{"report_id":"d21686fa-bb91-46a5-afe7-698192fcf2d9","version":6,"status":"done","tags":[],"date":"2026-03-02T20:04:21Z","url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wbhgu9n2tn7dkkmgjeie8948","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"title":"Online-Casino: Über 4000 Spiele \u0026 Schnelle Auszahlungen | LEON","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"3976bc2f96fd2593198608385e09f7f1","sha1":"22c963faee42c8df25f61c1001f183302360e3d8","sha256":"72a9062e3f5f5e2090c42c4f986bc61971db451ef7f0a9182f984d6e1c85f869","sha512":"69b7623c5c4b8cf6f584c37a7f2e48f61450eb34e2f6e38b15e07eb18d4b33b5584185b6bfbe64b980c604a6e15ec3eee3ba68cfba325eb52b5aa60b5e5910d3","ssdeep":"","tlshash":"41f09ee77c91d5088a510f8cc0e1e9ac1c0c37671450cc84b5fae1b8f7c29af5c0c189","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wbhgu9n2tn7dkkmgjeie8948","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T20:04:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:04:04Z","timestamp":1772481844,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":56188,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-03-02T20:04:04.741789+0000\",\"flow_id\":417423261192605,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":56188,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-02T20:04:04.741789+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:04:04Z","timestamp":1772481844,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":47993,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-03-02T20:04:04.741910+0000\",\"flow_id\":500277475299862,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":47993,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-02T20:04:04.741910+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"leoncasino.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2022-07-05T10:57:06Z","last_seen":"2026-02-28T15:39:52.824752Z","alert_count":0,"request_count":57,"received_data":8188211,"sent_data":26678,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","ip":{"addr":"52.49.104.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2017-11-23","domain_rank":569757,"first_seen":"2023-03-14T13:29:10Z","last_seen":"2026-02-27T11:11:43.124139Z","alert_count":0,"request_count":1,"received_data":998,"sent_data":477,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.63","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2026-02-25T16:25:04.839667Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":742,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-03-01T22:34:33.541148Z","alert_count":0,"request_count":2,"received_data":1678,"sent_data":2919,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":2,"received_data":955599,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ps.l.liftdsp.com","ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":602474,"first_seen":"2024-10-13T05:47:12.053455Z","last_seen":"2026-03-01T21:35:09.415731Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnimages2.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-02-26T15:36:42.061636Z","alert_count":0,"request_count":42,"received_data":632536,"sent_data":19456,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"258235a93237c924b8dab90d66ad712a.seondnsresolve.com","ip":{"addr":"108.131.179.139","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2017-11-23","domain_rank":0,"first_seen":"2026-03-02T20:04:31.738692Z","last_seen":"2026-03-02T20:04:31.738692Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":489,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2026-03-02T03:20:15.04951Z","alert_count":0,"request_count":1,"received_data":8368,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"44.216.60.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2026-02-25T12:02:04.704665Z","alert_count":0,"request_count":3,"received_data":17042,"sent_data":1591,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-01","domain_rank":0,"first_seen":"2025-02-23T03:47:42.85381Z","last_seen":"2026-02-26T15:36:42.992946Z","alert_count":0,"request_count":1,"received_data":1284,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":11,"received_data":373810,"sent_data":5977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn0.match2one.net","ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-08","domain_rank":743950,"first_seen":"2018-10-09T19:50:01Z","last_seen":"2026-02-28T06:42:56.861529Z","alert_count":0,"request_count":1,"received_data":5896,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnimages3.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-02-26T15:36:42.768152Z","alert_count":0,"request_count":1,"received_data":4582,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-03-01T22:26:39.665209Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":733,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2026-03-02T06:26:58.685867Z","alert_count":0,"request_count":3,"received_data":1769362,"sent_data":1380,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdn.deviceinf.com","ip":{"addr":"104.21.26.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-30","domain_rank":665604,"first_seen":"2022-08-21T01:08:30Z","last_seen":"2026-02-23T18:36:05.928748Z","alert_count":0,"request_count":1,"received_data":679471,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"leon7772.casino","ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-23T00:40:32.215191Z","last_seen":"2026-01-23T00:40:32.215191Z","alert_count":0,"request_count":19,"received_data":2336621,"sent_data":20526,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pool.liftdsp.com","ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-12T16:56:20.115696Z","last_seen":"2026-03-01T21:35:10.379936Z","alert_count":0,"request_count":2,"received_data":920,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pixel-us.r2drtb.com","ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-07-08","domain_rank":5001008,"first_seen":"2024-07-30T23:22:43Z","last_seen":"2026-02-26T15:36:41.542001Z","alert_count":0,"request_count":4,"received_data":1963,"sent_data":1910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"track.liftdsp.com","ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-16T05:39:57.442139Z","last_seen":"2026-03-01T21:35:09.518682Z","alert_count":0,"request_count":2,"received_data":10249,"sent_data":2558,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":76051,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i64cl3er5t.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-23","domain_rank":4837675,"first_seen":"2025-10-18T07:34:49.497184Z","last_seen":"2026-02-23T03:35:36.831308Z","alert_count":0,"request_count":1,"received_data":43953,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d1cr9zxt7u0sgu.cloudfront.net","ip":{"addr":"54.192.209.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-05-17T11:07:13Z","last_seen":"2026-02-22T21:06:39.594331Z","alert_count":0,"request_count":1,"received_data":183162,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.BvC3tFfN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"e7d3817ab76506515846b4195cb7c50f","sha1":"b321414a920ba28ed2a7655d46cacd459c0a6280","sha256":"c6e28d36b6e32667434a5d5a4ba1b705e42f450229be0377dc672606a42c089c","sha512":"982c330811ce2883f2cf9974f2abd2f2138c401ce0ab69d907ab4755aaf4170e581d815d052aafbfc1f51b7b47cef8e5827160482751b343563c58bb26c260b7","ssdeep":"","tlshash":"ac81a84cf1c270b9d33700d0c017059a423a576876b2adeaa05f56339648c68f3ff46b","size":3988,"data":"","first_seen":"2026-03-02T20:05:03.669443Z","last_seen":"2026-03-02T20:05:03.669443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3ed1c1c4.d.m.DOy7bNuX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"eaa8c76e34f2e57e8bf430c98815e86e","sha1":"c9a5f212ec7e00e825ddf3efe8b60e52346ee7e3","sha256":"ff03c603cdd45bdac8ec9289c789d628c56c0777593485612a296aa6e0add179","sha512":"ea97ac2f252803788e5969172f81284dc1e3f1df9a1f604ed37c7771ceb9ad1a1ee8e7d1af40b782623249620f83bc806be8863401afa21739c52205886a3ab3","ssdeep":"384:vCRbRbsCBQmjArdP/LDbcnxAofaRxncvt825L4RJdh/3WFgBBYxTha60n:6RFbssdAR/LPcnxJ+xncvZ5cPD/3WFg5","tlshash":"c06208f174ed657043e616e0a0770106e6e9512830c9c4a0f59f8aff49eb980a9a7f7e","size":14744,"data":"","first_seen":"2026-03-02T20:05:03.607213Z","last_seen":"2026-03-02T20:05:03.607213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cd13807f26fb83c3cf49e6e584bd94f","sha1":"934a9dfc7ea43f71794d377e265a06eb37a35d91","sha256":"87940c9f822580ffa29879a8c872c7b382e20df1ba8adc4af28958fa208e0e82","sha512":"c0d5ad65daabf703169dd6eace7c83012371f6274cbbfd403f706d6cc0b0a3257f165a93f0be591822e2ac990676cf8bef85ba6651b48340e28a3a08133b46f7","ssdeep":"","tlshash":"68c08c09fa2020313223870876f5894153204f3128e2c1fa41bd22a23e27bdea1dbb4c","size":160,"data":"","first_seen":"2026-02-28T15:40:00.807186Z","last_seen":"2026-03-14T07:22:16.835164Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ba8af1f8.d.m.wQt3n6fp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"599ac14b6a870a05d2170f7285254fa7","sha1":"cb512953a86361bb416431f1911f46de20d7cf52","sha256":"2d5fd6124c88cd2aad61dd3bfad99fa08226e8c9dd75bf2315936e3f531fe005","sha512":"2ff7678ad014e27235cd9a112a3e7d27929dedb19a6afc394dc275959c65f192f780f154203f9eb948a7d6ac06ef182727acde4631b68c1a463048cb5df628b7","ssdeep":"3072:/LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRu:/LwZR9YYUIyAIRGacgk","tlshash":"6bd3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","size":130226,"data":"","first_seen":"2026-03-02T20:05:03.692434Z","last_seen":"2026-03-02T20:05:03.692434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c32793.d.m.CRi6TCRt.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"cecb9c3a04c95b32271bd53a8cf9dad5","sha1":"2685d8ecb90e05b0bb55e452ce32a037e4a831ea","sha256":"1ff1510f7b045f5855ec1088a32b81229a49bd069b0a543ccaec4f9531f9612a","sha512":"efd607a0af261f9a1749089371f9d3bd6067048cf97b658287009ae02dcbbf4fece5b607a40011623101c34bfa14c21274bed126a8eee097c38d63245bfaa6d6","ssdeep":"1536:vNFNNxLceHyQoBREqBNwzBsBy/DFT++xTzP2IYSvoO3xH5j5/9gBIeFdEU:FHvyKqB+zBsBQZy+xTJ3xZj9eFd3","tlshash":"c4d3955ba5053cfb4b700e2a5b5e66b521338888fe56c03b857aaf3d3fab105f0161d9","size":137890,"data":"","first_seen":"2026-03-02T20:05:03.566129Z","last_seen":"2026-03-02T20:05:03.566129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b104f410e577555bf713d14b3e61cb5","sha1":"5648bba8e164d96ee568ece5fabc7ca82c7629e3","sha256":"1f83c86cadf595b7e55a7e9234b32b6afcb8c724c454a1a959190257e2f36581","sha512":"a692f8417a24c3ca7c87701f1845eafd88e600c7c317c422a3df01954a98bb1a0134cd4e3f0579e07717ed87b203fc7a246aff84e829afb4c911536a1b781309","ssdeep":"","tlshash":"fa1110b93230707dd5a30ac3a5eea746367694144407cce450e4ca4c7764dbd1af2e78","size":949,"data":"","first_seen":"2025-11-14T01:20:21.025653Z","last_seen":"2026-03-29T15:19:13.507196Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","size":5052,"data":"","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-de-json.02594dcb.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a6a7af689121c35e96dabc167793b4c","sha1":"fc719ad4a1bb9ca01215bddd623b61aacb65694f","sha256":"a85276d679ba989b228fd07679122afe8b437fb0ee0d8495342a709dfa5b8442","sha512":"857ac6d924d32b4cea6e03c7095be217a658960d596a6903d8e37dac519e19c813e441c30fc0e7aeebbe39fe17b6311e89de3b3623c33fee33776915b591b619","ssdeep":"1536:mXO2te6aW7fXMvTEFXFMccnkaa1Z0KEgEmtyxjfYh+oXLr7+T5KUvu:B6Am0UkYctTIUvu","tlshash":"7183c60e8c65ad76475f07e32c8aadbebbf4836e62c5561afc85c91d01c9b81c16f306","size":81736,"data":"","first_seen":"2026-03-02T20:05:03.695856Z","last_seen":"2026-03-03T14:47:20.304835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"76f67d552cd39f082c7a584ecf0adc5b","sha1":"58de43d1f5969e87ceddd091fed94372f5053a14","sha256":"b884304643bd18c972cd7b42c7403d5de1b5950bbc3a84740e1dc5385b7077ea","sha512":"577986717c7ce86fd7f5591b3108a20ced79c07d61dd9c29f7cc09206c6dae6f0f04c0532cbe396fdc3fb3bbe11843e1873d454f586b1f2594c176dcf85f3264","ssdeep":"1536:i+sso3D0S/M6WTvLgzI/Q1VwPvIY5qvjV0VmqjyPW/zNdXHhw:1j6MnZlvIY5ap0Vmq+PGNti","tlshash":"16732af93363b57293ee21e6407b0402f3ae68d9284d045cb2a5aedf397541850ebf79","size":80295,"data":"","first_seen":"2026-03-02T20:05:03.574649Z","last_seen":"2026-03-02T20:05:03.574649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de67a6c6aaaf800dd47099cb738c73da","sha1":"dbfad2730311def8f2720b5a8e0a669d09d41d0d","sha256":"acf908b14f29165de87dbc1c3ec37b7f04935cb917921ec280b8c4e3ab7af31b","sha512":"0c50673ce74683ef2377c054805c7438a18d6da1c60a37f0e157c2eb635800ff904104b5b4de7c96474c3cdada07b8f63c3e31b1e9a8293d76440c65872360f7","ssdeep":"","tlshash":"07f0270e9cc507a457f810c453bbff1df29f210c985d8665c3c68892761af9798363e8","size":484,"data":"","first_seen":"2023-12-10T15:49:15Z","last_seen":"2026-03-29T15:19:13.506535Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/171e0e51.d.m.BSdKWSos.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"00220a211a2ead61c596a410c8e2468f","sha1":"ba63b8aa3d48b4415ed8ddc4a2d75723655b562b","sha256":"ac8391ee22bf002b2114b9f6d92fbae1214fc3dc92c39834795eb763ac81bc40","sha512":"b474998646546efab4078057bcbcecba5864ccb7f8a30bcef0973350da717ae061f5864def7515c86087b900ae394d70f7d4c64ba9ea4514da48533b68a7ffb3","ssdeep":"768:Iy7QHHdKPVd3GcR602tiBBV8OmojgACvUWk/pWbFws5pSGf0lNu6uaKH:YKPVhpEK8OmP0gwTu6nKH","tlshash":"43c23ce66353e1b28b7b41ca50770182e21446e4f44c84f1b5fe9c6e36ea8a2d356f3d","size":28038,"data":"","first_seen":"2026-03-02T20:05:03.541415Z","last_seen":"2026-03-02T20:05:03.541415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1fca7f1.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"ebde2d39f138a42baa20b276bfd63fae","sha1":"116843f5a885a77c9f2ba259e9e23d1fd045dc02","sha256":"35b26c3e85d5472fa3cb91ddcfa727d44b843b651bdc033fda887ae732e75317","sha512":"e81ee8c2932550539af19077a06bc6b2bfdfd46ffe171793b73efcedbd3d986482dc4537d266c629a665c6f15a2971294ab176c03b298147dd4d2fecac6882cb","ssdeep":"","tlshash":"a841ddcb738498329b57d9acae1f6f72287ff246451ac2a84158f1f015820ddc05af2d","size":1926,"data":"","first_seen":"2026-02-26T15:36:50.677605Z","last_seen":"2026-03-08T14:14:44.244184Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/444dbad9.d.m.COHDy9Qf.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"a0517c72f11103ed464859912922a96a","sha1":"bbd225f4fc02e62620c85627241b0a75276b3bf3","sha256":"c45395687da9b08de31423ae7477024b2f1b8751f1f081192491e39f5ad431ff","sha512":"5b8f8b30d31dae0d32660fc26e31b2a913dd919e8efa3d4432c51c02971526004a35fe58ff6bf96f96cfa369b52204df8e1272b0b0b988143282ebdc300f6411","ssdeep":"","tlshash":"f2e07db5457b6ff29b9a4c74676cf685ab29609137064484600c91095492f93c3ffc67","size":328,"data":"","first_seen":"2026-02-26T15:36:50.591363Z","last_seen":"2026-03-31T00:45:46.151709Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1610888.d.m.D3r5EzBB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"f2a0fe3ae732b3d7d819be702cbdd08c","sha1":"39732573961e4eec353d3f63f07d660b7b7d01f9","sha256":"d0e1e27661e037a361bdfe989206a2ed174cda25284923c13f7a77cf19874c87","sha512":"e604f119f66b33533cbb509d72a0bf45ff6b7757af062c8d97eadd05e0c2121adab3e7ad4332888c45673374899743cf19000c80ba32af07014dd45022b50c92","ssdeep":"12288:61OJGn02zHl7TwBZ4qWp67h7Y6Ud5bCzjd4yQYdwg/dv2LB51x1S7:61OJG0257TwBZ4qWp67h7Y6Ud5bCzjdL","tlshash":"afc45a957151343547b600ac806f050ab33a2a2e685dd8acf36de9ef29adc49317ff78","size":578508,"data":"","first_seen":"2026-03-02T20:05:03.632074Z","last_seen":"2026-03-02T20:05:03.632074Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e62q0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5aebf771915c27498d31b5744638755b","sha1":"dc91f8639866c158d7291073d9cd0049535394fa","sha256":"8006ed40e2cedf420292dd274444c81b99388782eabba79e91c9a92cd8d7b19b","sha512":"b2aa56272d7b5c22e429f60a382a13c2d8d4238a0eaabc21faebd282d76704a0f499c0ba141ae8bcda3b8d7d4385fa3b6006b5d5ab2662da4c6893ab4c38e64b","ssdeep":"6144:t87OOW4po5W+MMZH9CyF8QyZbTxRMlKEmxoEJLhyAAIko:wffpo5W+MMZQ+87xoqgy","tlshash":"38942aceb3d670225396f478903f018ba57b68a2b48cc899f189cce46e7459a4137f7d","size":424023,"data":"","first_seen":"2026-03-02T20:05:03.608944Z","last_seen":"2026-03-02T20:05:03.608944Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7016086.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"952a970e6cb65c7f5f81ffbe2e407c37","sha1":"010df53790d74f09f12a84d1c544c0b4377d464a","sha256":"6d3c933ffe12068ff6f4afa5ec3d44cb9829f662005ef9ac6d40ef2127df9bb7","sha512":"4bc0253824499de28ad4cc866350902ef238a9d8d3ec4c579186db26831882481114208050a49caea3e633b6553f3c14621a2490d0e5006b6529440df346847b","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJu:dxtL7PD4hsy312IhALo3aS++FwIaGPfC","tlshash":"bf72a4e93183b53553eaa9e7403b010af33c3944344f9494f6aeaac63d7651352b3e7a","size":16135,"data":"","first_seen":"2026-02-26T15:36:50.730644Z","last_seen":"2026-03-08T14:14:44.227827Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/bdddc725.d.m.D1Yqn2lm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d613c144ee261f4cc28d787029b93ce","sha1":"4154259c2949a17fd67022bec810daacc705b3e5","sha256":"dd8488df556161550ff9d50fa976db582b7cb00f23af0ee71002070457bd69b8","sha512":"eda0e614753e7f7ee522fbed516ecfc2b9d80b397ffedee3443bc8ac62f5cd8ff364a8fb6839ce600425e213f069eea271904ae9873e513752bf7ec5e5af8d3e","ssdeep":"768:/tXdZMMezJnhsVPiNeTH7DPnZYnMUbSytGPx+:/PZM1zdhteb7FYS0","tlshash":"dba37c983b84bc6022a67e42c809d145f4dc4e56e6fcfdf6f65add88118198e3390fa7","size":102244,"data":"","first_seen":"2026-03-02T20:05:03.538602Z","last_seen":"2026-03-08T14:14:44.225929Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"902879accbae1a6e7d4023179a5f5582","sha1":"eb32502a93060cafa892ed9a96689b5a356ed9cf","sha256":"5e077e267743c2a25ba1b85e6cd184c4fd8a9b42a9f077a73f9458cb1ebadc16","sha512":"705c2a0551187db0135f284c4489f46c47095ec831453ed3808eb49f8825de7d2aea554b98f75063485499ccdbbccddfbaec839d0f8a33cf414fbeb1c62b8890","ssdeep":"","tlshash":"17e0ca6d572d7503937620937f71635d243541fd3d0058951c4c9d14289aecffd27c50","size":370,"data":"","first_seen":"2026-02-26T15:36:50.794922Z","last_seen":"2026-03-14T07:22:16.720919Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.beb540b7.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1954481873028b17c23953b95e51db7d","sha1":"febcdd52db8ede4fde80969139748f4d1388f243","sha256":"9116dee50fba05481b8568365fa447f61343d9dc514ec77daaacb51be42bc520","sha512":"f686456f77b021653db57d0323c551f4538bec398884f1ce3ef9a3ecbd2c6ab2d4baeeec968b96cd1c94f58f7c44d447a2ef8a7683da4859162be47da557d4f5","ssdeep":"12288:5GGCSeXM5xGrZW+fRezYGdIc4IcSZug8wi2yw0Aa3s:5vuNIzYG+lSta3s","tlshash":"0a45b5ccb2d2f06a43976575812f200bf33ea996b54d8050e629e8d1bcb958d9237f7c","size":1165568,"data":"","first_seen":"2026-03-02T19:38:58.480339Z","last_seen":"2026-03-03T09:06:16.237136Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f0836975.d.m.Ci1u4oht.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"08db5aeaaaafc099bfa4ec7b435ecf98","sha1":"c856cf3b0a254f36ebe61643739c946ade6ec9c8","sha256":"1fb605753f9d66c38db53e90afc1a43eb07bdf43220dd62f63f9ec3c953aeee9","sha512":"a6871c025316b34fb6ab1912f0851e768ad94266c94cd2f89c0f47925958a2bc9953fe4b38682502936c3a3ebc694b9f80db2597a5803261a176da530d10694a","ssdeep":"3072:l8NbFF3qLh5FEwSwXwOlsNFAaugR6iVHoVHlipo3y5H79QYl3tx4C4JdErZ4O5Lw:OAFDgOkFRDVI/ipAzV","tlshash":"c3244ba4738ab43547c451a4902e1b22f17a9c6a645cd018faedcef61fb8446637ef3c","size":224186,"data":"","first_seen":"2026-03-02T20:05:03.710027Z","last_seen":"2026-03-02T20:05:03.710027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"631036c478b6a0b0aaa7d71707779f0f","sha1":"94053f2e94b305e3dda29c04d3ce22346a8336cf","sha256":"0c390ae44fb3e39f9e23de7e61857f53e78be006a2c17cfcd0e583d073fa3762","sha512":"a62202769c20f2ed1686a8fa7c619fc9ae2cf0c3cf33ba268f901422dcce0f910f1ced698eba91c9348863f385c16e9bfa4392c3e220c1fa7d589750fd35a8f4","ssdeep":"","tlshash":"c3f00255790b513d47a3607047ffc20b2827a0a711c1c849d916c8b81fe5ac8c59fbef","size":625,"data":"","first_seen":"2024-03-29T05:33:40Z","last_seen":"2026-03-29T15:19:13.502083Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/017fc061.d.m.6jXZaT8y.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"7473a31f3263453185cf557250b29f38","sha1":"6a2e1eedc05dfb2ac61a4abd81de3e6f5a2c9ca2","sha256":"103b46bfd5001eac175c1419c8f8d2aaf9b5a44ab3d596c54ca14a8a57c0435d","sha512":"df3f21abd0ab7e701f43cf7aeb68cc4eaa3f45f6d3e5c560cbe8f6f21dff2c0bd167e5483b5d27d9d4300a2ba23c5b1b13401db2f28eca788b89cf3e0254b1f4","ssdeep":"768:I61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Y:nzmp7QA/BPWUY","tlshash":"c903fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2026-02-26T15:36:50.671476Z","last_seen":"2026-03-08T14:14:44.19034Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47542f5453b926ee31b84dcec583f01","sha1":"a98be511b95f998eb3f3524eb98351da0283f769","sha256":"215c51760bb486283b7da84887bc192f3dd0697ca55556af3c570222488767fb","sha512":"c57b1e4a0e522dd714f5eddf1c2c2e851d03d3055b0590f37d3de8e9168962660adf38639779650ee2246ed322d79609e64dc253ae5eab3baaf94a670abd6a6f","ssdeep":"","tlshash":"a0f0c01360937471cf3368b8271f4365d99b406f89d25869f7bf8412af35e4460abc1c","size":571,"data":"","first_seen":"2025-11-15T07:52:07.145608Z","last_seen":"2026-03-29T15:19:13.505302Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90fefc6a8924a3b4ff90769ec8d69733","sha1":"a1d9deda2d33219e55b5a806577c837c834ee0ff","sha256":"98ccea3bedf3132723f985a9262e7a02a378ea5546258c9f1fe720ea29e1eade","sha512":"9c0f5adf35752d3891967fa3bf9e925c66e92454eeb829f35b402b6831ddf836fbaa1afff2726da1df7beb1a6ba70a3aec847402c225f89e1293a08a6e19650f","ssdeep":"","tlshash":"efe0c096f1a8227fe679d2e5f6027b693f158e20d4cd6eb7a05f2c89204e34311c0e1c","size":375,"data":"","first_seen":"2026-03-02T20:05:03.7121Z","last_seen":"2026-03-02T20:05:03.7121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.kyIZ7tlD.