{"report_id":"6aa19031-9ab9-48b7-befc-87e4d801edcd","version":6,"status":"done","tags":[],"date":"2026-02-03T09:38:57Z","url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/#/","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"title":"lottery","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T09:38:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.usdt.royalinvestment.xyz","ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2026-01-09","domain_rank":0,"first_seen":"2026-02-03T08:56:09.291489Z","last_seen":"2026-02-03T08:56:09.291489Z","alert_count":0,"request_count":48,"received_data":10517480,"sent_data":23583,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"numberguest.shop","ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":6613962,"first_seen":"2026-02-03T08:56:09.280221Z","last_seen":"2026-02-03T08:56:09.280221Z","alert_count":0,"request_count":7,"received_data":1837,"sent_data":4300,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-01T22:30:37.402665Z","alert_count":0,"request_count":1,"received_data":30596,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":895,"first_seen":"2020-10-23T05:27:50Z","last_seen":"2026-01-28T17:10:14.89477Z","alert_count":0,"request_count":2,"received_data":650,"sent_data":1096,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-DailySignIn-96ec389f.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"ae9ed00ccdcc064d7978f24512d6a372","sha1":"51c5f811c0eaad2126d503092f2c172443ce0ce4","sha256":"17435105221c091111d4fadc4250969bbf2ba72750506dcdf31d704745a279f7","sha512":"bb32fe8a39a1b139b09bda9ef9d0314657c6873f55ee30e0b28b93fb8a1996419c467a264168aeb4a20c594473e08f53bd2a6f2f78f5d5be2bcc6d621908b1cc","ssdeep":"192:HoHN5gJZRDpPhDpn1rp+N8MjioexKIGvn8MSbmxGYasrOgDeYfxr6JPe:HGsPDpPhDlptMMs8XEZrpqMx69e","tlshash":"6212a65db64eea7ce2b398e8a008180897196f8ad1f485a1b1dcbc150392d74f3d6f2d","size":9080,"data":"","first_seen":"2025-05-14T10:59:31.217095Z","last_seen":"2026-02-03T09:39:01.130063Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/common.modules-219f1756.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"3d076b9771c154086650a4561746485e","sha1":"96a23bf78304ea0f3e0dd6cb73278a45cd6f26f2","sha256":"15d14d289ea1c3efb4aadff8d010fc7dc5ef06984b85cb9792cffa58ea53b29e","sha512":"24b42ebeab2957fda6db2d42b73037e98a12563e0583ff6a6c26c76ab1a7536fd71ad0bb42717234ebf66a6eb20a81a1bd8af91a043fc13bf5b338defcef1055","ssdeep":"12288:jErZcuMvQTXvACwbthtKE97Id9a4VzS9qfIYsmsiOuCox2Jvms+cHkE3:jWcuMvE/xwBN4VzcqfITm7aox2l","tlshash":"8ff438d57292b42243f71ae9507b0002f2391a58b40dd4e4f16cd8eb3eba85952bbf7d","size":728053,"data":"","first_seen":"2025-05-14T10:59:31.215561Z","last_seen":"2026-02-03T09:39:01.14355Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/en-43c55ab8.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"fc708c8f2193cfd265b73ba337300790","sha1":"24acf09a4c87a0b4c541b43e991d95e415809ed7","sha256":"468402eb6d40b1efa540e0f08ffe70919ea58e99c526b6cb1c309555b6f9fa4d","sha512":"3fd91dd1fbcd260e6bcfa293512f2589a370c7dd496126d7490cf6f15b957fd97e79aaa477c056a203607642074d232a01ab15c4de6dabbfff039664818012f3","ssdeep":"3072:349ogJjkyetZLyCd5ucB93TDRtpPKBI12WT6gR6zw1v8:3Ijk71oIwWf6zW0","tlshash":"f4e3f65eb30a09fb1d930351b5ee26e166fc81e5c26581294cdf432823d787eb2fb598","size":149409,"data":"","first_seen":"2025-05-14T10:59:31.250637Z","last_seen":"2026-02-03T09:39:01.125026Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-Championship-f7467ceb.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"2da2d7eb23aa3baaf0127c43815a23a7","sha1":"47c9e301807154a5bd39a9c106c3d0a7387c014a","sha256":"c34de9d8820523c573565f1ad9f66f0c8c791f9022ffa1fb60d760496652788a","sha512":"d90e70c7ccb95d7dea0cb654506e9d6b83436b7aec573d7da71a209e1ab8d0f768737ffa9660d188282ac4c7771844e5b8f9be553af634efa7095db73f4ffaa8","ssdeep":"384:hEE4i0cNX5Fa7F5XR/eCZWL3AB1cQnF9CaNlP1jNErLxKXzniRB+7:hEE4i0cNX5F8F5XRGCZWL3AB1rSaNlP9","tlshash":"9562fa98b44a5e7fdbf641f1501a1400921c7fab602484e2f0feed312796cb477aaf59","size":15912,"data":"","first_seen":"2025-05-14T10:59:31.255085Z","last_seen":"2026-02-03T09:39:01.12237Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/index-33345150.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"815b7093cb9e6f155ec5c314cf364a3c","sha1":"44cfe82fa794f03df8f991c83e65d7fb5c830d5d","sha256":"a0fad6bac834d0f7a6746fc7d86926366d235eca134caa2eb69981c9b89b697f","sha512":"b0b2fb37a9da2f10a616ebfc31a4b0a1eeba9dd4eab184df5a3b7f045af8f90008d1fe8768020ce925f7be925b14fa6f9b45ec9ef39b2d422c80375f9474f316","ssdeep":"384:+0nFRPOM0AJ1O+FEAkGI8h7Sc1mg00QhBkxE6XbuUVAMYy1bv3K03/aQftqb4Q:FFR2M00O7AkGIgWc1mnPBkxE6Xbuev1I","tlshash":"8ea21a60b04e99bff2f308a47525640472082fce4214c1e1b5bead2417eadbd379fb29","size":21441,"data":"","first_seen":"2025-05-14T10:59:31.205812Z","last_seen":"2026-02-03T09:39:01.124299Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-ActivityDetail-346b11b6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"300856929ff6ed279116