sha512":"7bb6854d2210186e1ae7153ae7721e943accceb27c75d69246932cb7de87d86f83e3cfcff7d2ae6c35884334581e96e0ec6690e13a2c5cefba74ac8c9d42ae62","ssdeep":"","tlshash":"ee4150d222edb2e0f90dd7f86924586b762b32fa3831c594836b7c09a60954fc258cf4","first_seen":"2025-12-25T07:42:43.91826Z","last_seen":"2026-02-28T15:40:00.675912Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a48612de.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a48612de.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-deffe5457731b34091c9b120f969cda5-0db7db30c603e828-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2435682\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T11:30:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8e2531cb.d.m.OwQTRB-h.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 56253\r\ntraceparent: 00-a92917ad7c6f5adff25051cb5f0e131b-71cdedde8ce2c8ec-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-dbbd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303515\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":331561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46765)","md5":"1e76c0711361f4daee05225a2596f0a9","sha1":"e7b13fb64c5d8725da097a7d60c4d7df9c3fe7b7","sha256":"4dac04747d077ea3b6b523652482727b9aa745293220e59a60fd813fa390e01b","sha512":"13792dbb6a0257a659a02c7e91375c7f851990ce398270f60f3feb8d2eba37c8df5758423721951006e0e71dabff5fbd1177623b591f9a7699d0c9c8536bf0d1","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fhcNe:/zjplrNZ06rCnLfwFrl","tlshash":"a864e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb5","first_seen":"2025-12-20T03:09:17.538841Z","last_seen":"2026-01-03T10:01:28.338065Z","times_seen":5,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7a71a6d3.d.m.B5bZndq4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7333\r\ntraceparent: 00-5ffa054c2f27a53ecff14b3b10afb10b-362058a9a141b86a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-1ca5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28320)","md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-e9f70f4f1296cec7b76faf8e93a017b9-17fb2a9820be6f04-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303516\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/BookOfGods2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/BookOfGods2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86242\r\ntraceparent: 00-a07e0977c374eae081bf3d805f77b5fa-9212ae6fc7dbe6b8-01\r\nlast-modified: Tue, 19 Jan 2021 15:32:28 GMT\r\netag: \"150e2-5b9428bda24c0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:52:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 456437\r\ncache: HIT\r\nx-cached-since: 2025-12-28T09:18:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"ef4f201355dfda0b185294d8c4db3597","sha1":"11fb3ce01f48c7e8788af7154be69a315a656459","sha256":"a246edad75f2c6156f38f95bda0e17df6eef2147595663aefe04d8cc7baa376d","sha512":"86166868955aae3d61477208a65ec03b369b9b4b583c9457205546d1440fc84f0ee89c9a7546281bd081bf4b7942aea1ed4f0bb98216c4e7608df825d1e98780","ssdeep":"1536:MDmkJP6AT3wHUGPzQv9Ak6jPQQAktbJlaB0RhC/dzq8A5VDMOr2OSUnX7hOV6o8:XkJXH9Ak6jPJAybJlaB6C4vJSUnXe6r","tlshash":"9a831244a3b986d2672498453e47e53c1d9207eb3e638930c2bee9375781db603a3e87","first_seen":"2024-12-31T04:55:51.657149Z","last_seen":"2026-03-14T07:22:16.755131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/LeprechaunsMagicMegaways@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/LeprechaunsMagicMegaways@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 79418\r\ntraceparent: 00-f79dfbea2e4c87e7844128f279c931e4-890e5a08a3f0bfad-01\r\nlast-modified: Tue, 27 Oct 2020 19:14:22 GMT\r\netag: \"1363a-5b2abdabc119d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 28 Jan 2026 21:10:31 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 327302\r\ncache: HIT\r\nx-cached-since: 2025-12-29T21:10:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"b3a6acf111951657e25455b8eb60b777","sha1":"4f261906489801af9be422e8337bb6af4694171b","sha256":"f79d66d2b8871bb1dc163bcf76092e9cb2b8541832fec3c0b559e06d9dc92726","sha512":"811d2061ec26799f7df22aff83ee2adda4d4c9bbee4dab95fb0e16140872428aac7a388fec03807b8b684f826912f9f877a29dce1395d1064afc88fed48dca4e","ssdeep":"1536:Bvit9JinpaY227FCM1WUYbTLjnc+afZjWtki4EBk6ordsmgh7V:xyJmpb2274UWxbTLjbafZjWZW6o5svD","tlshash":"f87302de8f06a9e0f384b8b0dc478811dcfd66a09d726306ce5ced15c24daf926496bd","first_seen":"2025-12-25T07:42:43.854379Z","last_seen":"2026-01-05T18:44:37.844187Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:36.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 247380\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-04-06T05:25:57.731973Z","times_seen":23113,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/86620776.DXw6KDyO.