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"4e3452be9b2831176f725f6cdc492816","sha1":"3542f4d8f35b96903b53835282b1597e137a67ad","sha256":"a9dc446f09c2621625b3e4e50dae5df60346fd15df76e5cea067cb7e25a0413a","sha512":"4a1788422919181aa7a92d6fb9617007fa9b22c14a975446952d12fc13acbcea13ac3874322853e37f218450362801d2f2cd74558a7b690a29d25dd1db9e207b","ssdeep":"1536:7Xm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPb:72YMGB2C62PmQJDbPb","tlshash":"db7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa4185637f29","size":76702,"data":"","first_seen":"2026-03-02T20:05:03.605435Z","last_seen":"2026-03-02T20:05:03.605435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cd13807f26fb83c3cf49e6e584bd94f","sha1":"934a9dfc7ea43f71794d377e265a06eb37a35d91","sha256":"87940c9f822580ffa29879a8c872c7b382e20df1ba8adc4af28958fa208e0e82","sha512":"c0d5ad65daabf703169dd6eace7c83012371f6274cbbfd403f706d6cc0b0a3257f165a93f0be591822e2ac990676cf8bef85ba6651b48340e28a3a08133b46f7","ssdeep":"","tlshash":"68c08c09fa2020313223870876f5894153204f3128e2c1fa41bd22a23e27bdea1dbb4c","size":160,"data":"","first_seen":"2026-02-28T15:40:00.807186Z","last_seen":"2026-03-14T07:22:16.835164Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/769087b8.d.m.ITzlo9tB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"a97b2ac14757f4188da0ec0ef2783734","sha1":"f609d1ed485daf753a305a91c8cf30f8aa82a2ba","sha256":"1ce54bfd9a8ef9a74e095ff20438dd261ed146d5bd74ba3db0714760b55690c3","sha512":"c85cfe94e20f8fd9a422a0b6b5be3eac8966046a92fa141f0cd12d63cf62bf5f3d24a69f538527689a25c0b439e0c5728e414292481ff01d099680605d26b4f9","ssdeep":"192:AULK5rHvInYEbNRMNVLAi2JVWUwTwqjkW6JLRvpsJY:NOPInYeNRMLAi2KUwTwqjkW6RRxsJY","tlshash":"d912c5cd73d1fa7252a6a9a5203fa006bb7f66a9681c4420d14dd4c13e7588fc933fad","size":9548,"data":"","first_seen":"2026-02-26T15:36:50.748248Z","last_seen":"2026-03-08T14:14:44.173525Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/4e25ffb2.d.m.DNRu806n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b4be357bf5c79489a29278dffe761acc","sha1":"2d6c93015738fb2d93b38d1fc2b3f686ce92c20f","sha256":"e5a1990fd3214b3cd06fc36dfe31f940441705bc237647d7892b6d0681da67e3","sha512":"adeb872ee72aaa39c50f81ae4f84dd755b904a3769794577d44276a014141dea36ef67c7d1497861f37f0f870d27ddcdaee751848b703526000df33ee55b360b","ssdeep":"","tlshash":"1df0c9cd76c2b46806ab0479803f984ef63e799437ce8590d50aa0b42ab041a8233f6a","size":512,"data":"","first_seen":"2026-03-02T20:05:03.67461Z","last_seen":"2026-03-02T20:05:03.67461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/036a973d.d.m.DDj01hZ8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"5a56e623158dbfcf5853375bd8308664","sha1":"547e1dff805f86167550b015cc623b60116612d1","sha256":"9501eede310c3d02294cb1481653d19be86207e5e18667ee7859562cee0b95d8","sha512":"3ddb81be33c8de942b8b8397cb626dd6d38f13f66d703a7c5998c9a83d6cacbebf60f3b8d6a81658197aca43ac13f05d52b14a69d984ca9c2e1bd3d6cd9758ed","ssdeep":"3072:glPCf2+Xb0xeLKOBlv4LyFMME3VF99l/yAj6CUVZ0XjGU2/i:glq90wL7BlDFHuF9T9j6CUVkjF2/i","tlshash":"905419d931d6713353e60aa590bb0102f7355a90344e81a8f52cd9ef3dba44aa2b7f3d","size":285362,"data":"","first_seen":"2026-02-26T15:36:50.681992Z","last_seen":"2026-03-08T14:14:44.155141Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/faffda3d.d.m.CNI2Z0hQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"91973918928dc0b37a2ffc8866e9520b","sha1":"286f8cda5e96f1be79fecf98416531e3dbc16af4","sha256":"fbfe0928e0cfcfe687a13754e33165b1c0383386640d32166dbbea607e5adb7d","sha512":"3bcefcd0b7e43d3882cabd1d89e9a4b61e5135ba18c524489173affff63ea91aa133ce8f93eec2d7f9e2039b23ff8ea46cecc09c79cb076e2e2b31e246f0ddd5","ssdeep":"98304:mfnHXaNKlAIU1RHqPvJEr8YB2e3vU18auJZUt7uIdfV4h:mfnHXS8AIU1RHqPvJEYt73dfVs","tlshash":"cd065a46b55924b9c7f36485e05b1400a77c1b82f2e488d1e9fc8e2b27a9d78533bf1b","size":3755176,"data":"","first_seen":"2026-03-02T20:05:03.713629Z","last_seen":"2026-03-02T20:05:03.713629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd767157.d.m.CANN4s_5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"5627e8349b7a7b0f754c7e852ce249f1","sha1":"b23c9d3ceea82aacf039e25bcec471c885bfc881","sha256":"5498d78c07fb2b49ccd247c3e074030acf86ff12e32bce7a8f0326bea1b698f3","sha512":"ca77e653c0b37fec263b14aa23dc96bcd5ba602f6443b6f3ed6734307943aba6f61bd3b3789827b93136658cb973292db0d6781828179e0be750e8aad259714c","ssdeep":"384:6AuOqKfvmAmiq7bWXgWE20ASWe4bNuKOJkmB0vufoXoGmGFjO5Ath0e4iXW1dGkn:6BEvmAmh7bwHU8Xgn0GWoPGFjDzaJ3","tlshash":"55f281c472d9f5e14393aa74803f910bf23a7c71145ca154e322eae57cb865a91b3f3a","size":36532,"data":"","first_seen":"2026-02-26T15:36:50.70844Z","last_seen":"2026-03-08T14:14:44.165706Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.D6ew-0Mo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d64ec96417f5c8f47e424a8e5b7f5590","sha1":"6f5ba4de47f207914e80a7159112c45280cc65fb","sha256":"57d4e987ae0ed880b17fbd6ac610a5bf4c4ab9a142d4de2b3f52c8541af8c157","sha512":"b2c3a7f31a18ccd9f9d0909efca3aa4726bf02a3c70d7711504fb4d0bb37faad1c06502672307e647277b37a58ab0560e80cc3e2d369016f6f917f9160bdb005","ssdeep":"96:prBLdCYhWUc0uGzGtHI0m0uGz0lYLxVpyLDuGz+NaMvWr8HvRwM3Yv:pFLdqUWUbrU0YVjU+BOrSwMc","tlshash":"16a1e78d3c7f5471aaef584fe1a90c0aed6d0ea626554e4190ff04b727abc50e212923","size":4658,"data":"","first_seen":"2026-03-02T20:05:03.600596Z","last_seen":"2026-03-02T20:05:03.600596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97a8c76e153ec7f48812490f51e64bc7","sha1":"39e3769e70ff1076538997e15fd3e62223f5b28e","sha256":"94b17b43e7d1dd9c9950757380ea7262171e5d2a71b22d0b3659798b7c3ea115","sha512":"cbbb99767bdf0bdbfbb899f0830e7f1597f41618fca1878c17d4e2fc5ecb6755efb200cae964e97d2e0897db0344e9e5db3f6a4099c2f645a9f53d0355f19254","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpubGWzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOciWMMiZ935pqUP","tlshash":"1bf183eeb2c2793806a31576623b770c3f3b654528494490d066c8cc7a7adcbc12bfad","size":7614,"data":"","first_seen":"2026-03-02T19:38:58.46739Z","last_seen":"2026-03-03T09:06:16.179284Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"229adf2cf237c86804f7dfc9f316aa81","sha1":"e2a479364df94afa345ac5553b4e5898e1984c72","sha256":"87a167b01dfabe2ee4c8a8ff5a077bee05d1e760fb2950bdc77b4542b43690e3","sha512":"d2258e447d9de3df7014d5372eef62e2d3677b13ee7dd900fec18cbdaa251aac3f1e8a67cadc6c1661a34393fc51235caa37440b22b4c0e7c2ebab9ec0236aeb","ssdeep":"","tlshash":"48415b2e25f1102241a3b17d079bd25173338313584aed583e5c13557f969aa89a6f98","size":2065,"data":"","first_seen":"2026-03-02T20:05:03.714604Z","last_seen":"2026-03-08T14:14:44.263893Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/6449d237.d.m.Da9xhZQH.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"e4be5a604d617049d88e6adbb30c0ff4","sha1":"4ce0ed988423bc0cd532bf6b3e491caf747d2e7b","sha256":"522df38eb38ead0c02f9844d79209ed01a77a38a1d6f317f57efccf3ec80017e","sha512":"432421fda1002cc9d011c655ac19972ba5647aacd6cc13aeed6872beb0012555ec32e817a8407fec3f9ff5f4151ab1b6aabba9e05d78c986630c1511069acc01","ssdeep":"","tlshash":"425132c035f17961926b2af3c53f012bf57a1895fb0e5482b816edd97834032935fd89","size":2571,"data":"","first_seen":"2026-03-02T20:05:03.661117Z","last_seen":"2026-03-02T20:05:03.661117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/eda0a406.d.m.QgQX_--N.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"ff448bf2ef6ac68a03c8eba1ff153df9","sha1":"7b3330b36b46664da1c4cbe909d98f26962e310b","sha256":"9c0d45cdac74de03fdf9a228b4acc8a5f22094c887a67955acfa6b6dc44b2103","sha512":"351ee1e59fe686e16f4187d9ed1f4538173d3842e83cea7d533f2b3459b34b444f7dd6133ea05b400081d47ad56daeec522ce51a60d5e0a58f82e05a73cabe88","ssdeep":"768:fYJ9RIz2SJkF6XeKn7H3GhG47959G25CzXUr3JromPEopAk4ervozAH/DDVYgaM0:f6iJIR79uS+AH/DDV3TCikhGU","tlshash":"7ac2f9c13292b6a1838684f6f6320212f33a24543805a8b97dbd75db79c1d47ab73bf4","size":28020,"data":"","first_seen":"2026-03-02T20:05:03.629548Z","last_seen":"2026-03-02T20:05:03.629548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/510c96b3.d.m.BoUTDypR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"8a1fc20ae76fb0a2a8229089eab020f4","sha1":"c9696472dc3fa5d922d2646ede92692cffdccc0b","sha256":"f5cdc920a19e2adc0f9747c55b5618af5a07724f5a9530258f790bf0d18e2277","sha512":"6049c0c98699ca4c089c774c7d4ef431c6ab413712145c1b4f9f1c6f40c885908b10683bfb9a7dfe96a290a42eb7a25804fa7a47eff19e0a639c8179e5da1cd2","ssdeep":"6144:Ws9rpC1xKsvYM6vAWKCyVW9oeEtUsntRm6wzb/tfx0:WsJo1jvYM6aDVW9/etRm6wzb/Z+","tlshash":"8b744d5873a27238e7fa50b9502b058173741f40341ae8e8f16dae697991c0dd3bbdbe","size":345247,"data":"","first_seen":"2026-03-02T20:05:03.588986Z","last_seen":"2026-03-02T20:05:03.588986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","size":9327,"data":"","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f927d477.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"7f280d99c0cf5954311d1cf8af8185da","sha1":"1a3a7096eabbd628a3dd645e4f276580adad4dae","sha256":"8de8232d730813112edfb364db069d06378a4a1dd2b83248734b082e9d80f872","sha512":"8a3ec8eb36fa8fa6d2e967b19637c9a74d181c0cc80107cd6b79c1a7ce81d85c96662c42a0f0ee7ab20b458fc7a3b0c8de2e782fa98cc33463db7e75d1a1a258","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZquy:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJan","tlshash":"d9c1d6a9338e76404277147d259e1085b07c6884644d182af5e8f87a3c65caa4fffefe","size":6067,"data":"","first_seen":"2026-02-26T15:36:50.749396Z","last_seen":"2026-03-31T00:45:46.275763Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.BL0tMmGG.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3924f52caee9a7b55d314dc24cef6036","sha1":"bb3efdcee37d3f782bfbe5612c2d77261a6d723b","sha256":"2303293e5e41bd7fb7bab79f370450e02f3cf59b39ebb150b2c8b6e8640f775f","sha512":"e6dc369ee3771f49727bdd71eaf66de88fb230836a6bdbcc847d8fc53c5f6c1207f3bafd6b2762c20cffa390a1c25a64ecb6c8b6a5f556a17b8f5384322e9a57","ssdeep":"","tlshash":"7831660d72c295354aa604ed815a3621b322de91353dc5e1e0b87c693db1813c91afe2","size":1866,"data":"","first_seen":"2026-03-02T20:05:03.554428Z","last_seen":"2026-03-02T20:05:03.554428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"19c21f7e3643f7bf46173baf1e96a700","sha1":"d60892d7c7fa576c7fcc085c3ae8bbef811d4e6f","sha256":"913d760e49584f0851e3a755d049221f90c136c14321b952f3d35467c36449ae","sha512":"db520dd676c86a08b8084820d9197df34f807c8d5f80d786127b93138e64a048a65d9d815e0d493dcc870919e7f7cf2334d6c743655dc52f049cd3db27682984","ssdeep":"6144:aYOVJkZweK5Wqgb/nXUBL5uz2opBzNrb27:aYOVJa/K5WJNNni","tlshash":"44748714f66269e736b0391e712b27e3603287113b51c2b601da5b393f2f84df6671ba","size":341234,"data":"","first_seen":"2026-03-02T20:05:03.6895Z","last_seen":"2026-03-02T20:05:03.6895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/dd2143ca.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"173016191c06704eef04f03986b14bdd","sha1":"9c12772a51df61ebaef02952023c16c464dfca3a","sha256":"b23a26c77610197fcf71c118bb19b4f0f67403cf25eb4c0048c42ba0da66f91f","sha512":"d63d4789357a1eb484c142e89df23fbfc84fd32ac94d52555cca9d00f7aed910d9769993db3e918d1357ad54785f4caab085ef42d9949560340a8afaf1f63212","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5d:440yRbYVfh7WBknQL61PHd+ejJm8","tlshash":"b05380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2026-02-26T15:36:50.678293Z","last_seen":"2026-03-08T14:14:44.173037Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fec07b4ddac0cef5612ac378ff3ee156","sha1":"2ebf8a807abc118cddeb5ea26ad27a2ac3f90bf1","sha256":"96c1c977b35623003a62a7ade93d1b580aa35935f307f8581de9c1b5428e651b","sha512":"6312dffc782a6adb57e6a590a322e062de293c0f2cfe4d47f6110439db5fc4fd76eb461ea5ed301a6d1206c8aaccb554936c9498d0f70ec10996cf1b4d484a8e","ssdeep":"1536:v0Gccd6RaCZB3+OoXfZQfiEvrXMGEiBgL9NueMIwR/uXST8Iv8KjTS744YjR8hzF:fd2BNwfZQ6EvrLMMIwvR1jahzNm2WmtD","tlshash":"9b933c9d7999343a837b11bac03b0801a3290ec4b51885d1f1feddae2dea421d3b7e5d","size":90452,"data":"","first_seen":"2026-03-02T20:05:03.588015Z","last_seen":"2026-03-02T20:05:03.588015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-03-31T00:45:46.296227Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-03-31T00:45:46.297194Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/08c19264.d.m.BKNqax0E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"9d0da91c2bdc4f8814fb435492e036f3","sha1":"2dcabb7f59048e8a9a525968b53add108d10f7ef","sha256":"e16d007fdee03c32111f401f6df5adb444fdfcd434f4afc615024cadf1d8eb0f","sha512":"5751a370167cb7e05f32382b75795f23c007bdba44f525f3a76e8a785341db93e790d5a5019950b42bc33fd372013d1a353386339203f3a2bb6dc44c7a334b00","ssdeep":"","tlshash":"9d51e0f8f167f170805b5c9ff02a62db63360b967859b067502ca9b02531b645726f78","size":2977,"data":"","first_seen":"2026-03-02T20:05:03.599764Z","last_seen":"2026-03-02T20:05:03.599764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.CAp9tmc6.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fee2716262fde3ff5711a54a7718955","sha1":"bc3558a500065dc930770f579b389caf3eb439d7","sha256":"71876bb353bfee06ec362ec5407f4e4b0c893cbe362a493716b65cf5cd8a27a9","sha512":"ad48fd5c01aadebc52245f43c3677b359a698cbd54ee8e82939a5167b4f87dab2f4365ff34edea61819f9649863f5472f4d20be457de333919c9948f4f6ad287","ssdeep":"","tlshash":"1541b6bdb091a03c4339c4ede8329191e7369690b3a6c8e0d05d15ac0a78c86c178fcf","size":2399,"data":"","first_seen":"2026-03-02T20:05:03.698895Z","last_seen":"2026-03-02T20:05:03.698895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"34661bed3d02c3ca84ff0fcb188516e3","sha1":"96cb189c3903862a93b58124a3a8f638a035b61c","sha256":"86b9a87224dedbeabd3767e9c7554ae29717a9eb7133be23addf231d6acb57b2","sha512":"8ce4348596237e3aaba893aea829bc4e6684caeef09e6294099a0720825ec173464f7d2e82c247106ca462ef31d51ccd0330e7f8c616fc6a690291f61e938554","ssdeep":"","tlshash":"a0e0f16e432db502e2a920937f31260c3431c1ff3b00c8c50c4c5d14288af9bfa39c54","size":387,"data":"","first_seen":"2026-02-26T15:36:50.744806Z","last_seen":"2026-03-28T03:46:07.88586Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.50747ce4.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab510430734bf0eb7f416a75d470eb6","sha1":"f4e17dbe6b3da8182919d17f5125a64ceeff5b35","sha256":"551045f351338a32ba76ada3140ea011c6dd201761285f2a765b7386fd5789f1","sha512":"3367fb7df279b6d9912870d7724d119651e9348c31175eb46bc4f09d6baf09962b76976711b752a010b1263a65a24417faccf05ad6e0747467bae400ae9e218d","ssdeep":"6144:pv6LzOcnDn6/01m3aLpqrOEG7I03kic/CBXttCXrJhOo7ifE:t6LzOgoaLGF1nCBXttCbB","tlshash":"55b418dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","size":519396,"data":"","first_seen":"2026-02-13T14:59:23.726375Z","last_seen":"2026-03-04T15:07:43.896905Z","times_seen":1936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"4ca5303273e07a25cc5775e8860a454c","sha1":"24ffbc8d31396248f4c6faf60e092edaba80db4b","sha256":"b584bc62ae3b3f043937fbd3c516d61f64e350578fa22e5d856c178dc8998246","sha512":"31e4dba7738af7fd7f0b48274fd04207b8ed9cb389ffa95a0c4a9cb12aa0f9efeafe297f959444e2b7bd293de6c89692be733c1604d4e9e5ecfd2de87fb15d06","ssdeep":"3072:spsacLVJ7lQAIToVpH7RrfICUxfJQmxHjKMSEfQO7SzeZXLxr0:9jplrexFwMZfQON50","tlshash":"0364f68d72f82bb5458370f1b63e1532b270e013340c4d993d9d2295afa6618eee6fb4","size":334510,"data":"","first_seen":"2026-03-02T20:05:03.555771Z","last_seen":"2026-03-02T20:05:03.555771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/65c7eb77.d.m.DnDI-M4b.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"9979b20ec2baf86f3b14a64b96944efd","sha1":"10e67dc88eb303e3fb6d97b4d59f634f69dd665a","sha256":"4a267d1a0ce8dfc27df494412cf5b06d75ff4945b21835eca2a3c09d1372a945","sha512":"cf8f104bee9ea28e525f13c4176f0405fd544793b1307bb328718a8387146ba23801357c8349fa7bf92ed7fd7863b6b9a99fc8897f31089552a63c35603fcc93","ssdeep":"","tlshash":"735154ccbbffa0702ba9089590d2b007b3bfe995716d5052f02c55b1795349f91a790f","size":2550,"data":"","first_seen":"2026-03-02T20:05:03.704426Z","last_seen":"2026-03-02T20:05:03.704426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f611dcc0.d.m.BgbA6N3h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"70787a0f0aa522787e7b0fc4de8236b3","sha1":"e7cdf9626b805fbf4a6b84d3bbe27ecf38e98d09","sha256":"eeba5ad31af0412f97989fc86817db1125faaae1cefcef65864278261f9a220d","sha512":"f45e6d832e249ca6c10fcba1e51a743d1a6e714f9a88e8e31bc4f24af0152d024d052f4ff882b19ed456bcb35ff1b0ca0fb600b9498ade885a69d7991881b3bf","ssdeep":"192:VKf6ZpOIWZt7IIZpOItZt7IBt9MgNsBGBlMrQXGFf7CSCJCSCGftCICCCVC7CNC9:Fe/FasBGBlMrKGZKP","tlshash":"3e32449dff6860b204939855816c70c3c1e994a0a2352fd1940d1dbafe9f561a33fc7e","size":11521,"data":"","first_seen":"2026-03-02T20:05:03.618541Z","last_seen":"2026-03-02T20:05:03.618541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6808b734a8226f932ccbed46abd4c3","sha1":"e99369c89962018d66d6d9d6ab2e044957a72c83","sha256":"e906c2f60e55c9f55751ee306c0c8d68f1b4b5dafadbdfba9f866b116b01c299","sha512":"8eb79da7d960c77acedc69726b2d30bf7aa2db055bc89869c0309e8f07bf9df2d76d9f2a3c2314c7fb27dda571c8bab56ec2dfd518710e7159c5fd42b75f01fc","ssdeep":"","tlshash":"b3f0970e9cc503a043f800c483bbff1df29f210c881c8264c3c78882760aa9398323e8","size":487,"data":"","first_seen":"2023-11-07T14:36:47Z","last_seen":"2026-03-29T15:19:13.501559Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7ad78725.d.m.BaWtCc5X.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"890c0473a0f3113422c36e37b0334642","sha1":"571b9126922e15eae4be334d58fa1027d5cb6f95","sha256":"098312e5a030107a910d543fcf38c055327cca3960ab09b28e5255e9117726c9","sha512":"1e7c39b6c73908a1d1034b9f0169fff4cc93f722f97bf6b26a9aceb1a539257391401ba3789eefb19c272f453d532bf10e7ed2acae6d17d914537f9b95f94d5c","ssdeep":"192:yRtf6jtSou8s3Hiyy/jin1lKIE3nHHN7PhO6M3viquSNoRkxp0Wq9HozoMHkFH73:yeJTWsuvXKn95MSk3Y","tlshash":"90423066d2c58c316253c9fb40b41480f54dce0652688aa6a5fcd9bdddb1c3fa03ebad","size":12189,"data":"","first_seen":"2026-03-02T20:05:03.593974Z","last_seen":"2026-03-02T20:05:03.593974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a01e6f7bce6dbf5d77e90a118c93b0e","sha1":"0dd49694ef9f526b54037573927940d4f49410ee","sha256":"633fe888d0ff0434ff5676b91027d7f70c3af306567d4f1b7d5f30fef585c184","sha512":"bcfd3614437320134d84c7aa5239c54f0ceb14caa75f2bc4199dd14487d248f32638037b41ea918fe8ed8f9d34f18a4dcea0a114499759bfd0d17b70ce2bd228","ssdeep":"","tlshash":"6de028da74110c7570ed05f533b1a11875431108780a5c23ddfdc9142c189c74c134cc","size":341,"data":"","first_seen":"2023-05-07T16:21:54Z","last_seen":"2026-03-29T15:19:13.493938Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.k6uRd9QO.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b4e05cd7f9a0942135debb8f3f55c345","sha1":"6982eb12ba918e1d71445ee06502a8c52419299c","sha256":"0225fea42a0ab8cb8172a4e80e3f8456a2867684e13ef26a6d02265b623a34eb","sha512":"65140755791f7dd5b8f46c5afb4ed7a1baddd0dfe2bf2b05be18bdd4bf18f26be866d0e0b9401a1a3cb6030d7487f3f85bc0a89616e34da7e948c13a4e095333","ssdeep":"","tlshash":"cd71e7af7fb9f536818286f2b03d71459234916c7025c86061acafc93a63fe05da1f0d","size":3743,"data":"","first_seen":"2026-03-02T20:05:03.592537Z","last_seen":"2026-03-02T20:05:03.592537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c6617b.d.m.CE3Be45l.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"1b6bbf53ee497c1a5810ac0d58efc6e5","sha1":"7f376f080cce4c6980c72910af4a197f66d33e9f","sha256":"bcb84d7fb532581ed30c8c10f659f5d8c732015f8c7a9f156b9de292be5ef3ad","sha512":"d7a6249e33710c4feffa2fe61490162a86518a2ba5a00a44dd984ccb69d3a51d14ba0f50fd5ac4a4d539753ddae7beec1ef7758b55967ab2d6113e8eb07ce68a","ssdeep":"3072:ohfb0UfKGJvEvGdrSaV67dmcgUxHt08gAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qdr:abffKGJvEvGdrSaV67dmcgUxHt0LAUAM","tlshash":"dec31989bd457076c7674ecd823a1400772e1f92e259c891f0ba8ffe267e8149376b1e","size":124764,"data":"","first_seen":"2026-03-02T20:05:03.606342Z","last_seen":"2026-03-02T20:05:03.606342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1788f952.d.m.CJfbYtGa.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"109ea6176bf9e3743d5298d8998b3c34","sha1":"b5e9c9a899d24088c2bc383939a1922c42f070bf","sha256":"970eb56853540f1e82d50b7f8055efb47bbdc3a5b9afd95d786689218b072a30","sha512":"eddf1a8cce3347b0d73c2dd5b25c3710b861e4beae707280fa055ff10eb78b8700c692a086d5ccfc06f60d872230ab3e1aaa704f4058dfe9fdd68f30de63e7eb","ssdeep":"384:6RndR13uJ4p7/Jrz77+CHz8pZ3eTlSN++5Fi75sOHCWqJZQeiAdv7KQlVCeYjEtc:EndaKpzVz77+CHz8p0xSNL5FIsOHC5J6","tlshash":"f9b2f7a93282707687e60ae5907b1106f2761dd5384e94d0b12ca9e73c33d9d82bbf6d","size":23637,"data":"","first_seen":"2026-03-02T20:05:03.608039Z","last_seen":"2026-03-02T20:05:03.608039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-04T14:50:17.505894Z","times_seen":62958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/telegram-20-1-3-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/telegram-20-1-3-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1092\r\ntraceparent: 00-27d7f8e92a2342ac3fbbfc4ff9d94def-9ce98f8ad82845b1-01\r\nlast-modified: Tue, 02 Sep 2025 07:25:20 GMT\r\netag: \"444-63dcc63fc7ad8\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33a6b37c35799458f311e579b88a535c","sha1":"e3a109451dd5bee8ddc098e6a6c7b9bf0eb987e5","sha256":"352216d091549ff6c7f14890b503117e39a6eab0875ec11d4e0048760ec89e74","sha512":"4e430d416c90178fb550ddc0ab38bc8a3948975e83f622345f665f9a64e602d5594b1844403f450c5aa03a2cb7cd8a8b35aa664ba3c81ec129fbbe1d8478f1c4","ssdeep":"","tlshash":"951175b9aac4f445e401d3e8d978e5a33c1f35fb760ddba88fd06b24e50105d01e1c84","first_seen":"2024-05-15T05:49:44Z","last_seen":"2026-03-29T15:19:13.355958Z","times_seen":85,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":84,"dns":28,"connect":7,"send":0,"wait":217,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-jackpot-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-jackpot-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7254\r\ntraceparent: 00-ed2ac58cf376c7227c7f6bb1c18cec0c-8e9ebc594931d1cc-01\r\nlast-modified: Fri, 03 May 2024 13:47:51 GMT\r\netag: \"1c56-6178cf7491cfe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:04:11 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 380457\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:23:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4570ae06b8ad61194283284076493ee1","sha1":"49664b96846ccfc818cf2dbb254d1e88a9f80080","sha256":"fe94ea56b20d7c1b1f1822d1f8c4033e576bc98c886881a51a52e6b5601b2cc1","sha512":"f639b70d1d94856da07411783f7e6bcb653d0ba03111bd072a6235e923d4622ae84e1b496666bf0a503b24f05c474d7e8651aa1447986760f4d8e4a68995ec0d","ssdeep":"96:wPxQNjGPj5YZFIua0lo616bJ5XWq65F7UIcGcYafN+FyXl8fUFi+n91Mj/HbuhC:wPvj5YZh5NyNWq65F7UhfBiiM/HbuhC","tlshash":"f2e173eb66e475e48a40eb90d9272c65f19f247e7f338390c340d7a1a6a44f84f4e8d8","first_seen":"2024-12-31T04:55:51.407987Z","last_seen":"2026-03-14T07:22:16.736618Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f927d477.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f927d477.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2295\r\ntraceparent: 00-14b824a6b0d41fc98ae86f50473ae75d-0695aca5b6eb7a3c-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-8f7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"7f280d99c0cf5954311d1cf8af8185da","sha1":"1a3a7096eabbd628a3dd645e4f276580adad4dae","sha256":"8de8232d730813112edfb364db069d06378a4a1dd2b83248734b082e9d80f872","sha512":"8a3ec8eb36fa8fa6d2e967b19637c9a74d181c0cc80107cd6b79c1a7ce81d85c96662c42a0f0ee7ab20b458fc7a3b0c8de2e782fa98cc33463db7e75d1a1a258","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZquy:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJan","tlshash":"d9c1d6a9338e76404277147d259e1085b07c6884644d182af5e8f87a3c65caa4fffefe","first_seen":"2026-02-26T15:36:50.749396Z","last_seen":"2026-03-31T00:45:46.275763Z","times_seen":17,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 04:22:54 GMT\r\nexpires: Fri, 26 Feb 2027 04:22:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nage: 402063\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-04T15:12:59.537019Z","times_seen":5118,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":115,"dns":2,"connect":10,"send":0,"wait":13,"receive":5,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/bdddc725.d.m.D1Yqn2lm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/bdddc725.d.m.D1Yqn2lm.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9913\r\ntraceparent: 00-c93e3b74ac71d6ea97617098fa5aa615-a577d2a6b2f688d5-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-26b9\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102244,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d613c144ee261f4cc28d787029b93ce","sha1":"4154259c2949a17fd67022bec810daacc705b3e5","sha256":"dd8488df556161550ff9d50fa976db582b7cb00f23af0ee71002070457bd69b8","sha512":"eda0e614753e7f7ee522fbed516ecfc2b9d80b397ffedee3443bc8ac62f5cd8ff364a8fb6839ce600425e213f069eea271904ae9873e513752bf7ec5e5af8d3e","ssdeep":"768:/tXdZMMezJnhsVPiNeTH7DPnZYnMUbSytGPx+:/PZM1zdhteb7FYS0","tlshash":"dba37c983b84bc6022a67e42c809d145f4dc4e56e6fcfdf6f65add88118198e3390fa7","first_seen":"2026-03-02T20:05:03.538602Z","last_seen":"2026-03-08T14:14:44.225929Z","times_seen":7,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:59.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 364\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":364,"data":"[{\"id\":\"7a9c8644-cac4-477c-8d02-2c15e95d8ce3\",\"qKey\":\"5b49cd5e-162\",\"operationName\":\"getSpintaxMetaData\",\"variables\":{\"options\":{\"routeName\":\"home\",\"routeParams\":[],\"ts\":0}}},{\"id\":\"ae7a245e-697f-4b7a-8b67-ea71d36855b8\",\"qKey\":\"33368f52-237\",\"operationName\":\"getCmsContentSpintaxBatchTranslations\",\"variables\":{\"options\":{\"contentKeys\":[\"WEB2_SEO_HOME\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b7537bfc1a489f3c77c830867000654b","sha1":"d2801420cac4104d2824cbcbec2321ac56b654fd","sha256":"f045c2c6e32879bf36456df812e1cff050f2afdcde1354da08ab4ef0fe64fb28","sha512":"7da150429a01cc645a0a598c9277aa8da92010dacf05e9fc57679c3f1b3c2aba1e216ec8f577d395fa8eab2ebfbf2a3630adfbfa86666699551aa84218825c77","ssdeep":"384:9yV3seD8azIPaSHEM/GvEdR1Rnsz8gH00g:m3e0IX/QED1RsQy09","tlshash":"5fa2c952edd5b62af507e75636138eb3bb0db02d8331129598ecc2b3d20a6b5d87c24d","first_seen":"2026-03-02T20:05:03.539912Z","last_seen":"2026-03-02T20:05:03.539912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/171e0e51.d.m.BSdKWSos.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/171e0e51.d.m.BSdKWSos.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8775\r\ntraceparent: 00-11838d1ca40eefaaef7c59a9367c4a79-403fcda0b2d69062-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-2247\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":28038,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27987)","md5":"00220a211a2ead61c596a410c8e2468f","sha1":"ba63b8aa3d48b4415ed8ddc4a2d75723655b562b","sha256":"ac8391ee22bf002b2114b9f6d92fbae1214fc3dc92c39834795eb763ac81bc40","sha512":"b474998646546efab4078057bcbcecba5864ccb7f8a30bcef0973350da717ae061f5864def7515c86087b900ae394d70f7d4c64ba9ea4514da48533b68a7ffb3","ssdeep":"768:Iy7QHHdKPVd3GcR602tiBBV8OmojgACvUWk/pWbFws5pSGf0lNu6uaKH:YKPVhpEK8OmP0gwTu6nKH","tlshash":"43c23ce66353e1b28b7b41ca50770182e21446e4f44c84f1b5fe9c6e36ea8a2d356f3d","first_seen":"2026-03-02T20:05:03.541415Z","last_seen":"2026-03-02T20:05:03.541415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/instant_win-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/instant_win-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 413\r\ntraceparent: 00-59a5832ab9443dad6f7cf470c746baf8-113714892793a7cf-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:59 GMT\r\netag: \"19d-61bf36cf7dfa0\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Jan 2026 16:02:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1395339\r\ncache: HIT\r\nx-cached-since: 2026-02-14T16:28:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d8467444ec8a15407dd22a104df3c8","sha1":"c57ff6a14e02b2d2b88bda518f2ca548254d9fbc","sha256":"9e8fadb0932ffc1f1a4937d9ab37505a34a35b6d0c05fdcb7f00f8290934c9d6","sha512":"3a2e6ee1c391dcb602d2767169dac90216669c2d8279d0f6d4877c03f86c91b1e1df688ab5b75a0ad6088801337f3fa1bf1b59496ffa3e5784ab03a16d6cc84e","ssdeep":"","tlshash":"77e0abb9c448b7d4ea08c7f1a32c6b6da2bd70c2b37009d592c1760961060bfac8a888","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16463Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/no.s6YevAOV.