{"report_id":"4b6b6011-57b6-4f4b-a87d-2f2cdc01e451","version":6,"status":"done","tags":[],"date":"2026-04-28T21:59:41Z","url":{"schema":"https","addr":"royalx.cc","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"royalx.cc/","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"title":"Royal X Casino Game Download 2026 Apk Latest Version V2.48.9","dom":{"size":98562,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9149)","md5":"41fa04ea2e2b89a44fe5b6bfb2941821","sha1":"db54e3f6de99c81b614695b98576ee2ba66b1bbc","sha256":"aa353b33465797a4c798b797e30ec2c4a76d5a3251180828338f6d9edfcc44c8","sha512":"17b3763a288fab131cd829d9a43cc1f0bb497604ad9223dcbab6d0122324db1e05203f12d792cc7abbbfc985ebf4567b9942314965711a707b7ef9b255e96e08","ssdeep":"3072:u0pPHqJ0H6AeCse8Ri0Hdb7gl0tldbGtiGnxTQt5M:/gJ0H9V8C","tlshash":"1aa34a62d36415ba27ab837d614e63047729d904db02a7f5f0fdd05422c9aba08f7f8e","dom_hash":"domhashcf49c9c5ddf01508345b36a8df41deaa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"royalx.cc","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T21:59:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"royalx.cc","ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":10,"received_data":249677,"sent_data":4668,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"royalx.cc/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7333,"data":"","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-07-24T09:31:22.953327Z","times_seen":18599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/rocket-preload-links-js-extra","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f49ddbefaaf30db0a1295c1cf83077ad","sha1":"ee9a444c302f3771bc27f676b69b2898ceb1b831","sha256":"652fb99844e74264d177e5522671d3548596c6b6e2b75aa87f0f909b45d1887f","sha512":"453400d2f98f472f6137154d4a2b126a9f39b66096aa3e735ad84b42876314eb311f4e85c6ac4fa7cfe24908dd5315e9c3b67e0453962a377944804479debe70","ssdeep":"","tlshash":"24315cb2f29e1c4240164afa8f64d637bfcddc08d877c915e149d199c05af85d09f922","size":1617,"data":"","first_seen":"2026-04-28T21:59:45.552273Z","last_seen":"2026-04-28T21:59:45.552273Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5205f150873787f6a52cf9f01d34f62","sha1":"d799c494d0186f01c31bbf06aadcda91555c860d","sha256":"c28374dac3c83bfa51214ac35d1e63dadd37f15c958fe2e60c76cde5fa156f56","sha512":"76f0174e724098a5ddd6548b3198b2f5f16cd8f11c95ba4ed91cd24b97f459d01a7aab058f6f1b8b0c18e6066a1bffa676c386eb63dd7309b0eb246a0f71b04a","ssdeep":"","tlshash":"6d61c9ed77a4f57219ebb2b5506f960ab7311849984f18204826fc483c7e9da0292e7e","size":3315,"data":"","first_seen":"2025-05-27T23:40:35.271011Z","last_seen":"2026-07-23T12:12:13.372242Z","times_seen":2767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a6ea38295e2538b639a2db91c8f140c","sha1":"e86c7334818e9e843be84c4ec70114107a027130","sha256":"ffb7b4a1a779800a8f622ee78d11431a2cf5080b2325d0bbe65583b5413bbdde","sha512":"8b2b5dcc5fa89f5697808f2461eaf22089d21acb66f5a8fd7d958bb8aa9142347f3a725782d3bec96588c7555e408ab7716b97f6987c6c1fa81f18259a9e3121","ssdeep":"","tlshash":"5be0cd7b17561f3904d3729931efb7417b73075574c001076cb4c5492f645c581fa4c6","size":294,"data":"","first_seen":"2025-05-09T14:48:28.388204Z","last_seen":"2026-07-22T04:02:43.703628Z","times_seen":10074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-24T09:42:49.77886Z","times_seen":308769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/rocket-browser-checker-js-after","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c98661fa46e3961e1a0fca0a2a27333f","sha1":"c02016fd566c574d80feec4f74c20c67cd498b67","sha256":"72642ef4efa558c13e695bc0b16c411a83bb20b4bfc6206b7553742db5fa02cf","sha512":"fe5336ed885198b36fddf410ef3005bb8ef23e2f89305628a5210601c59d3626e0fabb3a9d425f3deb2b37cca1dae5a674d1d8165745a6b9b08bc8b5875dfb98","ssdeep":"","tlshash":"d76195a8f83570a8a9f39036543b630371692661e1898090c2b1dad56cba7c2d3d7e09","size":3340,"data":"","first_seen":"2026-03