{"report_id":"896c1bb3-b42d-43e8-b7ac-b605631ece7c","version":6,"status":"done","tags":[],"date":"2026-02-14T12:02:25Z","url":{"schema":"https","addr":"royalsea-casino.org/","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"104.21.14.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"royalsea-casino.org/","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"title":"RoyalSea Magyarország: legális kaszinó bejelentkezés","dom":{"size":36983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19314)","md5":"cec9388ef90b7151f112fadfc829c41e","sha1":"c773339c564f007a1899985182a2173ddbcade54","sha256":"a9f129a575784cea4c5ea723de46118b9e45b4082a7923a1a4c68e6e195fca02","sha512":"76af45e24803c773e035f665f4180c60b3e8b199bcd9fe1f672a32c14ca15cb6d6a21cb5f2c423b0aeb541835bb151d06e45c1e95b6d41ef80f735ba32593313","ssdeep":"768:QOOHb6FZLDdwwfCx7IXa7pMx36rgIqYqRT+3VBisbjFyQKFbz+75wFHLOcQ4nQf:QOOHb6FZfewfCx7IXa7pMxqrgIqYqRT2","tlshash":"23f2b631a0c36eb386972dd278657f4c31c7c22fc3736c6156ae46e79ad3ee48821495","dom_hash":"domhasha2f9b763ee720a662ad3d94554f9e785","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"royalsea-casino.org/","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"104.21.14.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:02:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"royalsea-casino.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-02-13T01:30:52.904733Z","last_seen":"2026-02-13T01:30:52.904733Z","alert_count":38,"request_count":38,"received_data":1973851,"sent_data":17766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"royalsea-casino.org/js/popup.js","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e81b42b7482e8348bce8e094babe294","sha1":"685d381e88e82f3017e571da801756636ea41eae","sha256":"f74c63b8ef9f236fa287fb6ad14eeedcfc9393ef2f9808630af5a034a40ed59e","sha512":"5c45b1f76ed256e26e8f55e428e6a51e1c4167bbfb831fa3db194b0369bf79758c19679a80fb5e284389f658d077c5c84a541f200b590f4f6e6fee16ebf69f19","ssdeep":"","tlshash":"ac01471e79f03731a5bfa67902df614932325052310ace61b9a8da412f60f094c77dfd","size":683,"data":"","first_seen":"2026-02-12T20:33:44.586756Z","last_seen":"2026-04-04T16:38:40.938559Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"784b593da70136af75162d583edd6402","sha1":"8193cd2ed17f683cc52d8a3b58ae6fc86c1068ad","sha256":"288dea921c209028b6fd9a1d44d5dbcc71b6000c4b8a0d3cb6663d5a806d6d0b","sha512":"943b69f5c76472c412ee82c4451b102b6fb5503987f3a14d7d9a92f75e5db59fae5397add097579bee0d493bcfaa3ca2687ce8d793657efc57e6edb2799dc004","ssdeep":"","tlshash":"56e07d7e780437b3058f39d267e142d0f49401a6b952182070acc98a053ac83427e6b8","size":316,"data":"","first_seen":"2026-02-12T20:33:44.60155Z","last_seen":"2026-02-14T14:17:45.201791Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/js/runtime-core.min.js","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe6970bd643cb2b90cf11c2b69307b62","sha1":"7a433c5af3a6c38cd5340e8d3440266a85fa63d4","sha256":"14636f153e0fa62b65c962feaf42f1c38217cf2f465807542f5a9741ce667942","sha512":"411a4019866b173e51f35f6bd319897ca412672602512cfe96dba005cc4e0735c7b25ad0f6a8418ab964745c68a2a955c610c29ee07386c6a3eb2ad5a2071191","ssdeep":"","tlshash":"e23102ff69e3517e45a7525c4befa04470379447308aed887d4c89906fc87488b736ac","size":1722,"data":"","first_seen":"2026-02-13T01:31:00.637656Z","last_seen":"2026-02-14T12:02:28.314174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Starlightprincess_Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Starlightprincess_Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50241\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ff359b8eb458f5cf9b3998a7726f9ff9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJTXo9rpLTLGB8ZP8lgAiM1G6QWtOulSzwMUwXrMlwt50jXsqoOl2LsHlrRyxDZni%2F%2FXzsbDux3Q4kUWB0pJjUMdn5el1%2BDSgcMa%2B%2Bz0KckE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae77958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"ad6b42646eb1d8bd39738c850813db33","sha1":"d9fd192e14b6608c3581eb7bf1a786e413abd1ac","sha256":"62281a2cd19904856bc9c8260386c5c4c43cb323dc47cc0283ac2c23f95a4b9b","sha512":"e7b9ccc9f42970928e3955f9c1129d580fec9d85b5d951516aa2b3d42a952489c19f09b26dcf710dbeda952f70e250038b921efbd185615d8d474066e5de96e2","ssdeep":"1536:FpwiLTkZVlwlYythkT1KjwzBH2n4jeAV1GCjNF3EYAJi:vSohthO4j6524sCxui","tlshash":"3e33f109dbb2aea8554ee17c0ce944bce863d38e0851395ebc8dc8670f84791d22d5db","first_seen":"2025-10-25T17:20:34.088619Z","last_seen":"2026-06-02T00:56:57.05148Z","times_seen":106,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Trollpot-5000.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Trollpot-5000.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38493\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3ba71741ed28dc4b934eb0d6b0b7327a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B%2F0A9hZTa0GlXREgsjtQwXY%2B4iMG61Y8hlIrsdW7LgVsVjVh6JirtyO5lIJqHhO%2B3X1oJ%2BtHBb7GL0niGXj7ooo%2B3wCRP1hv4HjAONqW5nhG1N2sYA%2FeCgL0qLpeiW%2BvLU4V8Vtx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ncf-ray: 