{"report_id":"96e3a8ad-2030-4903-b1e2-e70a83a8fa84","version":0,"status":"done","tags":[],"date":"2026-07-12T20:13:24Z","url":{"schema":"http","addr":"mostbet40483.help","fqdn":"mostbet40483.help","domain":"mostbet40483.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"title":"Mostbet — официальный сайт, вход и регистрация, скачать Мостбет","dom":{"size":134617,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31252)","md5":"a5a2fef9cc572e4b630e554101cebb19","sha1":"24ea7dc483e8b5855b9aa93dfcd8effb77bba1fa","sha256":"aae7564b28aa7a05b8640ce77e7b30138df8e34447fe548761a233b189708fe3","sha512":"d95f13d0fce253c36072fa38b5e9f26b20047004d9dfbf2e1f7829dae3b98060b214f65b94f805dfdf6f9461b84e6c4e3407d6f67ed0550800f6ccc679115f00","ssdeep":"1536:IXYIIbT9LD/RApaohZGcj+Xx2N9Nt5Z5PWCVhXntDHH:IXuLzRwaYZGc6XqNt5Z5PWCVhXnJ","tlshash":"73d3b5b2938e489d2225d087e40a3f4c789245bebf07ab5663bc2dbe71d2075477538e","dom_hash":"domhashe674348781b9612303c6c4c092c30bee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mostbet40483.help","fqdn":"mostbet40483.help","domain":"mostbet40483.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:13:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet40483.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mostbet-kg.kg","ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2026-04-08T06:06:17.748338Z","last_seen":"2026-07-11T00:20:01.695992Z","alert_count":52,"request_count":13,"received_data":689284,"sent_data":6582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-07-06T08:56:51.012864Z","alert_count":0,"request_count":2,"received_data":5122,"sent_data":1112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mostbet40483.help","ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-07-11T00:20:01.074721Z","last_seen":"2026-07-11T00:20:01.074721Z","alert_count":5,"request_count":1,"received_data":279,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-07-09T23:16:37.011701Z","alert_count":0,"request_count":1,"received_data":1167,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T12:44:08.550481Z","times_seen":7678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T12:40:53.511783Z","times_seen":974256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T12:41:25.883263Z","times_seen":398691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T11:03:46.330076Z","times_seen":16388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31ed7ba704741dd1e2b1147a5937409","sha1":"748f2803f223be2a07d30b3dfffff6d6f902b31b","sha256":"ecb8bdda7766c399a2b83a7c0accbadcca700c90be781288e11b11d63b63d853","sha512":"7133f793bd87a7949589d3905a3c3e109b2638f94d1385c8ad964b6a3126dbf787105f5c4f1e2232cce7dc2522beeb21af9f3f923ccbaa5c436e7289f2b4103f","ssdeep":"","tlshash":"aa11c2ab70d43739c1973e33643ed1883a3560859d129180e829d9a475f48a9857bf95","size":1030,"data":"","first_seen":"2026-01-14T08:02:02.619185Z","last_seen":"2026-07-14T23:24:11.953816Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.266832Z","times_seen":11853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b524639ba09f8d9c2536a94ea065cd0e","sha1":"999a83243bc05d753167c2545337cb0ecb93c8e0","sha256":"5940362dd084ea955831c1464966bba536006d68687c024687b34a8a24532a46","sha512":"7991611b9532c037c0f670302cf1d993876ab2d0f05eece981e992140e4a4128fd97fbbdd3541950737a8517d7cf1627d27c51e819fadef9301d67e6abc18f7f","ssdeep":"","tlshash":"a1e0a27b40a50e0f00b2a0c1e83abb9f82ac0802b910de042e29ec8bcf8c5180e60301","size":405,"data":"","first_seen":"2026-07-12T20:12:04.772972Z","last_seen":"2026-07-12T20:16:14.208094Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","size":68353,"data":"","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.210155Z","times_seen":12296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.303Z","timestamp":1783887177303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a0fe82e-39de1\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xk3nVj2WyG0zFOvk1ha8%2B8XB8uyQe7qtTqR%2BGBUKER4dhXBZ9xthOyPoQAVn1ViGZpiuhMbzSQG60%2Bo8pL3vXPgJ6BeVhbbndN7Bl%2Bw%2BAFsHclZ%2BQU9HVnKhjDTk8PZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4aa2d784e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237025,"size_decoded":44887,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65109)","md5":"c1ce6326bbf4a13a3a90705f3cfce257","sha1":"5f69484866e26a2f654515c73e1c54b1e6de41b9","sha256":"1f1cb6f2f326d2cad5216925ad832ae789fc5863f16a98ca86b9b1df2398f6f4","sha512":"192b84eb948550051a1563761dfc38f1175afd9da5bcd46a04feb752cc9644c7c34b83c806be939e324308c8d4b224aec7afb7c40bdb672c257bac97b2c9a458","ssdeep":"1536:V6ACWf65WQXcN9Bm0iB/QtI8UYXl1PaYLir0V5GnGlrw96QXA4:V6Ajf65WQXcfW/9YXOnniw9V","tlshash":"6f