{"report_id":"9463fba9-7112-42af-aeb7-7de4ce2d760b","version":0,"status":"done","tags":[],"date":"2026-07-12T20:12:02Z","url":{"schema":"http","addr":"mostbet15743.help","fqdn":"mostbet15743.help","domain":"mostbet15743.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"title":"Mostbet — официальный сайт, вход и регистрация, скачать Мостбет","dom":{"size":134617,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31252)","md5":"a5a2fef9cc572e4b630e554101cebb19","sha1":"24ea7dc483e8b5855b9aa93dfcd8effb77bba1fa","sha256":"aae7564b28aa7a05b8640ce77e7b30138df8e34447fe548761a233b189708fe3","sha512":"d95f13d0fce253c36072fa38b5e9f26b20047004d9dfbf2e1f7829dae3b98060b214f65b94f805dfdf6f9461b84e6c4e3407d6f67ed0550800f6ccc679115f00","ssdeep":"1536:IXYIIbT9LD/RApaohZGcj+Xx2N9Nt5Z5PWCVhXntDHH:IXuLzRwaYZGc6XqNt5Z5PWCVhXnJ","tlshash":"73d3b5b2938e489d2225d087e40a3f4c789245bebf07ab5663bc2dbe71d2075477538e","dom_hash":"domhashe674348781b9612303c6c4c092c30bee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mostbet15743.help","fqdn":"mostbet15743.help","domain":"mostbet15743.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:12:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet15743.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mostbet15743.help","ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-05-19","domain_rank":0,"first_seen":"2026-07-11T00:31:20.152033Z","last_seen":"2026-07-11T00:31:20.152033Z","alert_count":4,"request_count":1,"received_data":276,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-07-09T23:16:37.011701Z","alert_count":0,"request_count":1,"received_data":1167,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"mostbet-kg.kg","ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2026-04-08T06:06:17.748338Z","last_seen":"2026-07-11T00:20:01.695992Z","alert_count":52,"request_count":13,"received_data":689288,"sent_data":6582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-07-06T08:56:51.012864Z","alert_count":0,"request_count":2,"received_data":5122,"sent_data":1112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mostbet49882.help","ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-07-11T00:31:20.15568Z","last_seen":"2026-07-11T00:31:20.15568Z","alert_count":0,"request_count":1,"received_data":272,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T13:44:10.464075Z","times_seen":7727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31ed7ba704741dd1e2b1147a5937409","sha1":"748f2803f223be2a07d30b3dfffff6d6f902b31b","sha256":"ecb8bdda7766c399a2b83a7c0accbadcca700c90be781288e11b11d63b63d853","sha512":"7133f793bd87a7949589d3905a3c3e109b2638f94d1385c8ad964b6a3126dbf787105f5c4f1e2232cce7dc2522beeb21af9f3f923ccbaa5c436e7289f2b4103f","ssdeep":"","tlshash":"aa11c2ab70d43739c1973e33643ed1883a3560859d129180e829d9a475f48a9857bf95","size":1030,"data":"","first_seen":"2026-01-14T08:02:02.619185Z","last_seen":"2026-07-14T23:24:11.953816Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.266832Z","times_seen":11853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b524639ba09f8d9c2536a94ea065cd0e","sha1":"999a83243bc05d753167c2545337cb0ecb93c8e0","sha256":"5940362dd084ea955831c1464966bba536006d68687c024687b34a8a24532a46","sha512":"7991611b9532c037c0f670302cf1d993876ab2d0f05eece981e992140e4a4128fd97fbbdd3541950737a8517d7cf1627d27c51e819fadef9301d67e6abc18f7f","ssdeep":"","tlshash":"a1e0a27b40a50e0f00b2a0c1e83abb9f82ac0802b910de042e29ec8bcf8c5180e60301","size":405,"data":"","first_seen":"2026-07-12T20:12:04.772972Z","last_seen":"2026-07-12T20:16:14.208094Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T13:41:31.268886Z","times_seen":398738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.210155Z","times_seen":12296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T13:40:57.042027Z","times_seen":974375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T13:00:51.383477Z","times_seen":16389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","size":68353,"data":"","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.311Z","timestamp":1783887095311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8E0mvPDBl5YCw81c6T8Mi20Ju%2BA5%2BR4qxtIDUVU41%2BUq%2FOn2T61sFNafH6pzBG%2FMs%2FIl6uyB4XyDKz6UFUoADqHG3JYS8cugfJCqI96f4qJSzizgChON7Stg%2FnrQ9D4s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a9bde8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":2029,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.358Z","timestamp":1783887095358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:36 