-31T00:06:27.27704Z","last_seen":"2026-06-26T19:58:58.89115Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/rocket-preload-links-js-after","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fc619591e9c8dda9eb0e63517c6df84","sha1":"610e73ec46e2fc82e31c62244b7ef18c42c81894","sha256":"6d276b88e8b1a3f4dfffe048f7460f46fdc5b18ceb936c5dea1167377be57e40","sha512":"8c0cc6690730620bb73adac12c014fa6a6b4db8edac0b4e4ee8d7133bcba09f58b5e75a585993c892bc9c133130b6a563cc938da5cb85e7cb17b55d24adfab18","ssdeep":"48:Z9GmqipfdcR4C0GbLnghDu98TSTO9xqns6Gm0DDf0kv+lZTmsGY1xC2DfX/AfzWG:Z95qQVNCXwzksxmY06kxY5","tlshash":"c39187b5f14e743a09638735402f720aa27b0918e4d9c028b436ece05f74f5c609be2e","size":4601,"data":"","first_seen":"2026-03-31T00:06:27.246804Z","last_seen":"2026-06-26T19:58:58.881072Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/generate-menu-js-before","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a584a8328715cb5ea376e663fdd69f4","sha1":"1cfb533d4934ba989dd53d11f509d9b5e4e84687","sha256":"67cf8f592a55241e861de710b7c4d3eb3cc7335f9f9d3c5ffe2e497f812c6c86","sha512":"b40b6c07cf5cbd62c39e86832919a6b301e3ddb437f5e44655f00288bda7faced6efa7507a10db47801c6227c5d082d775880637370766ec17f4a04e81230fd3","ssdeep":"","tlshash":"502180add1825632c1c15b705350e533d035085cc209481ff19d90dca835ca31ccd443","size":1326,"data":"","first_seen":"2026-04-28T21:59:45.556308Z","last_seen":"2026-04-28T21:59:45.556308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-includes/js/wp-emoji-loader.min.js","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5adb8f6bf3a74909c36007af66d9a18d","sha1":"1a5cf4abc986e29b31745fa3ea3682febf69f8b1","sha256":"7f6517852c956ccb0f73ca36e1ef5cf5fe30a0377ff977491314c85e80b54f1c","sha512":"45fc6e4b1394a6eab0b243b4195b0f121bb98ed798a3be35101beb35142c088ec56ad6da5a81d1df450eb11169716b7792332a559af00724bb67183f299ed7e4","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sn:JN0LE0+1lfYsvSe","tlshash":"de81759ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bda31418b5893c274a46","size":4131,"data":"","first_seen":"2026-04-28T21:59:45.557497Z","last_seen":"2026-04-28T21:59:45.557497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"royalx.cc/wp-content/uploads/2025/10/cropped-download-1-32x32.jpeg","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:20.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-download-1-32x32.jpeg HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=10368000,public\r\nexpires: Wed, 26 Aug 2026 21:59:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 07 Oct 2025 15:48:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 881\r\ndate: Tue, 28 Apr 2026 21:59:20 GMT\r\nserver: LiteSpeed\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"69f629a742e2f9001a7ad24e1cd949fa","sha1":"e15d7d22112e8de5f3245857e30c22ef4aed1cd7","sha256":"668bcd47d97b956e2567604bd351569405a48a45244ff07f24d1fca06c1660c4","sha512":"a2415294e5170846d89e33fb5e8eb81ab8a533c179e6a8447c354127b606db7b29649934f7c48a89598853364c4d3686e5ff1d70a7b915f3dfa7be3f5bf36a1a","ssdeep":"","tlshash":"b011467b43098d41eb000d39ba1945384f45da17dbbd92de817be620a5baacf3f4a451","first_seen":"2026-04-28T21:59:45.531498Z","last_seen":"2026-04-28T21:59:45.531498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.3.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.3.1 HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://royalx.cc/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-length: 9209\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":34345,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9149)","md5":"4695e7551efbcbe67718f1167e19ae78","sha1":"2926ec5b5850fe20195472e14044d61e445e98b2","sha256":"ffc62a61378f6bb918525c334aaccf8296d5b41dc82121940268d1ffe3e6f501","sha512":"82f4ec80d3d16dd3fc31b9667b850aab4677ff9286155890122550948d3e64c669a46efd209016fb8056249b07a1558952f6d03c5aa0205cbfaba34217f424ff","ssdeep":"768:tK3ZdypJAAJ0Iz17Kg/TU4jKT7n4nfAJGkm7FsqKi1iw85uo0sCR:tayp1J0GBjKi1iw85U","tlshash":"83f2d771d0f411773a6f83bd5292f32875a8e501da066bbab1f970689ac4ef704b360d","first_seen":"2026-04-28T21:59:45.532708Z","last_seen":"2026-04-28T21:59:45.532708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/uploads/2025/10/cropped-download.jpeg","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-download.jpeg HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=10368000,public\r\nexpires: Wed, 26 Aug 2026 21:59:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 07 Oct 2025 15:34:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16838\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16838,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 224x131, components 3","md5":"08ef409e21d5c2ef3442fc469a9c006d","sha1":"d228c2ddfc11a805cfdbfa0b483afbf89fb3feda","sha256":"d06ad740ce2619894ec9f451a545350792592beafe85fd101a7683fd8c1ae393","sha512":"46552d36c8009446f99cf96ecf25d0631fed50775a224990a6259411d56b012c481855363d0a0c67ddf66c4b416dbde2efdbec2b89f0872063d260df6f3a8605","ssdeep":"384:6njhFuBaqrcNQczV8w3aim0UNsygOk/90Etv2z35D:6nl6a4cPzxKmUb09rtvu3l","tlshash":"d772c093ed136a80d471ad25c832bf4df8a26929fbe0dd6335f9e98903714e8231d1d4","first_seen":"2026-04-28T21:59:45.534001Z","last_seen":"2026-04-28T21:59:45.534001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/uploads/2025/11/ROYAL-X-CASINO.jpg","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/ROYAL-X-CASINO.jpg HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=10368000,public\r\nexpires: Wed, 26 Aug 2026 21:59:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 02 Nov 2025 17:13:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30695\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30695,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 225x225, components 3","md5":"562f7c3932e37ee97c3fa83a091853d4","sha1":"9d34a80bb6d2906b140e0f293f673bad559b162a","sha256":"8e03e99e586f9a75cdee4aead9f84fd39d19732be9ff1b0c84490ef1f0a01457","sha512":"98985a9da7b4315f62dc7ebdffa7dc2c0ddb75309faf0b69af332de5a8677a80f0b4a46efda5e590e1c4e4e1fa46b3ab88a7af65d7e6b8a13ffc7f2a4f172cce","ssdeep":"768:TtWsDnRpmxkJRjXhEudUPk9y3zwWPgvcB9LKl2q3c:TtWs9AudUPqJvcBRKl2qM","tlshash":"6fd2f12fd8894c721fcd81b96834f16844aa4f81524fe34580623e07f78a6eeadc457c","first_seen":"2026-04-28T21:59:45.545654Z","last_seen":"2026-04-28T21:59:45.545654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1 HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000,public\r\nexpires: Thu, 28 May 2026 21:59:19 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nlast-modified: Tue, 06 May 2025 19:28:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\ncontent-length: 1250\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3315), with no line terminators","md5":"e5205f150873787f6a52cf9f01d34f62","sha1":"d799c494d0186f01c31bbf06aadcda91555c860d","sha256":"c28374dac3c83bfa51214ac35d1e63dadd37f15c958fe2e60c76cde5fa156f56","sha512":"76f0174e724098a5ddd6548b3198b2f5f16cd8f11c95ba4ed91cd24b97f459d01a7aab058f6f1b8b0c18e6066a1bffa676c386eb63dd7309b0eb246a0f71b04a","ssdeep":"","tlshash":"6d61c9ed77a4f57219ebb2b5506f960ab7311849984f18204826fc483c7e9da0292e7e","first_seen":"2025-05-27T23:40:35.271011Z","last_seen":"2026-07-23T12:12:13.372242Z","times_seen":2767,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1 HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000,public\r\nexpires: Thu, 28 May 2026 21:59:19 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nlast-modified: Tue, 27 Aug 2024 20:48:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\ncontent-length: 1678\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7333,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7333), with no line terminators","md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-07-24T09:31:22.953327Z","times_seen":18599,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:20.