3418f419e425e89327cb3b9771f2585d1491a2c39047f5e2faca1c4beabe6017360e","first_seen":"2026-01-14T08:02:02.604582Z","last_seen":"2026-07-13T18:07:44.676142Z","times_seen":39,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.720Z","timestamp":1783887177720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkEiWyHs%2FTE%2BHjqKXDTwf36WtGjhN5Rg4Xa%2FKxXXwd6JTfUuORkfu6LXqoeaLDxabSz7Y7SkGVBKUne8Z3kehVmLzrA1scUTkADysVcHKYOY9%2BXRNRHeQfRnKIdS%2F4cc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4ad8eab4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":2026,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:12:56.864Z","timestamp":1783887176864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=171, cfExtPri\r\npriority: u=0,i\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BSCK2e43QeQBhPBZWxafci9J4VKqB4wLRlR%2B7eaHijfZpBN0CQQ9Z6SVZFKgGUAIzNhpaX6LEx41dk2GqSlWCldvmApTLbqlu7moTJjzoKIe08UB5F3YWZelY94f%2F6n\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4a78cca4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133212,"size_decoded":30659,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31171)","md5":"b1da260511fb8f90531833906175cdb5","sha1":"90e84f9fbc726741f226e1f55664d35a00b72cf6","sha256":"92971dc98f23a8df02c294a907b0af66bf72b353b280c0af93ed9f7376ce2681","sha512":"cc80fceaee52a614086d06afa7ba5ea9b029e9509477741eb2285e48053ce0d5248b73e259dca307d90633a7af34925049e585dbcac2ae6274be8295a481f480","ssdeep":"1536:EXyIIbT8LZIRrTathZR3EzXxdYUtQgmP1sVZXnnDfI:EXpLiRfa/ZR3IXAUtQgmP1sVZXn0","tlshash":"42d3b5b2939e489d2225d087e4093f4c789644bebf07ab5663bc2dbe31e2075477538e","first_seen":"2026-07-12T20:13:26.449751Z","last_seen":"2026-07-12T20:13:26.449751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":193,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/26bd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.921Z","timestamp":1783887177921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/26bd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:13:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 14\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3238,"size_decoded":2162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"376bdd3ac92afd53169e8faecf624110","sha1":"fe5016a910f57357d81578af9e7faa14346e0a9f","sha256":"52471c703b0e0c88c386be97d17eac544c0a98fe40e2c84ba4086a3343c7cd39","sha512":"733fab0146a53a3ac1918b7846b092c579c80b43b7ec563545a450d8b6fa9a3ed76ec54e208062a9337e65dff7e1beaf94fa78c289cab3e1714bbdae0a14cea0","ssdeep":"","tlshash":"2361a6c61270b395cdcfd19feb34fc94906960ee8eb291c58fbf8708458f999b614a24","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-07-17T10:23:20.121899Z","times_seen":1051,"resource_available":false,"data":null}},"time_used":3256,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2709.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.923Z","timestamp":1783887177923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2709.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:13:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 14\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62b930d873735bbede7ae1785d13233","sha1":"d45d0ae7aae2c4287280072d8574af8e7ffcf414","sha256":"a0131284c8eb7d0f8c051da1c379a618d297da2a730b4a85296b666b96c011a9","sha512":"c3635af9655c9c57cc09cc4404478785a36507ee11d5ace36ad9bad01ddd0af2da5989995b4758173700ab1579539409cb1ef22e5cd59959e7bd44d8303bb651","ssdeep":"","tlshash":"dc1123ca856151c1c042e7663fbcfad1236615b42db16552fec6871cc4c77db1d12eb0","first_seen":"2023-04-30T08:56:03Z","last_seen":"2026-07-17T09:43:33.642821Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":3484,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3465},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.306Z","timestamp":1783887177306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/fonts/wpshop-core.ttf HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mostbet-kg.kg/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:44 GMT\r\npriority: u=2,i=?0\r\netag: \"69c15830-e52c\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 