{"report_id":"9a808f62-a22a-46b2-9429-37b0a312d678","version":0,"status":"done","tags":[],"date":"2026-09-21T19:09:27Z","url":{"schema":"http","addr":"proptwisters.org/","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"proptwisters.org/","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"title":"ТОП-10 лучших онлайн казино в 2026 — рейтинг игровых сайтов, бонусы и слоты","dom":{"size":78894,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"6704f21460912327d679c2aee609033f","sha1":"cf9118331eb33348038816ae8fe2cc7e9bee5dd8","sha256":"f9788cd5f4b3005191bde178c261c14b9b936f0b916605f20f1ebb28868123ae","sha512":"04c663128bf12b6101d5b49a7b1c55ec9e420e75c280e4e4052e82ebc26a65c4f3373c835af2e73133c933a70ff67215f271f0a5ad8d9be05250209bdd129211","ssdeep":"1536:KISdgJTSxRQ+cy3q/FQ4cDxdE3G+LJgJhRZaY24Z:KdgJTSxC+cWq/Fpc9dmG+LJCRZaY24Z","tlshash":"0473491250ef45be1121b483d8156f0a2de149bbef57a20139fd0eba2ffec50962664f","dom_hash":"domhash1b6f09967ef27c472984d02954680368","first_seen":"2026-09-21T19:09:30.865476Z","last_seen":"2026-09-21T19:09:30.865476Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"proptwisters.org/","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T19:09:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"proptwisters.org","ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2026-09-21T18:14:04.61871Z","last_seen":"2026-09-21T18:14:04.61871Z","alert_count":65,"request_count":13,"received_data":847808,"sent_data":6686,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proptwisters.org/assets/js/app.js","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"853345310b245b3588775ff799295ba5","sha1":"640007fe24476d3d82b9fa24e1bd2ce9de1e1bfa","sha256":"d65dbc29c3efb4c1c2801e0614b3eedc12cbda66441cb3449acfdd9f8e9d21a9","sha512":"8903eec464358fe85a8b96c9d1a2c4f8176fb17ffb99d1d901e31d5105f9ad3e8514a5e21059f897030e758b53dcb2aab4120ebc2b02bd864ed12eb07efc1eb6","ssdeep":"","tlshash":"dc215fb6c9611e7604ff499532dba3903b350547b246c82677bd8d840f86e405ce25db","size":1371,"data":"","first_seen":"2026-09-21T18:14:08.722964Z","last_seen":"2026-09-21T19:09:30.875012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"proptwisters.org/favicon.png","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.154Z","timestamp":1790017643154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Apr 2026 17:59:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fH0Zbff%2FiBAwP9SjrGb%2Fdp6mzzqfHhLV%2Bp3tX2Vb0MNl29Us8NJF4Fk9210io%2BgiHjkc5ikwjbcER8guGro7TROyx5SPsMxNVBTRBmfEg8u6GR7DXxDlEZBouerKMUpuYn9z\"}]}\r\npriority: u=6,i=?0\r\netag: W/\"69d93a8a-68a\"\r\ncontent-encoding: gzip\r\nage: 3232\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3dcf5bd8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":2409,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"861cd2f14a740c269d62d26d3c0df1b9","sha1":"d0e1bd609b4b475511c856b9f88ec89679012ace","sha256":"c106308b41a729150d688c27c3cf2b4c1f37a793723817c3a88fce39a6d0af0c","sha512":"3e7c93c668aa1e563f276d2062f551621482a679a835b26b7fdea8eac67f111050763e2e96b5399ef397df8a3c89be53b89cd3859c8f1c8477f4c390837a72ee","ssdeep":"","tlshash":"f231faaa763205fa86a1f2a9054743c5e53e3cd8d7cd4684594fd8174349a87025b149","first_seen":"2026-09-21T18:14:08.718652Z","last_seen":"2026-09-21T19:09:30.867334