royalace[.]lol

This domain royalace.lol was registered on August 26, 2025 through Dynadot LLC and currently resolves to the IP address 198.18.0.89. The domain carries a threat classification of brand impersonation directed at Ethereum and is linked to the Gambler Scam phishing kit. Its recorded page title reads ROYALACE | Enter the world of sport and stakes!. The domain remains active on the report date of July 12, 2026. Registration details and resolution data provide the primary indicators of infrastructure origin.

Infrastructure analysis reveals deployment of Node.js, React, Next.js, Amazon Web Services, HSTS, Cloudflare Browser Insights, Cloudflare, and Webpack. The SSL certificate originates from Google Trust Services. These components together describe a cloud-hosted application stack that incorporates modern frameworks and content delivery protections. No additional network or hosting attributes are supplied in the available records.

Detection metrics include presence on 2 security blocklists with explicit blocks from PhishDestroy and BLP-Malware. The domain appears in 24 AlienVault OTX threat intelligence pulses. VirusTotal data shows 12 of 95 vendors marking the domain, accompanied by a Gridinsoft trust score of 0 out of 100. These quantitative flags establish a documented pattern of malicious classification across multiple sources.

Exact page content remains unexamined beyond the listed title, leaving operational mechanics uncertain. Defenders should block the domain and associated IP 198.18.0.89 at network perimeters, incorporate the registration and detection indicators into internal feeds, and review traffic logs for connections to the observed address range. Continued monitoring of Dynadot-registered domains with similar threat profiles is recommended to limit exposure.