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/no.s6YevAOV.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 163\r\ntraceparent: 00-44570af7881074ecf3a51fcfee438e4b-5169f9b51b187aa1-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: \"6992ef41-a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 896662\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T10:59:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2072cb659bfe23b3d0163006af1aee6c","sha1":"693c27833ee0647755f2b13021bedaeb59c23662","sha256":"b90d2629e1cea6a55bc55ab7cf2edbff2d1a593cb252cf20ddaff8525f97426b","sha512":"bde0651392ad6f40c0d2890f8c74032eb7faea38ef00b7c1c87318cbe04ab6cb577655325606c92257b3470319e415c1bf890f81091cbb649ba01b30b929230e","ssdeep":"","tlshash":"7ae0c2dde37cb820cb1083510f2d72f29695f4dea2d521d7f94069a8212e6878ee3ec4","first_seen":"2025-02-23T03:47:48.678197Z","last_seen":"2026-03-14T07:22:16.769304Z","times_seen":62,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com/","fqdn":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","domain":"seondnsresolve.com","tld":"com"},"ip":{"addr":"52.49.104.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:03.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 03 Mar 2025 00:00:00 GMT","end":"Fri, 03 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F0:01:26:37:F7:6B:3A:26:65:34:C4:ED:48:26:E1:FC:97:C4:BC:6A","sha256":"B6:AB:F0:4A:46:AC:30:25:94:FE:D0:D3:EC:7E:E8:85:FE:94:9C:98:C1:B9:5A:E3:E3:0F:AE:53:CA:E2:51:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nconnection: close\r\ncontent-length: 800\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ndate: Mon, 02 Mar 2026 20:04:03 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (800), with no line terminators","md5":"95884fd7597a1cc3777763055e453a07","sha1":"35e2f73c5875a7bc069bf7ddb82bcfc78304d836","sha256":"f0107f1302b3e1c5b18a2e5e2355614c2a136bbd6569a77d1026dd4909b88375","sha512":"aaf848e9e1f67175593289030d1459858bfdd27d143c5d57376c19b5849bbaa1a31289fcc1ab110678fcf033ebae8882bdf57297e9706cf24760a214acd46d1d","ssdeep":"","tlshash":"5b0181091ad3b8d018103d84a93c9d902235dec68848d04b4aae3ead1f46862a67b123","first_seen":"2026-03-02T20:05:03.544989Z","last_seen":"2026-03-02T20:05:03.544989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":162,"dns":27,"connect":34,"send":0,"wait":35,"receive":2,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/769087b8.d.m.ITzlo9tB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/769087b8.d.m.ITzlo9tB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3511\r\ntraceparent: 00-6a35b2271acfd28fde9aacd6cd80fbfa-6dd1319923c2e704-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-db7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205275\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9497)","md5":"a97b2ac14757f4188da0ec0ef2783734","sha1":"f609d1ed485daf753a305a91c8cf30f8aa82a2ba","sha256":"1ce54bfd9a8ef9a74e095ff20438dd261ed146d5bd74ba3db0714760b55690c3","sha512":"c85cfe94e20f8fd9a422a0b6b5be3eac8966046a92fa141f0cd12d63cf62bf5f3d24a69f538527689a25c0b439e0c5728e414292481ff01d099680605d26b4f9","ssdeep":"192:AULK5rHvInYEbNRMNVLAi2JVWUwTwqjkW6JLRvpsJY:NOPInYeNRMLAi2KUwTwqjkW6RRxsJY","tlshash":"d912c5cd73d1fa7252a6a9a5203fa006bb7f66a9681c4420d14dd4c13e7588fc933fad","first_seen":"2026-02-26T15:36:50.748248Z","last_seen":"2026-03-08T14:14:44.173525Z","times_seen":13,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/BookOfGods2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/BookOfGods2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86242\r\ntraceparent: 00-04343d4e8cafb551f3c388ba771e103d-c132bbbbff1ed615-01\r\nlast-modified: Tue, 19 Jan 2021 15:32:28 GMT\r\netag: \"150e2-5b9428bda24c0\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 472545\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:48:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"ef4f201355dfda0b185294d8c4db3597","sha1":"11fb3ce01f48c7e8788af7154be69a315a656459","sha256":"a246edad75f2c6156f38f95bda0e17df6eef2147595663aefe04d8cc7baa376d","sha512":"86166868955aae3d61477208a65ec03b369b9b4b583c9457205546d1440fc84f0ee89c9a7546281bd081bf4b7942aea1ed4f0bb98216c4e7608df825d1e98780","ssdeep":"1536:MDmkJP6AT3wHUGPzQv9Ak6jPQQAktbJlaB0RhC/dzq8A5VDMOr2OSUnX7hOV6o8:XkJXH9Ak6jPJAybJlaB6C4vJSUnXe6r","tlshash":"9a831244a3b986d2672498453e47e53c1d9207eb3e638930c2bee9375781db603a3e87","first_seen":"2024-12-31T04:55:51.657149Z","last_seen":"2026-03-14T07:22:16.755131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 5450\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; shield_FPC=SCUL95VI0AI4Uk5kKFMqlFjSe93mHX8vOg; _ga_JZZNGY93CC=GS2.1.s1772481848$o1$g1$t1772481848$j60$l0$h0; _ga=GA1.1.1813562568.1772481848; pixelsink_uid=22d90dd5-0a6f-41e1-964f-c378189ed00c; f3k2kqs7xc=edfe83d87e205116f53ae2608ab3adea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5450,"data":"[{\"id\":\"faaacb07-814b-467c-a223-45bbd58833df\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.132.2\",\"level\":\"ERROR\",\"line\":0,\"column\":0,\"error\":\"YandexMetrika registration error: config={\\\"counterId\\\":71598811,\\\"isDevIP\\\":false,\\\"accurateTrackBounce\\\":false,\\\"clickmap\\\":false,\\\"trackLinks\\\":false,\\\"webvisor\\\":true}\",\"file\":\"\",\"url\":\"https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\",\"ts\":0,\"stacktrace\":\"r@https://leoncasino.gcdn.co/js/ba8af1f8.d.m.wQt3n6fp.js:1:2708\\nb@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:4:4291\\nwR@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:5:2329\\nonerror@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:149033\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:1:44309\\naddScript@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:1:43572\\npo/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:149173\\npo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:148764\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:150505\\nregister@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151084\\nSo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:152044\\nPo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151708\\nsa/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151980\\nemitFrom@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:1:24573\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:1:24442\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:91\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3834\\na@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:2892\\nYt/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3304\\nsetTimeout handler*Yt@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3239\\nHr/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:4051\\nYt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:18839\\nNe@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:18909\\nZl/s.call@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:52938\\nY@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:53932\\nZl/p\u003c@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:54145\\nZl@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:54254\\nqt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:52669\\nHr@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:4009\\nid@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:10:13482\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1287\\npromise callback*g@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1266\\nasync*@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1319\\n\",\"payload\":\"{\\\"name\\\":\\\"wR\\\",\\\"message\\\":\\\"Script failed to load: filename=https://mc.yandex.ru/metrika/tag.js; message=Possible cause: blocked by an ad blocker\\\",\\\"code\\\":\\\"SCRIPT_ERROR\\\",\\\"metaData\\\":{},\\\"stack\\\":\\\"r@https://leoncasino.gcdn.co/js/ba8af1f8.d.m.wQt3n6fp.js:1:2708\\\\nb@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:4:4291\\\\nwR@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:5:2329\\\\nonerror@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:149033\\\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:1:44309\\\\naddScript@https://leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js:1:43572\\\\npo/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:149173\\\\npo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:148764\\\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:150505\\\\nregister@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151084\\\\nSo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:152044\\\\nPo@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151708\\\\nsa/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:151980\\\\nemitFrom@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:1:24573\\\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:1:24442\\\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js:2:91\\\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3834\\\\na@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:2892\\\\nYt/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3304\\\\nsetTimeout handler*Yt@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:3239\\\\nHr/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:4051\\\\nYt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:18839\\\\nNe@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:18909\\\\nZl/s.call@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:52938\\\\nY@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:53932\\\\nZl/p\u003c@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:54145\\\\nZl@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:54254\\\\nqt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js:1:52669\\\\nHr@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:6:4009\\\\nid@https://leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js:10:13482\\\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1287\\\\npromise callback*g@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1266\\\\nasync*@https://leoncasino.gcdn.co/js/app.BL0tMmGG.js:2:1319\\\\n\\\",\\\"silent\\\":false,\\\"interactive\\\":false,\\\"cause\\\":\\\"null\\\"}\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5fd8c5d5b0ab8e6d0979217b1a02b70b","sha1":"5b0f24efe72497c84c6c2729470964b1f960f1b6","sha256":"981d58386b31125d2e4a931348e72f9d44ab66ac7f9a36bdad51790dbd1a8177","sha512":"3012c9fbcefd581546d04d26ba779ca06fcc5fdb0667d4da1050c9f2d9357bd840964a60c0d91530c48d0e90c137109811aec3a0fb6cab66d5de4021e00141a4","ssdeep":"","tlshash":"e0c02bccbe0661430c0c810dbb23d811eb75264140488c09d5dbe200405c47d108bb03","first_seen":"2026-03-02T20:05:03.548274Z","last_seen":"2026-03-02T20:05:03.548274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":2,"dns":0,"connect":0,"send":1,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1fca7f1.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1fca7f1.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 751\r\ntraceparent: 00-2e8744aa33c6d61acf0da886b3ad6c20-81b91fe46d894f3b-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: \"6992ef41-2ef\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 1136307\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-17T16:25:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"ebde2d39f138a42baa20b276bfd63fae","sha1":"116843f5a885a77c9f2ba259e9e23d1fd045dc02","sha256":"35b26c3e85d5472fa3cb91ddcfa727d44b843b651bdc033fda887ae732e75317","sha512":"e81ee8c2932550539af19077a06bc6b2bfdfd46ffe171793b73efcedbd3d986482dc4537d266c629a665c6f15a2971294ab176c03b298147dd4d2fecac6882cb","ssdeep":"","tlshash":"a841ddcb738498329b57d9acae1f6f72287ff246451ac2a84158f1f015820ddc05af2d","first_seen":"2026-02-26T15:36:50.677605Z","last_seen":"2026-03-08T14:14:44.244184Z","times_seen":13,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/moonSw.DTmx5t_S.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/moonSw.DTmx5t_S.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/faffda3d.mKC9hbKA.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-38cb253a04fa9369478422ebfed47f9b-8e8ce60729abf027-01\r\nlast-modified: Sun, 22 Feb 2026 14:30:04 GMT\r\netag: W/\"699b12ec-146\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 618575\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-23T16:14:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f673be269667167e50ad29b3c8d4ca22","sha1":"1884d32e417962d76ad00b4b342243ee5c5ee813","sha256":"1248692f89afc35d90d402e22d5db4ddccd51391372bb1db5ecc317385255fe9","sha512":"0d12c27d1bcd3109bccb82f486e6b817aa7f9c14290c8979d68d4ddb5b8443f7c73a83d478cceffbd14e6aa8c83437863b4befabcbaf2a7a492c946e7fb4acca","ssdeep":"","tlshash":"00e07df24689880c342bcd72575146a523cf00fc346808e6d5ceca7af0c7a94e61bd44","first_seen":"2025-02-07T04:57:00.93733Z","last_seen":"2026-03-31T00:45:46.273576Z","times_seen":105,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=22d90dd5-0a6f-41e1-964f-c378189ed00c\u0026\u0026timestamp=2026-03-02T20:04:08.281Z\u0026fire_id=1772481848282-c7e464f2-0583-41f8-a0c2-d56108052d39","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=22d90dd5-0a6f-41e1-964f-c378189ed00c\u0026\u0026timestamp=2026-03-02T20:04:08.281Z\u0026fire_id=1772481848282-c7e464f2-0583-41f8-a0c2-d56108052d39 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ncontent-type: text/javascript; charset=UTF-8\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/dd2143ca.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/dd2143ca.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 20582\r\ntraceparent: 00-978a62e24ece7254fb7e9f833c647baf-9fd19d5dff7397b0-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-5066\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"173016191c06704eef04f03986b14bdd","sha1":"9c12772a51df61ebaef02952023c16c464dfca3a","sha256":"b23a26c77610197fcf71c118bb19b4f0f67403cf25eb4c0048c42ba0da66f91f","sha512":"d63d4789357a1eb484c142e89df23fbfc84fd32ac94d52555cca9d00f7aed910d9769993db3e918d1357ad54785f4caab085ef42d9949560340a8afaf1f63212","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5d:440yRbYVfh7WBknQL61PHd+ejJm8","tlshash":"b05380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2026-02-26T15:36:50.678293Z","last_seen":"2026-03-08T14:14:44.173037Z","times_seen":13,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/mifid.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/mifid.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15983\r\ntraceparent: 00-27c2cc0b10b76a05e5e965f6093c21e0-1bd1f652c0a85088-01\r\nlast-modified: Tue, 11 Apr 2023 11:01:30 GMT\r\netag: \"3e6f-5f90d69ea6890\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":15983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cdb2249c53625a267f2a0cbc402aea4","sha1":"c3c8b6cae07bfc101fa3b20d4191fb44bec8ea2c","sha256":"655d40b803d0c069859c3de3d8edee8540d9913a158b40b915211606d7d02625","sha512":"39c04cd8f25ece9d135ef975cf99fff0aa8e438bca311178bacb5db0596c8f23602f65fbccb2dc608fa4c81f72ff98de3b90845c2b45d52fda182a296fbee394","ssdeep":"192:wqYVG7iAXWgYvKdGNbirHFWBtADpfcMho+9rIEf6/t9BiKgsydO87lwivO2VFqqL:YVGGJbiMBt8pPe+JIq6V9BiMANGAgov","tlshash":"fc72439a7369d7f2d88ae3ecd9025434761940e2a6c0c7b0c3a4bf0f58474e6fc5aad5","first_seen":"2025-02-23T03:47:48.718829Z","last_seen":"2026-03-08T12:35:28.035737Z","times_seen":7,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":75,"dns":12,"connect":10,"send":0,"wait":273,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/new_slots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/new_slots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1699\r\ntraceparent: 00-a8ca1fdec755db113dd8ec74d9b7cfcf-8f9a5d7880576199-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:41 GMT\r\netag: \"6a3-61bf364b9c54c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccbd6c3b7279dc7e0c3e32460b07d77b","sha1":"d8400d43aa8abf54af0ba8a052192f1f1331e259","sha256":"98596f703ec5e76243f01c178e27e944f494fbda0e8e4dacd6291739b078ac8b","sha512":"bd75a96f89454b29baf742ebe76c471f2744d5e79f44ff64051d04ae236c1f08bb4270cb34b63933232213688b0e55c798b132e0e737bb9dc69beef92b003f0e","ssdeep":"","tlshash":"8a3102f7d3a952d0970bcbd5e22ab62674a73cf77c82679442006a4432535e9c88ec90","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.270025Z","times_seen":61,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.BL0tMmGG.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:54.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.BL0tMmGG.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-5e835a382cb280c3508ce274d3dde126-701798b2a82fdada-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-74a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1322)","md5":"3924f52caee9a7b55d314dc24cef6036","sha1":"bb3efdcee37d3f782bfbe5612c2d77261a6d723b","sha256":"2303293e5e41bd7fb7bab79f370450e02f3cf59b39ebb150b2c8b6e8640f775f","sha512":"e6dc369ee3771f49727bdd71eaf66de88fb230836a6bdbcc847d8fc53c5f6c1207f3bafd6b2762c20cffa390a1c25a64ecb6c8b6a5f556a17b8f5384322e9a57","ssdeep":"","tlshash":"7831660d72c295354aa604ed815a3621b322de91353dc5e1e0b87c693db1813c91afe2","first_seen":"2026-03-02T20:05:03.554428Z","last_seen":"2026-03-02T20:05:03.554428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":123,"dns":50,"connect":7,"send":0,"wait":131,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/92bec47e.d.m.BJNEgb10.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/92bec47e.d.m.BJNEgb10.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 56855\r\ntraceparent: 00-998f2b51cb4459b69de345d646a0ab8d-46a40b793605d5e4-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-de17\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334510,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46740)","md5":"4ca5303273e07a25cc5775e8860a454c","sha1":"24ffbc8d31396248f4c6faf60e092edaba80db4b","sha256":"b584bc62ae3b3f043937fbd3c516d61f64e350578fa22e5d856c178dc8998246","sha512":"31e4dba7738af7fd7f0b48274fd04207b8ed9cb389ffa95a0c4a9cb12aa0f9efeafe297f959444e2b7bd293de6c89692be733c1604d4e9e5ecfd2de87fb15d06","ssdeep":"3072:spsacLVJ7lQAIToVpH7RrfICUxfJQmxHjKMSEfQO7SzeZXLxr0:9jplrexFwMZfQON50","tlshash":"0364f68d72f82bb5458370f1b63e1532b270e013340c4d993d9d2295afa6618eee6fb4","first_seen":"2026-03-02T20:05:03.555771Z","last_seen":"2026-03-02T20:05:03.555771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-30.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-30.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 124642\r\ntraceparent: 00-4be4978e3053a47dd2aeeb763d8733d6-0affeb36bf025ce9-01\r\nlast-modified: Wed, 29 Nov 2023 14:34:40 GMT\r\netag: \"1e6e2-60b4b6f6e3e94\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":124642,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"065691d045bfc538dbfde5499a6d2674","sha1":"6cd30a84f1eaadf7e5dfc0b63b4767fd30a8df50","sha256":"c38f15c7b168fd96961ea9673f5ab93f5e1eeac70ba805e27369f5d1febbb285","sha512":"8fa87b3aa5f20681301f0e4ceadc73e7e7bee3a280af44c602419ab274f38248235df2887d214ec0cf9e23fe6389f2ea91477781620cb459369a78fed086a507","ssdeep":"1536:9g1mplOk3XLELTLyO/aCBNZsv/7GHLIe6Ej:Re64","tlshash":"36c3835bf3f9e6f6e109d3a8c6818430322a1af37d91c6a443f5af5edd1404e1c6da92","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.489458Z","times_seen":107,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":286,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 21:20:07 GMT\r\nexpires: Thu, 25 Feb 2027 21:20:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 427435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-04T14:56:09.834603Z","times_seen":22481,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=d796s9\u0026event=regstarted\u0026site=leon7772.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=d796s9\u0026event=regstarted\u0026site=leon7772.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:04:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/playngo-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/playngo-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4058\r\ntraceparent: 00-54f6bead1ce9b814cff4014ccdc3e656-a6f6d86a269aead5-01\r\nlast-modified: Wed, 05 Nov 2025 12:40:59 GMT\r\netag: \"fda-642d842b1b8f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 08:19:21 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 125922\r\ncache: HIT\r\nx-cached-since: 2026-03-01T09:05:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd546e671acbd8904107f0a12ac564b7","sha1":"594c51208445a8a0350a0685744afddb7e20d7f5","sha256":"1dece0fa8fbd1f198d0c430a18a735fd44114f6d7ca896870682f2287a712e0b","sha512":"57024c021efc18027ef79d5143379a6d622195a79ce5eaf7ebf2465538ac73b7dd63b92b849158573da21df26d49733ac6e32c601b2517d9560042a1bb825ec6","ssdeep":"","tlshash":"e48142deaf5896f4f149a3b9661ad07bbf4305e56f818968cf140f07b80489c5ca84eb","first_seen":"2025-12-03T23:02:23.146767Z","last_seen":"2026-03-31T00:45:46.1678Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:04:07 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 387\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":387,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"34661bed3d02c3ca84ff0fcb188516e3","sha1":"96cb189c3903862a93b58124a3a8f638a035b61c","sha256":"86b9a87224dedbeabd3767e9c7554ae29717a9eb7133be23addf231d6acb57b2","sha512":"8ce4348596237e3aaba893aea829bc4e6684caeef09e6294099a0720825ec173464f7d2e82c247106ca462ef31d51ccd0330e7f8c616fc6a690291f61e938554","ssdeep":"","tlshash":"a0e0f16e432db502e2a920937f31260c3431c1ff3b00c8c50c4c5d14288af9bfa39c54","first_seen":"2026-02-26T15:36:50.744806Z","last_seen":"2026-03-28T03:46:07.88586Z","times_seen":14,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":211,"dns":1,"connect":105,"send":0,"wait":105,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c32793.d.m.CRi6TCRt.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1c32793.d.m.CRi6TCRt.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 25288\r\ntraceparent: 00-23444a387d35fa776d899011a9aeeeb0-84cd93c69228f5ed-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-62c8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137890,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65087)","md5":"cecb9c3a04c95b32271bd53a8cf9dad5","sha1":"2685d8ecb90e05b0bb55e452ce32a037e4a831ea","sha256":"1ff1510f7b045f5855ec1088a32b81229a49bd069b0a543ccaec4f9531f9612a","sha512":"efd607a0af261f9a1749089371f9d3bd6067048cf97b658287009ae02dcbbf4fece5b607a40011623101c34bfa14c21274bed126a8eee097c38d63245bfaa6d6","ssdeep":"1536:vNFNNxLceHyQoBREqBNwzBsBy/DFT++xTzP2IYSvoO3xH5j5/9gBIeFdEU:FHvyKqB+zBsBQZy+xTJ3xZj9eFd3","tlshash":"c4d3955ba5053cfb4b700e2a5b5e66b521338888fe56c03b857aaf3d3fab105f0161d9","first_seen":"2026-03-02T20:05:03.566129Z","last_seen":"2026-03-02T20:05:03.566129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/logo.CTzo9Wgk.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/logo.CTzo9Wgk.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 533\r\ntraceparent: 00-691fb1a1086dd7183d63e712a031a3d0-1b247a89e4a17e52-01\r\nlast-modified: Thu, 22 Jan 2026 17:40:34 GMT\r\netag: \"69726112-215\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 2872011\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-28T14:17:07+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c084e668671b35036439f1639690ef75","sha1":"9988516ab917ea62df37ef9136a9ee89da7e049c","sha256":"6516e9411efd44270ddd1ed1af1523a9c63a61a1bf29b697e1aac53302963b36","sha512":"edec61a2a75471788a707cabe122822827b51e7ae00390f54c00b36dc201a0885b035718ea7f4ec9b2e6344dc485b7d2182c142019daa3fd17f1cae14864a80f","ssdeep":"","tlshash":"0c1121eb861062bcab55afa5ea307416b10f547e3f4a86acc26c830014939d4e40cc54","first_seen":"2025-02-12T21:05:05.539064Z","last_seen":"2026-03-29T15:19:13.409426Z","times_seen":96,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/holdandwin.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/holdandwin.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1193\r\ntraceparent: 00-e4507d4b27dc7a146f24298a1865ece7-d81d6103005bd586-01\r\nlast-modified: Mon, 25 Nov 2024 15:44:32 GMT\r\netag: \"4a9-627be9be373f6\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 474806\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:10:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e6b24f8e1304a6d30fcf66915302f8e","sha1":"fd521e2f3e992e8f4421212496441e288ed82588","sha256":"d1d27a4fa7dfa49d65591ad727ea33e2739418dd6975b6cbbe0844e03101d179","sha512":"5e97f4c5fb96dd6b29e3a7affcb7bd03c2bd4d5def50338d59a8d5e83605978bf6b8d10daf1c33c4d973ce723d9d6f5fd656af52ad7d79052e83abdf134e983a","ssdeep":"","tlshash":"8f21cbf7e3584bc1c1038342f53aa8b1803f587cb3e58ed580797de28114987ca88481","first_seen":"2024-12-31T04:55:51.414787Z","last_seen":"2026-03-31T00:45:46.283415Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/pgsoft.