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlPDADV0nwQa8Rcst4wI9QBsyHNODakEZwMF%2BZf%2Fag9F1xS%2But%2Ffg%2BW0nQQoBaN9K%2BXknfI7XNEvFz1MqkbGwUdSpUiQgU9lXMAbKXK2O1CjKRyQvNEn2M8M3e5ajJOV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a9fdf0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":1033,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a43b791ff345a09780b80d0b1f1ce60","sha1":"7ea35308c3d0b72dd20db8eb72d0e9f336ccdd52","sha256":"28635286c947fe42284580a720ae70e8d33f8764b0a069ab73fe2341218007f2","sha512":"341af48280da86053cb3ea53513535e37f00f4ae9daa2bb82b8279505485e50cad7d13bdbf3782abb740a799ad8492e141d760b7de8b2200d1139d34072742a9","ssdeep":"","tlshash":"06900216650014e5c8106940a964b9606594195b4901160c908c61048b5406a314682b","first_seen":"2026-07-12T20:12:04.751042Z","last_seen":"2026-07-12T20:12:04.751042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.430Z","timestamp":1783887095430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:51:32 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a506c44-58e0\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IPAMm8e5GXkLekH6Rn7GXOEqGeCiqCDKG5Cqsbp8DBoCryY2cZv6Qwp8j2FBVBJrQ8bl75LT%2FlQKX9YaM8YX%2FABYH3KktCOysSui5YWfIljLzHHvbvg9F%2Fte8dfAvMA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2aa7dfcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":6279,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T13:44:10.464075Z","times_seen":7727,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/26bd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.712Z","timestamp":1783887095712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/26bd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:11:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 29\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3238,"size_decoded":2162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"376bdd3ac92afd53169e8faecf624110","sha1":"fe5016a910f57357d81578af9e7faa14346e0a9f","sha256":"52471c703b0e0c88c386be97d17eac544c0a98fe40e2c84ba4086a3343c7cd39","sha512":"733fab0146a53a3ac1918b7846b092c579c80b43b7ec563545a450d8b6fa9a3ed76ec54e208062a9337e65dff7e1beaf94fa78c289cab3e1714bbdae0a14cea0","ssdeep":"","tlshash":"2361a6c61270b395cdcfd19feb34fc94906960ee8eb291c58fbf8708458f999b614a24","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-07-17T10:23:20.121899Z","times_seen":1051,"resource_available":false,"data":null}},"time_used":3280,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":3259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2709.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.714Z","timestamp":1783887095714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2709.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:11:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 