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 43080\r\ntraceparent: 00-f7dd63384e01393fab56cf2bd68df309-206c55edffcae783-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-a848\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111493\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"01c9b0fbcaf965cf12a126adc871cceb","sha1":"70af6ca3b0d02c7fabdfb36d7015a50570a2fc6c","sha256":"a0e2fab0f43faff90cd9aa3f4ebc4afd542decb4778c55f29149d9344aca72a0","sha512":"dac3731307bcd384f4c8f674a9a18b4f43c1bb6434c0fae9d620b11da0bd67522c84e26ef0a0804342b2a87da2503fed9d24a0037e6e16e946af471102e9489d","ssdeep":"6144:6fLfAo1BvreQyY7t35lPJB3VKIN506LU+HnuISH7A45GiaYw6vNZqMX6Q25aTxFQ:6frAo/vreQyY7t35lPJB3VKIN506LU+9","tlshash":"4e64d7ab8e60613ef5b3b92ee1d9be5d7108dc03c9a30655e5a1972cc2c77d25336b08","first_seen":"2025-12-20T03:09:17.556946Z","last_seen":"2026-01-05T18:44:37.873632Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 247374\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T09:11:35.796356Z","times_seen":718361,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/booming_booming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/booming_booming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 14020\r\ntraceparent: 00-5606ec16efe622d4629f64ab4a8fa65e-837d93180cf2360b-01\r\nlast-modified: Mon, 07 Feb 2022 08:42:39 GMT\r\netag: \"36c4-5d769954701b8\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 10 Jan 2026 18:47:04 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1891109\r\ncache: HIT\r\nx-cached-since: 2025-12-11T18:47:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4483002f66b0cf8814a6f09919ca5e8","sha1":"e186a468d5f37733720d28e8c4cc36940567ec87","sha256":"a1bb6f8a88b90d9809b9e8d30145763a1dfaec148e215ebaf9e493b003b3361b","sha512":"daec10502ddf12b1ecb22b5c6d1c007862ef77efc6250befe48ecde755c7a792202fa5ca06940c6d413f30dba74b9fc726dab1f98691f7f9645d7599a7086cca","ssdeep":"192:13WDp+LdRPXpU/+ARdYXVWdTTu1mSTcTjjnn2f6N/FL5gqDAgGP106E8wGSZDO8/:13LZRtsYXV+W10+4NL5gqAP1zIfIM","tlshash":"805295de77a192f8f504f3feca2258697e4a68fb3c92c638c3a51e41e69145d4948cc3","first_seen":"2025-09-23T04:33:55.500101Z","last_seen":"2026-01-05T18:44:37.813352Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/evoplay-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:33.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/evoplay-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3217\r\ntraceparent: 00-007efb6bc5c6ea8e56ad1f2b6d80affa-ff7dba4bc2b5551f-01\r\nlast-modified: Mon, 07 Feb 2022 08:44:44 GMT\r\netag: \"c91-5d7699cc016ff\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 452524\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d7c4a09a7a89989c9b7b56143cc28f3","sha1":"63029c4cf131923aa48fb84bc8da5a03a838925d","sha256":"f0643cf6bacdd28afbe0d4ea81297d1e4b625057506ac3956610ba354d678a0e","sha512":"7d923b1eaa48a216acb8179c2e4f2e00bc4b8d14ab908a1baeac61febda8fe3e6fc7ca5be74dc1c24fdbe5e7a29c215e85c954cf5a96b1ac5a4e55b8b485af07","ssdeep":"","tlshash":"926186e8b77b92f4f0006b69c33e90340e674de49a41d468cb761c2bb4314ae4c69dd7","first_seen":"2025-09-23T04:33:55.434039Z","last_seen":"2026-02-28T15:40:00.789446Z","times_seen":14,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/winners.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/winners.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5772\r\ntraceparent: 00-5acc6ca31c649a7c19f1a23d23daf47a-8259510bb1fefd0a-01\r\nlast-modified: Fri, 28 Jun 2024 13:43:26 GMT\r\netag: \"168c-61bf36e9740bf\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9a04d5d641da307a6d416f7bdca8de6","sha1":"6872c0cd650572e3207bca785ebd290d156df639","sha256":"25d002e623903b320eb203f271ef153ee2df8a51e2aed4878c7598d9f6a6ca6d","sha512":"88d73b7b558d91b6146bf4e368508db289a6f861f92cded175408788a361b706d923428a9876e6b7e72fb40d48e4e0f508d6bc99f755f6ae9eab00717ea75059","ssdeep":"96:Sp3FcBAtU1yTkrUH9/kq52Z9SoF/0HcU8mnsAC9gl05nuRJLEkVNxkzD+NWI2bL1:Sp3Fk/pQn52Z9SmHqs79u05yVfgqNWnt","tlshash":"f8c144f5e2d8a3e099469ba1e9358423f6af3cbd9fd9cf848190dbe4e5110d84acdc44","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.157824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/scratchcards.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/scratchcards.