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/pgsoft.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8175\r\ntraceparent: 00-fa73b456f3328f8172b1e113b820313c-b604bca651ecd95b-01\r\nlast-modified: Mon, 07 Feb 2022 08:53:03 GMT\r\netag: \"1fef-5d769ba7bc5e1\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 16 Jan 2026 04:45:46 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1344450\r\ncache: HIT\r\nx-cached-since: 2026-02-15T06:36:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dddf128184ff94915ce0f5eaa677f40","sha1":"4350c5408da28db397df35481d8077c21d89138b","sha256":"265a5b03e475f9fa4d6823052721e48393494b1d2f6e1874a00698894d6e65ed","sha512":"400bf499f6e853a5022cef129694c286034728c4f9d4382aded0f1eb10b619ff02f73d89246cef9a5d782aff7a7910bdf8abdf8173cd23a819aa180d2bb6a49c","ssdeep":"192:WnF+DtRPQaNurMnpxvzugABoMyEMK07VV3LxdS:Ht1hAMnz5EMKUVVjS","tlshash":"18f144c6f6d283f06e8c43bce5305cbc607759e9bd60f588ca772e67b8c825668584c2","first_seen":"2024-12-31T04:55:51.581704Z","last_seen":"2026-03-31T00:45:46.162461Z","times_seen":56,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 186\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":186,"data":"[{\"id\":\"17852f85-8cb8-425c-af5d-43c92fbca350\",\"qKey\":\"da53e521-177\",\"operationName\":\"setCoookie\",\"variables\":{\"options\":{\"cookie\":{\"name\":\"firstTheme\",\"value\":\"DARK\",\"httpOnly\":true}}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: firstTheme=DARK; Max-Age=315360000; Expires=Thu, 28 Feb 2036 20:03:58 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d7cc8f65aff202c894e6827199592945","sha1":"9bc64e85bb0877f643d0c44a2412ced7d08733e5","sha256":"938433d4407303b56dd107ddc35ce4741781476fd134c41b7d288c76bc184ed8","sha512":"e861ea38eea4992503d857177a70d68a7dedbd698f822a17e49d9045b19d0cfe93acb5ae1af44290eec2bdcd4ce0aee10cfdebcc0111ee50b19958512112d79d","ssdeep":"","tlshash":"2321374c12600c7fd6470761a551fe89e39c99e360d4fe7a99c1df99a8fa8a462328c3","first_seen":"2026-03-02T20:05:03.568537Z","last_seen":"2026-03-02T20:05:03.568537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/megaways-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/megaways-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1021\r\ntraceparent: 00-666f518e995f329acb48ae813a7d5ab2-b09c35073162143a-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:33 GMT\r\netag: \"3fd-61bf36b728ef1\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 01 Nov 2025 07:33:12 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 127443\r\ncache: HIT\r\nx-cached-since: 2026-03-01T08:39:58+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cdbb1a91e3cd4e2e7727c66710a767","sha1":"67fd4051cf6236f406baa5b90f6ccbe5825867e7","sha256":"9f37e4d79b64613286fbf83e86ba1a2e41279be0c2ccbd076ca5b50f9386a8b5","sha512":"e582d46b1834fa9c5e03687e9bdd314ed39cafa5b632828c632a048f39e8215927330d17c810270671597a094f563bf7c0a2d5f1da788468d3064afac762ad93","ssdeep":"","tlshash":"c111abf7a1e5b6c4a60dcb71d926e5b41e1f38f93eda048293801ad0bda02719c8dcc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.152577Z","times_seen":61,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258235a93237c924b8dab90d66ad712a.seondnsresolve.com/","fqdn":"258235a93237c924b8dab90d66ad712a.seondnsresolve.com","domain":"seondnsresolve.com","tld":"com"},"ip":{"addr":"108.131.179.139","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:03.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.seondnsresolve.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:3A:69:36:20:7C:AD:B5:16:79:42:DB:86:03:35:85:F2:94:92:F5","sha256":"FF:A7:15:80:50:DB:B0:9A:B6:72:0D:47:26:BF:71:58:AF:A2:28:B8:7E:45:5B:42:C1:D4:25:82:E5:FD:FF:F0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 258235a93237c924b8dab90d66ad712a.seondnsresolve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f26b21bed09b377813f6c111904aa42","sha1":"2820cc6a0ad4e046532779dbf8e2dbf40be96a0d","sha256":"2d7a270c1928be61476bfe7e9a662b5d23101783e646e0b241b3955ad5ee786f","sha512":"09fa0d9d01974bb860ae2fd0a2a1ed538ccc3490cadee576e83549e184cdad9ce536ee0b6d3b40b3b79f2998092934cda28bdc5f00200b05b17bd7eace5f0fef","ssdeep":"","tlshash":"2d5000003c300000cc0000c0300000c003003300000000030cc00000c0000303000c30","first_seen":"2023-04-14T18:46:24Z","last_seen":"2026-04-04T13:57:53.97949Z","times_seen":3038,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":231,"dns":60,"connect":43,"send":0,"wait":53,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/collect?data=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","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /collect?data=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 HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 0\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\netag: W/\"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk\"\r\nserver: nginx/1.28.1\r\nx-powered-by: Express\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4b6691d4a753b7360fa8632b90c77126.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: N4BsXRKAYjDY9OW4u7XvfUJZWTn9GYlZRnPE1gkKDh4lXsRSpoewkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/faffda3d.mKC9hbKA.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/faffda3d.mKC9hbKA.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-b6fcd8480db6623220fdcedab3cac4c2-edca5d48a83e9404-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-fa76a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1025898,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d9c81acbd7897d218cac147e1c565b51","sha1":"8cf0da82cd823d6e87cd84de73f8655db256b698","sha256":"1a173e9b9c81c6d25dfa0f3a3fa1f18926362b8975ea28aef9c9df8218b2ab60","sha512":"08f21a7f6e1f31e0f9c555ff1c6f8136708c5e8843443d93f3cddb56fba940dde54886c3308254836af12e0a59ccf5cfe2768bfacd805fe48d83d08658688688","ssdeep":"24576:kpQY7t35lPJB3VHpLU+QIZqMX6EgsTdTkwR8qPJZbPBBnVjDN29J04We8xwOW10r:kpQY7t35lPJB3VHpLU+xZqMX6EgsTdT9","tlshash":"f925d8bb5e60b13ef6b7b52ee1e5ba4d7118dc03c863469ad4b1962cc1c77925332b08","first_seen":"2026-03-02T20:05:03.570309Z","last_seen":"2026-03-02T20:05:03.570309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/cnjqphyx HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3161\r\nlast-modified: Mon, 02 Mar 2026 19:20:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: BMlmAI0KlPP.OFB1KgJsLqUdJ6pXhgpq\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 02 Mar 2026 20:00:37 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"3a87c88f7962721c3bb0179a8e10cd00\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: FROyNqmzdBseEdD-ipTSOhw6I3Y1-_uxRaXdiNnMwNy_yA0B9TZc4A==\r\nage: 212\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7614), with no line terminators","md5":"97a8c76e153ec7f48812490f51e64bc7","sha1":"39e3769e70ff1076538997e15fd3e62223f5b28e","sha256":"94b17b43e7d1dd9c9950757380ea7262171e5d2a71b22d0b3659798b7c3ea115","sha512":"cbbb99767bdf0bdbfbb899f0830e7f1597f41618fca1878c17d4e2fc5ecb6755efb200cae964e97d2e0897db0344e9e5db3f6a4099c2f645a9f53d0355f19254","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpubGWzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOciWMMiZ935pqUP","tlshash":"1bf183eeb2c2793806a31576623b770c3f3b654528494490d066c8cc7a7adcbc12bfad","first_seen":"2026-03-02T19:38:58.46739Z","last_seen":"2026-03-03T09:06:16.179284Z","times_seen":61,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":41,"dns":29,"connect":1,"send":0,"wait":3,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1457\r\ntraceparent: 00-5605151c4f24a72ab1afb8488df00b3d-2108a41cb67590c7-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-5b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T20:03:55+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-2J_sZYe_Rqdf0VSHPWrkCVb57NqUiGqx_tB-6bTYyF-7drKipcv2zZaeKx3cK1RkmPsA2asT4TW5iJqOt52XDxs0hf4djR9Zu_1o?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.5\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.63","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-2J_sZYe_Rqdf0VSHPWrkCVb57NqUiGqx_tB-6bTYyF-7drKipcv2zZaeKx3cK1RkmPsA2asT4TW5iJqOt52XDxs0hf4djR9Zu_1o?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.5\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon7772.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: j+dyQ+jZYHkjMPJtM/+6nA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:04:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: BbnQz3u8zIKmLeIJFmWaIX39ITU=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":1,"connect":94,"send":0,"wait":94,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/WhiteRabbitMegaways@3x-min.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/WhiteRabbitMegaways@3x-min.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75730\r\ntraceparent: 00-4bfba9c74fc73bb4a89d39c8e77ae6cc-ff2934011b301b47-01\r\nlast-modified: Thu, 21 Nov 2019 16:37:06 GMT\r\netag: \"127d2-597dde86c36dd\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Jan 2026 16:02:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1392794\r\ncache: HIT\r\nx-cached-since: 2026-02-14T17:10:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":75730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 375x561, components 3","md5":"b077f9efe89375d9194f7311264caa7b","sha1":"126b3c80be663e7d4d2c0a963ade4b8b00c9cc5f","sha256":"0951dd5e50037de882de1eb47857e9717c613c24bed8c3ae50e033d991533950","sha512":"e991b513066f60eaabdfc3ce6e0763f989f36e9826774c2ff4bb2535d76e075ddc8feb7ded6d2a84f35d53677974c8c1612d7764cbe2b794d52f8a48c20f19bb","ssdeep":"1536:gktlBEAyaPFRZKgo0R2I++Zze1W6Hc5DINf1NF5rZ:aPInV+gMzNjFJZ","tlshash":"327302de4d1c723a68a3c8344e2ff69327aa75543ada21dc5c4a6327a0509f68e08d5f","first_seen":"2025-12-20T03:09:17.626452Z","last_seen":"2026-03-14T07:22:16.801892Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:06.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 12:15:04 GMT\r\nexpires: Thu, 25 Feb 2027 12:15:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 460142\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-04-04T14:25:29.81262Z","times_seen":6604,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/39f0c6ef.d.m.Bdk4ZXEW.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/39f0c6ef.d.m.Bdk4ZXEW.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a3a2f8c47771162c730e19cc2c9a3529-780eaf1c9ff99255-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-139a7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"76f67d552cd39f082c7a584ecf0adc5b","sha1":"58de43d1f5969e87ceddd091fed94372f5053a14","sha256":"b884304643bd18c972cd7b42c7403d5de1b5950bbc3a84740e1dc5385b7077ea","sha512":"577986717c7ce86fd7f5591b3108a20ced79c07d61dd9c29f7cc09206c6dae6f0f04c0532cbe396fdc3fb3bbe11843e1873d454f586b1f2594c176dcf85f3264","ssdeep":"1536:i+sso3D0S/M6WTvLgzI/Q1VwPvIY5qvjV0VmqjyPW/zNdXHhw:1j6MnZlvIY5ap0Vmq+PGNti","tlshash":"16732af93363b57293ee21e6407b0402f3ae68d9284d045cb2a5aedf397541850ebf79","first_seen":"2026-03-02T20:05:03.574649Z","last_seen":"2026-03-02T20:05:03.574649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/pragmatic.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/pragmatic.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5939\r\ntraceparent: 00-9a766ab2600a1c2d25831af0cdc1ded0-e6091c0c4d144881-01\r\nlast-modified: Fri, 19 May 2023 07:56:27 GMT\r\netag: \"1733-5fc074213b5f4\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:33:32 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 332295\r\ncache: HIT\r\nx-cached-since: 2026-02-26T23:45:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9fb8da17ae46b9db5722e63c56429be","sha1":"efeeb0922c67626b63bc2db6eb3d017f472d1d9c","sha256":"6148bfd444d31f82201b8758cb4efbea9058ab1a7982756389d1def22f7aef73","sha512":"f1a06898407dbbf8a10a296e18e695b6248fb46b0e8d45ee072963f83124e18e261f4888a212cf05738227212b7a237e714a27efdb4d4b5463fe36cc8cf12058","ssdeep":"96:oGeXCKmzTjHqsVd9J7zWjTuI842motCyfE3iPfSm7Wf843CyMWQSZyP/6UaoXX2f:wXKjH93L7kuI8421tZfOiH9WHRYPXX2f","tlshash":"01c1748c6f4145bcf040e6feb70268e8288aadf63953a994c3690c67a55249cdf4ccd7","first_seen":"2024-12-31T04:55:51.583283Z","last_seen":"2026-03-31T00:45:46.145408Z","times_seen":50,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 480\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; shield_FPC=SCUL95VI0AI4Uk5kKFMqlFjSe93mHX8vOg; _ga_JZZNGY93CC=GS2.1.s1772481848$o1$g1$t1772481848$j60$l0$h0; _ga=GA1.1.1813562568.1772481848; pixelsink_uid=22d90dd5-0a6f-41e1-964f-c378189ed00c; f3k2kqs7xc=edfe83d87e205116f53ae2608ab3adea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"[{\"id\":\"978602bd-0f9c-4d41-8986-37e4e2d1c82b\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.132.2\",\"level\":\"WARN\",\"line\":0,\"column\":0,\"error\":\"[shield][success] {\\\"session_id\\\":\\\"f5eabac0167211f1bd8de3912d038a68\\\",\\\"helmetId\\\":\\\"5a96d223bcf50629a1d9fcb2c4c3934f\\\"}\",\"file\":\"\",\"url\":\"https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\",\"ts\":0,\"stacktrace\":\"\",\"payload\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:10 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f1f1c2326556a878f9de95307e720c6c","sha1":"92cbe764b474865fa9a754634b02046bfa233886","sha256":"e8e61844672087f9c21d3d387de03dd144b14764c3aa9fb0bee40934e43ce018","sha512":"e07917231005326cb9d6f8e78df880610941eb70c53e094fa648173fb662830bf69f65df80c35c2edf85c338b70b8692aa306b5257aa14ccc78b9d911fe012e2","ssdeep":"","tlshash":"fbc09bd47f4181665c06c5489726fb117325744059908545d3dd71114144c7d668b955","first_seen":"2026-03-02T20:05:03.576205Z","last_seen":"2026-03-02T20:05:03.576205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/voltent.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/voltent.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2616\r\ntraceparent: 00-ffd1897864edee3301f81903c61b3d79-bb2106ef38d07104-01\r\nlast-modified: Fri, 27 Sep 2024 08:08:08 GMT\r\netag: \"a38-623155afeccb3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:33:32 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 332295\r\ncache: HIT\r\nx-cached-since: 2026-02-26T23:45:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c0c3160ad74409e6974c3e9bb3770d0","sha1":"209269e197095ef1eecba4de5a8c897560ef1774","sha256":"e1fb8d516b3447db6430ab37aac407636ed11b2247f2b6fad5bfc2f9917897b8","sha512":"6934594f179d876094a006d4a8da10f767239c611af93891c73403adfc9d753b4268605a0f7971ff7bec8474c56933ccb112895af99df8b29e971cc638981d03","ssdeep":"","tlshash":"2851c6c8e738d120b04173a9619a94b83b5298f23f02dc69d78a2eb63445c5f5ebddc7","first_seen":"2024-12-31T04:55:51.591143Z","last_seen":"2026-03-14T07:22:16.726331Z","times_seen":39,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/netgame-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/netgame-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5730\r\ntraceparent: 00-7de0396bb45ee27d3d89065d34315d4f-7fa1ab37e9672ac3-01\r\nlast-modified: Mon, 30 Jun 2025 15:37:55 GMT\r\netag: \"1662-638cbcfc7eb44\"\r\naccess-control-allow-origin: *\r\nexpires: Mon, 09 Feb 2026 23:59:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1793572\r\ncache: HIT\r\nx-cached-since: 2026-02-10T01:51:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a26d9674836e436b171fe0c1d68030c6","sha1":"7e0996c8b6691f29c31abd52c180b0344d44b175","sha256":"52d8a0ab7f73fb598bc22a67f2228dcd9d443d834a2f63eb0b68e4eb79f258b3","sha512":"91c69c03407c3c88716c7aab5f7ee46ccfaf06993fa1a46184f2fa178998e13e14fc3c12e463cd14ce4df2143aa5399142ae2dcc2c7158976a4726b608df61ee","ssdeep":"96:pPVS6s7ncAtpcodzq8mQDTxTq63GTFK5akQwZobB44JfHAZbNU0:p9Cpdzq/EW63GJK7QwmbtHQbP","tlshash":"2fc18688736482f49544df79c72e6c3e187638e87512929087c61d5bf8868ce1d7afc7","first_seen":"2025-11-19T19:15:03.661444Z","last_seen":"2026-03-08T12:35:27.96371Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:59.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 39215\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/i18n/de-de/1772479413788.50dc9.js","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /api-2/i18n/de-de/1772479413788.50dc9.js HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: application/javascript\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncache-control: max-age=315360000, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167130,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (59226), with NEL line terminators","md5":"36f22bf5818e0bbed8176cd2669e8b4d","sha1":"223765f12e9fd5c9c22d9c8c17164e221604b266","sha256":"47598a0f51a3c406d1d11823b0cb85286995e324c0f8ab984438f8a48bd3bc8c","sha512":"f6563c9c7ef6565c9ea52344e30c497bb6512ba8c58672a9ff3a4797ed128b97bfe163a16d87c1e6872b878b92b7adc97fd375aaca9488c2fd84f3919ffa6367","ssdeep":"3072:ySWQ2FqNcqyWSovWhEyM51jSg3iKzTW2eGIwLF3ujrFLjnq673vmRdFQq8:ySWQHLtVuOyM59iBnPWgFLrP73eRq","tlshash":"f0f3e82eeb06ebf7bbd23655305a1d82b4b1c35a6358829548dd812c32ef75d323b0d9","first_seen":"2026-03-02T20:05:03.579418Z","last_seen":"2026-03-02T20:05:03.579418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"match2one.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 17:42:04 GMT","end":"Sat, 11 Apr 2026 17:42:03 GMT"},"fingerprint":{"sha1":"20:25:E3:91:37:36:57:45:FC:53:D0:0C:9A:A8:2F:DD:65:37:90:14","sha256":"49:B0:09:D8:05:A6:92:22:02:6B:98:D3:08:62:81:7C:83:1E:DB:43:24:F7:E2:E8:5F:E0:F1:9C:1A:C5:E4:78"}}},"request":{"raw":"GET /tracking/m2oe.js HTTP/1.1\r\nHost: cdn0.match2one.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:07 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: qEJwZdeiHr7f8Z2fNX5H8KsRLILR7cPFwuyLTo8dmZZqfW2lvk5G5Q9E3glKulCQxMCvU4itqUbw62XFcVwGqNLtKI1fZjXAhfk7+rULjhw=\r\nx-amz-request-id: JEPQ330H5JDXXBFM\r\nlast-modified: Thu, 18 Sep 2025 07:53:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 46532\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDK4Nde24jKWyuccXv3%2F9z%2By%2FGZqtEuh%2BD084ZfI7uiEpmd6NMNYiXPYUbqS%2BUr3KHRhsqeEbeleA8QWORYkt7lpIKEm4K9bbnxNLh2%2BEUd4vGqobwrKczJQmbT5SxpCOU9baiwl%2FeE8dVhk6OOSuNgZ58E%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"76401bdbcf3ea72cd04aa2d225f6bccf\"\r\ncontent-encoding: br\r\ncf-ray: 9d63023bbc5d481e-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":55,"dns":20,"connect":8,"send":0,"wait":17,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772481845089\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1813562568.1772481848\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026sid=1772481848\u0026sct=1\u0026seg=1\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026_s=2\u0026tfd=19742","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:13.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772481845089\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1813562568.1772481848\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026sid=1772481848\u0026sct=1\u0026seg=1\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026_s=2\u0026tfd=19742 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2164\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2164,"data":"en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772481841233\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.event_label=Country%20not%20allowed\u0026ep.first_theme=DARK\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026ep.reg_form_name=default\u0026seg=0\r\nen=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772481845087\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.first_theme=DARK\u0026up.experiment_id=undefined\u0026up.experiment_split=undefined\u0026up.experiment_name=undefined\u0026up.experiment_status=undefined\r\nen=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772481845087\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.first_theme=DARK"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://leon7772.casino\r\ndate: Mon, 02 Mar 2026 20:04:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/017fc061.d.m.6jXZaT8y.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/017fc061.d.m.6jXZaT8y.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9085fa63f4335ff9b8d882bf6ce25b51-125252a1711eeefa-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-a0aa\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205274\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"7473a31f3263453185cf557250b29f38","sha1":"6a2e1eedc05dfb2ac61a4abd81de3e6f5a2c9ca2","sha256":"103b46bfd5001eac175c1419c8f8d2aaf9b5a44ab3d596c54ca14a8a57c0435d","sha512":"df3f21abd0ab7e701f43cf7aeb68cc4eaa3f45f6d3e5c560cbe8f6f21dff2c0bd167e5483b5d27d9d4300a2ba23c5b1b13401db2f28eca788b89cf3e0254b1f4","ssdeep":"768:I61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Y:nzmp7QA/BPWUY","tlshash":"c903fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2026-02-26T15:36:50.671476Z","last_seen":"2026-03-08T14:14:44.19034Z","times_seen":13,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/drops_wins.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/drops_wins.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12382\r\ntraceparent: 00-18381ed7707f72442077674422169eef-655411eb501ac046-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:50 GMT\r\netag: \"305e-61bf36c739963\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 474806\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:10:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c33bfc0a66981351db0da8fb6c69da55","sha1":"55b49d3376218cce5808e9f5a434b6f6d99d62a8","sha256":"62b722eca58786138391eee4ef1d2d49b184341f1a4ba35c5513b40af52b5c18","sha512":"6659c986c63d1114a99119c8cb1414dafeea1db8e51327649da42936514ea4a0f7176fe1e0abbee2cf0705aca3c5fccb7f61aa94324920a61bc50fc58efa3e0a","ssdeep":"384:MslV4bttY5l8mzagkwtzzVS4klR+VHWZWFvsC:vWt2l/Kyz+IF","tlshash":"824285f7a2e8b1e4e047e7b0d83295b1f65f38ff3faa97854294dad46714198848cc50","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.205158Z","times_seen":63,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/exclusive.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/exclusive.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5618\r\ntraceparent: 00-6531160ce7ed73619e6240a9c4cd2f75-467dd7268e125044-01\r\nlast-modified: Fri, 05 Apr 2024 10:28:02 GMT\r\netag: \"15f2-61556e915c6e7\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:04:11 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 380166\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:27:55+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f310f82bd99f64d82ebd1f091658ca17","sha1":"de9c07b5b5f3f4635a9e825a14af16e2c184ebcb","sha256":"7fed836409217f5ac8eddc5f8193b5c0c5e4e02bc3af1d18b4bc00287b8cfa33","sha512":"4bca13f43a59c62f670079fef9ff73ad9feb04c01784604b3d5af29d0984401e5c788e1fae0f68baea530c0b21b1a5b85cb5d9318e8d3d99b074209f56a85bcd","ssdeep":"96:wN7lHxPap1jRULBVUkiaBn/G0kOvw6rXtrbFY2W8RikDwrkCK3P:wN79ZapNRUlV2a+Ov1JnFY2BRfC2P","tlshash":"46c150f6a3e872e48147db90d8275876ba5a38fb3f9183c94240ee90b561095cdcecc8","first_seen":"2024-12-31T04:55:51.41943Z","last_seen":"2026-03-14T07:22:16.75251Z","times_seen":45,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/pixel?id=154038\u0026t=js\u0026sink_id=22d90dd5-0a6f-41e1-964f-c378189ed00c\u0026\u0026timestamp=2026-03-02T20:04:08.281Z\u0026fire_id=1772481848282-c7e464f2-0583-41f8-a0c2-d56108052d39","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /pixel?id=154038\u0026t=js\u0026sink_id=22d90dd5-0a6f-41e1-964f-c378189ed00c\u0026\u0026timestamp=2026-03-02T20:04:08.281Z\u0026fire_id=1772481848282-c7e464f2-0583-41f8-a0c2-d56108052d39 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\nlocation: https://pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=22d90dd5-0a6f-41e1-964f-c378189ed00c\u0026\u0026timestamp=2026-03-02T20:04:08.281Z\u0026fire_id=1772481848282-c7e464f2-0583-41f8-a0c2-d56108052d39\r\nset-cookie: tuuid=4ff9d67b-e6c4-487f-a0c1-da7746a1a700; path=/; expires=Tue, 02-Mar-2027 20:04:09 GMT\nc=1772481849; path=/; expires=Tue, 02-Mar-2027 20:04:09 GMT\ntuuid_lu=1772481849; path=/; expires=Tue, 02-Mar-2027 20:04:09 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":394,"dns":321,"connect":26,"send":0,"wait":29,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:54.