f7eaf38ac052","sha1":"286bdee0715ad619bfc1b8716436af6224c88199","sha256":"9722dc58270b4ea71980a738861924b9237d3ad79e0a44331cd9220be15ffbc9","sha512":"d63b2f387c5fc1ad3a9e0926fc10844510b5ec3c366cb66f185d0ab7ad96082ea43fbfe3b6c61ba004aa4b8231ef89a612720fb45621115bdfb913ede0eee872","ssdeep":"24576:TUAyuur6Ut/ovd/fiWxD8MaKiT6THavdj3v+rqRGuU+H+e47sdA:v3E/t/bWxQHKBTHaJ3v+n+H+DmA","tlshash":"f1b59da04234159ca159666cfe7bf8b0077e23b9b186c35869bf5a34e052dc9e90fc7c","size":2385611,"data":"","first_seen":"2026-02-03T08:56:15.270921Z","last_seen":"2026-02-03T09:39:01.160756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","size":30200,"data":"","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-08-18T05:30:07.729515Z","times_seen":5310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-home-other-ea059356.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad37d4c1737cbce327cadb42e72da08c","sha1":"a8154698160af6af2de2ec68be19871e4166c36d","sha256":"437e056639a5b0ebe0607283bbb3adccd5eba909e57e72088a88cf7102e25271","sha512":"9c99b77f084bd683857e85e8da1fb167c9836c7b0b69026c0f8afbb8f7de7bff64e924e1345eab4353b9f07cca6f2bbbdcfbb1cc066462234809108baeb14782","ssdeep":"768:9OUoBr8/VKRkdIZbZjMtsjglhBwE86Jqpp6xmP7AXaDJuUM+cCMW:9wbeLkJP7Aq3","tlshash":"cbd2c668f04a9ebdf2b2d4a864181805662c2fcfa20484e2a6fddd1417d7d7857fe722","size":28394,"data":"","first_seen":"2025-05-14T10:59:31.223691Z","last_seen":"2026-02-03T09:39:01.138529Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e2b36c6c738e945a9da1fa1a1dfdb81","sha1":"44f3227dde13781038a525edc2c569b8b7bf89e1","sha256":"4d20df576bbeb05eee1d1fcef223c4c022a1e2c835d2e9baa57baac17bec3658","sha512":"0d3a48755292f88e5da7e90fc35758574a23d56934d1f4e79d0940344ba21d3a4b85a183efd9f41d51bdedfdcbcf92791658eb00937dc2ab9b3fff8021bd8145","ssdeep":"","tlshash":"510158e1d2961c17c9226d6c9c5a91c8368840fb4f88f910b78f894d3f3d52f923256e","size":717,"data":"","first_seen":"2026-02-03T08:56:15.271766Z","last_seen":"2026-02-03T09:39:01.161369Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-FirstRecharge-a0b117e6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"9b275b6fb676a7515fbd807deacc2eb2","sha1":"819a561040cb196b714900929f8f715e003fe998","sha256":"931a847e4e196dc267fa9020fc53e4cbeed7c44160b146582612b6f196ad3584","sha512":"3299d0afe92e869db58bf40d8d9fcd19aff530e93142281afdf8f09555f5c05010834d826f161ab377e65bf6d6d6bb5dc923175133147c236b9ae5e09cd4924c","ssdeep":"96:l2ZCx+Rx011QJZrmMat+heWhr8taQrK8YGKRUgDqR:l2cvDQJMMcutYK8RXoqR","tlshash":"19a1c640b045dbfdeebb4c54b4194408130c6ecf92258ae0baedbb3003a6ea6565fb25","size":4961,"data":"","first_seen":"2025-05-14T10:59:31.207087Z","last_seen":"2026-02-03T09:39:01.131782Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/native/index-a8a2a0fc.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"ef26fffe5e90f5a8c40bd67d1b67f65f","sha1":"0a23c16580492eb07add646afa3e644ee137e4fe","sha256":"e60a489ad783e54cefaa6039b9047d9f807fc8d863ffa480ed04dc42101da4e9","sha512":"0abaaf1f28014e7049ccae54751dfd651c1fecf773414ab7ac6b9ddeb8af66f68f91a8e9c23f5a9df86a4457d3fc7b098299d9645cdbc1df39dafb2e537e89d1","ssdeep":"192:CNImAP5Za3BjVjIEtdFCDRetQeExLK5tWsqssAU:CNIL/a3BF9dAdMQHYWos1","tlshash":"18d1c5944715f02c58a9c14a82cf6d249cee0ee097c8cc405f99c3ca4fee1597ea5bba","size":6706,"data":"","first_seen":"2025-05-14T10:59:31.241851Z","last_seen":"2026-02-03T09:39:01.159792Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"OPTIONS /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://www.usdt.royalinvestment.xyz\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9c80f4c409027127-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-Championship-f7467ceb.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-Championship-f7467ceb.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5326\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15912,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (15847)","md5":"2da2d7eb23aa3baaf0127c43815a23a7","sha1":"47c9e301807154a5bd39a9c106c3d0a7387c014a","sha256":"c34de9d8820523c573565f1ad9f66f0c8c791f9022ffa1fb60d760496652788a","sha512":"d90e70c7ccb95d7dea0cb654506e9d6b83436b7aec573d7da71a209e1ab8d0f768737ffa9660d188282ac4c7771844e5b8f9be553af634efa7095db73f4ffaa8","ssdeep":"384:hEE4i0cNX5Fa7F5XR/eCZWL3AB1cQnF9CaNlP1jNErLxKXzniRB+7:hEE4i0cNX5F8F5XRGCZWL3AB1rSaNlP9","tlshash":"9562fa98b44a5e7fdbf641f1501a1400921c7fab602484e2f0feed312796cb477aaf59","first_seen":"2025-05-14T10:59:31.255085Z","last_seen":"2026-02-03T09:39:01.12237Z","times_seen":6,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/crown2-c8aced52.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/crown2-c8aced52.