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2305\r\ntraceparent: 00-b8531a7287ebb8b6066d153e42bb7d2b-a2277a5c2d9d9123-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:25 GMT\r\netag: \"901-61bf36af57c9c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 20 Jan 2026 20:06:49 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1022322\r\ncache: HIT\r\nx-cached-since: 2025-12-21T20:06:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938141af1359f4354cc7d73a69af21a2","sha1":"3953b0622646db4fac74401cd03e3fffbeaee8e9","sha256":"9bb2c583bfe0cfe4ce25dcad5944668b5da72f52f04163654804a03238897b42","sha512":"0663be7226353fdf94b17a69c2b33aedb3fcfac06628092ecd2064f96859e0790a450d155bfbd3c58a264c4f26c673d70cbf32ecf133f7328b9369647ecdbd4c","ssdeep":"","tlshash":"e4410ff2ebe852f49547e76590275d7a369b2cba7f85cbcd82406bf099b40a0958dc00","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.233067Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CBcoeN-L.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.CBcoeN-L.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b09f4bb0c1b20b6267ed4225245f659b-b5ffc862d4ac7529-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-13bf5b\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1294171,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64928)","md5":"a19b2ba83dc7b32fdf0714ee2f7f2b1e","sha1":"4105bea059c7efb567d1e7ba605ad9423ced21a3","sha256":"53dbdf60d4a9a33cc6677a12cafa0b01fd7bf0e2fa136cdcf72aac5a81e21c87","sha512":"070f560d13fbb209d58d8b9a694e819c57f349db2ed1d4b8a7b237f0d73090ee2e16f1867cecab6611c69ee9ad9e5733ec4751f20b85297277f6657692bf104e","ssdeep":"24576:9i4KN2yyH6LAD+d7sU/dBqaUT8A7Dued5mxahp52WuTOj6jvuzba0LoqhjoU:9i4KN2yyH6LAD+d7sU/dBFUT8A7Dued3","tlshash":"24254b4a7649347683f34596a09b0401a23c0b55f5a48dd0e6fc8e7e2aadd3093b7f6f","first_seen":"2025-12-20T03:09:17.617831Z","last_seen":"2026-01-03T10:01:28.224719Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fd2fd3f8.TadvuQR6.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fd2fd3f8.TadvuQR6.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 582\r\ntraceparent: 00-11064deec592771f137df6223e40b8ab-cd4872faa97985ae-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-246\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2988)","md5":"033bf2fa4706b216fda9578d8c6b2078","sha1":"3a89ff4e4f31fe24af064232028922a020cb24b7","sha256":"9655e30d07b8a936979f4a5e82b8926f744fa3082131939cf7210dbd6df5f83c","sha512":"26f73c89b717b126d8e751a478783e21ecebf07b0833979f5610459a9e6d57b9458c191b868e87c8ef329e4c3f5185b68a16dac4fbc54a65dbb56e0281fdec7d","ssdeep":"","tlshash":"615126adce1853a9a4d754fab1e64e4e5004ac43f8391a51b991fd2ec182fd1630ab4c","first_seen":"2025-04-24T07:07:12.695805Z","last_seen":"2026-01-25T14:09:20.120042Z","times_seen":90,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"98.91.123.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 781\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":781,"data":"app_id=cnjqphyx\u0026v=3\u0026g=e0d8499007785b08ccf8673cc4eff54a1bdbc444\u0026s=73c54f40-db7e-4269-bf91-b7e0d50210ef\u0026r=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=342496f84ed50aaf\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%2290b00927-910f-49d1-ae25-7529e8ba58e1%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***\u0026device_identifier=dd41c19e-8a3b-422b-8d17-f21a71c9d509"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-intercom-version: a742c335d83ca5e81456c12b34bc8e41f878cc2c\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nx-request-queueing: 0\r\nx-request-id: 0001he36ol437d00uqd0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\netag: W/\"75d1480e14835444c5381d54eb7c1aa3\"\r\nx-runtime: 0.189115\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6438,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3fb8a6ea929674e485e8acc5c0b7a77","sha1":"bb6204a2ebce68654cc980bb02ad3c9893e790df","sha256":"75d1480e14835444c5381d54eb7c1aa3ef9ee672e1b35b624868dde54278a0e6","sha512":"04da32d5955bce974af69e64f3221a829a37200d315de74408409b83dbcfeeac3017d6d8e12e50fbe1f3b446e87016b04f391e69f528a7f8d81a57d4dbc096fc","ssdeep":"96:4Q9c7pOaRvrj+D2JVHAYg2zlGjzK14zMwaLjGMlbjfZ9B1kAOU5zVfwHwhPD1O6S:4Uc7p5Rvrj+EgeTxDBDlw+1O4GtX","tlshash":"79d1aa8c49485c3e73cb82dac7597e0a07799297f1943d98f9accd2d21db399526b303","first_seen":"2026-01-02T16:06:23.565976Z","last_seen":"2026-01-02T16:06:23.565976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.uJdofHpS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7fbe0154.d.m.uJdofHpS.