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T19:07:21.329Z","timestamp":1790017641329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cn2ODSc6b0VK0kHbYmfE1Tt8JS%2FiKJtbzl7tANel1y09rxBam%2FHyMiZgc6GkMkxm3ShYhvaZocT4knscL2%2FQwurZSAaGtaVMMlJ9L5f9dwuBwNmNtOtUl1V4XS4C%2FnlsBBd9\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3eb5a341db6d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79090,"size_decoded":14612,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"2a4efda51f9fc5fd7789c264e251defe","sha1":"a03b31a67d53751c0cc58f72498561b5422219ab","sha256":"3733a606fdc6f13498e75442c485fe71e8d8e37ac10dc642cde963d36c7c4907","sha512":"7a37a6b8e120f9206ea7250b696c1c750834927fc62a74f9b7fab6f57f9e40f9383f0fdfbb527b887fb158c945d28a3030d565484fc3d7f22eb07ec4fde15ed0","ssdeep":"1536:iIISdgvTSpal+9y3q/FQ4cDxdE3G+LJgJhRZaUN9d:1dgvTSpS+9Wq/Fpc9dmG+LJCRZaUN9d","tlshash":"8873491250ef05be1121b483d8156f0a2de149bbef57a2013afd1dba2ffec50962664f","first_seen":"2026-09-21T19:09:30.86825Z","last_seen":"2026-09-21T19:09:30.86825Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1335,"timings":{"blocked":-1,"dns":237,"connect":33,"send":0,"wait":1063,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/logo.png","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:22.900Z","timestamp":1790017642900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Apr 2026 10:34:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2Fxe8HaxVkY0V4qk5kLEJdloXrkH7QIU%2BIYZcCJrbEPCqtLnUJYg1DBWLyt%2BQ5A0mc4HCUTo8OXPbrdugd8bC0GtpumOPQza8N%2Fr9UK3Tvzro1A5qHNKT%2BZuK1VkodhcTMlh\"}]}\r\npriority: u=5,i\r\netag: W/\"69e6014e-4f6d6\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3c2f33d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325334,"size_decoded":325624,"mime_type":"image/png","magic":"PNG image data, 1024 x 353, 8-bit/color RGBA, non-interlaced","md5":"3183e1ce494d891063aaf9e046b19065","sha1":"7f28453cdf6ef2f1ab187f3089389574b08313a5","sha256":"aab61b9652a4e92a387e13aa7511623d9c937f9aa570336fdb6bdd6c3530021f","sha512":"6fa2e8878ac546500a3b3f7ce0834379b0c81c78447c40cf65d1f854792cd6cc33cdb2316fe2e4e34c384918ba2004fd2bfa6a0b0f3fdfe4c56310b7fe89fc62","ssdeep":"6144:pJ9Z7P9uM7amakzEtoEHlLohJYM/nx5Daweuhh8X9Rlqks:pVEmXzEWE5ohLPxtLeuKnFs","tlshash":"3364235854d278fd73de785e23351f2bab91b05761ab2c93b460286c3d0e7d4a392e0b","first_seen":"2026-09-21T18:14:08.714905Z","last_seen":"2026-09-21T19:09:30.86937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/c0scOPH8vulYRetgLOZzo8ZITs79mp7mbUALZmsJ.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:22.998Z","timestamp":1790017642998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/c0scOPH8vulYRetgLOZzo8ZITs79mp7mbUALZmsJ.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Nov 2025 14:15:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDkyd39q%2F2BYDt6uEL%2FQNtYMMf9U5wen9nNyB20q5zrJquNsZTK0mkHsU1xyvaDTGvDbNR0WFRP7pVlamj8FIsAYJm1xUgxLmRmOGKcAadAe2fzoT8kDaxDpURpl6AJZsS%2FY\"}]}\r\npriority: u=5,i\r\netag: W/\"691dd110-399f\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3ccf3ed8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14751,"size_decoded":13284,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"96ee1017c1e2ac767619de4de4ea1f4e","sha1":"237cec566cf75be054cfb685599e8cb034e756ae","sha256":"87907a26dfba58810618cc35dd33730731555d38a718c1e7b3f62c2a198cffca","sha512":"fe053f56b741937686479855c6643425aef264057cf748359c6a6a1030ac9f371fcf49330bff0885002a88119ec0f2a6f07dd2a0e193e052da5a0483b660fe2f","ssdeep":"384:8PiGLHTV9j/4fmemZGufXv/FyBPb6blTdFcS1Z:8qGF9jgfme0fvtyBPWl","tlshash":"a262c04bfd137db4d0c5aeb12c6ae00d5b30c64cbc97eb90215b970eaa9811f61168b9","first_seen":"2025-10-22T10:37:02.432705Z","last_seen":"2026-09-21T19:09:30.870548Z","times_seen":23,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/NGXJ6rh7zhcpOcrq9okYWkGE8TzwlFymhCEHAWdZ.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.000Z","timestamp":1790017643000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/NGXJ6rh7zhcpOcrq9okYWkGE8TzwlFymhCEHAWdZ.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 21 Oct 2025 17:33:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfkSR%2FEG2Dn1E2Gx0iTRbclnLQfo9mXwRMZWJF2SA17LfPTzApayWjsRuAyAqRcXxafmz0HHCdrM%2B%2BBM1i5gKl5kub0EiRdsDaGxHwIQhmbsOYS%2F8Eci6AUKYMfhzHg0nFrX\"}]}\r\npriority: u=5,i\r\netag: W/\"68f7c3fc-3a1a\"\r\ncontent-encoding: gzip\r\nage: 3232\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3ccf3fd8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14874,"size_decoded":12829,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"0a2abc4d84c588b9baf606a40f3780a0","sha1":"a905289c3cddb1dc5ab98f7c250ec02b09d7dce8","sha256":"faca45b6d78edb99b7d8f8a8682881326aaeb3920c569d090cec5336d6dbbb69","sha512":"ee0ec6d8a5aa0bcab36e2a02ae4eaa0e4489b678b3f3a97055db54f785b92136fe97563c73393221c083bf2e404b808d820054e6e430b116a1c57b0bb11ef7e3","ssdeep":"384:A069J/0g5OHg9FR4XF0sJ6ebLvJF8IPTv:pKJ/0g5OA9/eWsJ6ebLvrDL","tlshash":"d362bf02eae04b83e1d8b27b3291e67d721f38a84937f44afcd5121b7669037fa4114e","first_seen":"2025-10-22T10:37:02.416424Z","last_seen":"2026-09-21T19:09:30.871164Z","times_seen":23,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/pinco-(1).jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.001Z","timestamp":1790017643001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/pinco-(1).jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 21 Oct 2025 17:11:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vh%2BxKaca8%2B9hDzWqde2%2FRZVSDWe%2FXbwcID62g%2FIi6CZ32MaixhTJtuwChnJiTLCUIHuPuFVInNC4CVueMUukDev3ZiUTqrUGcng1fMFXB608p8eUGnbslYTHk4kcGpm9aEdf\"}]}\r\npriority: u=5,i\r\netag: W/\"68f7bece-3bf1\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3cdf40d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15345,"size_decoded":13363,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"a0eee1357eb9d84f15dd86a1e3881c34","sha1":"b39071561c8e51c7a3c121f7dca1446869ae24e1","sha256":"92c05989c123afca5f656ec8805f479d671e947dca9e6f5024e165a4d7c12d36","sha512":"7772ca6ad5ad7c4f6f99f1e01a4ecfed43c8d8dd83a3977f7e1a5f1fe695134140b3b3211c2fabcd9e9a34b50d3087277bceff268132b9f2e077ea29d83d1721","ssdeep":"192:tdAcOXuB75pmywqkvwuGYVYfLo69X79lVGdfR3bryI4FbSl24sC0WwgY4eMnZU8:Cs1pz4YPYgLX5uR3brRMSQ4sGwgY5Ij","tlshash":"ee62d17bfeec3d21edd6d8789d4ec911af494ce072d1c11478541863b230592ea4b95f","first_seen":"2025-10-22T10:37:02.42752Z","last_seen":"2026-09-21T19:09:30.871706Z","times_seen":20,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/7k-logo.