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2359\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 77, 8-bit colormap, non-interlaced","md5":"2541928d04f26dd7123468cd22583620","sha1":"233a41f52e55a7f16434f306404a723abfde1a27","sha256":"c8aced529dc23f6a4f9639e2f8525a1c8c75a59c6b540d7bc1a57d809a2c92d8","sha512":"c1be1a075e00d5c110951cef087a0fb28f9d1e0927970cdd8f4b69f00e040319635d14b81826c109ba6524fc800f1468437ccf82d41943c72d1ad01ed13b55a1","ssdeep":"","tlshash":"15411b4bc0606d644829c6bac752d020eeb57a8cc331cb1749162dc15e6ee7d69958bb","first_seen":"2024-06-12T08:59:31Z","last_seen":"2026-07-25T05:09:27.719313Z","times_seen":54,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/index-33345150.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/index-33345150.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7712\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21441,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21385)","md5":"815b7093cb9e6f155ec5c314cf364a3c","sha1":"44cfe82fa794f03df8f991c83e65d7fb5c830d5d","sha256":"a0fad6bac834d0f7a6746fc7d86926366d235eca134caa2eb69981c9b89b697f","sha512":"b0b2fb37a9da2f10a616ebfc31a4b0a1eeba9dd4eab184df5a3b7f045af8f90008d1fe8768020ce925f7be925b14fa6f9b45ec9ef39b2d422c80375f9474f316","ssdeep":"384:+0nFRPOM0AJ1O+FEAkGI8h7Sc1mg00QhBkxE6XbuUVAMYy1bv3K03/aQftqb4Q:FFR2M00O7AkGIgWc1mnPBkxE6Xbuev1I","tlshash":"8ea21a60b04e99bff2f308a47525640472082fce4214c1e1b5bead2417eadbd379fb29","first_seen":"2025-05-14T10:59:31.205812Z","last_seen":"2026-02-03T09:39:01.124299Z","times_seen":6,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/en-43c55ab8.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/en-43c55ab8.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44310\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149409,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65496), with no line terminators","md5":"fc708c8f2193cfd265b73ba337300790","sha1":"24acf09a4c87a0b4c541b43e991d95e415809ed7","sha256":"468402eb6d40b1efa540e0f08ffe70919ea58e99c526b6cb1c309555b6f9fa4d","sha512":"3fd91dd1fbcd260e6bcfa293512f2589a370c7dd496126d7490cf6f15b957fd97e79aaa477c056a203607642074d232a01ab15c4de6dabbfff039664818012f3","ssdeep":"3072:349ogJjkyetZLyCd5ucB93TDRtpPKBI12WT6gR6zw1v8:3Ijk71oIwWf6zW0","tlshash":"f4e3f65eb30a09fb1d930351b5ee26e166fc81e5c26581294cdf432823d787eb2fb598","first_seen":"2025-05-14T10:59:31.250637Z","last_seen":"2026-02-03T09:39:01.125026Z","times_seen":5,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-Championship-f7467ceb.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-Championship-f7467ceb.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5326\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15912,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (15847)","md5":"2da2d7eb23aa3baaf0127c43815a23a7","sha1":"47c9e301807154a5bd39a9c106c3d0a7387c014a","sha256":"c34de9d8820523c573565f1ad9f66f0c8c791f9022ffa1fb60d760496652788a","sha512":"d90e70c7ccb95d7dea0cb654506e9d6b83436b7aec573d7da71a209e1ab8d0f768737ffa9660d188282ac4c7771844e5b8f9be553af634efa7095db73f4ffaa8","ssdeep":"384:hEE4i0cNX5Fa7F5XR/eCZWL3AB1cQnF9CaNlP1jNErLxKXzniRB+7:hEE4i0cNX5F8F5XRGCZWL3AB1rSaNlP9","tlshash":"9562fa98b44a5e7fdbf641f1501a1400921c7fab602484e2f0feed312796cb477aaf59","first_seen":"2025-05-14T10:59:31.255085Z","last_seen":"2026-02-03T09:39:01.12237Z","times_seen":6,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/start-15844f4f.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/start-15844f4f.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 924318\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":924318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 662 x 773, 8-bit/color RGBA, non-interlaced","md5":"d2c33fcf45bb6509b2575ccff4d121f9","sha1":"bf1b807d4eb1a42431e5a9443fd2a9269968657b","sha256":"15844f4f62419b068dd6d0febe2a9c83aff61816f6110cd7540a08d4199a9161","sha512":"97e3cc85162ec78a2fbb389fecdf7be45d8c65317bebd4186cb346ceaf32dacb4009102246163456b6a50c1a71350dd471f665b7393ed1af088b736224b90e2b","ssdeep":"24576:OMSw772k7vIG0v8dKwM2oG2VyBeqIPiC+pWAP1a:OMSodrh0/wM2/2VyQtPi38A0","tlshash":"e5152373e5806124eb31f91958c0bb9912305b686dbb1cc31f89bae88efddde64b50c1","first_seen":"2025-05-14T10:59:31.208437Z","last_seen":"2026-02-03T09:39:01.12605Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/border3-cfec4a7d.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/border3-cfec4a7d.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2533\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 127, 8-bit colormap, non-interlaced","md5":"dcd4acf3159dcd072c00a80b7d89382f","sha1":"f540a01b972ab1cd201d4d27a4560211dd9df129","sha256":"cfec4a7db308e0290ea70aec2e34d7cce3745ac507b5fd49dc755ad765c07a0e","sha512":"ffa4dd0848e9bfc167a600f9500e9264723227580470013a4f21e3506c4c6d915ca0cdfe282db6c02e9afb40644358fb4449069917e6ec9b1136e2dbd3fbce7f","ssdeep":"","tlshash":"fa514dd67610c07ca24477091968b34f4f3458ac9f876171e3cee5e2317546c1b8e3e5","first_seen":"2024-01-27T05:56:09Z","last_seen":"2026-07-25T05:09:27.646383Z","times_seen":73,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/crown1-3912fd85.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/crown1-3912fd85.