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-8dcba15f2900dab4c58d897d543be8d8-58b1a4c54b623fa5-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-700bd\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458941,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36266)","md5":"c4133af70b970747c0f82d2b0a1e67f1","sha1":"cbb62c896e9777f7b1ba8bd692e4f53f6a8cf308","sha256":"15c2025e57f5474684826e21cc36d32a225ccb2f86b78ab3bd2a22789e8d464d","sha512":"d9ac0bd14b94e20bb8f9e97a5a21069a2dd17f0200ed090ef83a0f369d26777b5d5d9c438b4400a0adab001357e4a140c5e3c8375ebcd89a3b8749bb8f3bd156","ssdeep":"12288:y552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd50:y5dLfKGJvEvGdrSaV67dmcgUxHtDcAU8","tlshash":"eaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","first_seen":"2025-12-20T03:09:17.480306Z","last_seen":"2026-01-03T10:01:28.357961Z","times_seen":5,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7a71a6d3.d.m.B5bZndq4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7333\r\ntraceparent: 00-d542e16e2514c610560b58d0f18729f2-e4bf08cab4b35257-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-1ca5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28320)","md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/pix-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/pix-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 14736\r\ntraceparent: 00-45771d08c6e1a9e58be5c5d6ceddb205-4839b384a1ffda9e-01\r\nlast-modified: Mon, 22 Sep 2025 15:19:05 GMT\r\netag: \"3990-63f6557146a56\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 31 Jan 2026 21:24:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 67290\r\ncache: HIT\r\nx-cached-since: 2026-01-01T21:24:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9937173389be3b233a5a810bc2ff566","sha1":"30b81ef5b6552e35566408c65ce50a70c2dc5cc3","sha256":"eaa2d965aed97f6c133f9137ba5fe1ec3b6292c1d491af27c5ef1888a7c73829","sha512":"b633273e20d759d5bccc1d33fd2ad35fae43cbe39aa621bc934d9490f553d88699e95c9b71bd8c3153ec3560db19e9dcfa513c40b28c2b8cf7c7de6d37525896","ssdeep":"384:t799gnH0hx/Jj4ckMolc2UfThm3z5dmpmI3LjdFmwRkJ:tx97h7g3BELjTNkJ","tlshash":"1362839133e8f1fa7608f7ed8369f4366a6b35e12b22805ccbf62da5c60456f0d489c1","first_seen":"2025-12-25T07:42:43.80191Z","last_seen":"2026-02-28T15:40:00.758927Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/jackpots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/jackpots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1666\r\ntraceparent: 00-e0cc4469890807c10fad6e3eaa133d8a-e64478c648ea8a31-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:33 GMT\r\netag: \"682-61bf367d55ec8\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 27 Jan 2026 19:37:22 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 419289\r\ncache: HIT\r\nx-cached-since: 2025-12-28T19:37:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d078c57099cadb8866bdf0cf7e6fb1","sha1":"9db3f9769966f73119b118489aef70be6c435b10","sha256":"fd1792c86362ee56c8ca9479b4bf023862faec59991939d1a4e8d568877df028","sha512":"c4e39f897618c3635f2710359262a143db4edbba3b2ad27598e562c88648bcb463cd30c372516659a876d17827cfc5317baaa23aa23144c6cd992d3b94a8e854","ssdeep":"","tlshash":"c83106fc42e8b2c496465b20fa27f8d262962dfceff39ec951e25b314416191490e9cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.195707Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 16:05:28 GMT\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a0c6ee06b96a7406eed6e54bf1b64c78","sha1":"f69e8081aa551d26f3eb46672a79a4d7cb4b4657","sha256":"260af81791823a8b9f855ede4e9b6d1220238b62c22859594d8cf2216dd0348e","sha512":"761fb8e6ed1e28f98d11da236d244f38ecbf08e43f410918ca8048b08e04b115bafcd9fa4fe2977e123a7efc2f251be8f02f88e981aba28d3e1fca0968746276","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqaVyIAa3LZlfCJmwBUiRDfMTcfFBhiEymDcTYn:KuGH72NFEIwLzieZxrAwR","tlshash":"7b73eda1041b9440eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2025-11-19T19:15:03.775253Z","last_seen":"2026-01-25T14:09:20.059844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.B0q2ui3m.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cd5c2051.d.m.B0q2ui3m.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1748\r\ntraceparent: 00-ef27e9d1478b20f279420e97a4ad736c-287507be556dd897-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-6d4\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16456\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4451)","md5":"dd198e44c4f78f0c8a1655ffc5491cb2","sha1":"64ff495b9de2976b518e79eed1de631a3a95ee3a","sha256":"fd1ba13f4d1f13b0a6f1dacb811a8243ef37ed050002707f01bb11d1c2d56de1","sha512":"de17a7b73e46b49f5d6b7c62848145e9b06cb6c30543eabf477fcb33360877282d392499dc1a93e0472512b60073c2a1f44bd6d20fa658dd3f2fff4f964384fa","ssdeep":"96:P2MSRJIzZ35CjC+pPuF3KlQ0Dg9hAAur0wZxalsAHmn1WSUtdySUxqdxiPdr7d+Z:PhS3IzZ3H+pPuF3KlQSGhAlr0wrso1Wx","tlshash":"5291d9cd77087afe43e30cbdb962000196356a92a6704a89f1ae4dfa1357494f137a87","first_seen":"2025-12-20T03:09:17.58082Z","last_seen":"2026-01-03T10:01:28.316373Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.OwQTRB-h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8e2531cb.d.m.OwQTRB-h.