9cdc6a12ae83958c-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"9310a31935ec2988b4f0177ecc2f0a89","sha1":"6fe8c3b06a443778afeae947d4f8d920b360373f","sha256":"dae22e4bc60be8399b1abf7ae33a0d79bf4d5f537c78be1909b4f471d0cb3906","sha512":"8450ee0c4334cb1f8c9fce0746b30ab5aa6eab91818db3f17608f66a98400a78b11af97ab2bcde72e417d3ec14659f9df343fa35d0ea8ea3b5ae5671dd51ca21","ssdeep":"768:8IjbZtcDSuskz9CR2hrpIFxtvRX8MX9+vAjdhXQSjTS9AUj9t1NpE5cc9yT:8mZts+urpIFxtvK4YobwAA1fE5RQ","tlshash":"9803e1b285333d55912975b8f96322d0bc3d6c70405d96cfa611bfaa0422ff79be41b2","first_seen":"2025-06-28T20:00:11.324121Z","last_seen":"2026-06-02T00:56:56.961726Z","times_seen":82,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/RichWildAmulet-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/RichWildAmulet-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36120\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7fa86108742f1c636a307db713966eed\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5krT7aOCJrfab1tU7A8EjlfsPHuUi4QtmgHCKu3hfvDaVtB5SkXSOTMcH1OuVUhtg2veAI6NwcwLXBD0fC4XxYkn1HNRyZk6FEWTSkecpVj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bea8958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36120,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"276fcb2d382178d48416684f0a62c3a8","sha1":"0090af7c94bc887bfadf4f7e3d3bf03ce2313ad3","sha256":"df0525340e2a85b4718a284a398c4da0d24144b386d15bd879222f49bcb6ec55","sha512":"7d072e435eedc176389ee107607f7cce2c81569ad1ba2d38a39f47be7f7190aa41e308540d04479332673ec3cf01358cd0bc94122cedd0dbb79c651940ab6ab8","ssdeep":"768:TYQDI77yqtn10YhAsM5qL9B1JmIvgn7pN+YL:TtVq11jhAIL9B1Uy03L","tlshash":"3ff2e14f3990bc5eeababfbb694472a210b25cee5df867153201fb8f015649b10442d7","first_seen":"2024-12-06T01:04:54.52299Z","last_seen":"2026-06-02T00:56:57.054463Z","times_seen":42,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/favicon-royal-sea.png","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/favicon-royal-sea.png HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 926\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2c3120a2bb9a3b7e1ded797a284a2aef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXkprAEPGaLptnMOl2Q5MGW2yEUbJ7ZiipWoWIi8kq3jWpLKzgX%2F8rvVg1s82Lk3l98sUrUIWTXElF51n8N2YpimYWFOMW7v3nd63e4ikcpO7yQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a145c08958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9cc37223c5e30501660fb1d3418220d3","sha1":"a469cb5712df0d6163e627ca330cdd16a5e082bb","sha256":"ba8fbfe7b4b04208f33f6f804b9abd592bf5a52977153f5da6829efe1b594119","sha512":"ed6170c53403aca97e1cd9d77f7d6d599575692c62bd6a9a2e8a5f93a0b0acdd69d8014c9a004da97a32a0425b78054b2f2c6096a5efd4c62a512c4e37ea4b96","ssdeep":"","tlshash":"d01186cd973a69d8e6158562d65f7402e4d6df0e683512477535b44c753ec4962c1002","first_seen":"2026-02-13T01:31:00.595634Z","last_seen":"2026-02-14T12:02:28.303792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/css/style.css","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrbRSUxjVOYkv7h4peOnrcJNUXtmoa1onlARn%2BBj3Rx69J0LUUOGKk%2Fxbhc1XGdXfG4j8S9wTz1sJOOXYH16S3F9Hq%2F0GcQDz2ZQPFmqz1zoYF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e1e9b2c3cb84344e36e1a150deedd80e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9cdc6a12ae6a958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a768eaf48ac890396336f0ac3a1bf387","sha1":"bf1cc1f7c40711e056b758e46ffe603c6abd3d82","sha256":"a52c8b246bbdffaa7a77dd58310dd51a225afc5947b67733e886179a560382f9","sha512":"215b8309525f337e064a221a45a306c27831462c28597af384bfd07194bc4adee8e3fc1eb03e2cecee1b829f35e1e911a028ba8df9997f904639e7b1b255d2f2","ssdeep":"384:ydjodJ0QPF/6FKNipFjSz4tJSGyjSWY4HJro/DDf5cmdrwFWv:oAJpPF/6FK2FjSUXWYM4PcFWv","tlshash":"cf82544876a12530783bd1a86b97db8473add046cd0ecd7d7be6204c9fc93e85493b88","first_seen":"2026-02-13T01:31:00.661466Z","last_seen":"2026-02-14T12:02:28.305035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/logo-royal-sea.png","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/logo-royal-sea.png HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 4161\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cc9f5b5b7474fe1b131550bee289461e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PH5dhROTh8egxKZaQeR01zr4UjwWIyYo7icFyaLsWgX4fZdQRF1LGWNZoE2IlhnBSJNWK6wyXhW6Hp94rO8BwLKNeWvGlMWbxWIexriJZ%2BJ09mo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae73958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 518 x 80, 8-bit colormap, non-interlaced","md5":"e6c32e0a88711ecaab991e0900767b3f","sha1":"ee43f84116e59d20c7fd3683d76ef88706d19ca6","sha256":"71045bbe6da4b960feb823a1e0c9349d797e02f6544ca5e7720a0a8eff6abb61","sha512":"f7abf8e1d3aea250446bf468fdcc454e978e080dc5a667f092e4b7d94662bdc0dedec08591d5af5c1ea0dc1cf6491e917a2d72345fe2cdf1130e4c79f389197e","ssdeep":"96:R2w7zKs1YYFfmybhKhjCI4ATAgUOqFppscJxuPib:6sSo+2hKhghgU3YcJcW","tlshash":"1b816ef38959ceefc4711214cb8ad034e474de1a6614525d3b65b485cc3cb7fc9ea892","first_seen":"2026-02-13T01:31:00.58484Z","last_seen":"2026-02-14T12:02:28.306201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Jackpot-Raiders.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Jackpot-Raiders.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63519\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"72df2e7fbdb6e1f7ec76b1275a54f919\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9ud1yymrPjk01Aqx0cvHwS%2BoJhpY0fQqMUb%2F2Fu37ZF3vSLDWgl8X4ddQWzwq4ZhCNqcLsdFuBEjv9SZg5otfoL797zqHIv%2Fzqb91e4XzZe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12beca958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63519,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"98ebcc48b48fe10495beb88e8c2d0775","sha1":"67d0359222bbf662d41485fd9cc8e14badbb9dd0","sha256":"aa3c80584a45dc2ac779bad98625cc8f16f6d551b2b715fb042fdeec0ca675af","sha512":"02d5d18c168d2d8a84c2cb5ffaf377f834ed57b7faeef5c8bd495ffda9fdfcfb21b3b90e629370094cd209c5fc605c7d92a7320719d4de3b23895c4112790750","ssdeep":"1536:Rr+/UOWs249vbJ4jfF6J0ETSgsy+JIb0JEAKM:RTOdXv94jG7Gy+Ib0KAKM","tlshash":"305301eb1987d839e040aed99801dc82dd0f0f91b6af542df53af31572d46656d1e8b0","first_seen":"2024-10-16T21:07:46.371428Z","last_seen":"2026-06-02T00:56:56.995093Z","times_seen":88,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Wisdom-of-Athena%e2%84%a2-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Wisdom-of-Athena%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52225\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"513aa5ab5ba78138f90d828ad03e3885\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPDHfV0WmZh9Px19xyvTwsTmDQtNnrSDg55dAOaPEC%2BeTgihGJHW32OQoijxkTIkbEdK96w1vU%2FykHUBTP9WIs2Q1AOj6TJK0YUZrvQuq%2BfZb1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cee2958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