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2285\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 77, 8-bit colormap, non-interlaced","md5":"c04d211dbced60dc8e10cbe1ff4af16f","sha1":"ba16a540208913337752b4e31fad34323ef3aeea","sha256":"3912fd851fc28dd9611a395152e530b2a81b5bf28a64d3ac64e13e157f6731ea","sha512":"c13844429f58f37d92bdc8815247b33a01b12efc8159b97d933bbf5ef69de3f59393d500930660c7ac947b2423c2fb1bde23dc6a8030be39153f290df3e9c36a","ssdeep":"","tlshash":"e24119b1501be0ab883780b94ce8667bd2f302391d0d3e5336f5e15a7a93169a6f44f9","first_seen":"2024-06-12T08:59:31Z","last_seen":"2026-07-25T05:09:27.686266Z","times_seen":56,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/crown3-2ca02146.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/crown3-2ca02146.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2334\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 77, 8-bit colormap, non-interlaced","md5":"8369341e5cc84f678767063054e848d7","sha1":"ec0d6f8e4c79fa7ff56404aa735377c4185d3132","sha256":"2ca02146fd10b1c81252f0e31c202de035558fee3cb015219b27fa9ec65bbd61","sha512":"d9d9594ff4e77abfc55c1806ac59008f5c483ae9703bdc8263000e6ac220af1d4828cb7898e9dc5fec92823720b89035231d635f84073d3e04802da831c4fcba","ssdeep":"","tlshash":"c0411ad46070de0ae33b4b6cc6fa1a4953ba4e1f2c84d03a9ba358538d59c8346ba244","first_seen":"2024-06-12T08:59:31Z","last_seen":"2026-07-25T05:09:27.647242Z","times_seen":54,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-DailySignIn-96ec389f.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-DailySignIn-96ec389f.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3045\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9080,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (9016)","md5":"ae9ed00ccdcc064d7978f24512d6a372","sha1":"51c5f811c0eaad2126d503092f2c172443ce0ce4","sha256":"17435105221c091111d4fadc4250969bbf2ba72750506dcdf31d704745a279f7","sha512":"bb32fe8a39a1b139b09bda9ef9d0314657c6873f55ee30e0b28b93fb8a1996419c467a264168aeb4a20c594473e08f53bd2a6f2f78f5d5be2bcc6d621908b1cc","ssdeep":"192:HoHN5gJZRDpPhDpn1rp+N8MjioexKIGvn8MSbmxGYasrOgDeYfxr6JPe:HGsPDpPhDlptMMs8XEZrpqMx69e","tlshash":"6212a65db64eea7ce2b398e8a008180897196f8ad1f485a1b1dcbc150392d74f3d6f2d","first_seen":"2025-05-14T10:59:31.217095Z","last_seen":"2026-02-03T09:39:01.130063Z","times_seen":5,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-FirstRecharge-a0b117e6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-FirstRecharge-a0b117e6.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2123\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4961,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4895)","md5":"9b275b6fb676a7515fbd807deacc2eb2","sha1":"819a561040cb196b714900929f8f715e003fe998","sha256":"931a847e4e196dc267fa9020fc53e4cbeed7c44160b146582612b6f196ad3584","sha512":"3299d0afe92e869db58bf40d8d9fcd19aff530e93142281afdf8f09555f5c05010834d826f161ab377e65bf6d6d6bb5dc923175133147c236b9ae5e09cd4924c","ssdeep":"96:l2ZCx+Rx011QJZrmMat+heWhr8taQrK8YGKRUgDqR:l2cvDQJMMcutYK8RXoqR","tlshash":"19a1c640b045dbfdeebb4c54b4194408130c6ecf92258ae0baedbb3003a6ea6565fb25","first_seen":"2025-05-14T10:59:31.207087Z","last_seen":"2026-02-03T09:39:01.131782Z","times_seen":6,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/svg/home1-14aaac97.svg","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/svg/home1-14aaac97.svg HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 02:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11132\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e1cb976370f3a392f30c4f52a288368","sha1":"bc9d9889e04795002eff1d9a0338b7ffe39848ee","sha256":"14aaac97c611722f444b96a3786d9dc5c29fffee94541b4123da1e5bfc6f18ee","sha512":"19a1fb5a46abefc31260ce708c6c2b7785e9530dc5007a1a2ba2463d759896762aba7e79b1c9363e2bc05ac949650416a169438b67ef250e0c55a2321809de81","ssdeep":"384:ZTvu8ZKUkTVuvKr5z0UWDb1gGL63+jcptEmTo28eBMeO5Z8Zl3135ZLevbeO8sc9:lunjT4l8tEmTJZA+5","tlshash":"b643a4ad7e7e9c5df25482acdbe188a0176e81b3f040c1258d5d6f2a90298c1f51f7ee","first_seen":"2025-05-14T10:59:31.209884Z","last_seen":"2026-06-07T14:55:29.7111Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/svg/home2-44a54115.svg","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/svg/home2-44a54115.svg HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 02:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19749\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cf2071fc28b72cd0a40dce5ce181ec0","sha1":"f1df1b529807e7fabf6a3c979e03c50427b8be15","sha256":"44a541157ee848cf554bf5a2008be68278e83acd264ab7b0eaa5d13e8d0f2d80","sha512":"a1a56f7e2769473e1ba3e5a962d1ee8fe0ae60e3560480e783eb299be9cde7c7f8b5830898c6e666492c96ac991386429a587b5736b9a81ea92c6869c0e6e99c","ssdeep":"1536:5IWz73J6auJQC6osZmDD7Qu45OVM0XlYXFVXVY:Kr","tlshash":"7583faed7b3c5cfdbde192f8eb9584a4236dd1b6b0404128c99c2f1d502ac89d81fad6","first_seen":"2025-05-14T10:59:31.261105Z","last_seen":"2026-06-07T14:55:29.707063Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/common-8abe0886.