{"report_id":"fa628057-c504-4286-8eec-35958f05d728","version":0,"status":"done","tags":[],"date":"2026-07-12T20:15:37Z","url":{"schema":"http","addr":"mostbet85974.help","fqdn":"mostbet85974.help","domain":"mostbet85974.help","tld":"help"},"ip":{"addr":"38.180.49.33","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Czechia","country_code":"CZ"},"final":{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"title":"Mostbet — официальный сайт, вход и регистрация, скачать Мостбет","dom":{"size":134630,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31259)","md5":"4be9c9665c454bf11b90295ac55c5863","sha1":"f5830f089c336ca8ca9f0bf4d8779342547da878","sha256":"561cb5bf78a4474bf1abb82ac02feace4916409b48cde93fdb7eb537d3821b97","sha512":"dbfaa6592770eb205dc97b3487dcea0f1bfb8a63eddff852c212dda9556227e8b9e8f913a3610ca1a6cdcf411d005a7dba7b4eca52fd448d58f6d042808effeb","ssdeep":"1536:IXYIIbT9LDQRApaohZGcj+Xx2N9Nt5Z5PWCVhXntDHH:IXuLERwaYZGc6XqNt5Z5PWCVhXnJ","tlshash":"50d3b5b2938e489d2225d087e40a3f4c789245bebf07ab5663bc2dbe71d2075477538e","dom_hash":"domhashe674348781b9612303c6c4c092c30bee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mostbet85974.help","fqdn":"mostbet85974.help","domain":"mostbet85974.help","tld":"help"},"ip":{"addr":"38.180.49.33","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Czechia","country_code":"CZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:15:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet85974.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-07-09T23:16:37.011701Z","alert_count":0,"request_count":1,"received_data":1167,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-07-06T08:56:51.012864Z","alert_count":0,"request_count":2,"received_data":5122,"sent_data":1112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mostbet85974.help","ip":{"addr":"38.180.49.33","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Czechia","country_code":"CZ"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-07-11T00:30:46.759054Z","last_seen":"2026-07-11T00:30:46.759054Z","alert_count":4,"request_count":1,"received_data":279,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"mostbet-kg.kg","ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2026-04-08T06:06:17.748338Z","last_seen":"2026-07-11T00:20:01.695992Z","alert_count":52,"request_count":13,"received_data":689297,"sent_data":6582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T09:43:33.655007Z","times_seen":7501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T09:39:08.558458Z","times_seen":973983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31ed7ba704741dd1e2b1147a5937409","sha1":"748f2803f223be2a07d30b3dfffff6d6f902b31b","sha256":"ecb8bdda7766c399a2b83a7c0accbadcca700c90be781288e11b11d63b63d853","sha512":"7133f793bd87a7949589d3905a3c3e109b2638f94d1385c8ad964b6a3126dbf787105f5c4f1e2232cce7dc2522beeb21af9f3f923ccbaa5c436e7289f2b4103f","ssdeep":"","tlshash":"aa11c2ab70d43739c1973e33643ed1883a3560859d129180e829d9a475f48a9857bf95","size":1030,"data":"","first_seen":"2026-01-14T08:02:02.619185Z","last_seen":"2026-07-14T23:24:11.953816Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T09:04:57.807877Z","times_seen":11851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b524639ba09f8d9c2536a94ea065cd0e","sha1":"999a83243bc05d753167c2545337cb0ecb93c8e0","sha256":"5940362dd084ea955831c1464966bba536006d68687c024687b34a8a24532a46","sha512":"7991611b9532c037c0f670302cf1d993876ab2d0f05eece981e992140e4a4128fd97fbbdd3541950737a8517d7cf1627d27c51e819fadef9301d67e6abc18f7f","ssdeep":"","tlshash":"a1e0a27b40a50e0f00b2a0c1e83abb9f82ac0802b910de042e29ec8bcf8c5180e60301","size":405,"data":"","first_seen":"2026-07-12T20:12:04.772972Z","last_seen":"2026-07-12T20:16:14.208094Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T09:19:29.588038Z","times_seen":16383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T09:57:29.627931Z","times_seen":12295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T09:40:00.549292Z","times_seen":398543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","size":68353,"data":"","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"mostbet-kg.kg/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.915Z","timestamp":1783887310915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 