"7083edcdfbdb5012d1af7493d04aedc3","sha1":"9ea4f6b0ec2e7ded434332e19f29d7d1e9e7d5c0","sha256":"7d0ed3e1633fd18009eaaf42628bb608bfd55e117c1e79b4c52b30391e0d1b26","sha512":"a43759a5cb4d66e4b1fc15f2699e59e8ba0b74a62dc112a6fb1512f809c57967f0300190added293cd131ad46f3d8c2c1b8be212c9000faec734d6c90e92d5ff","ssdeep":"1536:BlLW6yT83pY7kRk8nx0HD50EGWPOQQMj+bg0oTT4Lu67:SHTKpOkRky0j6hMZ0Lj7","tlshash":"7c330266b9d072e24a0e72fa7f9e1f50c8540353f9da4368356f89e8cf111416e6a0da","first_seen":"2024-12-07T20:04:01.15003Z","last_seen":"2026-06-02T00:56:57.058113Z","times_seen":82,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/First-Person-XXXtreme-Lightning-Roulette-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/First-Person-XXXtreme-Lightning-Roulette-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62553\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9546680032d1df8506aace0d8bd96c41\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYChMbAAh7ykJ4BRAz0s4I7smGB3foqanawt2wmP8rkr1m2iybO6fd0tkbpsKYPkQ8lUraqBQ1%2FeOFcDaCYTMWFLBMgkXx%2BtPOaEPMOn1buSJas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ceef958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"ae0c96015f0cdf0f51894c631ad3ca64","sha1":"b1cd85cadad7f03bcaa2e6751312569f2f97389b","sha256":"91dbdd3a2814e884d472dcbd0dbc5f91d78f5d06ea251ab1e80a6bb910ace930","sha512":"1763e2f6a44bf1bbf7c936045b81a28150e986d1e72e9535148df42b9e1524e60423b3250e62e7a136472e973d8eff21ebb9dd781231c111603f5c5b0448102e","ssdeep":"1536:eWC/tOlXnT5ZgKzK8DZItihItXiapfTb+1UJBYrWs/D3ymxt8B:ElyT5Zg10y9tia/+rR10B","tlshash":"6153f25a3df625606497b73596d53c8efd668a00b5c1690fb69fcea31f00094ce2a18b","first_seen":"2025-08-31T16:35:31.987671Z","last_seen":"2026-06-02T00:56:57.005964Z","times_seen":82,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44629\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5a91624ae50bd58962c54bb300b12e83\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT94IkLovXwyvxgD3urE5ecupH1yFe4XrtrkZwHHbeeN3x7cYu5qG29BkkjvQ83yV%2BFHEDi13CZx0i3oxhiX98gBCzl8D7CLs8BJZUCGR%2BEuwk0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae8a958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44629,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"3a2d7e7469683bd51c74af1408d81fdb","sha1":"e892892266d81b129122e49c2dd78563dc03f71c","sha256":"9c45dfaeb17ce8bc03e22c6f960b8a2febc855ff8732c7356107254de4ccb835","sha512":"69d72e3e69c764a02dbf7428c6c41e8bcaa4da78e252a0f74023c040ef4f6988d63d7c43d3d59413f49172f6dfccd85ab7d0aba58a30c276693c994d84551ba8","ssdeep":"768:Ue4YWNygSW+BnRzWXJdqs+yNMbDc7T6yMBW6RIN6OLEx:UenBgLCRz+qs+smDc7T6lBW6GBgx","tlshash":"7313f104b6535822a430567c48a9236bb946bd9bf014dd4fbc8c0f5b5f73aa8c2fb172","first_seen":"2025-10-25T17:20:34.111237Z","last_seen":"2026-06-02T00:56:57.056641Z","times_seen":106,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Monopoly-Live.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Monopoly-Live.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41630\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"38eac0ae26b3de4809c29d82cc95b64f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZy64slgI%2Blt%2F%2BJlpLuqTiNkMlAHfRxoYIU%2FV0J2AkgL7uLSMQe3fZbQ20TbY6D3hagHG9diZkl4am1r7LD8MAZLJNNX4exwVsluwtJXNAD4o6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bed4958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"105c12e69e56a54623b9b85018e76b05","sha1":"0986d110f554af07ef46ee7177ebedbff1f2baa7","sha256":"e456468db72998d9a07c6c0ab23b13be17578b3303664806a3168a5b5aa28be0","sha512":"eb02466ede928fd1f5c5d8e5eead8e1c8d54acad17762ff9e8392624b90b9164dc36168017bd51fd0b1335a72e44b5a8f3a5f97c5d893223703620439a22b154","ssdeep":"768:mploThqk3DmpY86PEO7nvTnywcpMOJlLZwSP2M/fnaHdMeVUU:mvook3Dr86n7rnywgMkCS1/a9pUU","tlshash":"1513f185fea671a5cf95288b1cc88a8e553749c0fdb3b90cecec7805987133e3572696","first_seen":"2025-10-25T17:20:34.161933Z","last_seen":"2026-06-02T00:56:56.937637Z","times_seen":81,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/CrazyTimeThumbnail_530x700.gif","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/CrazyTimeThumbnail_530x700.gif HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 264265\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"70264887585fddf8a38e4c0fe3b742d2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hC89Fn6VFvkUHBsodXLFC1XU2jjFvb9qfyO0OiqY8cIwkliN7NIBWXaL%2FAUVDQ%2FNV0Lo2si78616LlPfn9gn4eLqCYyQ29dv469uQ9BBEQ2F5ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bed7958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264265,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 530 x 700","md5":"abe7ca9588a8febb89c83e20d8715930","sha1":"e6332e7da35249ddb518707cb35a05fe3803247a","sha256":"b2620a30af5e7b8b69fa237e072a29c5470e99be4b8394f2eda7680242163588","sha512":"30c5799533e4834e01175ab2e85a7aa8419da2c3f4970e8d0ffae468e543667e5a9c2bb69b50b6649ed8415b76048b9ca5aa03eaaaa5232201015fa85415ec1b","ssdeep":"6144:3BfBAMxMmwqoTmxIid+pamIKgJxIqYdRrUKPLb+EJ/Gaz0C:3BfCqoriopamwJyNT7f9/GhC","tlshash":"e84422265fcd82cf4da4c39b6a12773ac74e5c15ed44ecd4e442912b620eeaf0e2d42d","first_seen":"2025-06-28T23:36:16.808364Z","last_seen":"2026-06-02T00:56:56.950308Z","times_seen":85,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/LightningBJ-First-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/LightningBJ-First-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 