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.002Z","timestamp":1790017643002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/7k-logo.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 21 Oct 2025 17:11:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aGDX1vDtPOVnkQLZQKz5bIp%2FZl5rAEQP8p%2BZwRDcpLiFL6WkD%2BiKJoIe69lh0yxOi8rq8uCQYLd069P%2BKqyiwkNgJcJOjtZ%2BH2kdVKE%2B3gG8KF6bma%2BaXOxwArHNxezCi9%2F\"}]}\r\npriority: u=5,i\r\netag: W/\"68f7bece-1f6b\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3cdf41d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8043,"size_decoded":6802,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"70d42ba14773cf755811b4ef7acd972d","sha1":"c49b3333871867ca3d394e7c3144ff6919751960","sha256":"59b2e732d51b5db79d8c74f8aca3294afe67abfcc02c2118d834fab61d864835","sha512":"b5f610ca5e316a62da45fe54f03881ae2076069eb93e63616340dcf9f613bfd3b25d7f5a0d5f8c48d07318ddd0da8d88c777dc6800273c8130a9f2203578359a","ssdeep":"192:qRTizsqXykgoD8QWoP6f5eqep+n2LTDnJpY:Ciz5DD8/QSe9/v7JpY","tlshash":"5df17e079d892c50f4f2a2f01abdd60a6955a25162cbf247f886405ef5783227c9b98f","first_seen":"2025-10-22T10:37:02.434108Z","last_seen":"2026-09-21T19:09:30.872262Z","times_seen":21,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/normcasino-400x266-1.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.003Z","timestamp":1790017643003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/normcasino-400x266-1.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Jun 2026 11:23:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jgq4iK2EBiB10VtoMj6vr08tRmTCNEsYqaK85tK20xLSbhkm11xMem%2FH7vBA1S4sOap6hlj5pjkzWlIkXF2lwx7pLy%2B6aCgpjwgA3WoZ4yLQD0%2FiztHBfk9%2B%2BmaXrYGZogvu\"}]}\r\npriority: u=5,i\r\netag: W/\"6a43a73a-4029\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3cdf42d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16425,"size_decoded":14359,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"d8a254dff0ed4739033a7b6b0b7f7237","sha1":"8fba6edb6a4ed36825bb9c9e7fcd89a095450904","sha256":"5f63889963cefc3c42ed2b72097e56956dbc2d2795f692b4eefeee648c178aaf","sha512":"d5d73d76298e40783f29eedbfb9def588b9f929e50986001a7a2aec1642e6daf4417952b2f63bb6679419c1b92a561fb7e32bb7ca92f8daae9563a948b9d069b","ssdeep":"384:R0LvcTYHfZIFsFsX5pTYRhtRoSJUCc9yvfp5OJF+3Ws:svKYH7F0Ta7aSVc965OJY3Ws","tlshash":"40728da76c3b7780f41c497173fba8516fc85ff095932e5948157a32a5a02fe00da4ab","first_seen":"2026-06-27T04:50:47.800321Z","last_seen":"2026-09-21T19:09:30.872794Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/vodka-400h266.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.005Z","timestamp":1790017643005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/vodka-400h266.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 21 Oct 2025 17:11:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaUT0%2FN%2FdaPjUF1XpzYSVcveBAzq9d9Kw%2B3tZtVdGGZMLLM%2FmC%2BgnSUhabR9T2pA0FSsGIaUp8xA6gDapVlPIfsKW2DyQHNTeeO3yr14XMnq9lrauZSa71WpUUPKzGpYeOhv\"}]}\r\npriority: u=5,i\r\netag: W/\"68f7bece-3943\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3cdf43d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14659,"size_decoded":13388,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x266, components 