82\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SIBjImh0JIKELRAtohpDZrzAA6g%2F0ArVu0OYzjARVHPPsEx1GiahB2MH9KxVRc%2FroRND%2B5rJ6pL8doWXNtXjavGP%2F3XkfBEI%2Fnljn%2BgwA7h3S3ml6UuyFk7%2BJdTpYno\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4aa2d7a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58668,"size_decoded":59431,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, wpshop-core","md5":"2fcda07cf0f6e04e36a23362734caea2","sha1":"c596aa516e5cf216fdc514679b4a6abe337eed13","sha256":"973408bd1a1da181c7eaa9293c0cd095f3836a76b626bc76af21e1cd96b5dcde","sha512":"42b1bb8dc70bd0b65d2586a6a11131db5f604d8e16c1669efe4687f26f1e65705bcc02e911e88e07fb8d3a27999d76b62cbc6a31b7069772dd8edf50a5cd52a4","ssdeep":"1536:I5LQRM0CsPnjQegTDHjNWOPRaEXhHRfI4TgrAw0L5Tq2wsuQugFB9yjxwBGDx0Eb:uLQRM0CsPnUTDHjsOPsEXhHRfnTiAw0s","tlshash":"9c43295ab34bff1fdb6aad3ba80162a20ee9d425931fb14b59851d03460dcb84c8c7c9","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-07-16T05:14:49.481671Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.721Z","timestamp":1783887177721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4COC6Y7q7s6ieLYEtblL4ATt6SZOfSqZOgehKyrDE84w5V%2BhZ4%2Bbq%2BQnvjncPvqGvBiiFT6Jg8m6g%2FVl1v5XXAApqAaIpOOxoxeu3XCB%2FabwWFobz%2FAjyQsWXv2U8jjR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4ad8eac4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":2028,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2025/10/Screenshot_53-768x260.webp","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.729Z","timestamp":1783887177729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Screenshot_53-768x260.webp HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\npriority: u=5,i\r\netag: \"69c15832-7c0a\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6MhFc2LbYkZHr%2FyoCQbo3zFVJmBYcct%2BlWw2UvCYqwu1bpcm6UHIK66GvPXvoqT6We6PwmX1VIOE3X9yo0SKFR8A3qTf3%2BsmuQL1l7tFCianGmxXsp6FpqiYdeYsJon\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4acce274e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31754,"size_decoded":32532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be0bf4525972f45771497e15bc2e69d6","sha1":"7ce31bf658cd5fdfcf0405be7dd1c2b7bf27d10f","sha256":"77b6f1afe67e586c26d7958dbaac200aadf810aa09e63a615fd2f3234a22a44a","sha512":"99e97649bec942954c44bb2a603ff2d4b44436701a572fa23d87982a47be160c119e1e2f11f01e7a2ff86e7cacbcb43bf6ca1b76c0a0b40c937f6cdf5d7d5600","ssdeep":"768:rpT9th5LJncYRhpv3Fu1WXnUSuqlJMuGBkj6RL9y+/3tHoxQaBzKeL5b:dzZn1Rztg8nUJWmRpy+lIxQIzN5b","tlshash":"6de2e202c7a335689856c46776c11f702116f127d3b3e6519a71a4eeec76c8ac8f743c","first_seen":"2026-01-14T08:02:02.618022Z","last_seen":"2026-07-13T18:07:44.671992Z","times_seen":39,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet40483.help/","fqdn":"mostbet40483.help","domain":"mostbet40483.help","tld":"help"},"ip":{"addr":"38.244.195.34","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:12:56.532Z","timestamp":1783887176532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet40483.help","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 02:34:16 GMT","end":"Mon, 31 Aug 2026 02:34:15 GMT"},"fingerprint":{"sha1":"4A:41:71:46:5E:C9:E5:74:F4:18:E0:AB:1D:17:D5:EF:DF:D7:94:4C","sha256":"E3:C7:C1:D5:9A:00:93:AF:88:C3:E4:D2:E3:C6:C3:35:A1:17:3E:EC:B8:1E:F8:1B:A1:91:AF:2D:8A:47:42:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet40483.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 20:12:56 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://mostbet-kg.kg/\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":167,"connect":49,"send":0,"wait":55,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet40483.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet40483.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.727Z","timestamp":1783887177727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:58 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNjd3XYtTyU5q33eOL0dwi%2Bpl9DmOr1%2BDbiHlh%2FjCDmhlp3mAv7aaTFS%2BIR79Gy13lqdgCyC0PmocJh1jLkUVGpd%2Fl6BdOOoYhJ6P1wiclHh7Du9MUO2tyUSl98HW5A%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4acce264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":1033,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bfd55ddea2cbba86783b08828093d9a0","sha1":"94a7f346b978c2527edf22ecddc991cfb2253d4b","sha256":"6fa212bfef6f115375cc8ca4ab4d8b8a1862d233591027033de7d8ddcc5173cd","sha512":"8f47f253e182f67308e9ea8283e26240e07bff50fc5913563ee54e5f3c2c4ecc5b7cd23fec434b5f3449a513edf7253364e394366016dce6535036254a67a0bb","ssdeep":"","tlshash":"03900216650024e5c8106940a964b9616594591a4901160c509c61048b540693142827","first_seen":"2026-07-12T20:13:26.454174Z","last_seen":"2026-07-12T20:13:26.454174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.304Z","timestamp":1783887177304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69c15832-15601\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnYpoMhsUXmQxGmCKd%2B5jh%2BhGSBNPUyBVcnjvkmPc9I0ay4w49OAAzLSVAKEM7mppce8J0WTr75mzO0LaEo2dDFub1v5vjB%2BdjQnAbrgRPXFDPSF%2FqyL27rDZcoW6Ouw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4aa2d794e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31431,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T12:40:53.511783Z","times_seen":974256,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.531Z","timestamp":1783887177531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 