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 56253\r\ntraceparent: 00-5fe43e25e33c620b9e426f60880bfa25-32e1dd27178f7a5b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-dbbd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303509\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":331561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46765)","md5":"1e76c0711361f4daee05225a2596f0a9","sha1":"e7b13fb64c5d8725da097a7d60c4d7df9c3fe7b7","sha256":"4dac04747d077ea3b6b523652482727b9aa745293220e59a60fd813fa390e01b","sha512":"13792dbb6a0257a659a02c7e91375c7f851990ce398270f60f3feb8d2eba37c8df5758423721951006e0e71dabff5fbd1177623b591f9a7699d0c9c8536bf0d1","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fhcNe:/zjplrNZ06rCnLfwFrl","tlshash":"a864e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb5","first_seen":"2025-12-20T03:09:17.538841Z","last_seen":"2026-01-03T10:01:28.338065Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0 HTTP/1.1\r\nHost: d1cr9zxt7u0sgu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nserver: nginx/1.14.2\r\nlast-modified: Fri, 19 Sep 2025 13:00:04 GMT\r\ndate: Fri, 02 Jan 2026 16:05:27 GMT\r\netag: W/\"68cd53d4-2c9b0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DZPUWkOgYjcGbp5qWwAglFp0dBDIo92nX3aph-cAmCTOIGV1136vSA==\r\nage: 49\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":182704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-05T05:28:22.588791Z","times_seen":81,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 16:05:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot.C4J6IXOg.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot.C4J6IXOg.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-d2222588c76c533c471b607e62cabd77-f6bed8fce37d0c33-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: W/\"68e7b338-2a3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6333672\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T08:44:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4cfed5dc8f597a9ce3ace9cc0d54468","sha1":"d02e363b2a9a00da32b6a9d73a03b904ce5650fc","sha256":"86ac12bafdcfdceeca1301bec6db2de3b5d02cf3982a6f11da62e2c383f61662","sha512":"36716691243cea3866beeefab568cc29f891e356ae23a8d02ba59549a74db3119b02b40f017f4841610f27bdbdc17c4f8aa1b34064d10a6c0e413f36b7d1ee19","ssdeep":"192:Mw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0q:M6YAXsI14g7V6scBUCVz","tlshash":"812276e437f9a3e4f106f3ec8756e4247e5328fa7a61c569c3aa2c58ea4145c0d98cd3","first_seen":"2025-06-01T01:07:13.940104Z","last_seen":"2026-04-05T09:02:54.875637Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369930965\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026tfd=10521","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5ca1v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767369936825\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=17336208.1767369938\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1767369938\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767369930965\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026tfd=10521 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Fri, 02 Jan 2026 16:05:38 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":40,"dns":0,"connect":11,"send":0,"wait":20,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/d39bd125.D_oiZ6VG.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/d39bd125.D_oiZ6VG.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1606\r\ntraceparent: 00-28b3a652685ce01bd6b1bfce443b2a7b-62074c9abafc24db-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-646\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16458\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13647,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13646)","md5":"11277d5a2f9e44f0c65566e41538810d","sha1":"a087c62d80dc87e9025aa37faaeb5d6b2b8434e5","sha256":"f6387d1daf770ea16213c1b17b4b60e1d5e866c6a36f439d9ee0a8c7eac84693","sha512":"86417192c30893b95180415d136975b7c35f273e830e470ac839f66506e75ed5ff37b6a28506ff7925fcbac02e8f0a66b23d9ac19191758f4bad31f44dc1ef05","ssdeep":"384:2/xWwoqy+iuPA5d1uY7IjddHR5g5HYni6aIplwBJWy:zrr","tlshash":"cb528ebf1c61be7792a6312cc0d5b924b3998c0f5e8652c130a4d67d82f4396973ef1a","first_seen":"2025-02-23T03:47:48.723351Z","last_seen":"2026-01-23T03:09:51.759132Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot-animated.DZ53syVI.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot-animated.DZ53syVI.