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 20:03:55 GMT\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"56bcb2ad9939efbe2c969346b0152b9a","sha1":"7a4afccf58bf029d9f10457d5faf1dc0094cb78c","sha256":"e56c03cef6c4ed2ad4c5cdeea6ec1686dc2cad70a70dd85d3446cec33775e83e","sha512":"993c88d81590b289ce72e70a3b849e6ac4b35e5e3ebe233a5dec368a704ccf4e196cb324da234d5a2dd82438f394c921a23960cb59226af09997a67e70626825","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqj69tha4L8sEDS99YURRuWDyjooYhREHPM5svk:KuGH72NFEIwLzie2Uyll3","tlshash":"2773fda1041b9500eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2026-02-26T15:36:50.796393Z","last_seen":"2026-03-31T00:45:46.222125Z","times_seen":17,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":63,"dns":0,"connect":7,"send":0,"wait":25,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-qtag: a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nContent-Length: 830\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":830,"data":"[{\"id\":\"29993944-be11-473a-9386-e19dfe8d3848\",\"qKey\":\"93dd9da9-132\",\"operationName\":\"getCookie\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"a8fbfa80-3ac4-42a4-a314-e0b6b7724c21\",\"qKey\":\"790886e7-467\",\"operationName\":\"getRootSettingsInternational\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"67611935-057b-4759-8811-39ec949018bb\",\"qKey\":\"b120a8be-122\",\"operationName\":\"getApiSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"db848c69-149d-45cd-8cc0-3a0102da78f3\",\"qKey\":\"a389434c-16347\",\"operationName\":\"getSiteConfigSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"a06abf2b-2a88-4195-abb5-731d12f58f0a\",\"qKey\":\"f9753f3f-92\",\"operationName\":\"getRoutingConfigs\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"21e334eb-400e-468e-bd8e-a46925b09103\",\"qKey\":\"c2e6684f-112\",\"operationName\":\"getNavigationConfig\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: ABTestSeed=73; Max-Age=315360000; Expires=Thu, 28 Feb 2036 20:03:57 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; Max-Age=2592000; Expires=Wed, 01 Apr 2026 20:03:57 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; Max-Age=2592000; Expires=Wed, 01 Apr 2026 20:03:57 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nreftag=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nipfrom=91.90.42.154; Max-Age=31536000; Expires=Tue, 02 Mar 2027 20:03:57 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nx-app-language=de_DE; Max-Age=2147483647; Expires=Sat, 20 Mar 2094 23:18:04 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146250,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c7dc033bdcf279e253376cd5e0f10d06","sha1":"fef8094e0fff802d9c6acd0c05cfbde8d1f7f7eb","sha256":"95d4ee620aea2ce658d3ca6662b54a43dcd015877123575e02a421045e91db63","sha512":"c6bf171c9849965382afc43200e35874a8bd4b5383c9b94125ea4dd542ce90c5584ff2cb3bdee22cc4ebe21520a8c2fe7f59ad403d68954a50935638543a6028","ssdeep":"3072:WZuV2X8a0a0MwM0a0Mwz00/8Xc3i9Q50Ly9uzZxA52f62gvmxKvWT2/gZs5KVML6:srXc3p0Ly9uzZxA52f62gvmxKvWT2/gP","tlshash":"b8e3db3a721cdd6fc0874e9d733f2e37042de42a21caac98d94dca6591ef2f4613255a","first_seen":"2026-03-02T20:05:03.584887Z","last_seen":"2026-03-02T20:05:03.584887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.216.60.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 507\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":507,"data":"app_id=cnjqphyx\u0026v=3\u0026g=b3b02073117f93f0a72d09dd5c66c508bef99b49\u0026s=e28e58dd-9ab7-4b98-8f22-6be6258cc811\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=e8947dfd10482a4a\u0026internal=\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: ddf21b5523ac7a0646b92b5a1f0fb0e4b2f304c9\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 00095jpeom42e9lvkf80\r\netag: W/\"b7cd1b574dc3879ac8f006cfa567cfc1\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.028337\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20b1fa9e1cb7d95e8a167a91261fd817","sha1":"8976550cb23aa52adc16d4437d5a41ff9d6c6136","sha256":"b7cd1b574dc3879ac8f006cfa567cfc1307d38960a51d8f77ed7b17275d05a11","sha512":"531fdd15bdbdd95dcb4202be70652cc0d060d09e70ebb1a3d145f1957d6c2c1a64eef1016708d1617770920fa40783cfc75fc908c26fab1dd44162032214a436","ssdeep":"","tlshash":"49f0e1e9978c4c3537c147d9c22f6e0b079a459962901db0f0f4dd98d0eb606894950b","first_seen":"2026-03-02T20:05:03.586107Z","last_seen":"2026-03-02T20:05:03.586107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":211,"dns":13,"connect":93,"send":0,"wait":125,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 39218\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772481845089\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1813562568.1772481848\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026sid=1772481848\u0026sct=1\u0026seg=0\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026en=customerRegistrationStart\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772481839087\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.reg_form_name=default\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=14712","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772481845089\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1813562568.1772481848\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026sid=1772481848\u0026sct=1\u0026seg=0\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026en=customerRegistrationStart\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772481839087\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.reg_form_name=default\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=14712 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon7772.casino\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":46,"dns":0,"connect":8,"send":0,"wait":25,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/510c96b3.Cej3-qGF.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/510c96b3.Cej3-qGF.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 1305\r\ntraceparent: 00-13c278ca2e21f6bcb33cf1c256834b72-884e648c41e9951a-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: \"6992ef41-519\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 1065055\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-18T12:13:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5313)","md5":"33dc465596a41c508994344c0fd027b6","sha1":"d41fdf2a22d8afa3d2155b5a29bf06522757607c","sha256":"4dc0d05881c887f4fe7e9be5cd642dac6138178e515aecdddb046fc16dd20675","sha512":"399cdf917b4e6f3ef3746e5d65114ebad72c9a869975db1af78187819b02825bd5d842543030e6035d1ea884d7fe8374350c359dde5a638e8bfc8899f8a90daa","ssdeep":"96:Zy7KC0+csvyz1CW6PjvdStPecRdpxvo0FYInz:Zy7KClyz1C9PTd8Pec95o0FYInz","tlshash":"69b1bfb7b5a0312cf5320d03b4444b8b7d84ed0bbbb29d85da67ed298e351af3a601c5","first_seen":"2026-02-26T15:36:50.753547Z","last_seen":"2026-03-08T14:14:44.174132Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.BtyA07FY.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.BtyA07FY.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26421\r\ntraceparent: 00-819358300c23a020e40bb975515ef320-d1278de66e840c12-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-6735\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55749)","md5":"fec07b4ddac0cef5612ac378ff3ee156","sha1":"2ebf8a807abc118cddeb5ea26ad27a2ac3f90bf1","sha256":"96c1c977b35623003a62a7ade93d1b580aa35935f307f8581de9c1b5428e651b","sha512":"6312dffc782a6adb57e6a590a322e062de293c0f2cfe4d47f6110439db5fc4fd76eb461ea5ed301a6d1206c8aaccb554936c9498d0f70ec10996cf1b4d484a8e","ssdeep":"1536:v0Gccd6RaCZB3+OoXfZQfiEvrXMGEiBgL9NueMIwR/uXST8Iv8KjTS744YjR8hzF:fd2BNwfZQ6EvrLMMIwvR1jahzNm2WmtD","tlshash":"9b933c9d7999343a837b11bac03b0801a3290ec4b51885d1f1feddae2dea421d3b7e5d","first_seen":"2026-03-02T20:05:03.588015Z","last_seen":"2026-03-02T20:05:03.588015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/510c96b3.d.m.BoUTDypR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/510c96b3.d.m.BoUTDypR.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87363\r\ntraceparent: 00-11930b80c5c4dd04d5c52ff71e19ad52-0d83f0ba5606bc4e-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-15543\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":345247,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (37404)","md5":"8a1fc20ae76fb0a2a8229089eab020f4","sha1":"c9696472dc3fa5d922d2646ede92692cffdccc0b","sha256":"f5cdc920a19e2adc0f9747c55b5618af5a07724f5a9530258f790bf0d18e2277","sha512":"6049c0c98699ca4c089c774c7d4ef431c6ab413712145c1b4f9f1c6f40c885908b10683bfb9a7dfe96a290a42eb7a25804fa7a47eff19e0a639c8179e5da1cd2","ssdeep":"6144:Ws9rpC1xKsvYM6vAWKCyVW9oeEtUsntRm6wzb/tfx0:WsJo1jvYM6aDVW9/etRm6wzb/Z+","tlshash":"8b744d5873a27238e7fa50b9502b058173741f40341ae8e8f16dae697991c0dd3bbdbe","first_seen":"2026-03-02T20:05:03.588986Z","last_seen":"2026-03-02T20:05:03.588986Z","times_seen":1,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"leon7772.casino/subscriptions?platform=web\u0026skin=leoncasino","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /subscriptions?platform=web\u0026skin=leoncasino HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon7772.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: iG5F0SOE1m/FFq2UwgmmUg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.27.5\r\nDate: Mon, 02 Mar 2026 20:04:02 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nupgrade: websocket\r\nsec-websocket-accept: p5uP9yDQsIzBcLdb2IG4A0t61Dw=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":0,"dns":1,"connect":150,"send":0,"wait":569,"receive":4,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f0836975.d.m.Ci1u4oht.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f0836975.d.m.Ci1u4oht.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58705\r\ntraceparent: 00-2ad6573c012981705b93b6aa4481d8bb-ccb1d14f62e6e9a3-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-e551\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224186,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24590)","md5":"d5d766342551b9493f817a4e126449a5","sha1":"c86805c025e7b2fef1b76742b930a049fe5b3600","sha256":"d66992253bc05068d1bf58a97dda03b0100ad7a1a09f84b4ee8aeaf6c77e2354","sha512":"83776725591acd8a6353aeb1efeee22b5c963c3e18d8cf2accb8d4a58c7d9ca146b33deeac6ff220fb07ddde4f77c8a17847df37e97396e8e20ef496a06e00c6","ssdeep":"3072:l8NbFF3qLh5FEwSwXwOlsNFAaugR6lT7tLHVHlipo3y5H79QYl3tx4C4JdErZ4O6:OAFDgOkFRaT79/ipAzV","tlshash":"6c244aa1b3d6b43547c451a4906e1b12f17adc6a544c901cfaedcee60eb884a633ef7c","first_seen":"2026-03-02T20:05:03.589963Z","last_seen":"2026-03-02T20:05:03.589963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-094adfc2b46a5af883cee73b649ae8da-ffaaed6b7c87e162-01\r\nlast-modified: Thu, 22 Jan 2026 17:40:34 GMT\r\netag: \"69726112-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 3048867\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-26T13:09:28+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":135,"dns":51,"connect":11,"send":0,"wait":10,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/d1610888.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/d1610888.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-866eaa8c962499781722a1d1790fa4bd-4b6be2f6a072dabd-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-03-31T00:45:46.166838Z","times_seen":129,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.k6uRd9QO.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.k6uRd9QO.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-557514bf808ce5060e49134da3ec8157-642d663e7071fa12-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-e9f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3692)","md5":"b4e05cd7f9a0942135debb8f3f55c345","sha1":"6982eb12ba918e1d71445ee06502a8c52419299c","sha256":"0225fea42a0ab8cb8172a4e80e3f8456a2867684e13ef26a6d02265b623a34eb","sha512":"65140755791f7dd5b8f46c5afb4ed7a1baddd0dfe2bf2b05be18bdd4bf18f26be866d0e0b9401a1a3cb6030d7487f3f85bc0a89616e34da7e948c13a4e095333","ssdeep":"","tlshash":"cd71e7af7fb9f536818286f2b03d71459234916c7025c86061acafc93a63fe05da1f0d","first_seen":"2026-03-02T20:05:03.592537Z","last_seen":"2026-03-02T20:05:03.592537Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/scratchcards.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/scratchcards.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2305\r\ntraceparent: 00-23ad8ce9fecbb9c0c964a92271ca4ba1-0e954a480e8f460e-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:25 GMT\r\netag: \"901-61bf36af57c9c\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 08 Nov 2025 20:55:11 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1483419\r\ncache: HIT\r\nx-cached-since: 2026-02-13T16:00:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938141af1359f4354cc7d73a69af21a2","sha1":"3953b0622646db4fac74401cd03e3fffbeaee8e9","sha256":"9bb2c583bfe0cfe4ce25dcad5944668b5da72f52f04163654804a03238897b42","sha512":"0663be7226353fdf94b17a69c2b33aedb3fcfac06628092ecd2064f96859e0790a450d155bfbd3c58a264c4f26c673d70cbf32ecf133f7328b9369647ecdbd4c","ssdeep":"","tlshash":"e4410ff2ebe852f49547e76590275d7a369b2cba7f85cbcd82406bf099b40a0958dc00","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.233067Z","times_seen":57,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7ad78725.d.m.BaWtCc5X.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7ad78725.d.m.BaWtCc5X.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-263db0f8dbd047703aed74ec4083b1d3-9180ea5f42f7ee11-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-2f9d\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12189,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12138)","md5":"890c0473a0f3113422c36e37b0334642","sha1":"571b9126922e15eae4be334d58fa1027d5cb6f95","sha256":"098312e5a030107a910d543fcf38c055327cca3960ab09b28e5255e9117726c9","sha512":"1e7c39b6c73908a1d1034b9f0169fff4cc93f722f97bf6b26a9aceb1a539257391401ba3789eefb19c272f453d532bf10e7ed2acae6d17d914537f9b95f94d5c","ssdeep":"192:yRtf6jtSou8s3Hiyy/jin1lKIE3nHHN7PhO6M3viquSNoRkxp0Wq9HozoMHkFH73:yeJTWsuvXKn95MSk3Y","tlshash":"90423066d2c58c316253c9fb40b41480f54dce0652688aa6a5fcd9bdddb1c3fa03ebad","first_seen":"2026-03-02T20:05:03.593974Z","last_seen":"2026-03-02T20:05:03.593974Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/18+-dark%20(1)-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/18+-dark%20(1)-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2763\r\ntraceparent: 00-b798beb72c955e56e89c68f349e82c61-c4185a0735618b04-01\r\nlast-modified: Mon, 11 Sep 2023 08:05:05 GMT\r\netag: \"acb-60510c8b890fe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e9bdf84336ba2f0d7fd0116bbc47e0","sha1":"5f1882ed3aa41267bbdb1c083902955e2a965022","sha256":"2c0b2b2f7ac364b363a152aeddf08ad89a3b4043e3347cead0206158492c8a2a","sha512":"f59720c3a786afb91c58de81a4097faebb49e15008f2918805b041afa60d8e790d2296ccc3b01b008992ca92135c59135f27b7c5760542999f8a5c7089e9b5cb","ssdeep":"","tlshash":"145101efa7d4b2c0d807e3b094094a793adf287f77158744425aaee6fb02094484e8c4","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-31T00:45:46.207178Z","times_seen":122,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":68,"dns":18,"connect":10,"send":0,"wait":217,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:06.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 00:02:23 GMT\r\nexpires: Fri, 26 Feb 2027 00:02:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 417703\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-04-04T14:38:08.755375Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/036a973d.d.m.DDj01hZ8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/036a973d.d.m.DDj01hZ8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-d7bf267bc03aed07731871c7da94b719-8c8351337468c5a8-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-45ab2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205274\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30460)","md5":"5a56e623158dbfcf5853375bd8308664","sha1":"547e1dff805f86167550b015cc623b60116612d1","sha256":"9501eede310c3d02294cb1481653d19be86207e5e18667ee7859562cee0b95d8","sha512":"3ddb81be33c8de942b8b8397cb626dd6d38f13f66d703a7c5998c9a83d6cacbebf60f3b8d6a81658197aca43ac13f05d52b14a69d984ca9c2e1bd3d6cd9758ed","ssdeep":"3072:glPCf2+Xb0xeLKOBlv4LyFMME3VF99l/yAj6CUVZ0XjGU2/i:glq90wL7BlDFHuF9T9j6CUVkjF2/i","tlshash":"905419d931d6713353e60aa590bb0102f7355a90344e81a8f52cd9ef3dba44aa2b7f3d","first_seen":"2026-02-26T15:36:50.681992Z","last_seen":"2026-03-08T14:14:44.155141Z","times_seen":13,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/favicon/favicon-228.png","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-03-29T15:19:13.454848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages3.gcdn.co/HRJLWPLB/files/top-nav/vip-ic.svg","fqdn":"cdnimages3.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /HRJLWPLB/files/top-nav/vip-ic.svg HTTP/1.1\r\nHost: cdnimages3.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-72bd4a02bde1c25ebc63f000377b5a29-a82384545004b875-01\r\nlast-modified: Mon, 29 Jul 2024 11:38:11 GMT\r\netag: W/\"106a-61e614bbda1cd\"\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\nage: 50511\r\ncache: HIT\r\nx-cached-since: 2026-03-02T06:02:07+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ef082510b46a6aeb00c0df559b2de18","sha1":"b483a67c1a80a1db0afdd67246d5faf47f846f42","sha256":"155705ad90a321b396a52fbab695bc92f9a2046aac18371fb9a172657e97c2a6","sha512":"b23cde6916243bb8bd8695e5a97722d815217395a2727cd39aa9f459f344b88c951a260a56557d6bab22af21307f9765e408b8f67d310970747131cd6fdb2d11","ssdeep":"48:e8O6IHpZU+i2/zId7HoWsiN0thXLiJpwO/b37IvgFLQLZi/hABNFkg62venBHcA2:go0kMWsA03i/bYgF0I/hABLkrQeBB5K","tlshash":"c681892aa144d61d5883e24dcbbf91e1134e4066f1ea92dc7affd3aca10f4d4f946834","first_seen":"2024-08-31T07:43:54Z","last_seen":"2026-03-29T15:19:13.373051Z","times_seen":108,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":15,"connect":13,"send":0,"wait":8,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 47\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"802\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/08c19264.d.m.BKNqax0E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/08c19264.d.m.BKNqax0E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1074\r\ntraceparent: 00-25cfef665bc3a1797a3e3608ebe82a7a-04d0b084f4167f9e-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-432\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2926)","md5":"9d0da91c2bdc4f8814fb435492e036f3","sha1":"2dcabb7f59048e8a9a525968b53add108d10f7ef","sha256":"e16d007fdee03c32111f401f6df5adb444fdfcd434f4afc615024cadf1d8eb0f","sha512":"5751a370167cb7e05f32382b75795f23c007bdba44f525f3a76e8a785341db93e790d5a5019950b42bc33fd372013d1a353386339203f3a2bb6dc44c7a334b00","ssdeep":"","tlshash":"9d51e0f8f167f170805b5c9ff02a62db63360b967859b067502ca9b02531b645726f78","first_seen":"2026-03-02T20:05:03.599764Z","last_seen":"2026-03-02T20:05:03.599764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.D6ew-0Mo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/71c69379.d.m.D6ew-0Mo.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-dbe1fd7f20aff3bf3f6d2d892ef4b1f5-cea284465620091b-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-1232\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4658,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4607)","md5":"d64ec96417f5c8f47e424a8e5b7f5590","sha1":"6f5ba4de47f207914e80a7159112c45280cc65fb","sha256":"57d4e987ae0ed880b17fbd6ac610a5bf4c4ab9a142d4de2b3f52c8541af8c157","sha512":"b2c3a7f31a18ccd9f9d0909efca3aa4726bf02a3c70d7711504fb4d0bb37faad1c06502672307e647277b37a58ab0560e80cc3e2d369016f6f917f9160bdb005","ssdeep":"96:prBLdCYhWUc0uGzGtHI0m0uGz0lYLxVpyLDuGz+NaMvWr8HvRwM3Yv:pFLdqUWUbrU0YVjU+BOrSwMc","tlshash":"16a1e78d3c7f5471aaef584fe1a90c0aed6d0ea626554e4190ff04b727abc50e212923","first_seen":"2026-03-02T20:05:03.600596Z","last_seen":"2026-03-02T20:05:03.600596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/winners.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/winners.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5772\r\ntraceparent: 00-6a6f24a731b9765cffb7f2b9d3bf5b11-ef376595e97a5636-01\r\nlast-modified: Fri, 28 Jun 2024 13:43:26 GMT\r\netag: \"168c-61bf36e9740bf\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9a04d5d641da307a6d416f7bdca8de6","sha1":"6872c0cd650572e3207bca785ebd290d156df639","sha256":"25d002e623903b320eb203f271ef153ee2df8a51e2aed4878c7598d9f6a6ca6d","sha512":"88d73b7b558d91b6146bf4e368508db289a6f861f92cded175408788a361b706d923428a9876e6b7e72fb40d48e4e0f508d6bc99f755f6ae9eab00717ea75059","ssdeep":"96:Sp3FcBAtU1yTkrUH9/kq52Z9SoF/0HcU8mnsAC9gl05nuRJLEkVNxkzD+NWI2bL1:Sp3Fk/pQn52Z9SmHqs79u05yVfgqNWnt","tlshash":"f8c144f5e2d8a3e099469ba1e9358423f6af3cbd9fd9cf848190dbe4e5110d84acdc44","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.157824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/spinomenal-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/spinomenal-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10323\r\ntraceparent: 00-395f5517de66a9c40ae6265d98b54a78-073e6e7850ea999c-01\r\nlast-modified: Wed, 30 Jul 2025 15:44:05 GMT\r\netag: \"2853-63b2765099182\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:04:12 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 380126\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:28:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9e5ba03c64a51d9e7cd49527da4acfa","sha1":"b839fd267d3bf355653a70fab7051e523d397ae4","sha256":"6d2e5253bee63c8aa0da5c82a9107c0461b64bb28815a3ff208ce374a1d8e858","sha512":"d9c7057aab9a42a4f47579f1f8fa112998be456df6f69c9e1c3d342c915f0a3f4b09614f022f1bbfb2e871cede396381b45d45b2f063923a1e30e347f026add2","ssdeep":"192:9yv4EU5WiBVLGyMTrmBtBS5iLg7capbYwiZtithAo4tMKL39dkx4CbvPD+LA:9yv4EqWb2tBSRQapbYw+8AfMKL39ipbn","tlshash":"212283ceab3647fcb000e1ecda9658743a819cf53855c966c3f86c26e8a205c1976cdf","first_seen":"2025-09-29T03:15:31.367647Z","last_seen":"2026-03-08T14:14:44.21474Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/sofortd.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/sofortd.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2858\r\ntraceparent: 00-9554a90032791ed454d74ce6aa653012-0a4e1457c2f3a600-01\r\nlast-modified: Tue, 11 Apr 2023 11:00:45 GMT\r\netag: \"b2a-5f90d6743751c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"327b40d04675ca6e0c328eeecb612435","sha1":"0f74312977493bfd6493d68d7222b0408f032451","sha256":"169b7b7cdba123fe0ddec2060fae78f6e12c44a498b5f179e2ead34153ea3811","sha512":"93472a657b8a0e952b03077c1d6197fa606602651a8ea40cb0fb8216be67ce9e9f13fed82922d6ceca700bae1ba81d888385b33543779b1caa135b6bb1deb6b8","ssdeep":"","tlshash":"4f5135c42b3586da8811e5fde32e91e63c752cc976418d60d7e62f24ec449754c0abef","first_seen":"2026-01-23T03:09:51.812424Z","last_seen":"2026-03-08T12:35:27.96259Z","times_seen":6,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":75,"dns":13,"connect":10,"send":0,"wait":213,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/bonus_buy.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/bonus_buy.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1496\r\ntraceparent: 00-3926ab718e2f807699e7e836f6fd40f7-97f86b7972624138-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:52 GMT\r\netag: \"5d8-61bf3656318b7\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 474806\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:10:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cc7ff5133430a2bb78f34c3442b720","sha1":"0b8442472d38d17efdbf59c2849d0362c3b90687","sha256":"22eb05f821c7cc95e715dc17de449edd34c22e15cd62eeb916824dc6b87b31aa","sha512":"f70c09ab0097bbb5e75b417860f3d09d41032654af0f8a967bab915228f284cb3b4fe35b4e7b3c99bace421f1f3e428d39b9c3b3931612f7734bbdab203ad54d","ssdeep":"","tlshash":"2631a7d2564c60f4570ed774c526ff967baf34ba7adc8bcc61400a844e20188b98d9c0","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.250859Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.kyIZ7tlD.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.kyIZ7tlD.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-2fa1004f98ea6e8f19b430d4e99e7897-fd1f63394e3e8a05-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-12b9e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"4e3452be9b2831176f725f6cdc492816","sha1":"3542f4d8f35b96903b53835282b1597e137a67ad","sha256":"a9dc446f09c2621625b3e4e50dae5df60346fd15df76e5cea067cb7e25a0413a","sha512":"4a1788422919181aa7a92d6fb9617007fa9b22c14a975446952d12fc13acbcea13ac3874322853e37f218450362801d2f2cd74558a7b690a29d25dd1db9e207b","ssdeep":"1536:7Xm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPb:72YMGB2C62PmQJDbPb","tlshash":"db7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa4185637f29","first_seen":"2026-03-02T20:05:03.605435Z","last_seen":"2026-03-02T20:05:03.605435Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c6617b.d.m.CE3Be45l.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1c6617b.d.m.CE3Be45l.