And the biggest question that all of that raises and stays unaddressed is how a US official and regulated gambling website is developped and probably operated directly from China?
Meaning all PII (name, address , id scans, ip, ...) are available to Chinese individuals.
The argument that the dev website is just developped in China doesn't hold as you can see that the prod admin panel is also partially in Chinese.
And what to say about the admin that is really using 123456 as password in production...
xraystyle 1 days ago [-]
What's this 'subs' command being run to enumerate subdomains?
bauruine 1 days ago [-]
Not sure what it is but certificate transparency logs are a goldmine for this.
Meaning all PII (name, address , id scans, ip, ...) are available to Chinese individuals.
The argument that the dev website is just developped in China doesn't hold as you can see that the prod admin panel is also partially in Chinese.
And what to say about the admin that is really using 123456 as password in production...
https://crt.sh/?q=liuxinyi1.cn
"CONTEXT: PL/pgSQL function web_apis(text,text[],text[]) line 4671 at FOR over EXECUTE statement ERROR: server conn crashed?"
May be pushing a bit too hard on their postgres-rest ?