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/common-8abe0886.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 54980\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232053,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"01cb3dd71e8ba06265ef58e756c7544d","sha1":"2dee98431ba64c10dae72cf7e542e709c0de638f","sha256":"8abe08868a618d0eac1ada4986a3b6678902f6113a7b7e8988a27b81940db94f","sha512":"aca5b677b94465a9afb8b8155dae2eb461de14f82d5517537d3481e7607c0db074a347e5c60dd514567cd7cb88ce7ca7628680719e78fbc79d975411a443d8b6","ssdeep":"1536:lXIyNBi3MFYaQj7FCwsBlDOFIxuVoxJKC4ShQ1AQf8aPzBeVzVYrbEB:lhNIClDsIxuVSuNfNBbU","tlshash":"7f34916aa69052bcaf17f9749bcb56d8f23ce932ac01dae8f10051184fc7bf50663617","first_seen":"2025-04-13T11:49:28.99351Z","last_seen":"2026-06-07T11:56:58.075907Z","times_seen":27,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-FirstRecharge-a0b117e6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-FirstRecharge-a0b117e6.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2123\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4961,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4895)","md5":"9b275b6fb676a7515fbd807deacc2eb2","sha1":"819a561040cb196b714900929f8f715e003fe998","sha256":"931a847e4e196dc267fa9020fc53e4cbeed7c44160b146582612b6f196ad3584","sha512":"3299d0afe92e869db58bf40d8d9fcd19aff530e93142281afdf8f09555f5c05010834d826f161ab377e65bf6d6d6bb5dc923175133147c236b9ae5e09cd4924c","ssdeep":"96:l2ZCx+Rx011QJZrmMat+heWhr8taQrK8YGKRUgDqR:l2cvDQJMMcutYK8RXoqR","tlshash":"19a1c640b045dbfdeebb4c54b4194408130c6ecf92258ae0baedbb3003a6ea6565fb25","first_seen":"2025-05-14T10:59:31.207087Z","last_seen":"2026-02-03T09:39:01.131782Z","times_seen":6,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/logo-e926b199.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/logo-e926b199.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14485\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 65, 8-bit/color RGBA, non-interlaced","md5":"7d0e5b7b44502d84bbcc999269529c73","sha1":"e6e73f18442ae0c1f9031238fc9bfc9a07459025","sha256":"e926b199fd64bd5cc11eaff0bff1d4d69ce8b9d614b9b58a2993ba96050fd521","sha512":"2839503182b062202ec13f336a710c60bda676feced7293f33ed6ae222167c88454244f139d0e0fd11e464bdd30a4a56eadb120502f52721ca969fe91a9647d1","ssdeep":"384:tiU3BpQ1tcbMdM++hnc9ExCIdryEPLc2Bw6jzARIr0esM/b:wU3BpQb6WunKYdrhPLcSY80e9","tlshash":"e052c0d1499ac1f0173c80520d68beed5ebae08031d185feb9a8c04f8e256e9c176a4e","first_seen":"2025-05-14T10:59:31.251462Z","last_seen":"2026-06-07T07:52:42.620611Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/t6_promotion-a029ef45.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/t6_promotion-a029ef45.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2091\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 41, 8-bit/color RGBA, non-interlaced","md5":"0556e1cb6e3330fe144925ee1ed713be","sha1":"4636994b422ec462862e82f62584e8d2c784f7f2","sha256":"a029ef454c1ef5d0396d649473108bfa4c172f9869b349f4cf4415029a26d4fa","sha512":"8932dbf5d728348e9c6019742e14803cbfb6c2a3266f83ba24d6c21dbe8228897f370fdf6e8acc2508b01b07332d7170c0b9519cd7bcf43857248a8257f7df84","ssdeep":"","tlshash":"e5413af8f283a674e14496c577e26303cc30069a3db1dc389422ddfd2b669793955f81","first_seen":"2025-05-14T10:59:31.219502Z","last_seen":"2026-02-03T09:39:01.135065Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetBannerList?cache=true","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetBannerList?cache=true HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetAllGameList?cache=true","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetAllGameList?cache=true HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/page-activity-Championship-00c3e011.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/page-activity-Championship-00c3e011.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2805\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19781)","md5":"3a060da2d915afd609e6ec9a1618ec00","sha1":"febaa9987fb3869fe92cb33d31c5b1ea5553720a","sha256":"00c3e0117e6ac20ba968d773c1b51e94c08fe2b3f19fd320c0438cf25dcf297f","sha512":"7afd8647db87ef012d22e6fb12eaad04a54da8919e52fa5c86d06fe1b4d17093eeb46a81d638ec29d49e87bca2eae5f9143822f478affbc8dd19ff64d8b5c6de","ssdeep":"384:mYVeePtwdoixmHvdTkLxux6YWOj5sxJe83N:Iv2hkxjJdN","tlshash":"0c92531f7144231de437ddb76fa8a7698214e932e5422bf868138b11cfdbb933954b0a","first_seen":"2025-04-01T19:05:56.497843Z","last_seen":"2026-05-02T07:28:29.758061Z","times_seen":30,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetDailyProfitRank","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetDailyProfitRank HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/avatar-2f23f3bd.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/avatar-2f23f3bd.