123192\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9cc6cd8c1d1b27883fafe6c21650025e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhbWdeb62%2BzOgarKQMQimtvL8YI%2BTesA8NXj2pYv4%2F7uUXiQO0JHNntEc9FhAa3qo5FJfs1tTo3ldfHKOIzNzgTM1iC%2BeAW3TXXZSi0YTnihFdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cee9958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"258b832e194b0531db9dfde70f1d536c","sha1":"167dcc2571309b2e2890eb7597c037136643f0da","sha256":"46eb19c1abd43a9dcafb96ab97355fed68423730cff1dc0c9e39857260149bde","sha512":"f21a1ee7ca9469c59b7b0f63d02ac8f112f8cd4f2985785616a70d73095bfa80219dfbaa0640a929c68aea1c0224044cf20ac11f3aff0f8ddb564656590d5c8a","ssdeep":"3072:NEVCb9fZLciQCUbccEn0rMd76nGBlbB+9njr73icmw6zYxgA3j:NEMb9fqiQ20I6nGBltQjr7SFwE8R3j","tlshash":"f0c312d32afd0c25d8db03bd826d6bb422394ba1c6260c94e4b7e15636c46f01fdb1a7","first_seen":"2025-10-25T17:20:34.148903Z","last_seen":"2026-06-02T00:56:57.001315Z","times_seen":81,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/js/runtime-core.min.js","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /js/runtime-core.min.js HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BPvPLma9WzRYGMhp0a5evjQyV5OVzLM8x2XLgfCfImjAN9VtF0E5iySmFdGqRZq%2FHh8O0LSTcxJfHfKnQkz5959cg%2BkmOQUIyNGMmD3CfOTKl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"89062c359fffb1cf85036fd897ea62d2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9cdc6a12cf04958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fe6970bd643cb2b90cf11c2b69307b62","sha1":"7a433c5af3a6c38cd5340e8d3440266a85fa63d4","sha256":"14636f153e0fa62b65c962feaf42f1c38217cf2f465807542f5a9741ce667942","sha512":"411a4019866b173e51f35f6bd319897ca412672602512cfe96dba005cc4e0735c7b25ad0f6a8418ab964745c68a2a955c610c29ee07386c6a3eb2ad5a2071191","ssdeep":"","tlshash":"e23102ff69e3517e45a7525c4befa04470379447308aed887d4c89906fc87488b736ac","first_seen":"2026-02-13T01:31:00.637656Z","last_seen":"2026-02-14T12:02:28.314174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:02:03.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWBHKerUZtjkqEwu358d1HnMwaikNY4hUUFwvZV3Xq2SI4Y499pUmKGShQEJki1juvFiPuCd2HPXpTAng2dqGEF2sbmKPB36ZfuyliVq4vLgOgY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdc6a112d63c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33594,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19134)","md5":"52b090b1f92555097f80449666273d55","sha1":"9e7999bdd689d31b3cc2da574ebe85c943d4e5e0","sha256":"f61aea557e33b4254cad697a756cb8c662f3ed3675da5d469d830ae669c8bc34","sha512":"4ee15205c74feb94cf6a4b7bbb6b15322d6023272d22796baa5821a3c251774aab0a4308a3b24fbffa8fb9794d2cebe59b7f0048acbccfa00a82727131f5f3b7","ssdeep":"768:3OOLtrOBicbFr6yKFjz+z5wFHtVmc16sz3:3OOxcJr6XFjzySFNkcb","tlshash":"7ae2c77220e06977a21b1dc6a4687f4da1c7c137c3b32911559e5ae7dfc2eb88862cc6","first_seen":"2026-02-13T01:31:00.623141Z","last_seen":"2026-02-14T12:02:28.315062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":60,"dns":28,"connect":8,"send":0,"wait":49,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/css/popup.css","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /css/popup.css HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGEu84s70cRwMsgh%2BF2vRikmVG8wXM4lMZYEJNr1l1PW7i2CrUzXRZfXZDbLWdlJBbz3w5REU5QIip%2BbjZUJe7hpCEwCPH2i4JFWB3vl3qL7gzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2fb267d6d0b55fd483fe921c9993c859\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9cdc6a12ae6e958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9b9d30af9d18d57e256db1047712c656","sha1":"4e57de5ab77f4896b4173512b775e97c77315592","sha256":"11a807da43ac226f8036e0d34a8b06e824eb7e32b2d4f5f316cbd28bbd714c8a","sha512":"d625db3234646fe0a6c88b0ef7d5eff21350f965a58680091828bd37ca41efd7523e901e034569ad54ed996f74500859fb9ee68e5d2ace50c57a8a1b863da406","ssdeep":"","tlshash":"e84110245394a110792f969c6b529b8c937cd441fe0ace7d22e3204c9ec93ecb5a7b6c","first_seen":"2026-02-12T20:33:44.568692Z","last_seen":"2026-02-24T15:35:09.368211Z","times_seen":25,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/BuffaloKingMegaways_Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/BuffaloKingMegaways_Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62106\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"76da1dfb7485633b20b217c9f863af45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAT1gfMvFZ1XWVfXT9BmlBUCo4rcVTWxbKhF2GAdrALUewKhO%2B3aX2W1KTzofsLUHog2Iitp6XD2iRESsWsG%2Fma0fKH7gwXJ6hyGuq2YbaRSpo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae8c958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"0566fa4ab4540bf1af5c4eaa1ae90511","sha1":"492a8d4ec04501385dc2024e26f9f191d64cd871","sha256":"2eec37122f2428eaf71abe8fa826b353fe08cb572d7011c1d41a125d12cf4c59","sha512":"4bdf4013c6e387bb4cecf6f4b58e83ab23b686ee3892485cf5b40f63fc959c9770c83ea1652a8a4b0210dd7b58f6b82e7958da7bdcf6a9e72124fff84526fc8f","ssdeep":"1536:ukJcWfGUDlwpfEJIwYYt4XW2yR7POY1cH+CvTabaIB:FCUDCpcdZoAJm1+6T6vB","tlshash":"a453f1fef4a110049801f0be05c13b52e687e306db127458f9ce5b3a6f59f8579992eb","first_seen":"2025-06-29T04:05:43.392908Z","last_seen":"2026-06-02T00:56:56.987928Z","times_seen":108,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/GoldMoneyFrog.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/GoldMoneyFrog.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35457\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4ea694878077802e91e371f6498abebf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNRZqTa4XhZLyapAl1HbyO%2BaglHEcqm%2B8VBNj7pXkMW8CLIhXSC%2BTDOy%2BjkcSKd06xiJEMYpufbXznq2in2Bm7HtdQAyy6IPT6A6eZv9QeeoF2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bec8958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35457,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"59f6ef6b43fc6efaa120ce4b00fefe1c","sha1":"0c83c669e0fc16e00fe9a1b1678518c2d342ec49","sha256":"779632fcd5f98e5e2cdc7347b5277fce1386a86799c455ad397b4ed774a41f2e","sha512":"61a3e1f40af912e71e882b171e88590e7921daa497c763b398975bbe0715dcd090896cc30973d21921c186621c3678a510c2ae2d0a19015878b19041b3d3de6a","ssdeep":"768:HnEZmBkJ+LMstDQhUAwOzSojSdx6lJrTlIV0SV+TUaIqu26nAxaRDIJ11:HRBwattDwwOOASq73l0E4aIqxoir","tlshash":"5ff2f16fd209f48459b0fe75537e49951c1bed286d2d88fa283106b9cace9c807d372e","first_seen":"2024-12-23T04:31:02.910609Z","last_seen":"2026-06-02T00:56:57.040051Z","times_seen":84,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/AutoRoulette.