29\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62b930d873735bbede7ae1785d13233","sha1":"d45d0ae7aae2c4287280072d8574af8e7ffcf414","sha256":"a0131284c8eb7d0f8c051da1c379a618d297da2a730b4a85296b666b96c011a9","sha512":"c3635af9655c9c57cc09cc4404478785a36507ee11d5ace36ad9bad01ddd0af2da5989995b4758173700ab1579539409cb1ef22e5cd59959e7bd44d8303bb651","ssdeep":"","tlshash":"dc1123ca856151c1c042e7663fbcfad1236615b42db16552fec6871cc4c77db1d12eb0","first_seen":"2023-04-30T08:56:03Z","last_seen":"2026-07-17T13:23:44.882776Z","times_seen":1628,"resource_available":false,"data":null}},"time_used":3484,"timings":{"blocked":0,"dns":1,"connect":9,"send":0,"wait":11,"receive":0,"ssl":3462},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:34.781Z","timestamp":1783887094781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a0fe82e-39de1\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOqS22Ae%2FVL76LMXxeHzjd%2F37%2FX8x4d6ld3Xa%2FmIm6wvJgB%2Bnjj%2F4hCiYvUMlQepOB1KoYVjnoa%2B0cTwx38coUt55Hdxxxb%2FIBn5lLu%2BOxZXHTXzujSlHbssC2qWIe1q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a66d9db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237025,"size_decoded":44892,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65109)","md5":"c1ce6326bbf4a13a3a90705f3cfce257","sha1":"5f69484866e26a2f654515c73e1c54b1e6de41b9","sha256":"1f1cb6f2f326d2cad5216925ad832ae789fc5863f16a98ca86b9b1df2398f6f4","sha512":"192b84eb948550051a1563761dfc38f1175afd9da5bcd46a04feb752cc9644c7c34b83c806be939e324308c8d4b224aec7afb7c40bdb672c257bac97b2c9a458","ssdeep":"1536:V6ACWf65WQXcN9Bm0iB/QtI8UYXl1PaYLir0V5GnGlrw96QXA4:V6Ajf65WQXcfW/9YXOnniw9V","tlshash":"6f3418f419e425e89327cb3b9771f2585d1491a2c39047f5e2faca1c4beabe6017360e","first_seen":"2026-01-14T08:02:02.604582Z","last_seen":"2026-07-13T18:07:44.676142Z","times_seen":39,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.001Z","timestamp":1783887095001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 20:11:35 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3VAo2siViT3LeGzHDaAsutDCo3C%2BBsF7NA1Zi31Hjlw6rVel4Vt6MlWRyZMqAptru%2F%2FqEdWBEYiJOKcxy3hGgCvdywP5dUu5wqBTvfPmkniXYvRXxBS0%2BwTQpaQFCkIm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\nserver: cloudflare\r\ncf-ray: a1a2b2a7cdc3b4ed-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T13:41:31.268886Z","times_seen":398738,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.008Z","timestamp":1783887095008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a0fe82e-10b01\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNOM%2BGL2ZYgH4bBaM2CWj5ov2OCwwkbWz5qSS4BDCzlJ%2BLJWV%2BhyiIoYh4pD%2Bs3PiEF%2BNgzLC18GMG0T0oc%2BRwfUHt%2FKqr2LmJNTP7s%2BYorMP0kvRM9JGopfLkUmPEm7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a7cdc7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68353,"size_decoded":15428,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51923)","md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.006Z","timestamp":1783887095006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 15:51:43 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69d1338f-2655\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c1mwC%2BaW6J8pMXXRURG%2F9uD4uw552hnZGKgbnik2qnbR5QDCtnRvNWkt%2Bk1MasJkyoaf2ZHPVcP47DO4CIvzFGPgOIQEJccdHZQqulvIDE788nwV5CdbQAQOfmts%2BXf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a7cdc6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9813,"size_decoded":4924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.210155Z","times_seen":12296,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet49882.help/","fqdn":"mostbet49882.help","domain":"mostbet49882.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:11:33.847Z","timestamp":1783887093847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet49882.help","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 09:30:30 GMT","end":"Sat, 29 Aug 2026 09:30:29 GMT"},"fingerprint":{"sha1":"99:C9:3A:23:79:90:64:EF:B1:72:FB:E3:46:A9:D3:20:60:94:16:B7","sha256":"49:6C:6F:AE:CA:88:D9:4D:96:83:14:6D:43:50:D0:B4:17:B7:2D:96:35:2F:04:46:CC:2A:03:46:C2:69:E0:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet49882.