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 175333\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":175333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 284, 8-bit/color RGBA, non-interlaced","md5":"451c093ed357f3d62a4565a9c228f2ac","sha1":"31acc831d52af7ceaa8be5d341008139fc1e55c0","sha256":"0e9d0afa81a6d071d8dda8329a9f63fb5a8d2e429f56b9c92abfc13103132dbe","sha512":"fdc1bb3dda58a854dd4cbe5a120ed2607a75403ee6686183a822186652f8a8b0cbfb44451773c3f63599f7828b26b082e19ade5e29e950684966d2f965a2f7f2","ssdeep":"3072:9tvDTs4IT03SAz08VibT2/kjPyyPZHHF+NOASudGTDPYL9DpQK18HiBArcn:fTM03Lz5gT2/kzhz2Oed6D831OiBocn","tlshash":"cb042359ac4b39f8ed364fcb6ab5b293b4bbea430650d5dfd1b38a4244344076fd6220","first_seen":"2025-05-14T10:59:31.187453Z","last_seen":"2026-02-03T09:39:01.136733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetSiteMessageList","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:35.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetSiteMessageList HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T09:38:32.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 01 Apr 2025 07:41:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1043818\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1953351,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (14717)","md5":"a49c83e6869b28decd228da3dd155c4e","sha1":"50939754cf0f4500c412423cbe0eec7c335304ea","sha256":"ca7d2577c359f2ef6152b24f47d59f869da96242d037ac422a7c8c3861c2c2fa","sha512":"bed6bb0e8b534a88878728bb36b746cb1c322f0a1b32c669730bacb74175fdcfa37c82fa7c5e48fbb018438a8618880fdb82d213d9d21bf34eb98e5578a1a10e","ssdeep":"6144:9HHF991LIT4I6EOz9whmaD4qBPwETzm0GG930THeR5e2ORavoNHjo:9HHF991Lw4D+maDFRT3C+R5e2ORaveo","tlshash":"c1254ba463f892bcf501e3b8db29a4743e2a18f77a40c098f6ad1d549b1109ecc5bdd7","first_seen":"2026-02-03T08:56:15.256766Z","last_seen":"2026-02-03T09:39:01.137438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":57,"dns":1,"connect":27,"send":0,"wait":32,"receive":203,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/page-home-other-4990e5c1.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4646\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39720,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39719)","md5":"ece27b219209d091ec7a1e0a22d0db8b","sha1":"ac7101d62cb320a4addc912d94d08f7e7a4493ef","sha256":"4990e5c1e54f6449dd3351b5f50d6c2ba9ea1a9151392472217abea0848aae24","sha512":"1d6285f5b9ef18e306e6c876a0d44b50568afd4b03e5141cf6ac27da73c94c816d8f4cf25dde4d39b09f6284574daceda9c4a8432cff1ecbf440fae49daaa87a","ssdeep":"768:eIU4vHGnec9QUFxvHzOROngv8YxW9O7/IJ0oNY6H5mx1Hlt:eIHkHY/HP","tlshash":"4b03531b7255270db033cdaa2f691b698214dd33e14637f89913af25cfcbb87266424b","first_seen":"2025-05-14T10:59:31.242888Z","last_seen":"2026-02-03T09:39:01.138006Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-home-other-ea059356.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-home-other-ea059356.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8997\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28394,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (28310)","md5":"ad37d4c1737cbce327cadb42e72da08c","sha1":"a8154698160af6af2de2ec68be19871e4166c36d","sha256":"437e056639a5b0ebe0607283bbb3adccd5eba909e57e72088a88cf7102e25271","sha512":"9c99b77f084bd683857e85e8da1fb167c9836c7b0b69026c0f8afbb8f7de7bff64e924e1345eab4353b9f07cca6f2bbbdcfbb1cc066462234809108baeb14782","ssdeep":"768:9OUoBr8/VKRkdIZbZjMtsjglhBwE86Jqpp6xmP7AXaDJuUM+cCMW:9wbeLkJP7Aq3","tlshash":"cbd2c668f04a9ebdf2b2d4a864181805662c2fcfa20484e2a6fddd1417d7d7857fe722","first_seen":"2025-05-14T10:59:31.223691Z","last_seen":"2026-02-03T09:39:01.138529Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/svg/icon_win-91513609.svg","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/svg/icon_win-91513609.svg HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 02:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1702\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6809,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73a7a7cae23d7bef7d8ae2d56892b76f","sha1":"ad63febf9f184ab411f2cfd2eb485bce1a6f005b","sha256":"9151360997a09b4cdfe65cead93ea349e0e51841e02a4034ef66b59981cce4ff","sha512":"31f4b2f7ba1100ba9baa82118207d6c83bea9fe6a396114b36a6926738a86117378d5c610f86b7bb96c3c5816d6455520cdbfa1c2f7b5811111fd0d812da79af","ssdeep":"192:yzUvZDMwvtvcRZDMwvtvGS+kQhjWCVDGo9d+npmf5j/:yKNliNlGS+jvDG8+npmx/","tlshash":"30e197f9dbbbb4e5e300e3dcc404c4b53a6629fb9b46ce6291956e5d67000dd048d9c7","first_seen":"2025-05-14T10:59:31.25613Z","last_seen":"2026-06-07T07:52:42.612677Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/t6_main-bad84e0d.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/t6_main-bad84e0d.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2239\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 41, 8-bit/color RGBA, non-interlaced","md5":"177e416db6fc8b8da10bdebdce6fd62e","sha1":"c2c9d89a329a567981b59bd72a6cdbb0ec6d6edc","sha256":"bad84e0dbad156eec100c0637708a1afbeec8ac988c92b0af25bf903aac54ccd","sha512":"91a2bee7be344543cfa1e567fb424d6616ace25f76d4bc18a3e58d874f88c0dace6f8fc6dbdda954c69262d95acd12bf7e9143038aeb40e40c6c9daa3a6a5d3b","ssdeep":"","tlshash":"a64129f9393a133de1a45a74192294d8dcac0578ab007aac498cfba02804c27df4f311","first_seen":"2025-05-14T10:59:31.245346Z","last_seen":"2026-02-03T09:39:01.140058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/page-activity-DailySignIn-f2e7cb06.