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/AutoRoulette.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28336\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"24a90e99a243826c34ce754049b2c30e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Npx8WpTtCIpUZcmufKB3L94LNSdOqTGeE2h%2FO11%2F3pJ69Tz0sGXr9m6XKJvVeVN024tFC%2FTTFigLMWP7OIRqNTCrBYTdH9QPenSNjOSXJxHJW8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bed2958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"c097d124538129b9c912a2de092fff0f","sha1":"bb03867d79c276e1867e12ed631b4c9d6f2102d1","sha256":"f05e84bbe3858aab95a2f14ff494ff65e814563277d03795575b6ea3d25d4699","sha512":"d0d318da976715dec19149cf322727e27005429664ee2ced98d4099aa7c85eed5475735321f308d566cf867de27a4bfa61881466e69e1c3a13554565da75c989","ssdeep":"384:glhrffamQ71OvML56WS8KdiH0A1oM9eMWUjfISvzsj7lS+PAdKudx1m4LAfTwUYY:8hjfam0potNMAyoj7oKudx1BAfUUYY","tlshash":"43d2d058fa4db088cc89137830ab176c1d717d10fa2494eebde8ad90bda57dc5ac88cd","first_seen":"2025-10-12T11:44:00.720254Z","last_seen":"2026-06-02T00:56:56.93586Z","times_seen":84,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Blackjack-Firstperson-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Blackjack-Firstperson-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28749\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ce98efcde2e2c076eeb4540465ae77b4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybJNrRIiZysk3ihVuwtgUnFDFMdteoLBG6zfkDH6IbCSpXtcLXiWlJkai7hfn%2FKGE9lN421%2FbuSr%2BvBOWOLTFNsl1dX6smrh28RCyipD2Ugi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cee0958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 530x700, components 3","md5":"a0bc1acdadcf87bc2bf6e7ea1becd923","sha1":"40730ef5c3c565d425a9735a79835462e21ef7b3","sha256":"69b225c1a8af0a166775a4b7eb51e065ccc7aa7ae24f41653318fb1cb5350e8a","sha512":"60c09d6e783697f9716eb5f32f407820589a3688a5f431b3365e045e23d17982329129957903250b3935e59047c0d579967d6323aa35c2137be41bc5cda4842b","ssdeep":"768:QRL1xXhNDnkoNi/Uch7L8CucyLfaFpcad9oq3OqaSYK:Q/in7LN2CFwsOqaSn","tlshash":"58d2d03d3a92367cee70f678656dd27230802eb17dba842c0959c75ec030999ded7257","first_seen":"2025-10-25T17:20:34.143256Z","last_seen":"2026-06-02T00:56:56.972439Z","times_seen":81,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/First-Person-XXXtreme-lightning-Baccarat-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/First-Person-XXXtreme-lightning-Baccarat-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50417\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d10f162bacda921e0c469c57e0e6cd9c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5uhMpDZqtwPb8ZR1mF98GpZuwH9nowIalQlKnsPWIw3aqL5F%2BGgJT9%2FUMARGv7te5RcIcQN5TtR4DUrcN1YJ%2FHMc2fFfjhQzZKIjmmy676ry2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ceeb958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"4857ec3f1cf4329151f1b5c627a25762","sha1":"9740c3f1dccde0bd568ad6386d287ec8fc6d28e1","sha256":"aa1b3d90538f187e94c7f515e2a186165a21efa771e1dfedd6e15f1b7dc73889","sha512":"d31e59c3754ab08ab8e5503896d63fd2c5a02b3d93236292e1c1d61ae0351adba646befad7c944e3ddad8dfcd0769d1eb26a3467ef7deff6bc08cfcd7c31d13e","ssdeep":"1536:KAbVYYqiqih97CPDYMzk2uU4Og02ey8FgZ2LQ:Zb9Mxk2ulxeyQZQ","tlshash":"7e33f2d3bcc62ed3b59e6df80c5412d948437ad454c9a41733de85ba3b1a4a1f5fe084","first_seen":"2025-10-25T17:20:34.14106Z","last_seen":"2026-06-02T00:56:56.972969Z","times_seen":81,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/js/popup.js","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /js/popup.js HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8in4MWhvqS8j%2BRqDFnlye9Epa7tI65pbIIL8BnSQxtNHymBjBbRm2fz36C0RyNZoIaLKPP37ZZE5z26hV79ARN4XiSuDFN5LfTU%2BJQ5IZ1Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d2e06c2ca97b6962d59d15bd0fb179ef\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9cdc6a12cf01958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4e81b42b7482e8348bce8e094babe294","sha1":"685d381e88e82f3017e571da801756636ea41eae","sha256":"f74c63b8ef9f236fa287fb6ad14eeedcfc9393ef2f9808630af5a034a40ed59e","sha512":"5c45b1f76ed256e26e8f55e428e6a51e1c4167bbfb831fa3db194b0369bf79758c19679a80fb5e284389f658d077c5c84a541f200b590f4f6e6fee16ebf69f19","ssdeep":"","tlshash":"ac01471e79f03731a5bfa67902df614932325052310ace61b9a8da412f60f094c77dfd","first_seen":"2026-02-12T20:33:44.586756Z","last_seen":"2026-04-04T16:38:40.938559Z","times_seen":34,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Sunny-Shores-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Sunny-Shores-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35294\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cc7c584e81c7b1d095f5c4b5fdb44cfa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8col2%2B%2FKVKEe5A2JeGmX7OU3VcRPhWa2G%2BWgPun0GiFqM7vBeGb6%2BonbNYHVqN4cAXertXjnmAy5EI%2FsiIE8SjkwkOsQ5Sj4oomI%2FqlvSAFD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae7b958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"e8b4b76f0f09ae7edcac0e2683ce1016","sha1":"effb3db4a45d7599a979966dc3dae8e16ba214a0","sha256":"b62f48d1af718dc79b525739d80d9e65355d26d59100c5e2ced8217154eb8026","sha512":"996357536a02ac1aa5787a8620c0b018cf124ede8eb5dddbfd960cbf195c14c704eadde8b61c73260395da004b755fd6ffb59573b0c5de95711a43ef13e4f802","ssdeep":"768:Xcp/2RuzIBlZsHVFz3ZGxZCJItAtzM8oNyxqup+7:Xcp/Ol2VFF4AiiboNy8up+7","tlshash":"15f2e153bc0138139876e3b464ef589ec4b33191ae808e5db45c2f23ef515e90faa8e5","first_seen":"2025-07-01T16:34:54.194099Z","last_seen":"2026-06-02T00:56:56.978534Z","times_seen":81,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/VikingRunecraft-Bingo.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/VikingRunecraft-Bingo.