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-0eafcb4cc764bfccdb3df3f86b031242-56c769e325ba06c4-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: W/\"68e7b338-3192\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6333673\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T08:44:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02c2b186b902e2d40b0dc138f083ca80","sha1":"203e6ffeeba97cfbc2aa11965b073f2a8c29feb6","sha256":"642050e727aee3f059adaad0150fbb7355e30f78e072bc79bfc939d032d42d66","sha512":"1270072f581827f00e2fac5a83d453d37285757b0feb4298fab057bc335231a1ec33e7939bbf120b9da1116e11b7ebbe031cf6a186113c35b90d67cd7bed4ac1","ssdeep":"192:SW5PDinj1C0JTw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0t:STnj1Z6YAXsI14g7V6scBUCVqn","tlshash":"eb4285e027f9a2e4f106e3ec8656e4247e5318eb7991c569f2ae2d58df0144c0e89ce3","first_seen":"2025-10-06T05:00:55.723421Z","last_seen":"2026-03-04T23:34:52.542712Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"98.91.123.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:39.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 750\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":750,"data":"app_id=cnjqphyx\u0026v=3\u0026g=e0d8499007785b08ccf8673cc4eff54a1bdbc444\u0026s=73c54f40-db7e-4269-bf91-b7e0d50210ef\u0026r=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=714070e843e8038e\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=undefined\u0026user_data=%7B%22company_id%22%3A%22LI-LEONCASINO%22%2C%22language_override%22%3A%22it_IT%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 16:05:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: a742c335d83ca5e81456c12b34bc8e41f878cc2c\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0002hv0jat0hpo9mirg0\r\netag: W/\"ac822ca77b01b8d4ba9333f877aac36f\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.245683\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6369,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"153b28acbe0a08227924027268a11805","sha1":"d7684b12ceb93e2ce5689ca908eefba7384b669e","sha256":"ac822ca77b01b8d4ba9333f877aac36f72b3c239ac103d969ef330bb43c86d6c","sha512":"49b0758b021f7ea446ce03ff24fca98ce5c062616ceb6b49a85b17aba14194a39037d3ea89fd2683b2df23e65ab006ee6fa3365a1b3ab1523a972621892cf800","ssdeep":"96:4Q9c7pOaRvrj+Y2JVHA+NzlGjzK14zMwaLjGMlbjfZ9B1kAOU5zVfwHwhPD1O6tq:4Uc7p5Rvrj+dgQTxDBDlw+1OCGtX","tlshash":"ecd1a98c49581c3e73cb82d9c7597e0a0b7a91a7f1903d98f9acce2d21d7399566b303","first_seen":"2026-01-02T16:06:23.575467Z","last_seen":"2026-01-02T16:06:23.575467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":213,"dns":1,"connect":105,"send":0,"wait":343,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BLXpMgS1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.BLXpMgS1.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38391\r\ntraceparent: 00-bac59d204eceeb1ade15d5791ac4b80c-26ba0cb9e57f455b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-95f7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 841337\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-23T22:23:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186466,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (52553)","md5":"9880decbec604ca45dc8c1313fe71636","sha1":"a3193da690b564fa4dad3a83857b36f54ad69411","sha256":"ba5c354fc590490855811c9578dfd1cbe500597b6d3b31536e5b86914fecc3f8","sha512":"506933e7caf71549d5cfe89c98f01723723b549ba6184686b4d2a3b5423170a0a9652200825e7132014d65e9d89500893cf76291878f616b71d9109a4a689802","ssdeep":"3072:G614onULeOrakzX/yYJ5SfTlJaweqMQ5I9BeH0WBtG:51hUyOrakzvyYJ5Sb1k9BeH0WBtG","tlshash":"8004fa166a4438ff4f710e2e5b2a7aa462330d98fa21c073d2b69f3e2f5b401f197595","first_seen":"2025-12-20T03:09:17.532066Z","last_seen":"2026-01-03T10:01:28.339038Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a4618c137ca8f845085fded76c5ffa13-60ab6a68d5c7fccd-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303516\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon.ico","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPM8q3RzlT/JaPhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG1KIiLR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.uJdofHpS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7fbe0154.d.m.uJdofHpS.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-7316c63452f45db3c6ad1998351ec99f-de1718b5e273f26d-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-700bd\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458941,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36266)","md5":"c4133af70b970747c0f82d2b0a1e67f1","sha1":"cbb62c896e9777f7b1ba8bd692e4f53f6a8cf308","sha256":"15c2025e57f5474684826e21cc36d32a225ccb2f86b78ab3bd2a22789e8d464d","sha512":"d9ac0bd14b94e20bb8f9e97a5a21069a2dd17f0200ed090ef83a0f369d26777b5d5d9c438b4400a0adab001357e4a140c5e3c8375ebcd89a3b8749bb8f3bd156","ssdeep":"12288:y552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd50:y5dLfKGJvEvGdrSaV67dmcgUxHtDcAU8","tlshash":"eaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","first_seen":"2025-12-20T03:09:17.480306Z","last_seen":"2026-01-03T10:01:28.357961Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-8045f36d409637872bdc54dee044c692-b0a1e14b1840d41f-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303510\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":1,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.AxOEJzb9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2df41dfd.d.m.AxOEJzb9.