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-6c54d6c079753a036a55f2fca8599b64-0ae9e0750b04b78a-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-1e75c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":124764,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (33877)","md5":"1b6bbf53ee497c1a5810ac0d58efc6e5","sha1":"7f376f080cce4c6980c72910af4a197f66d33e9f","sha256":"bcb84d7fb532581ed30c8c10f659f5d8c732015f8c7a9f156b9de292be5ef3ad","sha512":"d7a6249e33710c4feffa2fe61490162a86518a2ba5a00a44dd984ccb69d3a51d14ba0f50fd5ac4a4d539753ddae7beec1ef7758b55967ab2d6113e8eb07ce68a","ssdeep":"3072:ohfb0UfKGJvEvGdrSaV67dmcgUxHt08gAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qdr:abffKGJvEvGdrSaV67dmcgUxHt0LAUAM","tlshash":"dec31989bd457076c7674ecd823a1400772e1f92e259c891f0ba8ffe267e8149376b1e","first_seen":"2026-03-02T20:05:03.606342Z","last_seen":"2026-03-02T20:05:03.606342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3ed1c1c4.d.m.DOy7bNuX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3ed1c1c4.d.m.DOy7bNuX.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5333\r\ntraceparent: 00-d79dc9e165e581ed554fa65618e1edfd-650a89d2b830fea4-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-14d5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14693)","md5":"eaa8c76e34f2e57e8bf430c98815e86e","sha1":"c9a5f212ec7e00e825ddf3efe8b60e52346ee7e3","sha256":"ff03c603cdd45bdac8ec9289c789d628c56c0777593485612a296aa6e0add179","sha512":"ea97ac2f252803788e5969172f81284dc1e3f1df9a1f604ed37c7771ceb9ad1a1ee8e7d1af40b782623249620f83bc806be8863401afa21739c52205886a3ab3","ssdeep":"384:vCRbRbsCBQmjArdP/LDbcnxAofaRxncvt825L4RJdh/3WFgBBYxTha60n:6RFbssdAR/LPcnxJ+xncvZ5cPD/3WFg5","tlshash":"c06208f174ed657043e616e0a0770106e6e9512830c9c4a0f59f8aff49eb980a9a7f7e","first_seen":"2026-03-02T20:05:03.607213Z","last_seen":"2026-03-02T20:05:03.607213Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 39213\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":3,"connect":8,"send":0,"wait":11,"receive":9,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1788f952.d.m.CJfbYtGa.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1788f952.d.m.CJfbYtGa.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8820\r\ntraceparent: 00-6fbf61da2bd52736a873ef82e73bf02c-a39946fa3dd8706a-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-2274\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23586)","md5":"109ea6176bf9e3743d5298d8998b3c34","sha1":"b5e9c9a899d24088c2bc383939a1922c42f070bf","sha256":"970eb56853540f1e82d50b7f8055efb47bbdc3a5b9afd95d786689218b072a30","sha512":"eddf1a8cce3347b0d73c2dd5b25c3710b861e4beae707280fa055ff10eb78b8700c692a086d5ccfc06f60d872230ab3e1aaa704f4058dfe9fdd68f30de63e7eb","ssdeep":"384:6RndR13uJ4p7/Jrz77+CHz8pZ3eTlSN++5Fi75sOHCWqJZQeiAdv7KQlVCeYjEtc:EndaKpzVz77+CHz8p0xSNL5FIsOHC5J6","tlshash":"f9b2f7a93282707687e60ae5907b1106f2761dd5384e94d0b12ca9e73c33d9d82bbf6d","first_seen":"2026-03-02T20:05:03.608039Z","last_seen":"2026-03-02T20:05:03.608039Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e62q0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e62q0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Mar 2026 20:04:07 GMT\r\nexpires: Mon, 02 Mar 2026 20:04:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142860\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424023,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"5aebf771915c27498d31b5744638755b","sha1":"dc91f8639866c158d7291073d9cd0049535394fa","sha256":"8006ed40e2cedf420292dd274444c81b99388782eabba79e91c9a92cd8d7b19b","sha512":"b2aa56272d7b5c22e429f60a382a13c2d8d4238a0eaabc21faebd282d76704a0f499c0ba141ae8bcda3b8d7d4385fa3b6006b5d5ab2662da4c6893ab4c38e64b","ssdeep":"6144:t87OOW4po5W+MMZH9CyF8QyZbTxRMlKEmxoEJLhyAAIko:wffpo5W+MMZQ+87xoqgy","tlshash":"38942aceb3d670225396f478903f018ba57b68a2b48cc899f189cce46e7459a4137f7d","first_seen":"2026-03-02T20:05:03.608944Z","last_seen":"2026-03-02T20:05:03.608944Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wbhgu9n2tn7dkkmgjeie8948","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:03:53.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"i64cl3er5t.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 21:48:28 GMT","end":"Wed, 20 May 2026 22:46:10 GMT"},"fingerprint":{"sha1":"E7:FF:54:95:3B:ED:55:6E:44:5F:AD:A3:B5:1C:03:64:4B:B2:71:2E","sha256":"03:C0:41:7F:53:42:24:F7:76:C8:83:13:B9:2C:AA:D8:8C:43:80:E0:C5:FC:0A:65:29:E4:5B:D0:AF:9D:BD:C0"}}},"request":{"raw":"GET /?serial=39258\u0026creative_id=167\u0026anid=wbhgu9n2tn7dkkmgjeie8948 HTTP/1.1\r\nHost: i64cl3er5t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 02 Mar 2026 20:03:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: b5e2ed2b61c9dd5adeb6b3c9fa9bc76e\r\nx-runtime: 0.031333\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rE7zMw70yiYbVQr9unmD0MNMcaStpvqMNwLdR1nEYP9oprrZ2MojKMOSqkZmGeRTKjuZj%2F2SV59ArEPu8UXKDDybR6KNRHnAeKIBjGRH\"}]}\r\ncf-ray: 9d6301e30b2cb80b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":47,"dns":7,"connect":12,"send":0,"wait":107,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1702\r\ntraceparent: 00-d17f6e2ad7dbdaca9d1b9c916112aecb-0d209cf22583a24f-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-6a6\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205274\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 46\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"metricType\":\"VUE_APP_LOADED\",\"value\":\"3561\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:59.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 756\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":756,"data":"[{\"id\":\"db65a597-7de8-4959-b1a7-72f92719e911\",\"qKey\":\"feb2448d-302\",\"operationName\":\"getSearchGroups\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"3617f5df-458a-41aa-9066-da1a317599ed\",\"qKey\":\"f48f5ccb-276\",\"operationName\":\"getEgsCategories\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"ab709432-6347-49ea-a998-29d2e8f19aec\",\"qKey\":\"05e90ef5-3804\",\"operationName\":\"getLobby\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"sportlineFlags\":\"reg,urlv2,orn2,mm2,rrc\",\"ts\":0}}},{\"id\":\"13595d2c-1676-4958-a2ae-77ac6c535819\",\"qKey\":\"39df8872-1248\",\"operationName\":\"getBanners\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"b822a367-72b4-42de-b35c-0572db7c654f\",\"qKey\":\"6352b886-793\",\"operationName\":\"getAvailableForms\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":976203,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1cc488a41a203186a26e1c2d66273252","sha1":"0d6f33ce591f56f6a9e399cbb4fc63adde3d9011","sha256":"739118beb5b6138e182459d6ed81883a38c01ffcc8a1d47e0b2dbfbd4c23eaab","sha512":"cb813a98555ff4cd6dded1c3c1afa2773de08a0b7c5a14d3e1a3b4833e9c77ba7245b2bf53a7be84c1ca66dd5493e55a77874dd4fd0ec5d97c7b54795e655f70","ssdeep":"6144:eTds7w9CBpY/kRetxY/kRet8zqNwdOlY/kRetHtoTKPw5+5mnMr3JMnurMWs7w97:eTcaTpThLe9YdyIT9","tlshash":"2e25ec7b6688782fc38913943caf34c8a21e34177a40e756b25e6d654bb4dfa30b719c","first_seen":"2026-03-02T20:05:03.610882Z","last_seen":"2026-03-02T20:05:03.610882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/flowers.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/flowers.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7120\r\ntraceparent: 00-8581c5509ffff159a7b691d0f0cb8929-73ed25d7968ee934-01\r\nlast-modified: Tue, 24 Feb 2026 12:29:08 GMT\r\netag: \"1bd0-64b9108aa9978\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 07:54:48 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 43753\r\ncache: HIT\r\nx-cached-since: 2026-03-02T07:54:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7120,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b75c321b6bea47edbb9f15dedf36680f","sha1":"555ac2c08234e6e16fa55b91d61de97a646ef2f4","sha256":"5fd50521589e34f72402d6bcb5824ed75c28a89786418228fd189f5429da5a53","sha512":"0feb8513f632326cd2d4c844ea74e21ecd0565fa3433d4ceeee6237900caf5796d82725e3a54adfee7a1dac8121014209345c9f609b46e5e0ee97be9869b3945","ssdeep":"192:Vy1LHAYC8NuEf3gzncwUSwmeoR5FBInz/yyqX1:VOLg6NuEf3gzco5R7BIel","tlshash":"cae1e9f1b1d876e4950bef94dc370825ba2f3cfa7f9682d982d0dcd446650e5c988c85","first_seen":"2026-03-02T20:05:03.612523Z","last_seen":"2026-03-08T14:14:44.227163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:06.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 20:17:03 GMT\r\nexpires: Wed, 24 Feb 2027 20:17:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 517623\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41348, version 1.0","md5":"1097956fa17313da073e6216a7ce860b","sha1":"205228bc618a378a36ef6200894c10aa1decda09","sha256":"7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec","sha512":"d2f56f8ac5c1d6923329a6f731d4363682a336496eb70b7b097f463e49ab98ac2b647274a3ec20d7100a423be87544ac0695664ffe7fb7e75b4794aad9838bae","ssdeep":"768:TGU5B51vUw+tWqAGDH4WfomxkTXmXCoGCUjNjI6kBt8rx2rKCyrFAPkzFe:awBAbUqAPdT8v/Yj/UrKCWne","tlshash":"08030281e1301fcbd501e8b666bfb868ead51e5458e312b596f3c614c05b0eba35cfc1","first_seen":"2026-02-19T22:44:03.51646Z","last_seen":"2026-04-04T14:05:31.64557Z","times_seen":1674,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 42\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; shield_FPC=SCUL95VI0AI4Uk5kKFMqlFjSe93mHX8vOg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"metricType\":\"GTM_READY\",\"value\":\"14216\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 140\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; shield_FPC=SCUL95VI0AI4Uk5kKFMqlFjSe93mHX8vOg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[{\"id\":\"88451f62-5d77-44c3-848e-3b221e8e4a06\",\"qKey\":\"1a804ae7-152\",\"operationName\":\"getIntercomUserHash\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"22f15c06c7dbe080d4d93da442a4eb06","sha1":"c875da359729f905204cbc1efc570942e6ded271","sha256":"82cece90c1afd0df48b5043f4b0fb3d3fc4295f823b64693137b6e4a845c43e3","sha512":"8975e3d14cdc9108fb1ac830ceb9f4c12dfffa21243cd2a10a7172f1ed6f69e501b4d66331c925cfd6911a938885375b5b6992c2ff6102effa523b683b03b0e5","ssdeep":"","tlshash":"e3d02283840b08069e0820c84034f84b8e3a502300f938a0d2c4bb0aad9f46c8148628","first_seen":"2026-03-02T20:05:03.613954Z","last_seen":"2026-03-02T20:05:03.613954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=1813562568.1772481848\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026z=834984694","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:43 GMT","end":"Mon, 27 Apr 2026 08:39:42 GMT"},"fingerprint":{"sha1":"ED:13:E6:A9:AC:5E:48:95:A0:23:B1:F4:76:2F:A3:6E:95:4E:B7:09","sha256":"21:68:42:FB:56:73:F8:86:34:2A:C7:2A:2C:BB:10:DE:09:9B:FB:20:DB:72:B9:F6:10:76:71:B5:06:27:89:FC"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=1813562568.1772481848\u0026gtm=45je62q0v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938465~115938469~117625640\u0026z=834984694 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T14:48:41.416319Z","times_seen":763370,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":71,"dns":2,"connect":11,"send":0,"wait":23,"receive":3,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.50747ce4.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.50747ce4.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 159226\r\nlast-modified: Fri, 27 Feb 2026 19:59:46 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Z70Kehv081IQu6xybJ5FLYPEOoYRCQio\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 02 Mar 2026 19:19:34 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"9264519b6c6fe37b335892079c4657b5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: VCkfM5oCeNwhf0wRiuhh1jaPFf4U1Uo8z70JV692Tvz6ImqO6dOzDQ==\r\nage: 2675\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":519396,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"5ab510430734bf0eb7f416a75d470eb6","sha1":"f4e17dbe6b3da8182919d17f5125a64ceeff5b35","sha256":"551045f351338a32ba76ada3140ea011c6dd201761285f2a765b7386fd5789f1","sha512":"3367fb7df279b6d9912870d7724d119651e9348c31175eb46bc4f09d6baf09962b76976711b752a010b1263a65a24417faccf05ad6e0747467bae400ae9e218d","ssdeep":"6144:pv6LzOcnDn6/01m3aLpqrOEG7I03kic/CBXttCXrJhOo7ifE:t6LzOgoaLGF1nCBXttCbB","tlshash":"55b418dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","first_seen":"2026-02-13T14:59:23.726375Z","last_seen":"2026-03-04T15:07:43.896905Z","times_seen":1936,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":41,"dns":22,"connect":3,"send":0,"wait":22,"receive":11,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/video_poker.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/video_poker.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\ntraceparent: 00-3f05ce8f0019863fcc4f4518c624faff-47c261806143274d-01\r\nlast-modified: Fri, 28 Jun 2024 13:45:12 GMT\r\netag: \"859-61bf374e1215d\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f54a335dc512bfbb32a481dbe99fec65","sha1":"93be1232f742dfa382f3349b7ec5e0db9a8a2230","sha256":"13b710020acb4a4914b3773ceee2b981f8c96e443e66616feb8c449825aa0992","sha512":"4ea64bc628e9c2dc6c60b8bd360ac0ec75543190ea2cae33c41976733afa8a638595a6e009b6c1c5d58c8bd647cbfbd3ddc49f0d09d345180eabe080d50b1146","ssdeep":"","tlshash":"c94144e657d453d07d0feb61c9234d32f96b34b7e5bdd70d9120e99061232b68849cc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16732Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/slots-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/slots-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1832\r\ntraceparent: 00-a2f3f691fe504d769ec2072f052d1366-fae9b61ef1329a8f-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:39 GMT\r\netag: \"728-61bf3682e8cd6\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64ccc1ab66cb91bd441d3cb46cd948b","sha1":"9608b42a44b67da4be82d09c933f09b5ea3110cc","sha256":"1ae73f949ce1ca94b58f32ac5fab711d948e93073d8432e06228d5dc3a69321a","sha512":"43b77ebaf033ddf4d15d21492facc9ad846cbf57ebe6b406193891a8f029340c10f92bc5ff4e6ea165342aa0cc36037bcb7f086fa38d85d054e06f0a98dd7c7a","ssdeep":"","tlshash":"be3100fa97c0bae4f04bebe9c439d5a9729f34f93fb492810144a788b75506d8c8de04","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.147581Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 30 Jan 2026 13:11:06 GMT\r\ncontent-encoding: br\r\nserver: nginx/1.28.1\r\nx-powered-by: Express\r\ndate: Mon, 02 Mar 2026 20:04:07 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"246f-19c0f075a10\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b6691d4a753b7360fa8632b90c77126.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: mGs_wwFfShpw7a28fza4ApBnKrRlqCdMgOcXopSvpVybfMeRX4KIIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9284)","md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":89,"dns":93,"connect":1,"send":0,"wait":23,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f611dcc0.d.m.BgbA6N3h.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f611dcc0.d.m.BgbA6N3h.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3522\r\ntraceparent: 00-35faa4493d5f1425d2ac314eff02d0c4-d78292a2e1f431c3-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-dc2\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":11521,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11470)","md5":"70787a0f0aa522787e7b0fc4de8236b3","sha1":"e7cdf9626b805fbf4a6b84d3bbe27ecf38e98d09","sha256":"eeba5ad31af0412f97989fc86817db1125faaae1cefcef65864278261f9a220d","sha512":"f45e6d832e249ca6c10fcba1e51a743d1a6e714f9a88e8e31bc4f24af0152d024d052f4ff882b19ed456bcb35ff1b0ca0fb600b9498ade885a69d7991881b3bf","ssdeep":"192:VKf6ZpOIWZt7IIZpOItZt7IBt9MgNsBGBlMrQXGFf7CSCJCSCGftCICCCVC7CNC9:Fe/FasBGBlMrKGZKP","tlshash":"3e32449dff6860b204939855816c70c3c1e994a0a2352fd1940d1dbafe9f561a33fc7e","first_seen":"2026-03-02T20:05:03.618541Z","last_seen":"2026-03-02T20:05:03.618541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7016086.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7016086.d.m.B95bN3MA.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6104\r\ntraceparent: 00-4e4617279309e71b8355e5d876f53775-5f15209efb37a091-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-17d8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205275\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16084)","md5":"952a970e6cb65c7f5f81ffbe2e407c37","sha1":"010df53790d74f09f12a84d1c544c0b4377d464a","sha256":"6d3c933ffe12068ff6f4afa5ec3d44cb9829f662005ef9ac6d40ef2127df9bb7","sha512":"4bc0253824499de28ad4cc866350902ef238a9d8d3ec4c579186db26831882481114208050a49caea3e633b6553f3c14621a2490d0e5006b6529440df346847b","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJu:dxtL7PD4hsy312IhALo3aS++FwIaGPfC","tlshash":"bf72a4e93183b53553eaa9e7403b010af33c3944344f9494f6aeaac63d7651352b3e7a","first_seen":"2026-02-26T15:36:50.730644Z","last_seen":"2026-03-08T14:14:44.227827Z","times_seen":13,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/71c69379.Df-RY1xq.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/71c69379.Df-RY1xq.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-3412727c1ba08f4b9d3ad64726eb9584-903dd9af90cee5f4-01\r\nlast-modified: Mon, 27 Oct 2025 12:44:26 GMT\r\netag: W/\"68ff692a-db\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 10907462\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-27T14:12:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3423d7cc3aa7ac44d033e2e4be0b00d4","sha1":"a4d591bc0446811187b44bbc1b41c07a7f48f232","sha256":"152add0de253a858678d73d9988ee6214da2dc169ad58e26e2f95e472b50fed6","sha512":"65c19ef7f61a6266e6f34255b873f9d0d88f42971a124787b263063acf53f4c0759f3b40a563d4aaeeee269edf833b3921dea4e9b2fa89f82423aacd6cd8f2e9","ssdeep":"","tlshash":"87d0a7568df1d6336cd0590bb3444a8c30c29c0b85175b04c49a140cf4b359b3202384","first_seen":"2025-04-24T07:07:12.797229Z","last_seen":"2026-03-31T00:45:46.183155Z","times_seen":113,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/books-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/books-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1804\r\ntraceparent: 00-ef8e2fa51c1452c022769df474e92a16-8d5f3a983b585390-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:41 GMT\r\netag: \"70c-61bf36bec16f3\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 474806\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:10:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21f4a5481d615224b3062e2bda5a69d7","sha1":"2587846cdae3aadc39f9168b4a62c4ca50cc2bb9","sha256":"049e51bec3a57f5d4f4ff4d0a592ce5a25e418fa08841f345cc7b7ba2e6b1581","sha512":"7e52fd485a521bc2683434cd1159d6d2e624c4a87916df5584f8b3224a98f683de62f7e467b9aef7cc15f4be4c15a096d049542f648653aebbc60ed70169a497","ssdeep":"","tlshash":"0b3165e94fd870dca615a7c1ad2f892bb89f28f97303cf4653c09a54b8120c4cd8ec10","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.237177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/best-102.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/best-102.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 54547\r\ntraceparent: 00-131cc503af32161bc7767548db4bbd5d-325cc05146c1b007-01\r\nlast-modified: Fri, 14 Apr 2023 10:04:50 GMT\r\netag: \"d513-5f948f8cab939\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84252d3bb3f7bec6a007a3dade8d84e4","sha1":"eef631d5a1527bc7bbcbd424b5272afb4386a96c","sha256":"b146039c094babf2ce8c0d5bd5af4a4d6b390bb2c4c33a60f84a3bd992230c39","sha512":"afdc61cd7f9d2d8013db82b4e36ff9a1e7c53089450d7af034334d4008e6d0c69bcf812cda8bef5bd28e9a803f25177c98e77f7fb39c02d64e2b0afb9b63779e","ssdeep":"768:krgkNuIumlYeh5C2pjoJAPHImabrjJjhwyWB0YgBA:k8i95uJAPoPjFq5V","tlshash":"7f336399e3e5a2e4e005f3f4c62ac8b63a632ef93912ce5583e56d55dc9102c49fdc83","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-29T15:19:13.415857Z","times_seen":74,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":71,"dns":16,"connect":10,"send":0,"wait":276,"receive":30,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/de.D2kQJO1m.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/de.D2kQJO1m.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 127\r\ntraceparent: 00-9b46e816755ea836ec8115334f864956-a115d5eac194e30a-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-7f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 21385\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T14:07:37+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"246a5fcba5ed21747c2a108e5e635ec7","sha1":"53b22c166e0f07b6e040b34c314f56d303e17393","sha256":"ffa84d949bb38ddc31e3680c882e9249a6731310387f864dde24612450a2b713","sha512":"cc17998c3c57bfee5008b6ce163f5d4e9b560c8ce7087f8547213d90518ca773d75413d9be79b8182280271dc423e87ede1496c99faa7174316a661e34e037a7","ssdeep":"","tlshash":"8ed022e8e72d7700c900c3200fbc62e2d289f0caa38800cbe5602ea8101d08bdc9eadc","first_seen":"2023-07-12T15:54:46Z","last_seen":"2026-04-02T03:18:27.118837Z","times_seen":42,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/eda0a406.d.m.QgQX_--N.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/eda0a406.d.m.QgQX_--N.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8103\r\ntraceparent: 00-81d5a23067bb499d035b1847e6571b35-cf89f7657bb1fb78-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-1fa7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28020,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14320)","md5":"ff448bf2ef6ac68a03c8eba1ff153df9","sha1":"7b3330b36b46664da1c4cbe909d98f26962e310b","sha256":"9c0d45cdac74de03fdf9a228b4acc8a5f22094c887a67955acfa6b6dc44b2103","sha512":"351ee1e59fe686e16f4187d9ed1f4538173d3842e83cea7d533f2b3459b34b444f7dd6133ea05b400081d47ad56daeec522ce51a60d5e0a58f82e05a73cabe88","ssdeep":"768:fYJ9RIz2SJkF6XeKn7H3GhG47959G25CzXUr3JromPEopAk4ervozAH/DDVYgaM0:f6iJIR79uS+AH/DDV3TCikhGU","tlshash":"7ac2f9c13292b6a1838684f6f6320212f33a24543805a8b97dbd75db79c1d47ab73bf4","first_seen":"2026-03-02T20:05:03.629548Z","last_seen":"2026-03-02T20:05:03.629548Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/faffda3d.d.m.CNI2Z0hQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/faffda3d.d.m.CNI2Z0hQ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 695265\r\ntraceparent: 00-f6a426a3d3ba79359b788ff14969cd09-540520c86f1770a3-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-a9be1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3755176,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65140)","md5":"99e3e7c83b91947a940625dda311f934","sha1":"c703698069a6e61237fc833df9f224baa9198952","sha256":"ec8e0ed7c3ebd4218c64a3ca458f3968e8771f1b4407faf39914ed0d4edd0515","sha512":"89727c650f58c9c3c65856b567a1ee3b11da8c6fa084093bf3bbe66056c04dd2c51dc9366dc6f513aa0a3fd7d4e4a74099ca74a21cd649e70883c0c84736dbc3","ssdeep":"24576:OhVfnBwqTH6LAD+dUsR0vy/oAGn8A7Dued5mxNC5umXYoB8f5RTOjq:MVfnBFTH6LAD+dUsR0vy/oAGn8A7DueG","tlshash":"d6255b5a750d3576c3f34595a0aa0440aa3c5b50f16488c1f9fc8e2a2aded3493bff9e","first_seen":"2026-03-02T20:05:03.630981Z","last_seen":"2026-03-02T20:05:03.630981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1610888.d.m.D3r5EzBB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1610888.d.m.D3r5EzBB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-ceca304d57c48940aac94da1ae198143-b539eefdfe0e5806-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-8d3cc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":578508,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33867)","md5":"f2a0fe3ae732b3d7d819be702cbdd08c","sha1":"39732573961e4eec353d3f63f07d660b7b7d01f9","sha256":"d0e1e27661e037a361bdfe989206a2ed174cda25284923c13f7a77cf19874c87","sha512":"e604f119f66b33533cbb509d72a0bf45ff6b7757af062c8d97eadd05e0c2121adab3e7ad4332888c45673374899743cf19000c80ba32af07014dd45022b50c92","ssdeep":"12288:61OJGn02zHl7TwBZ4qWp67h7Y6Ud5bCzjd4yQYdwg/dv2LB51x1S7:61OJG0257TwBZ4qWp67h7Y6Ud5bCzjdL","tlshash":"afc45a957151343547b600ac806f050ab33a2a2e685dd8acf36de9ef29adc49317ff78","first_seen":"2026-03-02T20:05:03.632074Z","last_seen":"2026-03-02T20:05:03.632074Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:03:53.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:54 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; Max-Age=2147483647; Expires=Sat, 20 Mar 2094 23:18:01 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.BL0tMmGG.