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40620\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a9eba92c0b809c97f9d94f99ebd2e123\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbEqWwBLDYzwVvtEt2cuDKT2WspT5b1KdTfZncbcMQPxqFf%2BVzDjbem90FLZHzb9Qkfbt8mVFjDffhaP65R3iOGFeq499OZgaGZ2hIdQKWNW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae87958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"6ec9fc54e9cad332979c7c27655e2c30","sha1":"0d57d85f2ca989fa0e7bcfd6f49ceb60f101de07","sha256":"c8238e900eef266c9487cfa97d510e37a160511db355a9a54bf34d856e18c468","sha512":"6beec449f4e03061460b0248d3c9eb99a731ad1c50cb57f9d19a07e046b38e01e6f2c3c9fe41a67a5d1f8676524acfd8df0554bebeb681e12fc762973c4fe767","ssdeep":"768:0DuhSACBje3GEjknjTKnPohfbl3Furpq8pjgPNqJBykV0XnyjKhqDyz9BW:0D+C5JEj8jTKwhfJVapqcj6R+0XC8qDR","tlshash":"8703f2453a3623141aa93eb4a3f9693bb50d3185ea3036afcdc32cd5a887d643c0f535","first_seen":"2025-03-12T13:37:00.527844Z","last_seen":"2026-06-02T00:56:57.016806Z","times_seen":84,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/SkyLounge_BJ_3.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/SkyLounge_BJ_3.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90520\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"67fba88255feb88c1ea750391532eed1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cZ7TsWCB7bk4wylMJqPIwtHAnl%2F2zG%2Fb1Cqa4VpUXmDCG83A9Y46Tr8viH3htCD1%2FLO94OoAkBAhU%2BEuys2V%2BECTyUw7kny78rs6S%2BXnYlJrSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bebb958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"4008418a07daecc10a0ff37c5a48a74c","sha1":"c6f92f10cb875e4841b310079b9c7afe738ad361","sha256":"c137e00ad4116d03c5c13481f26329444bc8c90d70df323d212a430a20b8e797","sha512":"d3b88dbbc2eadec0e512ff1573c1d99590568aa54603920f5420df9533782237e5176a0be2d1462df0de64e421eabcf49715578fa59bb8b2f0446ac373efbda8","ssdeep":"1536:ikrVpC8ssMqmXbd2O8P5RZK5NfG9cuxClpiFlP5PeLPiTwLdoVV1ny5zeuh4dKpD:iYVpC87MVXbdAvZkhuxClpin5W+uOVLQ","tlshash":"86930229a2f97851f70d9d988a43ea0d6bd0773230e2396730a2fef12d214571676b09","first_seen":"2025-10-25T17:20:34.137745Z","last_seen":"2026-06-02T00:56:56.963428Z","times_seen":79,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Royal-Joker-Hold-and-Win-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Royal-Joker-Hold-and-Win-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45035\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5814425f555443bf4ad03e8f0fd1b3bf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BcX%2Bnrxp5zoRTOKL3oqQvKtUQxuTvT%2FFM3LVzjxr8sxlYONdRB1DdQIk6PvQrYmSnWg%2FyvGTrRQlO%2FDcgOlXID3tTgEikFGOf%2F6WBeJYkAlkGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bec5958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"79d9a0249d2aea8c6bc19421a546cb41","sha1":"dc131dd6b47b92700c3266fa0815f58142da2958","sha256":"ed5ac9c0ec1688f6ad5da213440d4872a70bf129297f48fa529eb2f2af0e8ff1","sha512":"1c8a38f2aacc6f041e446169244e86474752b9d7e347494c53b2dfcd2dfe6a624df95aa58ca4b9936e202480380e4ab05437b805d77511a35bbc2828a662c4af","ssdeep":"768:TvJCz0WqcIfBj4o0Ct259fYpeFya/uG4FTEGqR991c5B+5i1v1j:TvJ60Em8qtaffXWn9ErR99Xi3","tlshash":"8a13f1d07e5270d39db8e7755c0f264e1133913b3490af46b29e819b9f03466bf79a60","first_seen":"2024-12-25T23:04:03.09879Z","last_seen":"2026-06-02T00:56:56.934251Z","times_seen":99,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Lightning-Roulette-1.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Lightning-Roulette-1.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36509\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1d9761b854b44de2cb7f1d7c6d512da4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPz%2Fe%2FkG4o8YKtz3KB4flO9sRT3sxb8XP%2BTAyxQdvrj9BGHYAzsTT30twZxSKQBY6SmmSj2dHLweE0Q4cVLRM2NlTfr9p5D18s%2Fbn6GMY2as5NQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cedb958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36509,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"c031c18ff0175baaca7dc816c320e213","sha1":"3e95b77a964e111365fa0652b1ff1d4eb09f5c66","sha256":"805d9cb36e8460b2a1a27a3323515be9a675920c442c27b84cdd5ab832725262","sha512":"db737ef92a2d11e00e648e5b2bdc74b2612e66294f823936a4ae7d196323bc8cbd90ac451d9f14522171885f6150cecae4e59c68b9c879a96d22ab26b57fdfb8","ssdeep":"768:0BFaffAScYojzfzB51dk5KvLvuxdNgPvTyZY2/UzD:0raQScYojz7B51dvvvPvTyZY2s","tlshash":"1ff2f11e9d0c8c6796d2be29a8340029eeed584cf2f04f9df542891ff9e822954752de","first_seen":"2025-10-12T11:44:00.539405Z","last_seen":"2026-06-02T00:56:56.971092Z","times_seen":85,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/FP2.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/FP2.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60865\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5f400a570dc46187d869c6541b70fb19\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ojykxcrqeh%2FHghSe919QzBj6TpaqmGrHYCJPTWle4%2BmkJtbqGIp2JFVXHt394R5SijczHvEKgX2NTdxQnEuZxAe5z0gzJDvLC9d1VFAHZfHw%2FtI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cefb958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"e90ef7dd2ab0b8f61294975222eab8c8","sha1":"f2a4f1a206607396ccdd6b9d1b4508f006aee2c3","sha256":"daf66c8d8dd38450238b2e238c4f1c16ca822a689405c440a4b60bd95c0519da","sha512":"cbecb3c25240413ad195f03ac862ea3ed9210e10743b6487dc985d65f73f4de326f135c5735518e1ffa092667e108b709365fd8cb8710dbc05cca74adb860dd7","ssdeep":"1536:qfjaRj6V4Kb/m2NtMeKFRZMgrLRn18M6VttaC:RfKDm2NtM3prpGM69L","tlshash":"915302adf62252914d039a3472f4339df2832daaced44d6f76af8e7817457289f0418b","first_seen":"2025-07-08T20:08:06.764772Z","last_seen":"2026-06-02T00:56:56.939899Z","times_seen":40,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/rouletteFP-thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/rouletteFP-thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40809\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f75d9f9b913082753aba2b06e747784d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orgPlUAKXLG9NaOCirCBHw3cdgnSmxjPposmDI2NpLts04Yt7N6mzRq4m9K7pscjI7QWNPbtiRO%2FlRVWJeQFOW6eOvXijSoBhCQwxOAESMxw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cefd958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40809,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"01a34e21c71d90f28ea856cd8e8f42df","sha1":"68778bddd33c76b9f62d92673caf9c3facc2b6be","sha256":"dfb8b8f95dcd64d98aff7ab47430639c9adc4dff1bddcac0453b469901469914","sha512":"7d4f46847812fcfa33a087d826529e69a6b9b621b88770ef41a81513fe68475bd0dad795cd3ca5aaabf5251e40f8da3157aa6b38afcdc949264e31f4e62931fb","ssdeep":"768:tJg5gy8TF8vfq87mBVp3PYaCUq1ACcOWo9q0muuh/SP8NIQRG2Ha8Y9iu:tJg5UnlVpvdEc897bQSPCHB7aiu","tlshash":"c803e104d8c2a3649a1bc277bdfa6645e7df904028d7984db4ee42dbcf813f24d2e4a0","first_seen":"2025-10-25T17:20:34.150393Z","last_seen":"2026-06-02T00:56:56.956723Z","times_seen":37,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Crystal-Sun-Thumb1.