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/page-activity-DailySignIn-f2e7cb06.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2287\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14686,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14685)","md5":"4db4869f84ff9261fced589a6655f5c9","sha1":"c4a1d3293882048f57ce128ecd55324ff14a8036","sha256":"f2e7cb06019431ebf32573b0608c815107db5e125ce77d1ea7b26ed8cfc55879","sha512":"fc527f5a2a21c810d78bc2375cf92690638ebf02ef1609e7c9db1eba14b45aa7d5682f318cf498b6c540c971fbd23fdba64921c232c468ef767edf0ee1d6263e","ssdeep":"192:oJIGTXApdStFCuGl2vjzZ1JdK9XKcCXt8f+gSNFhY7o3Zb:oJI0XjtFvGl2vjzK9XKcst8f+gaj3Zb","tlshash":"7a62201b26587228a033dd9e6f54da6d4114ce73d08676f8b853fa258fdbba327c0607","first_seen":"2025-05-05T12:27:41.78779Z","last_seen":"2026-02-03T09:39:01.14056Z","times_seen":16,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/en-43c55ab8.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/en-43c55ab8.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44310\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149409,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65496), with no line terminators","md5":"fc708c8f2193cfd265b73ba337300790","sha1":"24acf09a4c87a0b4c541b43e991d95e415809ed7","sha256":"468402eb6d40b1efa540e0f08ffe70919ea58e99c526b6cb1c309555b6f9fa4d","sha512":"3fd91dd1fbcd260e6bcfa293512f2589a370c7dd496126d7490cf6f15b957fd97e79aaa477c056a203607642074d232a01ab15c4de6dabbfff039664818012f3","ssdeep":"3072:349ogJjkyetZLyCd5ucB93TDRtpPKBI12WT6gR6zw1v8:3Ijk71oIwWf6zW0","tlshash":"f4e3f65eb30a09fb1d930351b5ee26e166fc81e5c26581294cdf432823d787eb2fb598","first_seen":"2025-05-14T10:59:31.250637Z","last_seen":"2026-02-03T09:39:01.125026Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/favico.ico","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /favico.ico HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T13:40:28.46292Z","times_seen":151153,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/page-activity-FirstRecharge-1994fe55.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/page-activity-FirstRecharge-1994fe55.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 986\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5469,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5468)","md5":"c739724c8d4575d29f6d7385f52f6fba","sha1":"ac8656b1dce0c1f6c84388b7fa1dc27867d3a131","sha256":"1994fe5550d09962981fb075435dae392ca5c755876693882776808e6364b45e","sha512":"6acf36560b004fadcc02454fc5982aa84f0d68247203353cb8203d434603f2fed58122d21f5f9fa4eab2781e9dd7e93d1b2c206c524428b27932502d7322923f","ssdeep":"96:Oq6k45GVJELF6wbBGhi1xK2s+XtMhZAclnE5oJBWzCwwi4qD1LskP6P:OqPqGVJELFJbBGhiTK2s+dMhZZpE5oJr","tlshash":"06b1600f7175270cec2bde6a3f5c16659138ed23e50673e48d428b628fdbb932695306","first_seen":"2025-04-13T11:49:29.037688Z","last_seen":"2026-07-24T08:50:39.059113Z","times_seen":286,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetHomeSettings","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetHomeSettings HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":894,"timings":{"blocked":347,"dns":1,"connect":172,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/t6_activity-5e528f8c.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/t6_activity-5e528f8c.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1806\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"57d04cd5774be2084c189ea18d3582e4","sha1":"103c904337aa1cf81aabed60151f57fa04f7b327","sha256":"5e528f8cf7dbeda8fb81674204fe586fbbed545978eb4d60fc49855fa71d823b","sha512":"03ad6670bb2851c211fe33345b38efcd896a9dd3b5afacb33a652a8b421b622fe3cdcf1565f75052a55f64f89c8be6494025dbdf1cb66ac30e9c293810646525","ssdeep":"","tlshash":"06310bdef1cb8c1879c806b62e47c54170dfb0ac8080a1689439f11ed5479dc848999e","first_seen":"2025-05-14T10:59:31.24422Z","last_seen":"2026-02-03T09:39:01.142039Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/t6_wallet-3ae41933.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/t6_wallet-3ae41933.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1765\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"7e995947f49026da84996e8ffb5cf280","sha1":"5ca7bc4465464f7970e793434bb0692e6c1821a3","sha256":"3ae419336b5c407674b1bc965a894fd863a2084c2908276feffa079d26ad5d0a","sha512":"a99d670d08ca392148bb9933bdcb7f931a8c64ca6e9d643bc7e81a183814cbdedf2b4ead7fea72dd4cff6f917588463c17b07cd5c3e38a3b5e13b3ebd853375d","ssdeep":"","tlshash":"8a310bd62c7cf43c4fc62659421907474e3040059c4af10838e9851d6656c5ca7f8e86","first_seen":"2025-05-14T10:59:31.220643Z","last_seen":"2026-02-03T09:39:01.14258Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/index-806b22ff.