20:15:10 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E27an8NxXPNC7X4IilNqw1GadNivhIq%2B10Wf6QKOzE9GRivJA06pxyA%2Fkn3ojr9Ix6VJTtoYBY3sNOctewaDtiHONldVxvqSRkfH3KHfO6n54a1pSYFztMA1mPqE%2BCFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\nserver: cloudflare\r\ncf-ray: a1a2b7ed3af31525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1284,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T09:40:00.549292Z","times_seen":398543,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.919Z","timestamp":1783887310919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 15:51:43 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69d1338f-2655\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBLJHGe5mwxq9hCKvSskF52XLX2RqyGr5UW2zVoJDNk1DXYAKFXNmKtTThUwuNUi59oUtQqZepLqzZSzPB%2BgJamAY1X2N2MY5KA8x7%2F6ffwUUrgU8hItkehfG7xBJbpd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ed3af41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9813,"size_decoded":4922,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T09:57:29.627931Z","times_seen":12295,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2025/10/Screenshot_53-768x260.webp","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.113Z","timestamp":1783887311113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Screenshot_53-768x260.webp HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\npriority: u=5,i\r\netag: \"69c15832-7c0a\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSBZ4UQotzjZbZZmrDU3loY2hE3V3fDYEjUkfTGB9W%2BaJ76hnmTPxUyX%2F6o%2FJeDyhqLohDX0PY40%2Fv3hjqk%2BKQjo2fz5eiZUKj2ZatPJKzZp%2BHt3dogOxbGlG1uBQgnL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ee7b231525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31754,"size_decoded":32539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be0bf4525972f45771497e15bc2e69d6","sha1":"7ce31bf658cd5fdfcf0405be7dd1c2b7bf27d10f","sha256":"77b6f1afe67e586c26d7958dbaac200aadf810aa09e63a615fd2f3234a22a44a","sha512":"99e97649bec942954c44bb2a603ff2d4b44436701a572fa23d87982a47be160c119e1e2f11f01e7a2ff86e7cacbcb43bf6ca1b76c0a0b40c937f6cdf5d7d5600","ssdeep":"768:rpT9th5LJncYRhpv3Fu1WXnUSuqlJMuGBkj6RL9y+/3tHoxQaBzKeL5b:dzZn1Rztg8nUJWmRpy+lIxQIzN5b","tlshash":"6de2e202c7a335689856c46776c11f702116f127d3b3e6519a71a4eeec76c8ac8f743c","first_seen":"2026-01-14T08:02:02.618022Z","last_seen":"2026-07-13T18:07:44.671992Z","times_seen":39,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.701Z","timestamp":1783887310701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_8974033ba8c889bd7800da708010a1c4.css HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a0fe82e-39de1\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65QhCFh1zHC79X%2F2MWv%2BkRgb%2FVnLgYBWDzD5%2BprGvs4Zs05QWPOvnP6ja%2BXE1uzGHEs%2F83hU9rKZ%2FhGbD9vJWuFJhOFuoMciuEkTvYw0hwig1BpnjM%2B%2BwJADRymAWnXC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ebeaa91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237025,"size_decoded":44894,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65109)","md5":"c1ce6326bbf4a13a3a90705f3cfce257","sha1":"5f69484866e26a2f654515c73e1c54b1e6de41b9","sha256":"1f1cb6f2f326d2cad5216925ad832ae789fc5863f16a98ca86b9b1df2398f6f4","sha512":"192b84eb948550051a1563761dfc38f1175afd9da5bcd46a04feb752cc9644c7c34b83c806be939e324308c8d4b224aec7afb7c40bdb672c257bac97b2c9a458","ssdeep":"1536:V6ACWf65WQXcN9Bm0iB/QtI8UYXl1PaYLir0V5GnGlrw96QXA4:V6Ajf65WQXcfW/9YXOnniw9V","tlshash":"6f3418f419e425e89327cb3b9771f2585d1491a2c39047f5e2faca1c4beabe6017360e","first_seen":"2026-01-14T08:02:02.604582Z","last_seen":"2026-07-13T18:07:44.676142Z","times_seen":39,