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Crystal-Sun-Thumb1.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48668\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"50d1b5b5c42f07d9d5d70b6987aeeff2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsLjUnL8AUkNWzh%2FQKH9S0iGbdkvntopRhM%2B10ciS1BFOIqUK9BDjRO8CdaUqJ9d%2BHvquofJAVyg9816qHeYmhrqdTRkJFmdhmEd5IRLY3dX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12ae8f958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"b5d54c1e77aa8c603c3694c7084015a6","sha1":"5851811215f396dc52031b369e35716d7efd6eac","sha256":"29bb68de9a2387b7a1d467afd5756b6cdb0282853735fd5e5aaac15db470c4dc","sha512":"19130c1f074e3b99ac144bb01117318b9d7a895bc0115e40f75808331f69a2f3705b23ecd97fe923ef7133e0d8f9708de7dfb0a8671c6a6c929f058f8e45f9a9","ssdeep":"768:x3AeyL6TunV8ZWXE7bzkWY454UC1TJ+OMl4O0OdUrMa/UIzHzL1:hAeO6Kg4WzCUaTGHgMa/UIzTL1","tlshash":"9d23f1467c8a3073b5f9f9bc2ad909967512a107b4b0eaa53bdf89134f24d3198f748c","first_seen":"2025-10-25T17:20:34.092743Z","last_seen":"2026-06-02T00:56:57.031331Z","times_seen":37,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/skyloungeBJ-1.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/skyloungeBJ-1.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55508\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a80c9fc4d73ca4cfa5255ca053aff87d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YA1V8ntbqblB4MxoRcLPbV2nfOOcB1j0H%2FVglUvmjknAkQomBERI9l7QNouPeheXN9FOQmGQCsuTWbUeVaToQynh6eKOeBWuf9Yp78fDXK%2B%2FurE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bead958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"2654a680d766e8e5bbeadc69f977f629","sha1":"3a06c2c4bfa3572b719babe51fa96ae516040a9e","sha256":"33ca681f4a766e2793bb5aeaf0758451043a691a283fbdce9398a63250093459","sha512":"69d970c427d2b0c8f38093b39f734fc8fd6f09e6a7b9f354eed0b590ab974c81fa29c1978e24e917044a2b14c00cd3860ec2eb1a69c0d5bf039b60ab0fa2dba3","ssdeep":"1536:d2EuOdrFmCasgqE5FF0UoE4nPm47e6/2ce:zPPTpsFFeD+SN/2ce","tlshash":"de43f179201a1b815a5ce0f19ef62205a717ce91d453738eb4aeadbec790c83bf1311e","first_seen":"2025-10-12T11:44:00.436608Z","last_seen":"2026-06-02T00:56:56.962909Z","times_seen":83,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/skylounge_BJ2.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/skylounge_BJ2.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96794\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"25929076bdb7bc7c509527190492b4b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BT2xGA%2BGekDolYaJPY1o6%2BbnONIWYDLTZNyu%2FwGESMCMzlN%2Fdqyq2OXPyddPZ3kVh%2FsaJeWPPECBJcUfpA%2FGTHT9s7RxCC7joYAlXC7K%2BTB0xQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12beb5958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"511a00a270fb6839b497efbca28445e4","sha1":"27694dae21f5786df909bca5749200ceb12fc395","sha256":"bbdd6becd6646f5276395955a51667379d26710e6d305c42dd6131888b94195f","sha512":"46c2fcdb0065e352091f43571d5e65237d2298963badea10ae8d2a1478ae8a672e228d987437bc4d00340b9371a4904f34c1cf7cdd8fd2eb22ba4183966242e9","ssdeep":"1536:EFlLW7vZ+wpIb0feD6iBCkJ7gVlkCWBc4COE04UtaK4SIWYcVJHTHXhi:oLkvZrIb029lJU7YceE04KIzw3hi","tlshash":"8e930211a053e4e7733371b58bcb9613d2d6e8425ca1a949b38c5e36dfb423b1ab25b0","first_seen":"2024-10-16T21:07:46.284115Z","last_seen":"2026-06-02T00:56:56.92519Z","times_seen":87,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/coinstrike-hold-and-win-thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/coinstrike-hold-and-win-thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36091\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f8150e9efe151dbac7797965a9f6c075\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Hvm5nEfG6tkKbDyWtViSqBbFnyD6Q8fo%2BFCqbQMf3usoH9jG8YItjrCDgenW7MzZQlpXSO2fs9dDZqUmdncczFZx5hP5eSs6TShQbm3947X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bec4958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"da0863276e6f51c6aa49c181470060ed","sha1":"234e0883b873ced7815c0daa71643e666c325da4","sha256":"ddc5c322ea0e2add6448dd08a843b7bf4232db78bc406ba813a5ff56aa170522","sha512":"5760cad49c40c209aab182c2643cb6b1952d4df5a03259b74ae812596a3af053a375efac32706562c5b0904ba62504a6bf9267cee33224eccee6dda0a5049467","ssdeep":"768:SKDg6TaR245hfviWEhUB7r75+OYllMoz7UgDuqkz7tY/p:SKDNTaRlhXiWJ5r755o3xDZM7tY/p","tlshash":"0cf2f10abec50393bd49d63b1ef8795cc4b248d5a284d11c35bcc2d6af6124685bfe92","first_seen":"2024-12-01T14:36:41.337467Z","last_seen":"2026-06-02T00:56:56.95839Z","times_seen":121,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/FrenchRoulette-NetEnt.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/FrenchRoulette-NetEnt.