3","md5":"afb812a4c140b11453f4a91977c9a92d","sha1":"dec90ecb25b32713d31b15e92d351e93a169b4f6","sha256":"7a3e04aef5bb3331b5b9fa1e73c81a7b276e38ebc54ca6c373d1b4ad1baf8bf5","sha512":"a9c1d07758776bea234d8791b801ba97a697322bc9d0dfb6f7d860ba1036effed854393aad53c3d8672fe8127ce6e262656a9e09e21979dcc9e0158d95d1d433","ssdeep":"384:+EBhcse8B0XNabFMWIPeA+Xoj5bhIiQcge:vk8GXOeW5Le5bhIiQcb","tlshash":"7562ae5191c03f62ccf841720e77c66ee6a2b2e079d3d61e1883af91f6d81b429f0d68","first_seen":"2025-11-03T08:59:41.856839Z","last_seen":"2026-09-21T19:09:30.873329Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/assets/css/style.css?ver=1.8","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:22.893Z","timestamp":1790017642893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /assets/css/style.css?ver=1.8 HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Sep 2026 13:02:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2gEc5Wvg6suWrRi0CtvY8nvuaicrD21fQT9YEJMxnT4k%2BKN8eJQg5EJ4QPvqzU%2B4raRqBpwSdOzE%2FX0dYZC3SCM5SogndYH%2Bw24hARqD3uKNOV51ksvx1IkZjGM3bsBiJZPt\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ab12ad8-3d3e\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3c2f2fd8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15678,"size_decoded":5403,"mime_type":"text/css","magic":"ASCII text, with very long lines (322)","md5":"5256b91c37d6aa24c6d50bb335a6de29","sha1":"45fef4bd8f3bac92e4b95f07920fcb085aaad6f8","sha256":"7122f69bed3ca555c2cc361769cefb9082ede6af2bae6bdb46dace0fb883b458","sha512":"f5241fb12cf001691a870d3a8ce2fbd00034f70d163e049b33e5f1804cd9eda812770b96e5c2020ba9782a04cd98c650acc3397912c3b3cc17fab2b7ccdf8809","ssdeep":"192:uuYe9LR5KxZMtjAzhHzZBaueLeTGBkgXdu6W2aPZhlgOFQ7YQWPrSIPybgb1Orp1:zN5UcMznTAXwAk4Ci","tlshash":"526295a361031538b52bec639ad1b78e71a48403d357a5abbdee6158cfce1d205b078f","first_seen":"2026-09-21T18:14:08.721409Z","last_seen":"2026-09-21T19:09:30.874254Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/assets/js/app.js","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:22.895Z","timestamp":1790017642895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Mar 2026 17:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ioDEZS%2F2edp1zZf1098JRS3N3nkf%2Fc2IMhnHFbrbbFAqloFqPBzVlZ%2FKvukIj6WsmupbSnFLSGelERTqeHSLLKG4weUgqda4J3ONqqN%2Bc2hrpy1lz4EES5cU%2FMG7nMvpCeC\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"69c57136-55b\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3c2f30d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1371,"size_decoded":1206,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"853345310b245b3588775ff799295ba5","sha1":"640007fe24476d3d82b9fa24e1bd2ce9de1e1bfa","sha256":"d65dbc29c3efb4c1c2801e0614b3eedc12cbda66441cb3449acfdd9f8e9d21a9","sha512":"8903eec464358fe85a8b96c9d1a2c4f8176fb17ffb99d1d901e31d5105f9ad3e8514a5e21059f897030e758b53dcb2aab4120ebc2b02bd864ed12eb07efc1eb6","ssdeep":"","tlshash":"dc215fb6c9611e7604ff499532dba3903b350547b246c82677bd8d840f86e405ce25db","first_seen":"2026-09-21T18:14:08.722964Z","last_seen":"2026-09-21T19:09:30.875012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/cor.png","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:22.901Z","timestamp":1790017642901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /cor.png HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 09 Sep 2026 