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 20:11:34 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 313\r\nConnection: keep-alive\r\nLocation: https://mostbet-kg.kg/\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":169,"connect":50,"send":0,"wait":57,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:34.788Z","timestamp":1783887094788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/fonts/wpshop-core.ttf HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mostbet-kg.kg/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:44 GMT\r\npriority: u=2,i=?0\r\netag: \"69c15830-e52c\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PhA%2BA8ZJOTxsj9kIf4OhOidVMlpDVOyFMpSRBIj5DxyHrJnIAUOWDvV%2FCDIgtfT75yzMNfByvnx2jSnU%2BekkuSl5ttjoCQ08S9K%2BQY0oyiWPA5orll%2FsudqzAJwQMgZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a67d9fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58668,"size_decoded":59426,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, wpshop-core","md5":"2fcda07cf0f6e04e36a23362734caea2","sha1":"c596aa516e5cf216fdc514679b4a6abe337eed13","sha256":"973408bd1a1da181c7eaa9293c0cd095f3836a76b626bc76af21e1cd96b5dcde","sha512":"42b1bb8dc70bd0b65d2586a6a11131db5f604d8e16c1669efe4687f26f1e65705bcc02e911e88e07fb8d3a27999d76b62cbc6a31b7069772dd8edf50a5cd52a4","ssdeep":"1536:I5LQRM0CsPnjQegTDHjNWOPRaEXhHRfI4TgrAw0L5Tq2wsuQugFB9yjxwBGDx0Eb:uLQRM0CsPnUTDHjsOPsEXhHRfnTiAw0s","tlshash":"9c43295ab34bff1fdb6aad3ba80162a20ee9d425931fb14b59851d03460dcb84c8c7c9","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-07-16T05:14:49.481671Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet15743.help/","fqdn":"mostbet15743.help","domain":"mostbet15743.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:11:33.484Z","timestamp":1783887093484,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet15743.help","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 15:22:39 GMT","end":"Mon, 17 Aug 2026 15:22:38 GMT"},"fingerprint":{"sha1":"97:D2:D6:D1:10:5A:42:69:18:3A:96:47:13:61:A0:28:BC:F6:FE:FE","sha256":"BB:CF:42:8C:94:C2:16:9A:31:80:CD:7E:79:0C:CA:E5:EA:89:CF:08:EF:46:6D:2E:07:00:1B:8C:38:D7:03:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet15743.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 20:11:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 317\r\nConnection: keep-alive\r\nLocation: https://mostbet49882.help/\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":126,"connect":61,"send":0,"wait":59,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet15743.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet15743.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:34.786Z","timestamp":1783887094786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69c15832-15601\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxmYYyoaeVawOcYJfek60yw3zReEK3EFSx%2Bm%2BQp6zTJSMHttmG4y1ZFu8VwTCRfyJMmUOChykLhrVERVmQ0WRIWqywvBIyN4189cGh7nYOmqcb1Ohz0tbYxj7IAC2Zjb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a66d9eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31426,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T13:40:57.042027Z","times_seen":974375,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.003Z","timestamp":1783887095003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 21:04:00 GMT","end":"Tue, 08 Sep 2026 21:03:59 GMT"},"fingerprint":{"sha1":"9C:C2:E7:F2:28:74:DB:F7:26:F8:4B:71:98:84:96:CF:DB:14:2E:65","sha256":"BE:43:4A:3C:86:A9:DB:4B:39:D6:3F:8F:D7:1D:74:62:63:4C:98:17:7E:F1:BA:D2:3C:59:22:F2:37:5D:F3:0F"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: zstd\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:04\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 448be0f19f9e5039c8852ad76491bdab\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":991,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T13:00:51.383477Z","times_seen":16389,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":83,"connect":10,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2023/08/mostbet.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.014Z","timestamp":1783887095014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/mostbet.