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5335\r\ntraceparent: 00-445477294798f9dee8b8db50c3a69b54-4b9965636ea84b7a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-14d7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14692)","md5":"eedbe56ec5f87538d02bf66916759300","sha1":"7f6abe19844c6cc6eab778065c2279a2b02d8b90","sha256":"3c909f45684d0a9d66311deac3d809f8cb1e0233a0efc11793f0dcc2b34a27b5","sha512":"6c0b24c6b85dd4c4095a625f59ea58909e2a23d9628ff62e8cfa327e4189299f9d9e6da2bd4311ce7b1dc1d6f008ac2bff4c484865d56655e422fa4bb7810e72","ssdeep":"384:jORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6x:jORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFl","tlshash":"196208f170ed657043e616e0a0b70106e5a9552830c9c4e0f59fcafe45eb980a9a7f7e","first_seen":"2025-12-20T03:09:17.555247Z","last_seen":"2026-01-05T18:44:37.72314Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CxxbCUUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/208a717f.d.m.CxxbCUUQ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1427\r\ntraceparent: 00-390881e376570d3ec5f0ab37a6a8132f-0ab447bbfbd204a1-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-593\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16458\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3307)","md5":"a1acf28d407bee53298538053e42007e","sha1":"b709acab1d70f0f569e596683a3202ae4ed9e68a","sha256":"3cae12fbeec3d3b3200c7410a86f7d740b4cebb2b760561535ef5f53848473c9","sha512":"b03986a36418e86de4271a8106cd0a927a84b59ab5dc81816d99814ce42d17ddace139271a1f3fec657a812a44e323d171a642f429e8cdc0ae145713686e7e68","ssdeep":"","tlshash":"da61b59b6206e370c1166094d02f2c00e95806cdb3b47590adfd58aed9a213ae17bb5e","first_seen":"2025-12-20T03:09:17.611272Z","last_seen":"2026-01-03T10:01:28.349763Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:29.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:29 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a6b43163769b9c7eed7afedcbffd7de4-dc9f990bbccea043-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-10bc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111500\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-04-05T09:02:54.826445Z","times_seen":100,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/71c69379.Df-RY1xq.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/71c69379.Df-RY1xq.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 105\r\ntraceparent: 00-57dfcbc0b39848425ae1c7b65532eb59-3d562f2876a224af-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-69\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1013155\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-21T22:39:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3423d7cc3aa7ac44d033e2e4be0b00d4","sha1":"a4d591bc0446811187b44bbc1b41c07a7f48f232","sha256":"152add0de253a858678d73d9988ee6214da2dc169ad58e26e2f95e472b50fed6","sha512":"65c19ef7f61a6266e6f34255b873f9d0d88f42971a124787b263063acf53f4c0759f3b40a563d4aaeeee269edf833b3921dea4e9b2fa89f82423aacd6cd8f2e9","ssdeep":"","tlshash":"87d0a7568df1d6336cd0590bb3444a8c30c29c0b85175b04c49a140cf4b359b3202384","first_seen":"2025-04-24T07:07:12.797229Z","last_seen":"2026-04-05T09:02:54.903977Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/EgyptsBookOfMystery@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:34.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/EgyptsBookOfMystery@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70358\r\ntraceparent: 00-64272af93fe6244a18bd468ce2e95c98-5726d6010c03076e-01\r\nlast-modified: Thu, 13 Aug 2020 08:57:03 GMT\r\netag: \"112d6-5acbe7cf3a615\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:56:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 449435\r\ncache: HIT\r\nx-cached-since: 2025-12-28T11:14:58+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70358,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"3fad23c3bde1cbad7b786a008fbbd5f2","sha1":"a2617d30a314466f54ac5c8e428838124c7dc4cc","sha256":"3d8ffd93da7e67d6bb00c7982395899ec823614afef289428e696fcba616bee8","sha512":"59ed992b567a36a2a732463ec5eb67fb90f04529cceecf38dc1c88c61923429f9bdff2dc59b05ff274f2d98087d2be9b23557971655b5d0b81f53adc1e5763a6","ssdeep":"1536:cXdYkLWeowcYM3+IMg59lumho2lDDxrS6rgpOguAC2sojdCk:SLWV8++w9weo2lPpLgHC21d","tlshash":"c763016f3fc27a41f934b3e07cbbd42578524d66b8c2b976892cd4eb57d054020ea4ea","first_seen":"2025-12-25T07:42:43.891421Z","last_seen":"2026-01-05T18:44:37.876235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/06b1eb38.d.m.Cmy5yogU.