14:01:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utktr19ZDJnWs6gTRtk8h7PD9bzklxUygnbCfrZSbXc9WEiLhcB%2Fl6qbJmEBg0yBI8JWXbxUrpveIgKuuQWdi9wpMc8pCd%2FfqAVSZasZA6KWDeX0EgZgJRsvhEB2TfvOGvOf\"}]}\r\npriority: u=5,i\r\netag: W/\"6aa166a2-4f6d6\"\r\ncontent-encoding: gzip\r\nage: 3233\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3c3f35d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325334,"size_decoded":325618,"mime_type":"image/png","magic":"PNG image data, 1024 x 353, 8-bit/color RGBA, non-interlaced","md5":"3183e1ce494d891063aaf9e046b19065","sha1":"7f28453cdf6ef2f1ab187f3089389574b08313a5","sha256":"aab61b9652a4e92a387e13aa7511623d9c937f9aa570336fdb6bdd6c3530021f","sha512":"6fa2e8878ac546500a3b3f7ce0834379b0c81c78447c40cf65d1f854792cd6cc33cdb2316fe2e4e34c384918ba2004fd2bfa6a0b0f3fdfe4c56310b7fe89fc62","ssdeep":"6144:pJ9Z7P9uM7amakzEtoEHlLohJYM/nx5Daweuhh8X9Rlqks:pVEmXzEWE5ohLPxtLeuKnFs","tlshash":"3364235854d278fd73de785e23351f2bab91b05761ab2c93b460286c3d0e7d4a392e0b","first_seen":"2026-09-21T18:14:08.714905Z","last_seen":"2026-09-21T19:09:30.86937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proptwisters.org/storage/casinos/la.jpg","fqdn":"proptwisters.org","domain":"proptwisters.org","tld":"org"},"ip":{"addr":"172.67.189.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://proptwisters.org/","date":"2026-09-21T19:07:23.008Z","timestamp":1790017643008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proptwisters.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:37:27 GMT","end":"Mon, 26 Oct 2026 08:35:50 GMT"},"fingerprint":{"sha1":"72:6B:60:98:15:25:E2:D7:BB:FC:DD:55:B0:8D:13:06:79:A7:0E:0E","sha256":"1B:01:A7:35:73:77:63:3F:30:14:71:57:E1:6C:37:EB:01:D4:73:DD:57:92:DA:7D:05:C1:41:52:FC:EB:46:ED"}}},"request":{"raw":"GET /storage/casinos/la.jpg HTTP/1.1\r\nHost: proptwisters.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proptwisters.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 19:07:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 08 Sep 2026 12:33:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljvFai6RnyLCm94jkaa9p%2BzQl1W%2BiXmyQBrgHsis6FOFjGXlICwvNWoBdwg3gmBMY%2B%2F7gtMsvYZ3nNbEbZBGi54uF2LpWa022JhTnxZVr%2FmHbmLBl%2FDHvjGZn6LhB7KbyhoT\"}]}\r\npriority: u=5,i\r\netag: W/\"6aa00092-17df\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb5a3cdf44d8e8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6111,"size_decoded":6589,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 400x266, components 3","md5":"783949523fdba723fe0a2de312b1621f","sha1":"8eee17b7228fc27225f3a857682b14e750b99b70","sha256":"b6d3f6d26e71168c248a1efa6d76817de795d8d11fcc4353231dcf26c2a2daf7","sha512":"f0520ac2783eec042dd20481bff5413bd95bcde9a79d6512e7a0cfe4759a6f10ed1b547de427ec7f796676016eaa29755fb721355dd967c7611ea6914e9485b2","ssdeep":"96:YiS6/uU2JB7XmQaetNxqfYlzT9GgIoJx9xIoSzlZRvVtCRMKr06ONlFwjVBYDRQz:Y/AipjtqfYlFG679O71VtxN/wjVs+7","tlshash":"dbc17d1a73975d21de3d5c3249f88597d361f818739e3b6b1e720db8b46d0500c42e60","first_seen":"2026-09-21T19:09:30.875588Z","last_seen":"2026-09-21T19:09:30.875588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2155,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"proptwisters.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"proptwisters.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}