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.099Z","timestamp":1783887311099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hxSqGFmtsRjk78ZPv2UUiOGUkbkhwvV2Cq%2FrV41n%2FfGe7%2Fov3to%2FQ3b17YdbZYofvaDN06lxe57guyenpuVi2LEIZvTZJial6hiYUl3sXC%2FJ9unwFhD47S56zStD5Gj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ee5b211525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":2027,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:15:10.100Z","timestamp":1783887310100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZT4S2y0%2BOqtLboHdw1M01JKE6NXqBZ%2Fk9fokKJKtBuk5PrSoOxniTIMdeTQFozW16u2rwzpCuWg00JAUZfhsDY9VUbQ20HwK8GOXSfYeB0fFcX58pwAAf29ZktmnZLR\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=348\r\ncontent-encoding: zstd\r\ncf-ray: a1a2b7e839c7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":133212,"size_decoded":30542,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31171)","md5":"7d962ea4547bc61584cc76700d3046ac","sha1":"b2c22a497989210afef621180fe0f352447f7e35","sha256":"345596dca0aaa31e5fe8fb55a2bcc7875084d794d07c5ad819bf51549b913a84","sha512":"080a4366268febf6105684bbd00e663d93890a190e36f78fa276c979833defba82b330b768c3b96ae5d4be8027458c0183b99adfe4f403775ad65bc1f7858cbb","ssdeep":"1536:EXyIIbT8LZIRrTathZR3EzXxdYUtQgmP1sVZXnPDfI:EXpLiRfa/ZR3IXAUtQgmP1sVZXns","tlshash":"d7d3b5b2939e489d2225d087e4093f4c789644bebf07ab5663bc2dbe31e2075477538e","first_seen":"2026-07-12T20:15:39.569695Z","last_seen":"2026-07-12T20:15:39.569695Z","times_seen":1,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":361,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.702Z","timestamp":1783887310702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Mar 2026 15:11:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69c15832-15601\"\r\nexpires: Mon, 13 Jul 2026 20:11:34 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqjjCMxIqkh2l%2F9ntXUBJbAZBpycWCue%2BBatyPwtBe87oCPu6BtGO8qjqCAMWwe1ZlgFSvutnw6Pwp8tK9V6%2FaeZQhBehTXK27HP2TK3RD79Q%2Bg4vY1a%2BPmZJQt3216P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ebeaaa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31434,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T09:39:08.558458Z","times_seen":973983,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.917Z","timestamp":1783887310917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 21:04:00 GMT","end":"Tue, 08 Sep 2026 21:03:59 GMT"},"fingerprint":{"sha1":"9C:C2:E7:F2:28:74:DB:F7:26:F8:4B:71:98:84:96:CF:DB:14:2E:65","sha256":"BE:43:4A:3C:86:A9:DB:4B:39:D6:3F:8F:D7:1D:74:62:63:4C:98:17:7E:F1:BA:D2:3C:59:22:F2:37:5D:F3:0F"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: zstd\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:04\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 2a59146ee0bb122bf8db166d47df81bc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":991,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-17T09:19:29.588038Z","times_seen":16383,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.921Z","timestamp":1783887310921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 05:22:54 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a0fe82e-10b01\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BN15CFmx7QqhET3%2FtB%2F7xE24bCPvw3GL1OUe3Tffvv%2FjQe4Wszmus%2B946gt%2Fu3IMEEoDOApxMFgANoQF7TnHYmRRCGcO%2F8%2Fqf8E6lOijOehoYrfCRdyr6hfs95O835vr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ed4af51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68353,"size_decoded":15428,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51923)","md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.097Z","timestamp":1783887311097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=6,i=?0\r\netag: \"69c15831-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySEc9txMtv5RPpJDRC%2FPpGr2daC9qBTECgj%2BvH%2BAf5BYrOs62rMD9PQvfLNbJ9Geod9Qg23VKE2fZ1UMoaQpR%2FrrgjebQeaoF0WNp7dyxIsyjt%2BqfXfYJ%2FWWW8f3l6nl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ee5b1f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":2029,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.706Z","timestamp":1783887310706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/fonts/wpshop-core.ttf HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mostbet-kg.kg/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:44 GMT\r\npriority: u=2,i=?0\r\netag: \"69c15830-e52c\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 215\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BQAZJMPdvlZsCK1%2FJzNHrAKxTM3ft26qJOIZpl%2Bza4wLazYZrro9zg5ZtWECUkL3aKTp%2BV9mtUWYpCMPNmSOEl0ecmr8ntq%2Fuoe0zttgPHmv1XBsTos2Mq7oCfaZ9qE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ebeaac1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58668,"size_decoded":59428,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, wpshop-core","md5":"2fcda07cf0f6e04e36a23362734caea2","sha1":"c596aa516e5cf216fdc514679b4a6abe337eed13","sha256":"973408bd1a1da181c7eaa9293c0cd095f3836a76b626bc76af21e1cd96b5dcde","sha512":"42b1bb8dc70bd0b65d2586a6a11131db5f604d8e16c1669efe4687f26f1e65705bcc02e911e88e07fb8d3a27999d76b62cbc6a31b7069772dd8edf50a5cd52a4","ssdeep":"1536:I5LQRM0CsPnjQegTDHjNWOPRaEXhHRfI4TgrAw0L5Tq2wsuQugFB9yjxwBGDx0Eb:uLQRM0CsPnUTDHjsOPsEXhHRfnTiAw0s","tlshash":"9c43295ab34bff1fdb6aad3ba80162a20ee9d425931fb14b59851d03460dcb84c8c7c9","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-07-16T05:14:49.481671Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-content/uploads/2023/08/mostbet.png","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:10.924Z","timestamp":1783887310924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/mostbet.png HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 15:11:45 GMT\r\npriority: u=5,i\r\netag: \"69c15831-6639\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8MPEaGv150OwUEr3mnNv5n9xQDdENZ9iIq8UrxW3hO0ZpplDJnYlBaBxrsqnZLgsol782XvY8u%2FJPw46TdAa%2BvHgrPX1D3mCtb%2BBuLnroWy7zHPMsPUSZ%2FwRcSTDeAe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ed4af61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26169,"size_decoded":26949,"mime_type":"image/png","magic":"PNG image data, 1033 x 201, 8-bit colormap, non-interlaced","md5":"10076f4770fb44fd75b37323f85a83a6","sha1":"bf6fd1f0e0bd7a11487aad8fe17abb164aed9898","sha256":"d8f8a143acf555565ed813a7d031189a234c5ef0df8a5b18060b016c565dee63","sha512":"14e933a3d273727d170b2ad1ba33a495530ecdf215e64e518bb5426da75d36b9c2b233daef69e51d63241806e15f7f812005ab22f14edcc32e539aad4cb3ca02","ssdeep":"768:ZrYqAxnLlIc8XcS2GMytU9vBP5JypphORc3D:nw6cLG9EBPPypphORcz","tlshash":"42c2e0b9289ed5a3cbf400f0aef11a7623a0b9289f34e71b5536c34ed6701442dc963d","first_seen":"2025-10-04T09:20:19.773053Z","last_seen":"2026-07-14T23:24:11.953073Z","times_seen":68,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.127Z","timestamp":1783887311127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?id=18\u0026action=wpshop_views_counter HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0yHe9t4A3X%2BY9foA24HDyJSIUxNq8jirHXPb1B%2BneAk8goy%2FZQ8oHEVJYK7ohRrT9T7f2RMRNKvD4JHXLWX1zUgwRlhk3b0%2FBgUlFaMdC0TIO%2BJzpM83JUtyAFzz0g2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ee8b2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":1031,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5ca13838efc893a346b70f9515bdd2aa","sha1":"a8c4696561ffb96e4dfdd286bbe4df862b14f150","sha256":"c74756454da121d250d173ff1e56d766feddf782d7c9b7da92909fd77b67b76f","sha512":"81d78dde79df45e51ca71324bf85a8caf1c350183cd30c3a825fbba3dfbb2962fa990ac4f5dd478dd6cd25ab46966bcd520ce65d5430a2b2fcf0420ba99314b6","ssdeep":"","tlshash":"bc900216654114e6c8006d40a96479606595155e4900164c608c61068b550653042427","first_seen":"2026-07-12T20:15:39.573108Z","last_seen":"2026-07-12T20:15:39.573108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/26bd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.319Z","timestamp":1783887311319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