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000,public\r\nexpires: Thu, 28 May 2026 21:59:20 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nlast-modified: Wed, 03 Dec 2025 18:49:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\ncontent-length: 4949\r\ndate: Tue, 28 Apr 2026 21:59:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-24T09:42:49.77886Z","times_seen":308769,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T21:59:18.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0\r\nexpires: Tue, 28 Apr 2026 21:59:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Mon, 16 Mar 2026 14:15:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,Accept-Encoding\r\ncontent-length: 26700\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":98678,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9149)","md5":"1fc865fe7e739bc7450dd060b0655822","sha1":"88df9052290eea6970868eb6389f24786782ed2b","sha256":"b36064217988c84e7b922abf8e11614469c4e0b687a9cc9e50409efe2335c083","sha512":"344b1bdb8c9b5d205365de36b25e355c377febec51c3360f499f84bbe6b7f4e383d189bb93358d486d56e67a9a1c098587e17653183fede31824b920d9d64ba5","ssdeep":"3072:japPl3J0Xc4eCsD8Ri0Hdb7gl0tldbhti4nxTQt5n:OfJ0Xz78v","tlshash":"5da34a62d36415ba23ab833d514e63047729d905db02a7f5f0fdd05822c9aba09f7f8e","first_seen":"2026-04-28T21:59:45.549293Z","last_seen":"2026-04-28T21:59:45.549293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":428,"dns":40,"connect":162,"send":0,"wait":322,"receive":2,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.6.1","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:19.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.6.1 HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000,public\r\nexpires: Wed, 28 Apr 2027 21:59:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Tue, 27 Aug 2024 20:48:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\ncontent-length: 4410\r\ndate: Tue, 28 Apr 2026 21:59:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-07-24T10:10:55.489538Z","times_seen":16830,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalx.cc/wp-content/uploads/2025/10/cropped-download-1-192x192.jpeg","fqdn":"royalx.cc","domain":"royalx.cc","tld":"cc"},"ip":{"addr":"63.250.38.156","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalx.cc/","date":"2026-04-28T21:59:20.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalx.cc","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:F0:B0:AA:F5:92:E9:24:11:02:E9:3F:02:17:FC:0E:4E:A8:B7:6D","sha256":"71:4F:FF:97:24:FF:BE:EE:61:28:DB:B2:02:EA:94:5A:A4:05:78:50:70:E7:D5:6A:96:C5:DA:03:F5:D7:2B:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-download-1-192x192.jpeg HTTP/1.1\r\nHost: royalx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royalx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=10368000,public\r\nexpires: Wed, 26 Aug 2026 21:59:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 07 Oct 2025 15:48:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11440\r\ndate: Tue, 28 Apr 2026 21:59:20 GMT\r\nserver: LiteSpeed\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11440,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"28faab16d9ee6585026cf4474754e3ea","sha1":"c3b93f3fb0d71570d27881739933264f0ded26c6","sha256":"8ac7f89e3a1e8d87dfdd00cdcdfe7bfec7e114129470108ebbaf0460cdc709fe","sha512":"d22a69efc80f365237d3d6a26dcd453c5f2bbcd52cdf98500edbbfe90ba056b98d48f3978b8a936603bc225321ffa849f7cecc5b366484ecf1c10a39f6dacbcb","ssdeep":"192:M0ydCn4uxA82iVu/2ghvfncuXmTJglJuHMwS1EKaSoy27FrSk/PVv5ZbtLy7TWaP:BN4n8q/nw6AMwSJ0tSkx5L2WaP","tlshash":"64329c595410b74edfaf2e767121f7beb2846435bd25d4a4993fe6cb8e244c32740701","first_seen":"2026-04-28T21:59:45.551107Z","last_seen":"2026-04-28T21:59:45.551107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"royalx.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}