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23069)","md5":"a2fdd7b221868c0a33f26bf1ec6960a4","sha1":"794ec0b579336afc36e726cc87396db4bac13b3b","sha256":"75b3b02d5a64a465849a3397d428b09bbc242153491e9d14f44c2e8be1b22ee6","sha512":"e183fe2169e2df2e76767f983a13039b633835e30b6135952b3c7938ce04f8d13bc4a8ab096e4803f601e86cb98865e053a5f2acdb29d4d8ade2457b02bca4a0","ssdeep":"384:Oe5j1YNdNU1MfOjDB6oQlGdD6STm6uaQtGokYbMHuAO5sz2J3SBCW:Oe5xYNdN5gDBy2D6Gm6vokSMQs6JE","tlshash":"3f130bfe1f1486f9fb12a3ffe756204c6a09f467dd428d74f26c725877c6a9048a2182","first_seen":"2026-03-02T20:05:03.633598Z","last_seen":"2026-03-02T20:05:03.633598Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1502,"timings":{"blocked":329,"dns":26,"connect":148,"send":0,"wait":843,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64167\r\ntraceparent: 00-a7bc46f482d20a34aeae8dd5928ee32c-c295c27c1fbd41c7-01\r\nlast-modified: Tue, 24 Nov 2020 11:14:44 GMT\r\netag: \"faa7-5b4d86af947ab\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 10:32:48 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 357201\r\ncache: HIT\r\nx-cached-since: 2026-02-26T16:50:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":64167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"8474cb125cde5afaca51d98801f345bd","sha1":"00e3da15a1936d0ab1057909bf23a0838a33bd79","sha256":"39efd764f69c73cea9e707b3b46c624e3157915843eca2948faa0be79d3cee82","sha512":"7c604b970e8a0f731194b41d227f04e543bec101ccc89b0e04acbf3e02e054ed605d29a0c5ed8de9d70606d305a80d950be2765d5cd0e481e3e03939ffc7e986","ssdeep":"1536:F3HMuHfOiSMXeyZYQGGa1gfeHmG2q4ZtYYMW904b:FXMuHm8ZZYjJgemVqgYYg8","tlshash":"7a530242e4dd69a0833c7b6f3ee258119b8581fc26341b163a7b6c6980876be474d7d8","first_seen":"2024-12-31T04:55:51.625482Z","last_seen":"2026-03-14T07:22:16.805002Z","times_seen":33,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/penguinking-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/penguinking-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10474\r\ntraceparent: 00-a835e76678fe8ba5fbf828a50b902630-8e6552066ed8e337-01\r\nlast-modified: Mon, 28 Jul 2025 13:23:02 GMT\r\netag: \"28ea-63afd30ec847f\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 473518\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:32:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a520c53a4c4f807f2f9772bc0fc238d2","sha1":"2737e36e228a2e4582fd2f3045965179cddd7c1b","sha256":"ea55ca4625763943293e65791cda181524d21ed24cb5ed645f87272ac3e695b6","sha512":"6e278c8dbb8a8db474d7be4e3e83e9a2bae361d13bdfc52c77e807d5243194b1d7c8df9244db5dfc4f3b92b1459d4c52329ec1b4cacb46c1370d612deb2328e0","ssdeep":"192:UmBDeKCq3lkvYil5RRsjzobVmfMCtUtZyWtjk9PJorqPe:UH5/eMCESnPe","tlshash":"2122a4887367d6f8f40eb1fa53164879b54baae83c40e0e9c7b62c52f25451c2e06cc7","first_seen":"2025-08-05T20:12:02.96847Z","last_seen":"2026-03-31T00:45:46.173608Z","times_seen":38,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot.C4J6IXOg.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot.C4J6IXOg.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4149\r\ntraceparent: 00-c5d2ea1ae99aa0379accbc900de3f93a-076e78c8292622ab-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-1035\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 21383\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T14:07:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4cfed5dc8f597a9ce3ace9cc0d54468","sha1":"d02e363b2a9a00da32b6a9d73a03b904ce5650fc","sha256":"86ac12bafdcfdceeca1301bec6db2de3b5d02cf3982a6f11da62e2c383f61662","sha512":"36716691243cea3866beeefab568cc29f891e356ae23a8d02ba59549a74db3119b02b40f017f4841610f27bdbdc17c4f8aa1b34064d10a6c0e413f36b7d1ee19","ssdeep":"192:Mw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0q:M6YAXsI14g7V6scBUCVz","tlshash":"812276e437f9a3e4f106f3ec8756e4247e5328fa7a61c569c3aa2c58ea4145c0d98cd3","first_seen":"2025-06-01T01:07:13.940104Z","last_seen":"2026-03-29T15:19:13.408178Z","times_seen":92,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/jackpots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/jackpots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1666\r\ntraceparent: 00-7fdcecef8907c2099bfed62326e3cfc2-55344ce1656b432f-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:33 GMT\r\netag: \"682-61bf367d55ec8\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 14 Jan 2026 23:16:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 1453478\r\ncache: HIT\r\nx-cached-since: 2026-02-14T00:19:23+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d078c57099cadb8866bdf0cf7e6fb1","sha1":"9db3f9769966f73119b118489aef70be6c435b10","sha256":"fd1792c86362ee56c8ca9479b4bf023862faec59991939d1a4e8d568877df028","sha512":"c4e39f897618c3635f2710359262a143db4edbba3b2ad27598e562c88648bcb463cd30c372516659a876d17827cfc5317baaa23aa23144c6cd992d3b94a8e854","ssdeep":"","tlshash":"c83106fc42e8b2c496465b20fa27f8d262962dfceff39ec951e25b314416191490e9cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.195707Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com/shield-fp/v1/api/web","fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","domain":"csftr.com","tld":"com"},"ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csftr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:34:31 GMT","end":"Wed, 29 Apr 2026 02:34:13 GMT"},"fingerprint":{"sha1":"11:89:14:E4:C0:DE:6B:33:22:2C:E7:6F:0F:F5:DC:84:88:2A:33:FC","sha256":"3B:C7:C8:FB:9D:DF:F8:60:5F:77:BF:74:D0:4B:B2:B2:49:20:5F:EF:7C:CD:25:EF:3E:8B:02:4C:82:C3:CB:67"}}},"request":{"raw":"POST /shield-fp/v1/api/web HTTP/1.1\r\nHost: 5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 27288\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":27288,"data":"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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://leon7772.casino\r\nset-cookie: shd_persistent=d10b7a73-19e5-46c7-af94-950296da160e; Path=/; Max-Age=63072000; HttpOnly; Secure; SameSite=None\n__cf_bm=WOlaXpNdxX3bFecPXXFfQiZnC.TfsEMeI2AJr4E4RNI-1772481849-1.0.1.1-meb_HfvKP2_EI9tX9lZJfqqTo8CQ0ZjMH26dgxeAqa6u0ER1IG3cohFNK6D7VkpO7yUi5SzXq1e.DybI3seUNPDkN_FZK4lKR9RmktJEzJU; path=/; expires=Mon, 02-Mar-26 20:34:09 GMT; domain=.csftr.com; HttpOnly; Secure; SameSite=None\r\nx-request-id: 5adafb71-7e0e-4ebc-96e2-7676fd329cd9\r\nx-envoy-upstream-service-time: 18\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d630244db83783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"49a3a10be6ab9c21561cd37a764f409a","sha1":"10f3e29b0f9d104c2085dcdd7921156227746064","sha256":"5de8b52f5c0e21c968c0282882a43345f89c66812403d7437814672f6a59801c","sha512":"984ba86f7416591344c0dad1a2b199c5ec207451fbe2451ac0bd1c07a1d462bf5402dd09a85629bf25b60cacd39928351aac570ca34f98d7f70e6bc0514a3993","ssdeep":"","tlshash":"17f0ab8807e82c79c2774255a6003ea03b3905b21484304cc87e8a0c18e7491b129a1b","first_seen":"2026-03-02T20:05:03.652582Z","last_seen":"2026-03-02T20:05:03.652582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":25,"dns":36,"connect":1,"send":0,"wait":259,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 20:17:15 GMT\r\nexpires: Wed, 24 Feb 2027 20:17:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nage: 517602\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-04T13:39:57.320782Z","times_seen":2964,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":111,"dns":0,"connect":9,"send":0,"wait":13,"receive":1,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.deviceinf.com/js/v6/agent.umd.js","fqdn":"cdn.deviceinf.com","domain":"deviceinf.com","tld":"com"},"ip":{"addr":"104.21.26.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deviceinf.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 05:18:50 GMT","end":"Fri, 17 Apr 2026 06:17:21 GMT"},"fingerprint":{"sha1":"1C:6A:98:D7:7B:30:57:F9:CE:20:04:BB:73:3B:C5:5A:A8:47:60:53","sha256":"C9:47:47:90:63:1B:A6:0C:20:EB:D7:5F:6F:0C:FC:1F:E1:F3:79:EA:B6:55:01:7B:B1:9A:71:5A:6A:DC:22:83"}}},"request":{"raw":"GET /js/v6/agent.umd.js HTTP/1.1\r\nHost: cdn.deviceinf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 12:20:09 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=14400\r\nx-amz-version-id: Vavu8mZmXPH4NlM7QChMV774F8jcN7y6\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlEpVIp60Ym%2FguBVhfPkL9SYCc8um9reZ8%2BfK5d41gyyC1Pk%2BGwQ1hhYVHFulkPMzaohlPw2YLb0mcqNDqyaZZatwqqbRGiMsTLITr5SqnBb\"}]}\r\nserver: cloudflare\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 61fafbbf54e5560686b2d414df132838.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: yq397rJE8OnDjoYw-bD8jiJ3UH6ASCnb-IMqTZstRV8MNeDJOUu8GA==\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\nage: 447\r\ncf-cache-status: HIT\r\netag: W/\"7155ee02b1ba54d06e232d17f7fdc6c5\"\r\ncontent-encoding: br\r\ncf-ray: 9d63021c3e3bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":678463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65505), with no line terminators","md5":"7155ee02b1ba54d06e232d17f7fdc6c5","sha1":"fc70e13ac46ab3e1b7469e8a8c85a1147c5fc7e1","sha256":"76fd6728970bf70baa08c08a9c191ebd04fb026c4ea58fc2b4858d0d37987ae5","sha512":"1c2569346aea5b54aed81fc08d90ba3e7d728b621fd2ed0bb884fb41f18ebbefc5613d1c5ea835e8bed90c72e873c743d19444a9229761fa4dd4b71a81ee8025","ssdeep":"12288:uQyTY6obd/8uEC3oPoO5I6RiobG4qsGEjMX2DsA9ig+pCkQI7n6OhsCwwRpzthfJ:uh06obd/8uEC3oPoO5I6cobG4qsGEjMf","tlshash":"41e419cdb6d6f89547627837026f102ba63e6f02680ea16de552e1c43cba7465037fac","first_seen":"2026-01-20T12:25:36.078654Z","last_seen":"2026-03-09T13:58:17.658222Z","times_seen":450,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":21,"connect":8,"send":0,"wait":31,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.BL0tMmGG.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:54.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.BL0tMmGG.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-f98e93a1cea0fbd6dd50a96742755661-b902a72951dc4690-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-74a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T20:03:55+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1322)","md5":"3924f52caee9a7b55d314dc24cef6036","sha1":"bb3efdcee37d3f782bfbe5612c2d77261a6d723b","sha256":"2303293e5e41bd7fb7bab79f370450e02f3cf59b39ebb150b2c8b6e8640f775f","sha512":"e6dc369ee3771f49727bdd71eaf66de88fb230836a6bdbcc847d8fc53c5f6c1207f3bafd6b2762c20cffa390a1c25a64ecb6c8b6a5f556a17b8f5384322e9a57","ssdeep":"","tlshash":"7831660d72c295354aa604ed815a3621b322de91353dc5e1e0b87c693db1813c91afe2","first_seen":"2026-03-02T20:05:03.554428Z","last_seen":"2026-03-02T20:05:03.554428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":132,"dns":48,"connect":12,"send":0,"wait":511,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=\u0026site=leon7772.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=\u0026site=leon7772.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:04:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.216.60.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 698\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":698,"data":"app_id=cnjqphyx\u0026v=3\u0026g=b3b02073117f93f0a72d09dd5c66c508bef99b49\u0026s=e28e58dd-9ab7-4b98-8f22-6be6258cc811\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=28df2e25f573a4ae\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=undefined\u0026user_data=%7B%22company_id%22%3A%22LI-LEONCASINO%22%2C%22language_override%22%3A%22de_DE%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: ddf21b5523ac7a0646b92b5a1f0fb0e4b2f304c9\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0004c5coo6hqvumpcr5g\r\netag: W/\"a86eea21f5ac73fe4ece4bf67d9a0ba3\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.218384\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6520,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c67324bfe3be2b20f8b613ad47d4d8e","sha1":"dbd7a9808b70177ce0a636b02ab946ecb7910cfa","sha256":"a86eea21f5ac73fe4ece4bf67d9a0ba3b550eb7e1df3faa6eff563d77c4fac7a","sha512":"d4de5a2408a8384eb5b378273b5cef04dc1888a888412cb8dac57e3f7482e260fc3dfbfe6480d2371efd7b074fe83033a53616a287c90a9c081f72c0cfcba96a","ssdeep":"96:4rpN7YOyaRvkqRT2J3HA4zlGjzK14zMwaLjGMlbjfZ9B15AOU5zVfwHwhPD1M6+7:4rpN7YKRvTKgqTxDBSlw+1MFptl","tlshash":"bcd1888c89481c7e73cb82d6c7597e0b0b7991abb1906d88f9bccd2d21d7399916f207","first_seen":"2026-03-02T20:05:03.654601Z","last_seen":"2026-03-02T20:05:03.654601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":211,"dns":8,"connect":96,"send":0,"wait":316,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.BhNfCntJ.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.BhNfCntJ.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 7131\r\ntraceparent: 00-39b9ba6d73f779db13d39ce9752f517e-c8fdd2413c36432a-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-1bdb\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41156)","md5":"a7b4020f6d4e9eafd65c34f9295fe509","sha1":"0b8af5aaba32eacc0416030093af2f247c20faef","sha256":"b2d337b03ee9411afdbc14e8898e03ce218fd4798e433d9c01b5568c5a3b4512","sha512":"04932d1f14df0e7039d28f9078d4e13146e5147beac32a84fab8d0c7804db41d97aed7bea1a773d83c65c3bc0c143fae636c599c6924e76855f7bec7c550aba8","ssdeep":"384:MN1UNdN81MfOjDv6oQlGDA7tFBXW0VTRRq1qlNTISGjaw7yV+ypXmW0cnLXABhH:MjUNdNxgDvyLDXWMFFGWuyp2Wvyp","tlshash":"c003c7fb8f4c616ab76bf06fd3a5f518690aec43c85258e6c1a4715ca1ca7d383d070a","first_seen":"2026-03-02T20:05:03.655414Z","last_seen":"2026-03-08T14:14:44.189627Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 12:31:11 GMT\r\nexpires: Thu, 25 Feb 2027 12:31:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nage: 459166\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-04-04T14:04:46.922003Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/other.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/other.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1220\r\ntraceparent: 00-b3d0e8c6fef67b4b4ca46e2ee8af107f-14b1c4c14975e539-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:21 GMT\r\netag: \"4c4-61bf367262f3c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04de3fb1fb28c7e3a6d905cfaec4e513","sha1":"7823b05f9bc9f0a16145f9468fc8e5df9d573ce6","sha256":"3c584108e1d8685d12332171f34879003c01a21d55ae5bf753b8e034bc020e2c","sha512":"f1c62e53cd1d6d4e3a72345e59903656acdee191038db1c1f7bb85d0763d785dc98f414531b61161aa045aa575b6dc52a95117c893a158d43f2ed8c7871b00fc","ssdeep":"","tlshash":"f121e0f196606350a0099b6fba2ab56271eb3cfe3e624dce93e0fe1210050d98c4d986","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.257946Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.l.liftdsp.com/ac786b28-283a-4d76-a40b-23e03f94ae14.json","fqdn":"ps.l.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ps.l.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sun, 05 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:FF:93:7A:39:16:1E:F6:27:5B:22:3F:5F:C7:A6:C3:6A:22:BF:62","sha256":"0E:06:CF:4F:55:41:8D:9F:FF:83:14:09:B2:03:4C:67:98:C5:19:10:75:CB:52:BB:6F:5A:2C:81:E1:FF:B2:29"}}},"request":{"raw":"GET /ac786b28-283a-4d76-a40b-23e03f94ae14.json HTTP/1.1\r\nHost: ps.l.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 50\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 07 Aug 2024 15:08:37 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 02 Mar 2026 20:01:26 GMT\r\ncache-control: public,max-age=900\r\netag: \"e96cd5af6f065e5048b3ddd2913dac50\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dl9RYjVGqKNIrObxmMywND2q_7K12c-zyeXgx9M3vTpP6YBpe1ZO9w==\r\nage: 207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e96cd5af6f065e5048b3ddd2913dac50","sha1":"98f5fff6913c150009fb01c2cf5bbe83c250f80c","sha256":"88c38dd5fd1531be2d044c85bfd00517c41ce29b03c514d620d80a80241a1f11","sha512":"9478fcbed66ba6836ed9bccc5f3f3c1681d7527489c521c85566a2368089191fe173735d89f1277a5f86da659be50879b9e0ac7f62c1d7a1d4a905af8c49f990","ssdeep":"","tlshash":"6790041740037457c457c75041443d55d75d0d370c170f7404551d4503f53777540117","first_seen":"2024-08-31T07:43:55Z","last_seen":"2026-03-29T15:19:13.337153Z","times_seen":103,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":91,"dns":82,"connect":1,"send":0,"wait":3,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/6449d237.d.m.Da9xhZQH.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/6449d237.d.m.Da9xhZQH.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 917\r\ntraceparent: 00-f5455670af94e34bd2b44a40740f5911-5fc03739ee9e0420-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-395\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2520)","md5":"e4be5a604d617049d88e6adbb30c0ff4","sha1":"4ce0ed988423bc0cd532bf6b3e491caf747d2e7b","sha256":"522df38eb38ead0c02f9844d79209ed01a77a38a1d6f317f57efccf3ec80017e","sha512":"432421fda1002cc9d011c655ac19972ba5647aacd6cc13aeed6872beb0012555ec32e817a8407fec3f9ff5f4151ab1b6aabba9e05d78c986630c1511069acc01","ssdeep":"","tlshash":"425132c035f17961926b2af3c53f012bf57a1895fb0e5482b816edd97834032935fd89","first_seen":"2026-03-02T20:05:03.661117Z","last_seen":"2026-03-02T20:05:03.661117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:57.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 17:21:40 GMT\r\nexpires: Wed, 24 Feb 2027 17:21:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 528137\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-04-04T14:47:10.838637Z","times_seen":18132,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":89,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/sunSw.DL-onBB5.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/sunSw.DL-onBB5.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/faffda3d.mKC9hbKA.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-19eac6ed26fe586b9185f1471efb1202-bfa3c496fd866f7c-01\r\nlast-modified: Sun, 22 Feb 2026 14:30:04 GMT\r\netag: W/\"699b12ec-16c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 618575\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-23T16:14:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0811eb7ab652dc7ee7bee06fed53671","sha1":"1192b619f776177819ebc73c6f6f31b11b891d24","sha256":"0565ef51f5934a1fc6f8a6e25f958de335b791559e5e0c100b2649acbe64f92b","sha512":"89bdfee5cd795ad373e227320ee5ad9b5509e9e1321726170fd93642d694389df569212784af41ed18a6a21f578507ea65d15cfe5d599e168ed956eae70f4ac9","ssdeep":"","tlshash":"d8e068d34b0af6ac92418636d9a83ae0321e64aa107420a8846e05a020569cee207ce8","first_seen":"2025-02-07T04:57:00.938579Z","last_seen":"2026-03-31T00:45:46.258466Z","times_seen":105,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=d796s9\u0026event=regstarted HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:04:07 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 370\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"902879accbae1a6e7d4023179a5f5582","sha1":"eb32502a93060cafa892ed9a96689b5a356ed9cf","sha256":"5e077e267743c2a25ba1b85e6cd184c4fd8a9b42a9f077a73f9458cb1ebadc16","sha512":"705c2a0551187db0135f284c4489f46c47095ec831453ed3808eb49f8825de7d2aea554b98f75063485499ccdbbccddfbaec839d0f8a33cf414fbeb1c62b8890","ssdeep":"","tlshash":"17e0ca6d572d7503937620937f71635d243541fd3d0058951c4c9d14289aecffd27c50","first_seen":"2026-02-26T15:36:50.794922Z","last_seen":"2026-03-14T07:22:16.720919Z","times_seen":12,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":302,"dns":46,"connect":103,"send":0,"wait":103,"receive":1,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/3oaksgaming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/3oaksgaming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8811\r\ntraceparent: 00-242661d7cad24f64b085e42921c6099b-ed6ac23afe33e0f0-01\r\nlast-modified: Tue, 10 May 2022 10:18:38 GMT\r\netag: \"226b-5dea5a5ee2249\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 473518\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:32:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":8811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e28b306999ed834dacf69c8965baddb","sha1":"e031bce7733da766b65c2e100328a86fa6783922","sha256":"72e0e0c5163c21522c3edc0ba452c797de75960afebe62fff314a3c0ecf00aa1","sha512":"cfcc55b5213047e77da35b8951655c2ce7fdece6984f9b6d3021f9c187355dfbee7d4e02b714c23a4b251ecf8076ef79d5e894e6e08c6133dd18e3ff25dfd450","ssdeep":"192:O7eR67oMkUbQzbCJN3R2DXedKi4L0X1KSv/7DiqQ26tG:O7q60Mk6Qk2DgBcSv/7DiqQ26tG","tlshash":"6802e8d47b38c6f0f049e3bdc70a40b936aa78ebb852c9a4d3b46d1fe49502c59194db","first_seen":"2024-12-31T04:55:51.589611Z","last_seen":"2026-03-31T00:45:46.155858Z","times_seen":52,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0 HTTP/1.1\r\nHost: d1cr9zxt7u0sgu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nserver: nginx/1.14.2\r\nlast-modified: Fri, 19 Sep 2025 13:00:04 GMT\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\netag: W/\"68cd53d4-2c9b0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 1a5nqpHFiWwCJ3o2BQ6Ih1Y5MW9t5u-3RGTB192cymc-nEDPd8L73w==\r\nage: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":182704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-02T09:36:05.663821Z","times_seen":79,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":25,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7ad78725.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7ad78725.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-e5c356965ff0b776d1cca6b52fcb1282-c5055a9c6d9607c0-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: W/\"6992ef41-2332\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 1065055\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-18T12:13:00+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.BvC3tFfN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.BvC3tFfN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1566\r\ntraceparent: 00-7ccbf74cf6af4c22326dca3160e0a7bb-67c249dc72cbdae2-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-61e\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3988,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3937)","md5":"e7d3817ab76506515846b4195cb7c50f","sha1":"b321414a920ba28ed2a7655d46cacd459c0a6280","sha256":"c6e28d36b6e32667434a5d5a4ba1b705e42f450229be0377dc672606a42c089c","sha512":"982c330811ce2883f2cf9974f2abd2f2138c401ce0ab69d907ab4755aaf4170e581d815d052aafbfc1f51b7b47cef8e5827160482751b343563c58bb26c260b7","ssdeep":"","tlshash":"ac81a84cf1c270b9d33700d0c017059a423a576876b2adeaa05f56339648c68f3ff46b","first_seen":"2026-03-02T20:05:03.669443Z","last_seen":"2026-03-02T20:05:03.669443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd767157.d.m.CANN4s_5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fd767157.d.m.CANN4s_5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-2e4d01f9d57b4ee8c9e8da916e157500-0f5e69232c58b3d3-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-8eb4\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205275\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":36532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19172)","md5":"5627e8349b7a7b0f754c7e852ce249f1","sha1":"b23c9d3ceea82aacf039e25bcec471c885bfc881","sha256":"5498d78c07fb2b49ccd247c3e074030acf86ff12e32bce7a8f0326bea1b698f3","sha512":"ca77e653c0b37fec263b14aa23dc96bcd5ba602f6443b6f3ed6734307943aba6f61bd3b3789827b93136658cb973292db0d6781828179e0be750e8aad259714c","ssdeep":"384:6AuOqKfvmAmiq7bWXgWE20ASWe4bNuKOJkmB0vufoXoGmGFjO5Ath0e4iXW1dGkn:6BEvmAmh7bwHU8Xgn0GWoPGFjDzaJ3","tlshash":"55f281c472d9f5e14393aa74803f910bf23a7c71145ca154e322eae57cb865a91b3f3a","first_seen":"2026-02-26T15:36:50.70844Z","last_seen":"2026-03-08T14:14:44.165706Z","times_seen":13,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/4e25ffb2.d.m.DNRu806n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/4e25ffb2.d.m.DNRu806n.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 305\r\ntraceparent: 00-da16987e3b72b607473e445a14da7738-ad1f9e810fa0d4e0-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-131\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"b4be357bf5c79489a29278dffe761acc","sha1":"2d6c93015738fb2d93b38d1fc2b3f686ce92c20f","sha256":"e5a1990fd3214b3cd06fc36dfe31f940441705bc237647d7892b6d0681da67e3","sha512":"adeb872ee72aaa39c50f81ae4f84dd755b904a3769794577d44276a014141dea36ef67c7d1497861f37f0f870d27ddcdaee751848b703526000df33ee55b360b","ssdeep":"","tlshash":"1df0c9cd76c2b46806ab0479803f984ef63e799437ce8590d50aa0b42ab041a8233f6a","first_seen":"2026-03-02T20:05:03.67461Z","last_seen":"2026-03-02T20:05:03.67461Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/visad.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/visad.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3232\r\ntraceparent: 00-6f98271a496a30f2873d4302c6bf4f21-e092fd52523d7f5e-01\r\nlast-modified: Tue, 11 Apr 2023 10:59:57 GMT\r\netag: \"ca0-5f90d645e5e12\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4125ee6012faeb482156fae1bd9781c5","sha1":"ec9a8266f8e367a9faf379fb9f6e228c62f33bfb","sha256":"48af2bee6dd2cf4cb122f21f0323b2587da67f129c8c16bba290be236ce6c627","sha512":"48052af542e62b336091073009c9f3e531d6fbaffc94b16ac38aaf53f611dae602c6fa6a6fbcb1d8a58f3e32b021840f4952ab0ead889b3652bd5b33e8457d98","ssdeep":"","tlshash":"9a61fad9332846aaf44072e9cf52a4dc290eeff483c54475cb422f1670a50d55f329eb","first_seen":"2025-04-27T23:05:09.881162Z","last_seen":"2026-03-08T12:35:28.052513Z","times_seen":27,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":68,"dns":14,"connect":10,"send":0,"wait":218,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/sevens-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/sevens-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3508\r\ntraceparent: 00-90f024b51df468b29eb25a57bbbaaea6-f297408adfd25d56-01\r\nlast-modified: Thu, 11 Jul 2024 12:31:11 GMT\r\netag: \"db4-61cf7f01e8600\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:00:24 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 380457\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:23:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac855577c78f4bd9edad9b490788b53","sha1":"d2deae54c7d3bc48016c1195e1a40592b15340d7","sha256":"046036e7f874f492979b65f952a66e194b8f1739f24a64d40b2052f944114bc5","sha512":"28401e4f1338a0bccb32462e90b4fb7c8c5054ab3bda45a0799cd63c84358f5e606d149129418a9995f3403b8715389f337cc4a966982cf48fa828b96ddecb3c","ssdeep":"","tlshash":"847113e5b3d8b3c0d909a7f1147b5974baff34b77b04cf865345b9a4a71a294892cc20","first_seen":"2024-12-31T04:55:51.417914Z","last_seen":"2026-03-31T00:45:46.252606Z","times_seen":55,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/novomatic.