15:51:43 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69d1338f-2655\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2B2c%2FmSqw6Cgy6PE3dCWg%2F4DGxkLIHrhymWrn88M%2B5MDvq1FNz1oatMayoYP5G5weiAxyKzSPqnO4WrDXoYVyRG06D3GyaPNf%2FmTO6F9UhJRVDae%2B8FKqfaQB6bEm5z8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4ab9dde4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9813,"size_decoded":4929,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T11:51:53.210155Z","times_seen":12296,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.887Z","timestamp":1783887177887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:51:32 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a506c44-58e0\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8912IyxJTPAzx4lirkLg1lWM0%2B599O5AtqFSJlb9JImfzWEnjJhME1FSDZMZV2HuTSNxZMfbUkGcoRo3hbN46Kb6zONQXEfUf6Ecd9VywB8%2FczhMaML1xqUqGnu3UZC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4adced14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":6278,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T12:44:08.550481Z","times_seen":7678,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.527Z","timestamp":1783887177527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 20:12:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8Qx0djKu%2BadKLdx5yZX4thbiEoQRatGmMibZWjHMoeLY2aOwFamA5RGT8LcVZT3GwpLWyu1mnc5l%2BK8Ux61p4JUZcNNOYmpJi7gSSex7ALku2tpm3SS8kV1VG0vGUiG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\nserver: cloudflare\r\ncf-ray: a1a2b4ab8ddd4e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T12:41:25.883263Z","times_seen":398691,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.529Z","timestamp":1783887177529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 21:04:00 GMT","end":"Tue, 08 Sep 2026 21:03:59 GMT"},"fingerprint":{"sha1":"9C:C2:E7:F2:28:74:DB:F7:26:F8:4B:71:98:84:96:CF:DB:14:2E:65","sha256":"BE:43:4A:3C:86:A9:DB:4B:39:D6:3F:8F:D7:1D:74:62:63:4C:98:17:7E:F1:BA:D2:3C:59:22:F2:37:5D:F3:0F"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: zstd\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:04\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 4c225456ad2814f507cf0eeaadcec747\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":991,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T11:03:46.330076Z","times_seen":16388,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":55,"connect":9,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.532Z","timestamp":1783887177532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a0fe82e-10b01\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvOYqspU4ONRbw0c0TucRguKXCzyZcsWRwvuVD%2BtRNDF5Kc4ouLt0M8snN%2FiwEjiVFzyhPyPJrI6Y4NJtv4IrKTbluIQJRawpJLKjI6d9omu%2Fp9KJ6g6%2FEQ1NeuOqABe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4ab9de04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68353,"size_decoded":15421,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51923)","md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2023/08/mostbet.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"172.67.221.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:12:57.538Z","timestamp":1783887177538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/mostbet.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:12:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=5,i\r\netag: \"69c15831-6639\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 82\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hgCAv194z9QM08zw4XJHDT52JzmGiUxP%2BjQuztSNKQG8SC1KzdmNP4kAIHHvqEpRElBA1qvdnMvMGXqfp%2F5R599QC9sZRgdS%2BlCk4vWdMUYeaGbFiVeEGPacPfw4pX9s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b4ab9de24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26169,"size_decoded":26946,"mime_type":"image/png","magic":"PNG image data, 1033 x 201, 8-bit colormap, non-interlaced","md5":"10076f4770fb44fd75b37323f85a83a6","sha1":"bf6fd1f0e0bd7a11487aad8fe17abb164aed9898","sha256":"d8f8a143acf555565ed813a7d031189a234c5ef0df8a5b18060b016c565dee63","sha512":"14e933a3d273727d170b2ad1ba33a495530ecdf215e64e518bb5426da75d36b9c2b233daef69e51d63241806e15f7f812005ab22f14edcc32e539aad4cb3ca02","ssdeep":"768:ZrYqAxnLlIc8XcS2GMytU9vBP5JypphORc3D:nw6cLG9EBPPypphORcz","tlshash":"42c2e0b9289ed5a3cbf400f0aef11a7623a0b9289f34e71b5536c34ed6701442dc963d","first_seen":"2025-10-04T09:20:19.773053Z","last_seen":"2026-07-14T23:24:11.953073Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
