Not familiar with that one, but two that come with Kali use search engines to locate subdomains. Your DNS server would have to be pretty misconfigured to allow zone transfers to the general public, which would be the only way to discover a truly "unlisted" subdomain.
And the biggest question that all of that raises and stays unaddressed is how a US official and regulated gambling website is developped and probably operated directly from China?
Meaning all PII (name, address , id scans, ip, ...) are available to Chinese individuals.
The argument that the dev website is just developped in China doesn't hold as you can see that the prod admin panel is also partially in Chinese.
And what to say about the admin that is really using 123456 as password in production...
4 comments
[ 4.8 ms ] story [ 18.3 ms ] threadMeaning all PII (name, address , id scans, ip, ...) are available to Chinese individuals.
The argument that the dev website is just developped in China doesn't hold as you can see that the prod admin panel is also partially in Chinese.
And what to say about the admin that is really using 123456 as password in production...