/26bd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3238,"size_decoded":2162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"376bdd3ac92afd53169e8faecf624110","sha1":"fe5016a910f57357d81578af9e7faa14346e0a9f","sha256":"52471c703b0e0c88c386be97d17eac544c0a98fe40e2c84ba4086a3343c7cd39","sha512":"733fab0146a53a3ac1918b7846b092c579c80b43b7ec563545a450d8b6fa9a3ed76ec54e208062a9337e65dff7e1beaf94fa78c289cab3e1714bbdae0a14cea0","ssdeep":"","tlshash":"2361a6c61270b395cdcfd19feb34fc94906960ee8eb291c58fbf8708458f999b614a24","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-07-17T10:23:20.121899Z","times_seen":1051,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2709.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.321Z","timestamp":1783887311321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2709.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62b930d873735bbede7ae1785d13233","sha1":"d45d0ae7aae2c4287280072d8574af8e7ffcf414","sha256":"a0131284c8eb7d0f8c051da1c379a618d297da2a730b4a85296b666b96c011a9","sha512":"c3635af9655c9c57cc09cc4404478785a36507ee11d5ace36ad9bad01ddd0af2da5989995b4758173700ab1579539409cb1ef22e5cd59959e7bd44d8303bb651","ssdeep":"","tlshash":"dc1123ca856151c1c042e7663fbcfad1236615b42db16552fec6871cc4c77db1d12eb0","first_seen":"2023-04-30T08:56:03Z","last_seen":"2026-07-17T09:43:33.642821Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-kg.kg/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-kg.kg","domain":"mostbet-kg.kg","tld":"kg"},"ip":{"addr":"104.21.67.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-kg.kg/","date":"2026-07-12T20:15:11.293Z","timestamp":1783887311293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-kg.kg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 04:01:10 GMT","end":"Sat, 22 Aug 2026 04:58:39 GMT"},"fingerprint":{"sha1":"FF:22:3D:4B:09:A0:9E:1C:ED:78:4C:BC:62:0A:B3:6D:B1:3F:FF:75","sha256":"F2:E9:C1:3E:54:17:BB:24:DB:CF:0B:53:52:84:4A:D5:4F:7C:92:88:25:0A:06:81:7A:80:17:D7:24:2A:4A:29"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.1 HTTP/1.1\r\nHost: mostbet-kg.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-kg.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:15:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:51:32 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a506c44-58e0\"\r\nexpires: Mon, 13 Jul 2026 20:11:35 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSFiS6QAFJZq%2FJoxf%2BnMGVZewK9jDb1qAJaWiJlzBcZcjnm2rzKaLDElZpsEnKiVHxoelcdOylBDeJXgQ7mm4iOuV6k1vKoosDXFuvgdwPwx%2Fec1MMWsgA5QA2e7OWcq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b7ef9b581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":6281,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T09:43:33.655007Z","times_seen":7501,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-kg.kg","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-kg.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet85974.help/","fqdn":"mostbet85974.help","domain":"mostbet85974.help","tld":"help"},"ip":{"addr":"38.180.49.33","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:15:09.827Z","timestamp":1783887309827,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet85974.help","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 03:02:40 GMT","end":"Fri, 18 Sep 2026 03:02:39 GMT"},"fingerprint":{"sha1":"EA:CD:1F:D4:9C:53:4A:CD:2E:A3:23:34:36:E5:AE:3C:57:B7:E5:CD","sha256":"30:BC:60:65:E8:F8:20:E3:C7:E1:3C:3A:E6:84:B3:34:50:67:B8:56:93:56:D6:4C:0C:14:F4:19:BD:F7:67:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet85974.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 20:15:10 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://mostbet-kg.kg/\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":142,"connect":37,"send":0,"wait":42,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet85974.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet85974.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}