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=5,i\r\netag: \"69c15831-6639\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYoWmrQl0EcV0uxjiloW9DfdugaZ4JhZ0Z%2B22N1p3bnK%2FGVVlVasJnYEbRJn8hzgKwoqFXui%2F4vefUkTvQD1ZogxL27wX3yU1K2YQ2VCUtllKRZ%2BiZOtdSQpt2q3aqrS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a7ddc8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26169,"size_decoded":26947,"mime_type":"image/png","magic":"PNG image data, 1033 x 201, 8-bit colormap, non-interlaced","md5":"10076f4770fb44fd75b37323f85a83a6","sha1":"bf6fd1f0e0bd7a11487aad8fe17abb164aed9898","sha256":"d8f8a143acf555565ed813a7d031189a234c5ef0df8a5b18060b016c565dee63","sha512":"14e933a3d273727d170b2ad1ba33a495530ecdf215e64e518bb5426da75d36b9c2b233daef69e51d63241806e15f7f812005ab22f14edcc32e539aad4cb3ca02","ssdeep":"768:ZrYqAxnLlIc8XcS2GMytU9vBP5JypphORc3D:nw6cLG9EBPPypphORcz","tlshash":"42c2e0b9289ed5a3cbf400f0aef11a7623a0b9289f34e71b5536c34ed6701442dc963d","first_seen":"2025-10-04T09:20:19.773053Z","last_seen":"2026-07-14T23:24:11.953073Z","times_seen":68,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:11:34.185Z","timestamp":1783887094185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:11:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMA2rt2XtBxF8i3oWWDFQUFdyKpPKi8VwDNYsPGQf%2FUnQYLcRw5kZKW6qm4OslfuLUz6pPLq%2BJU%2Bt%2FjgKI9kgbLf031W%2BKk9ZQMnkxt5supLdCywbhIzEbc9xVwH6Q4k\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=16,cfOrigin;dur=332\r\ncontent-encoding: zstd\r\ncf-ray: a1a2b2a2ca9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":133212,"size_decoded":30534,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31171)","md5":"90424156d12277453509ad60b3b62712","sha1":"282995360dc5fe7fac48c1353ba8ae154530d4ef","sha256":"fd52106a1300b2333f45d46d49cb9f6721f201c6028889788eeaaf3d55e63303","sha512":"c7dc0b0eaa9b9c73655934072d502a0ba37909b6def27aad85ea502b71e84da878acc3944fa74046a1fb7d5abff0f827a945876a18054dd37933a42748f3744b","ssdeep":"1536:EXyIIbT8LZIRrTathZR3EzXxdYUtQgmP1sVZXnVDfI:EXpLiRfa/ZR3IXAUtQgmP1sVZXni","tlshash":"4dd3b5b2939e489d2225d087e4093f4c789644bebf07ab5663bc2dbe31e2075477538e","first_seen":"2026-07-12T20:12:04.768867Z","last_seen":"2026-07-12T20:12:04.768867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":354,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.314Z","timestamp":1783887095314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byENkEAC1FUnAuT70De9zprLSKgKVTAg1VnyEQnesCrbGnERl44uXivUQWK4aP6aeAjRn11DcrtLW3DDEhusoYEcUB2yvv9tpfV1%2FFWDa9ME9FAj%2FHoll0LhsUxx4t%2Bo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2a9bdeab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":2021,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2025/10/Screenshot_53-768x260.webp","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:11:35.361Z","timestamp":1783887095361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Screenshot_53-768x260.webp HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\npriority: u=5,i\r\netag: \"69c15832-7c0a\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o633JZeWmjp%2Bl8JVhvhIVrVulVD9CSGy0EvbE%2FtW36AVMepQoc3vqmndX47YEGFKIMyN2dia7aQz8OgcvvbOYGgezjm269sNlctE%2BxGDEWG%2BG%2FOoP8yOAuD0wTz%2Bx%2FOn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b2aa0df1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31754,"size_decoded":32539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be0bf4525972f45771497e15bc2e69d6","sha1":"7ce31bf658cd5fdfcf0405be7dd1c2b7bf27d10f","sha256":"77b6f1afe67e586c26d7958dbaac200aadf810aa09e63a615fd2f3234a22a44a","sha512":"99e97649bec942954c44bb2a603ff2d4b44436701a572fa23d87982a47be160c119e1e2f11f01e7a2ff86e7cacbcb43bf6ca1b76c0a0b40c937f6cdf5d7d5600","ssdeep":"768:rpT9th5LJncYRhpv3Fu1WXnUSuqlJMuGBkj6RL9y+/3tHoxQaBzKeL5b:dzZn1Rztg8nUJWmRpy+lIxQIzN5b","tlshash":"6de2e202c7a335689856c46776c11f702116f127d3b3e6519a71a4eeec76c8ac8f743c","first_seen":"2026-01-14T08:02:02.618022Z","last_seen":"2026-07-13T18:07:44.671992Z","times_seen":39,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}