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48460\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d44be13ea7cc1f1970642394b5afebd6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqAQtH%2FRmJ%2BQjjpH8ez13Y5k7lKY09yTSu3etm8%2Bh5hh%2B2mlpDJFrL2WrEZOPAw13epo%2F3b5jbvLDf%2BDZCbt1NadBd9YV9%2FGHj%2FBGYMBJuWZFzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12cee6958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"f5a68ab0a29816828ad2c227ddf99016","sha1":"4599ef3fa081ef3acac9689f24d2e1ca0653d57b","sha256":"0e64877a0943de569e6b3d95ac76504e68816f35b5b5c7be75f5d189e459d75a","sha512":"511656b60dadf6bc47cb053423536f7ab74c26bf8f9b1484943fce0956d7ab7a9d9af29fbe44e65eec5259246cfa51da429567be801cc20e3fd2b92913288fbe","ssdeep":"768:l1IKpY+NDdXmxdosw21xDfc/WoW7bRLC/Z2wv/1bN4hHUoNv7LzLcCbHGiKkJM5I:l1IF+Bd2xdobEP7lCh1tuhnN3z4CjGiV","tlshash":"9023f104341523c2c869e6f81c051b97e92f9a5fb9c2fe4db3ae5a8a3f007f464e7564","first_seen":"2025-10-25T17:20:34.097537Z","last_seen":"2026-06-02T00:56:57.059593Z","times_seen":81,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/banner.webp","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/banner.webp HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Og23isY6nrI0UeIqT4Tp1XJc2o5rxloYov2UmJllzak51ThMPFQy0m7uZ1ylJy4mNXitc4klN6UeBF8V5rTS1slJ%2FGxohk0BWizCzv1H9arGlm4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9cdc6a1358b7958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (676), with no line terminators","md5":"590e7ef51caf33741038a934f23d58de","sha1":"e8e42d97bce8dc54d994884fbc2df4032ba4d0bc","sha256":"40fcf7befa488ba91d6f8f16196d901405a398d695fa6ceb9faf5fbfff746b51","sha512":"de7196bfbb46b355bf5391d94b47dfd80dd498095ab497ae03f5991647e7ddd295cede02ee27171827d213261d0b0e58077eba366b2771587676fb18f6409d7e","ssdeep":"","tlshash":"b701f9578188121e671690a86687b398b8038c825edbdfa0ed9a6571e8840ea22223c9","first_seen":"2026-02-13T01:31:00.80479Z","last_seen":"2026-02-14T12:02:28.326325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Fire-Stampede%e2%84%a2-Thumb.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Fire-Stampede%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69858\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c0cd23483297ccff42988019898bf16\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVfH3dYUJ9ICjBuFaUndDlNkgzLOjHLWjNK%2B1dVhdFsjG2OXFBuLNpSbm9gkTeTd9WDxFpKmYe0Kh%2F4yvrZ24NDqNAY3BlUmG4YYMIOqA%2BqimrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bea1958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69858,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"f924e87c1b6b4c39a032f473e373f855","sha1":"32f4188938101b2bc251788398ef27333f911507","sha256":"9dff992a01bf6cdd60aeb522b8fabfb0d196373c6cd9760e4e61cc2351a49f80","sha512":"728b07fb1f384949d58ed2f98c373aeb1feae68f860db05b4733a0b1378c112188211c1a16d399394ec85c63b806575d6cdf391a24c78e04af8c8573f04f2d84","ssdeep":"1536:piOuDMDkOprOfr9BSRnff3mIQjpswcCc6zjvRw4f/66F:mDL2xffWIQ06z7R35","tlshash":"456302bcbd741667e2afd17006d91c09dac39e342b9074cd348e7b979b8440cbadb869","first_seen":"2025-10-25T17:20:34.154635Z","last_seen":"2026-06-02T00:56:56.971598Z","times_seen":60,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/Moon-Princess.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/Moon-Princess.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32753\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"23dfccb0ee5b8c12f674a365c6768c46\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnVHL82U1l6wmD39AtZ5WzUEaP5yo1vo0qR89D%2F%2F00yhzbBVJHa%2F5BrtlVwA6K7Z0sY%2BrvqL2ILxICNbTYFcArqjBbeve8iIufUSBOJUWcMIpIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12bea3958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"077277e4c6e05e04c4179a76a9b0b72b","sha1":"6acd3da01ede5c095c050a50a21061bacd1b3d9c","sha256":"7a01891c237464d8855fd8a04700a96590b941fe0da3494804887d4a83617711","sha512":"dabed060fba74fb4e7cd851606b47fde5111e03d0953fefa93846050ba76099654263feb0aa64b4f1f52315d94b24bad1ad98482b286c24759b74df40c616c38","ssdeep":"768:0uN9vLi8fepLOYvYQDH7FjRN6WAlhuFhkNLRUr5Kd6LPD6gi0n:0u3vfeOIXBmHlhokRU9KdwPDzR","tlshash":"56e2e10f9971b023e4aeb8194b4277df685f1ec4e88ad15fa4c6e014ce78bacd664394","first_seen":"2024-12-08T23:04:11.066302Z","last_seen":"2026-06-02T00:56:56.962305Z","times_seen":46,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royalsea-casino.org/images/games/mercy-of-the-gods.jpg","fqdn":"royalsea-casino.org","domain":"royalsea-casino.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royalsea-casino.org/","date":"2026-02-14T12:02:03.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royalsea-casino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:09:05 GMT","end":"Sun, 19 Apr 2026 20:08:59 GMT"},"fingerprint":{"sha1":"EA:CF:E7:50:78:6E:66:C8:ED:64:38:20:6C:BC:9B:43:82:C6:D5:D4","sha256":"24:DA:40:C7:C9:4F:DA:02:5A:62:57:4D:D6:E5:8C:B5:09:C9:43:2D:84:47:7F:A7:AB:6C:1B:E9:61:49:74:6F"}}},"request":{"raw":"GET /images/games/mercy-of-the-gods.jpg HTTP/1.1\r\nHost: royalsea-casino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royalsea-casino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:02:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 160900\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0650d127fc23ca8db34cf061e89d808d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLyWCiaZ4vANS4YsrXpqxj4aP3pFQeHsdbCjQ9t8o0k1BBeks1eFbaSzWCul%2FY%2FMcIZBki5WRiW%2FFgnSIdNURXRH7XHtr0jmrimn62PGcnRkFHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9cdc6a12becc958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 512x676, components 3","md5":"18bbc7bf56e50eed922ec5c5877be0f8","sha1":"b1c129bc1da623d9663c6ef74ed86ad5d31605f4","sha256":"17e14dd347db67462468d9ba7090a068a1c70a0356a2a04f041f647407e37397","sha512":"b16ef16d4ef34a13abeaed1a227e24410833a41cd4dac9720a2ac56217440e7bb1f80382e99fc8e74651843aa42354090b14d8af78862ffc245ac5006d7c40cf","ssdeep":"3072:/zhBxidjJpc3c85ukyJQnAeCT3LHVTQdosZ2yjSP/e3WRulv90Ajgs5:rhBEJReJ+QlCrpTQd3Z2leGw904g2","tlshash":"31f3e0572bf5076be250233624e6af4a5c8f1793e45c50c97aafbc05bf28d420ad3267","first_seen":"2025-10-12T11:44:00.31506Z","last_seen":"2026-06-02T00:56:57.038465Z","times_seen":80,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"royalsea-casino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}