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28943\r\ntraceparent: 00-5ef57ca84ef3e83d38d123b0b1801b59-a2e3428ecceb1f60-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-710f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111499\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.JQTJKyR8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:23.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a48612de.d.m.JQTJKyR8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 59368\r\ntraceparent: 00-68d065de28ae275d9db5bd633b70216f-d13413525b96b9dd-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-e7e8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 111494\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37484)","md5":"6618497d7ed9d67fac08cea2509495ce","sha1":"a6ea8aa06409daa1458a82e97dbb6fb099cade14","sha256":"267c0f3a3a6a42543519c1e543756c7bf68a5e2ed805349bc082c9b92849d16b","sha512":"87c697fc5114ead3aeae93e1c1166011d2d4a43b84a11dee84eda5e55fe9a1d23bf387d67c40998e1c138bca3d5f7bd96fb16b215c5d9f3499da33469035ab79","ssdeep":"6144:87OVJHIkZm5RGfq/nXUBL5uz2opB4qcril:87OVJJk5RFex2l","tlshash":"8574c715ea516ef376f5385ef16a29e360325b123b50c27201ea5f3d3e2f80cb1664b6","first_seen":"2025-12-20T03:09:17.559616Z","last_seen":"2026-01-03T10:01:28.220017Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/sevens-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/sevens-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3508\r\ntraceparent: 00-e2d27387fb0b3f26896ba7c766f4539e-131e098dfed40d24-01\r\nlast-modified: Thu, 11 Jul 2024 12:31:11 GMT\r\netag: \"db4-61cf7f01e8600\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 457617\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac855577c78f4bd9edad9b490788b53","sha1":"d2deae54c7d3bc48016c1195e1a40592b15340d7","sha256":"046036e7f874f492979b65f952a66e194b8f1739f24a64d40b2052f944114bc5","sha512":"28401e4f1338a0bccb32462e90b4fb7c8c5054ab3bda45a0799cd63c84358f5e606d149129418a9995f3403b8715389f337cc4a966982cf48fa828b96ddecb3c","ssdeep":"","tlshash":"847113e5b3d8b3c0d909a7f1147b5974baff34b77b04cf865345b9a4a71a294892cc20","first_seen":"2024-12-31T04:55:51.417914Z","last_seen":"2026-03-31T00:45:46.252606Z","times_seen":55,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:28.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/01f20af8.d.m.CSMfGuoz.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38548\r\ntraceparent: 00-b1a6bc77f8925f8713e7067ada1d3355-9050021ba4c9d0ea-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-9694\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303515\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.C8-ZPrna.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:30.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/054854ad.d.m.C8-ZPrna.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:30 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9bee7d6e728777be744a2506ae9430c6-7ad3d481987e4b1c-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-10d71\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 16457\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-02T11:31:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68977,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2e8b662a6bde101ab90f4eb084e82efb","sha1":"b0a61862f6bdb003bcf9bb007d13d446a2dc4a53","sha256":"25d54cefc9dad74e43281fd6b5a82cd65cee563c6a9076ba8619f05ceb018a27","sha512":"d12694d1fe9221bc54d50cbfcfa74b4005d2cd1b8f16547c49208936d44daae1f26e7251b94240bbc7ddeeb78755f272b6f5251c3ab6161ba508b253a9b602c2","ssdeep":"1536:xWOoPHMorDC8EYfWo//0VFiZBHS+/tIyUEJajYN2Uwc:xjorOvYJ/OqIyUEJa02U3","tlshash":"6f63620ded0c55f9a3e650b9f0f54e0a6518ae47f2784580bab5cc1f9488fa8a36f34d","first_seen":"2025-12-20T03:09:17.488718Z","last_seen":"2026-01-03T10:01:28.241155Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2026-01-02T16:05:38.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 16:05:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swnecsk06hq26g8af3v4147b2","date":"2026-01-02T16:05:22.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 16:05:22 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-6d09b0c422b925c74d3b95c0c35beb94-cbbbb92760910242-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 303510\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-04-05T09:02:54.871974Z","times_seen":79,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}