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/novomatic.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9561\r\ntraceparent: 00-2e08b910fe67a7af29212bf4b93e2f4a-f70c0fb0b8d86f2c-01\r\nlast-modified: Thu, 23 Nov 2023 08:45:18 GMT\r\netag: \"2559-60acddafc9ab7\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 469399\r\ncache: HIT\r\nx-cached-since: 2026-02-25T09:40:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"145998df0c33373dfacca434386d6b64","sha1":"eae73c9d71e9b5c560f5b997bb67651fc7c3a967","sha256":"c1202da0159789e5f9bc04689909f37ac67242790a2e2c7001a4203c113bf25a","sha512":"0d29942f1d0a6ecc174bda031b213961ae9005ecff1c85c3ce2dfd109c01a4ae1d21018b8ddc16627f8cf21db46661a399921608e9c22b42bb9591a2addfe83c","ssdeep":"192:Nnq9gb2ogtLL0SLU5tZxCGymBPUqZzZdGRNif:Nn8CWLfLUDZdGR0","tlshash":"6212a4e8ab69d2f8f00af3b88717d4786f522ee1bf11d5aa87d11c16e05102d8d94cd3","first_seen":"2025-01-04T02:54:47.931324Z","last_seen":"2026-03-31T00:45:46.203828Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:05.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGLDT3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Mar 2026 20:04:05 GMT\r\nexpires: Mon, 02 Mar 2026 20:04:05 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 02 Mar 2026 19:16:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134139\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530340,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (43657)","md5":"8404cb093ecb18d1c8f9a7d09a693e56","sha1":"6301d153aab246d3b9b37f718ca9f75cebd3b52f","sha256":"ca8bd600080c647ff40ba08866a8faa09227164e2b15c765362a365c84503f22","sha512":"fbb0fb94b36bff2532f0c15a75740b35ffebaa292d763aece4266e7cbddc6a828d7532bef00472fd614240a19267c78e92435c24fa15b4e1f2d0f52e44037721","ssdeep":"6144:RFgtTEar7OtW4V5W+MZZH9V8QyFbTxRMlKEoxo6JKlNY:mGfV5W+MZZX8lxoEu+","tlshash":"84b4f9ce73d4a87ac3a65524643f060a657c20e2b14c9590f0daccd43e7997972a3bbf","first_seen":"2026-03-02T20:05:03.684924Z","last_seen":"2026-03-02T20:05:03.684924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":84,"dns":2,"connect":21,"send":0,"wait":45,"receive":58,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/171e0e51.BX1Yg96g.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/171e0e51.BX1Yg96g.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 561\r\ntraceparent: 00-f5bdecf7e3899bb65bbf53cdfb9eba86-45cd70a23f6d2149-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: \"6992ef41-231\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 1149503\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-17T12:45:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1887)","md5":"978b7d184a879c9d6e3c9c85599bc325","sha1":"c868c588b1a2a24d0b6d43a7c121534e3b8588c4","sha256":"dd04df8f6527ae8668407b2777477459183dd365679d5d96ee413a73143e4f61","sha512":"6aa58727cf3ad60d38ae6cf2d82400532767ef93d981fbb5ba56a2ad88affd6224368e1ed7c444c107edd2b8e57172cb0d4d9d0f72a9b233829a699e637b60e3","ssdeep":"","tlshash":"14410ff30a0ce334ac63b54f6474d64ac02ad052f55b16e811ff722f86cfae099906ac","first_seen":"2026-01-18T23:41:56.178602Z","last_seen":"2026-03-08T14:14:44.243604Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/assets/sprite.Dm8me6Vv.svg","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /assets/sprite.Dm8me6Vv.svg HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-ebbc3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":965571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e61430b6a15117ca6523e7037b5d1217","sha1":"178df17bd5f5d287178188853c4976a2796e166b","sha256":"24c26b81ff89fc60b7f57ad1f121572841ab6ba9599259703777aab0214cfd4b","sha512":"0b6f2e726e0da0fd0e95f464b02c4b3016d0c9292215ddfc6e9ccbd734bec8cbf6c02c5339894cc7ac59786dcea4f6d2fab867c282e138b3cde2bf0c381829a5","ssdeep":"6144:clO0DikAXtLUHMqeEXTPYUMoV4kILcPLWt6aL9oJ2OYHNAMotVsZTiT:cgMei6o0cDQy2fxs","tlshash":"fc25edc51128538ca04bba6ddb7ffec0172f30a7795545821aafc7dc915f680fb8a868","first_seen":"2026-03-02T20:05:03.686986Z","last_seen":"2026-03-08T14:14:44.176093Z","times_seen":7,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 316\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":316,"data":"[{\"id\":\"5d023256-5898-48c1-aad9-604b1df55a9e\",\"qKey\":\"93031556-171\",\"operationName\":\"getAssignment\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"7746ba4a-c197-44ad-af69-4e6bd794d279\",\"qKey\":\"1a9cc015-159\",\"operationName\":\"getCmsContentTranslations\",\"variables\":{\"options\":{\"key\":\"WEB2_REGISTRATION_CAUTION_V2\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:03 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a0a14d19a39bb66c6dcb954594d76623","sha1":"d83246f5f9f4f80eb893493a6d1a799585daa034","sha256":"890061fdb3c5d3340e1b9cc7ef8e7724b97b78379f691e5446a805fe03417e6e","sha512":"941a451b519a2086629c6b065bce2bd212db9836a1de6499747f2bbf798a6b2793677f1c0196268c75a1d038f2bd121dd081dea57aad09d87790f41e6f7483b8","ssdeep":"","tlshash":"ee012c31a60b84660ed480867e24c42b7362f0169080d62023c4c68a96cbabdfadb5b6","first_seen":"2026-03-02T20:05:03.688202Z","last_seen":"2026-03-02T20:05:03.688202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7f245f3.d.m.CHMdwDvV.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7f245f3.d.m.CHMdwDvV.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-bb9173f2ca1057e42b8e1140cffeffca-db3ad1a36132c845-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-534f2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":341234,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37084)","md5":"19c21f7e3643f7bf46173baf1e96a700","sha1":"d60892d7c7fa576c7fcc085c3ae8bbef811d4e6f","sha256":"913d760e49584f0851e3a755d049221f90c136c14321b952f3d35467c36449ae","sha512":"db520dd676c86a08b8084820d9197df34f807c8d5f80d786127b93138e64a048a65d9d815e0d493dcc870919e7f7cf2334d6c743655dc52f049cd3db27682984","ssdeep":"6144:aYOVJkZweK5Wqgb/nXUBL5uz2opBzNrb27:aYOVJa/K5WJNNni","tlshash":"44748714f66269e736b0391e712b27e3603287113b51c2b601da5b393f2f84df6671ba","first_seen":"2026-03-02T20:05:03.6895Z","last_seen":"2026-03-02T20:05:03.6895Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/top-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/top-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\ntraceparent: 00-d60d26544b7ae9894a466bea7bad02f2-d0f480da7595f167-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:31 GMT\r\netag: \"2b9-61bf36429d66e\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 01 Nov 2025 20:31:44 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 83030\r\ncache: HIT\r\nx-cached-since: 2026-03-01T21:00:11+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0848796581e9266f80f9c559e3de8a8","sha1":"cf5f98440ce0f2c0edfcd5985dcaaa90da3d419f","sha256":"7e3f1836401d8d45ae3f406467c7bc7b78193dc00028d63d7659a7809bc4c083","sha512":"9f131505c274a867ed7ec98f409ebebd5a59edc16f5c7428b0e237b72d54ff24eac3e164c60047c6b7610c9fb054c60eb74b0064eb08c86ffb47d5b8d307a422","ssdeep":"","tlshash":"730170e797a451a1d7098ba12794b66e2edf3df136d14b868044b9b8d6042d5cd8c8cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.172779Z","times_seen":62,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/444dbad9.d.m.COHDy9Qf.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/444dbad9.d.m.COHDy9Qf.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-f96b93ee7afd38e6fd13c79882cbfd01-bb26f818d9a514b9-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-148\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\nage: 205274\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T11:02:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a0517c72f11103ed464859912922a96a","sha1":"bbd225f4fc02e62620c85627241b0a75276b3bf3","sha256":"c45395687da9b08de31423ae7477024b2f1b8751f1f081192491e39f5ad431ff","sha512":"5b8f8b30d31dae0d32660fc26e31b2a913dd919e8efa3d4432c51c02971526004a35fe58ff6bf96f96cfa369b52204df8e1272b0b0b988143282ebdc300f6411","ssdeep":"","tlshash":"f2e07db5457b6ff29b9a4c74676cf685ab29609137064484600c91095492f93c3ffc67","first_seen":"2026-02-26T15:36:50.591363Z","last_seen":"2026-03-31T00:45:46.151709Z","times_seen":17,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ba8af1f8.d.m.wQt3n6fp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/ba8af1f8.d.m.wQt3n6fp.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38584\r\ntraceparent: 00-02da7dbc5d871f2174d262517f6fa181-42de5a0754eb859e-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-96b8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":130226,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"599ac14b6a870a05d2170f7285254fa7","sha1":"cb512953a86361bb416431f1911f46de20d7cf52","sha256":"2d5fd6124c88cd2aad61dd3bfad99fa08226e8c9dd75bf2315936e3f531fe005","sha512":"2ff7678ad014e27235cd9a112a3e7d27929dedb19a6afc394dc275959c65f192f780f154203f9eb948a7d6ac06ef182727acde4631b68c1a463048cb5df628b7","ssdeep":"3072:/LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRu:/LwZR9YYUIyAIRGacgk","tlshash":"6bd3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","first_seen":"2026-03-02T20:05:03.692434Z","last_seen":"2026-03-02T20:05:03.692434Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.Bzp1FI1x.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.Bzp1FI1x.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 3440\r\ntraceparent: 00-3c4e48c28bfe0a00f4a67d34c21fd870-f0e21826083e9a93-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-d70\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16892)","md5":"b9d3ba5bc1e4191e3b360bda8e20bb02","sha1":"72ff12c681a8bf2c0ee48691048c92a7061f9f14","sha256":"7ff83136ad4b2a4df5c3d122a616cf4d761ff70fcb45a5043d789fc4abfb77d3","sha512":"78855ae1ac7b29ec757e32a6cedcc912d9f05bffd3d95c9bffbe96fa33a0be552aea46bf4cdf5f2f1c289b34b299fb5f075feaba01e268e21f75e10075a123c7","ssdeep":"192:Jw7vLZ03o2kZVz80GJCRjMiS7cZmn0A3tMHWbkRnHOp8Lv0wzJzY7gToDx:K7vLCulGWJDJRWwzJzWgToDx","tlshash":"a07295d50d64367abb3bb11fd6e29a0ca21ecc46da932695b6e1e12c43c638192f3d04","first_seen":"2026-02-26T15:36:50.740583Z","last_seen":"2026-03-02T20:05:03.693308Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 35\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"metricType\":\"TTFB\",\"value\":\"843\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/tada_gaming-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:02.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/tada_gaming-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10478\r\ntraceparent: 00-54ec5a35402a0f21bdf5d955d120c21e-5fd68a1d14adebf9-01\r\nlast-modified: Wed, 17 Jul 2024 14:08:05 GMT\r\netag: \"28ee-61d71fdb69b21\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:33:32 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 362726\r\ncache: HIT\r\nx-cached-since: 2026-02-26T15:18:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":10478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26bfe02c4096fb7c9ca21b15f7e28f83","sha1":"031e1bcf6815a6c39cadeb75e4650ba9e8fccae4","sha256":"6689d9fa9aeac5efbbdd54728b667aa6426567b9a6aae44b4059d0a3b63088f9","sha512":"8c0c61797c51a1677bcfc76cb62698b504a8ba838711b0b37a7ae8eae7193fb152552541a77e43364f89ef22c8a782d1aa90d2c1cd15d006fec759cc00581520","ssdeep":"192:nVa7bNesvytEWTXfZeqU9HwvZJOFs6E1Agwwka8E4y4pUI:VGN67foJ2CF+KjwLSpT","tlshash":"9a22a6a9677da9b8f004f3fccb1250347a5934e77892ca61c3a6ae0eb41584d4d9dce3","first_seen":"2025-03-04T01:59:19.627135Z","last_seen":"2026-03-14T07:22:16.791829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:07.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 42\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==; ABTestSeed=73; qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948; qtag_rfrr=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; shield_FPC=SCUL95VI0AI4Uk5kKFMqlFjSe93mHX8vOg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"metricType\":\"GTM_READY\",\"value\":\"14290\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:04:08 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-originals.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-originals.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1955\r\ntraceparent: 00-b4edf80449c1f56c909612d5580df4b7-f3450016483fe570-01\r\nlast-modified: Tue, 01 Jul 2025 11:02:44 GMT\r\netag: \"7a3-638dc157b9648\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:04:11 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 380166\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:27:55+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"702b03a00b38c08b38d63d5ab58702ba","sha1":"bd5aebde1dc0e3ae5f0b6a6820123e1167e8b50e","sha256":"faac8568e1e3f31fd222cf39b2fd2bd2c3a23c3d00c008551edf1e83df355e78","sha512":"a616af84acb3a46ed9e01b77877e73da6688a36be4116bf2b15b01453d68fd9fbc0bcaaa0870e9e458e558e37020c59d970b7d919ccaa215aa6cdb1a34ef9449","ssdeep":"","tlshash":"ac4152f9d7ec81e49407e792c9f3992978af34b2eb45cdc6c0306a81f16b884ca05c50","first_seen":"2025-07-09T00:32:09.400099Z","last_seen":"2026-03-14T07:22:16.733341Z","times_seen":43,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-de-json.02594dcb.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~locale-de-json.02594dcb.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 21278\r\nlast-modified: Fri, 27 Feb 2026 19:59:47 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: egc2IxoHm.oKDpncUJETrpynWAPT72pu\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 02 Mar 2026 19:22:31 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"751962929c23ecc8ce8aaa11992d5420\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cEm4peDXPVzEyEuIoBMVal8V6wUbw6SWSc4vKMwYSlzZdzW3OhGEtg==\r\nage: 2675\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":81749,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65036), with no line terminators","md5":"0a6a7af689121c35e96dabc167793b4c","sha1":"fc719ad4a1bb9ca01215bddd623b61aacb65694f","sha256":"a85276d679ba989b228fd07679122afe8b437fb0ee0d8495342a709dfa5b8442","sha512":"857ac6d924d32b4cea6e03c7095be217a658960d596a6903d8e37dac519e19c813e441c30fc0e7aeebbe39fe17b6311e89de3b3623c33fee33776915b591b619","ssdeep":"1536:mXO2te6aW7fXMvTEFXFMccnkaa1Z0KEgEmtyxjfYh+oXLr7+T5KUvu:B6Am0UkYctTIUvu","tlshash":"7183c60e8c65ad76475f07e32c8aadbebbf4836e62c5561afc85c91d01c9b81c16f306","first_seen":"2026-03-02T20:05:03.695856Z","last_seen":"2026-03-03T14:47:20.304835Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-63.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-63.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 32963\r\ntraceparent: 00-de385e296fbebbdaa6a44a09c1d07b5b-5be717e1192fe3df-01\r\nlast-modified: Wed, 29 Nov 2023 14:30:43 GMT\r\netag: \"80c3-60b4b61556bf0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":32963,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39f208963969a20927c77ff170d58fe2","sha1":"157f6e26b782db4a04d09122b259cf005ff47079","sha256":"7b626c040aadee9765e07e14b599af4cc2ed9f265653b5b5ef05aee038338a7e","sha512":"4dfe4615d190c87884b12becb29311f49d0295b64099e82acc41fc50e707536e3aa2da8cfd6ad60503a17ecb45521cc594ee32e4f19c55ac3ce451f9f82ab0d2","ssdeep":"384:RwW7ILFIilDA/XifM1VSVsgMILWtGB9ROdBdhH22jUWQRZ:tMF0SW9gAdBTrIRZ","tlshash":"33e29c5fe369dd77e18ae39cc5008034226a82a779c1c794c2f9ff4f566648a6c0ebd1","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.474228Z","times_seen":107,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/girod.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/girod.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7383\r\ntraceparent: 00-cf3d7663b2973db6445810b40d0103a3-e7ee0ba083990516-01\r\nlast-modified: Tue, 11 Apr 2023 11:04:12 GMT\r\netag: \"1cd7-5f90d738e444f\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 20:03:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7383,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e770c506c87d6342b4a28db97f352855","sha1":"dead88f03adcfe29014b2bf7312c527ac3f693e4","sha256":"5772c389a603339f06a55b1ed62b3c2e319631bd00ea47c0803b19a5de94fb88","sha512":"479c14efe8bc3285810f00f9b21996276bdd8f1c87ef9e3f39b6da8a985181a8b2a7b4a13f17f2137b5bc7868f762fee6fac4bace49917dd5061692a9e6444cd","ssdeep":"192:cWLdHLv5P2dIkOSUZsOwSa3Hpg0Tew+pC/C:NbtG9UZd7a+j3","tlshash":"5fe1a58c6b54c7f4e8c163fd660219b53a416ceb6ea2c6bcc7a12c5578a25adc804ce7","first_seen":"2026-01-23T03:09:51.777059Z","last_seen":"2026-03-08T12:35:27.959349Z","times_seen":6,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.CAp9tmc6.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:58.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/17ff6b76.d.m.CAp9tmc6.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1110\r\ntraceparent: 00-a817e4c6cc6fda736d1f75b84b481f9c-8bed2978fcae77eb-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-456\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2399,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2348)","md5":"3fee2716262fde3ff5711a54a7718955","sha1":"bc3558a500065dc930770f579b389caf3eb439d7","sha256":"71876bb353bfee06ec362ec5407f4e4b0c893cbe362a493716b65cf5cd8a27a9","sha512":"ad48fd5c01aadebc52245f43c3677b359a698cbd54ee8e82939a5167b4f87dab2f4365ff34edea61819f9649863f5472f4d20be457de333919c9948f4f6ad287","ssdeep":"","tlshash":"1541b6bdb091a03c4339c4ede8329191e7369690b3a6c8e0d05d15ac0a78c86c178fcf","first_seen":"2026-03-02T20:05:03.698895Z","last_seen":"2026-03-02T20:05:03.698895Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.beb540b7.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:08.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.beb540b7.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 246516\r\ndate: Mon, 02 Mar 2026 19:20:38 GMT\r\nlast-modified: Mon, 02 Mar 2026 19:17:56 GMT\r\netag: \"208dc05d0b38cfa872c9672fb1d73e20\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: QZUCGkVXuB_c8BKo1kjxp9W_B1tLYVSG\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: gtD7EjMY5bfXrRM1jUc_Hj5WhwB1uxJkb6GcNV_3zBWXQIrY_W5Z4w==\r\nage: 2611\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1165568,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"d86edc8b5e7672f2df14c776065d60a8","sha1":"740184511edf78b48a7dee6489013bd2803879d7","sha256":"ffccb2e31efe1ff5c74f7dbaad817d3de729696b2d9331e70d5f9aa9f3031e57","sha512":"98f30e2612c132f1953eabf07113340619df9af46b5341f8d54a05b2b6b9271ba16638e613e4acbe9d57302e30ccd6234273efdbd0e1803b0de9cc8648f121eb","ssdeep":"12288:5GGCSeXM5xGrZW+fRezYGdIc4IcSZug8wim:5vuNIzYG+lS7","tlshash":"ac25b5ccb2d6f06a43976575802f200bf33ea999b54d8050e629d8d1bcb958ed237f78","first_seen":"2026-03-02T19:38:58.408023Z","last_seen":"2026-03-03T09:06:16.236039Z","times_seen":61,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":40,"dns":24,"connect":1,"send":0,"wait":2,"receive":21,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:54.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1457\r\ntraceparent: 00-092d9d705b14a5405d0a7c595a263383-95e670e1d9b6994c-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-5b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":130,"dns":53,"connect":11,"send":0,"wait":150,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/table.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:01.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/table.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:04:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2051\r\ntraceparent: 00-0c9d48af2241bfdc6b1d6bcb459ac316-0fce826c447e4a76-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:09 GMT\r\netag: \"803-61bf3666cddb9\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 07:27:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc14\r\nage: 475015\r\ncache: HIT\r\nx-cached-since: 2026-02-25T08:07:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4739eca3bf889f229641c474aca34a5a","sha1":"275e4368643608ce9466984958ef31f8884495a0","sha256":"533cc1795d0f8c05ba575368c4a1d156021e74d1e72c1e48f6a54c1f9c8c7b06","sha512":"7f012c42f67d4577d02227fa0e9ef5d7cd4be62762f17a67edd0589e4959b4d65ee617e75384af07749832ba09c33c27bd402a76adbe8be5c22c2b3778525da2","ssdeep":"","tlshash":"614154f2e3d480ecce07d360d937b8a63a6e5cf9c79b8764a041f680b05969549c8d84","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.242854Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.216.60.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:04:09.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 729\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":729,"data":"app_id=cnjqphyx\u0026v=3\u0026g=b3b02073117f93f0a72d09dd5c66c508bef99b49\u0026s=e28e58dd-9ab7-4b98-8f22-6be6258cc811\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=c7188619a1ee729d\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%22f78bc919-caad-42ce-abb9-60f040c8e384%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\u0026device_identifier=e178cc7f-4cb1-4cbc-a135-27169c948c59"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:04:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: ddf21b5523ac7a0646b92b5a1f0fb0e4b2f304c9\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 00046ctutift9aladhh0\r\netag: W/\"90bb6e984be28a58e186da31de188410\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.212267\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6589,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"93690f1469197b503ecb933212b82d16","sha1":"46acda384e2a1c279bd94ab7ba98c6a16094f1f5","sha256":"90bb6e984be28a58e186da31de1884109b31d13c807a728d91b224d66af74f48","sha512":"3e131ea4ad8c8e084dd6c75e3ee979beebaf54f642b2e9cba8fd04ac5759ccf28d8bcfe1fd1595065187caf92bf485b95c17d0e4088f54f8d386c8ef94ae8ef5","ssdeep":"96:4rpN7YOyaRvkqRe2J3HAO9vzlGjzK14zMwaLjGMlbjfZ9B15AOU5zVfwHwhPD1MF:4rpN7YKRvTJgerTxDBSlw+1M7ptl","tlshash":"7bd1998c89481c3e73cb82d6c7557e0b0b79929bb1906d98f9accd2d21d7399526f307","first_seen":"2026-03-02T20:05:03.701998Z","last_seen":"2026-03-02T20:05:03.701998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/favicon.ico","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcgk1R3kSfFQPBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8zbYuyw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 02 Mar 2026 20:03:57 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 02 Mar 2026 11:47:33 GMT\r\netag: W/\"69a578d5-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-03-29T15:19:13.331537Z","times_seen":277,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a1c6617b.DIHKFs4j.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:55.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a1c6617b.DIHKFs4j.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 9586\r\ntraceparent: 00-b6879662c595ca9b3f1d59cc79f25ddc-b4c99adcebd5c722-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-2572\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f99e9bc15681bf22f989eab7417d165","sha1":"80ce9d4d1d582f3ea1c9c04d9c4988e9f8d4d74d","sha256":"ba279d66ed274ff87c8753824af1dcf0dd904a2db66f301e355d7dcabd9b046d","sha512":"8242c28095d430c284ab98f67c4b45edda1fcdcfd79ac5f5fc8d7bc3fb871749f96da053200a31e6604e9055eb9314fde294840d1fb648ab534df59278472617","ssdeep":"1536:YBlS6q6LnH7uQzI4JLcagfcgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:YBlS6q6LnH7uQzI4JLcagkgPjP7M10bS","tlshash":"d77344aecd50a37bf663adedc3e5ba48734e6c038c921a36d5b212bc42d6291d355f01","first_seen":"2026-03-02T20:05:03.703577Z","last_seen":"2026-03-08T14:14:44.255042Z","times_seen":7,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/65c7eb77.d.m.DnDI-M4b.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swbhgu9n2tn7dkkmgjeie8948","date":"2026-03-02T20:03:56.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/65c7eb77.d.m.DnDI-M4b.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 20:03:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1128\r\ntraceparent: 00-e043a61e008c24ed05b27702047434f9-1e19a3bbd006db6a-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-468\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2499)","md5":"9979b20ec2baf86f3b14a64b96944efd","sha1":"10e67dc88eb303e3fb6d97b4d59f634f69dd665a","sha256":"4a267d1a0ce8dfc27df494412cf5b06d75ff4945b21835eca2a3c09d1372a945","sha512":"cf8f104bee9ea28e525f13c4176f0405fd544793b1307bb328718a8387146ba23801357c8349fa7bf92ed7fd7863b6b9a99fc8897f31089552a63c35603fcc93","ssdeep":"","tlshash":"735154ccbbffa0702ba9089590d2b007b3bfe995716d5052f02c55b1795349f91a790f","first_seen":"2026-03-02T20:05:03.704426Z","last_seen":"2026-03-02T20:05:03.704426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}