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8575\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55409)","md5":"e30b2ee1bbbfd3ce1c19f65e1b102348","sha1":"8c88181170c4d4afe6352c4f353fecb9988b8c2a","sha256":"806b22ff139e24a96adcc8cdc3f82f33a2fe8a3e914a848400e52901a4c78fb9","sha512":"54bcb18cf8019e37d24be62dcca4f99dc2b92ba39c3ba754ab3361888132f8d968fa3e440780573d230ef795cd04d40ed1e2149590e2fde0cda45f19e70e4efe","ssdeep":"768:F3OAQjk5eUVV8dXfggyQgIkTjAdWCY0UcxNgTK04YnJ0DWLh:0UfHH0DU","tlshash":"bb43a89bb595231de013ced98fd87f7c862acc2292025eea74437b698bc77c7129414e","first_seen":"2025-05-14T10:59:31.214216Z","last_seen":"2026-02-03T09:39:01.143062Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/common.modules-219f1756.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/common.modules-219f1756.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 240207\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":728053,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27463)","md5":"3d076b9771c154086650a4561746485e","sha1":"96a23bf78304ea0f3e0dd6cb73278a45cd6f26f2","sha256":"15d14d289ea1c3efb4aadff8d010fc7dc5ef06984b85cb9792cffa58ea53b29e","sha512":"24b42ebeab2957fda6db2d42b73037e98a12563e0583ff6a6c26c76ab1a7536fd71ad0bb42717234ebf66a6eb20a81a1bd8af91a043fc13bf5b338defcef1055","ssdeep":"12288:jErZcuMvQTXvACwbthtKE97Id9a4VzS9qfIYsmsiOuCox2Jvms+cHkE3:jWcuMvE/xwBN4VzcqfITm7aox2l","tlshash":"8ff438d57292b42243f71ae9507b0002f2391a58b40dd4e4f16cd8eb3eba85952bbf7d","first_seen":"2025-05-14T10:59:31.215561Z","last_seen":"2026-02-03T09:39:01.14355Z","times_seen":5,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-ActivityDetail-346b11b6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-ActivityDetail-346b11b6.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Apr 2025 07:40:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1132444\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2385611,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"97699dac8c93f9b3010cad0523fd67ad","sha1":"77bba6a561e1587148a717654465c4efd8bb315d","sha256":"9dcd41d1b3575cf29e3b48b982bec0939f5c74ddb890ded27051337498962ee4","sha512":"a61d925789dcd89e6b18f9c532a5ec7af5bbe0ed3cd3817d149c5e4b42cce1b685924fdf5abb5bb720ab7b403e9d5a227583370c7f24b916cd382ba1f05e7880","ssdeep":"24576:TUAyuur6Ut/ovd/fiWxD8MaKiT6THavdB:v3E/t/bWxQHKBTHaH","tlshash":"1d2501f943b054ac836a4638ffb7ac8013ee61bdb187828485edd674d497dd6f90b860","first_seen":"2026-02-03T08:56:15.24183Z","last_seen":"2026-02-03T09:39:01.144031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/svg/icon_lottery-d44718d5.svg","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/svg/icon_lottery-d44718d5.svg HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 02:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1790\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f350beb26af4a4c05e5f58aa5577aefd","sha1":"521ead0680f20da9bda81d7ea0fb642d4d7bc56d","sha256":"d44718d5ff4bf47bc6572f970882dd8b76c91f5ca6fb05b58c987d84905bc801","sha512":"bfe36632933161f9c89a32fffcf5c0df0ef5719d229b6808d2adfbde1c97195abd97bf912415139eb2c2ad9316dc583a2b7ac11ef5dc520d09a282aa6dd81935","ssdeep":"96:pzlbHh0dJS7p7Qj1KO4dFy4McWZ8VlAXqTq3:pz0LS7p7Qj1KO4dFy4/Wimam3","tlshash":"5c9197a8a3ec61b1e709e3f0460be5b93f7735fb7642cb5883a52d2869210de54ddc90","first_seen":"2025-05-14T10:59:31.210994Z","last_seen":"2026-06-07T07:52:42.608894Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/bg-57585b95.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/bg-57585b95.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 170980\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":170980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 639 x 259, 8-bit/color RGBA, non-interlaced","md5":"d3465fd59b84c650afd50d1493ab32a3","sha1":"17691b4cd1abc907bc08217f72bd095c509a685c","sha256":"57585b950504a7af9c9ffda29db4314da85880fb2b2712ddd05735555dff897b","sha512":"031b86a925d4689108bb7581d3e1da5a5333e8ecc6b80f619833672272d94559f83b430077f917ddc9578b916bf5c1ad2493836a66990994e79b9fcf52413798","ssdeep":"3072:Kxtu46vp1PrBAVI2vzCl2y5RcRniWeLjdd8qBHdpC1oVT65ld9mYlbTyKDWLdy:K7m1lAV417ZLjrQ5I4TyjM","tlshash":"d8f3134616bfb6569a71aeed62ce3f1ab160ab83043a7c319a4d650b3d3bc47b1c41c1","first_seen":"2025-05-14T10:59:31.200041Z","last_seen":"2026-02-03T09:39:01.145077Z","times_seen":9,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-DailySignIn-96ec389f.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-DailySignIn-96ec389f.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3045\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9080,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (9016)","md5":"ae9ed00ccdcc064d7978f24512d6a372","sha1":"51c5f811c0eaad2126d503092f2c172443ce0ce4","sha256":"17435105221c091111d4fadc4250969bbf2ba72750506dcdf31d704745a279f7","sha512":"bb32fe8a39a1b139b09bda9ef9d0314657c6873f55ee30e0b28b93fb8a1996419c467a264168aeb4a20c594473e08f53bd2a6f2f78f5d5be2bcc6d621908b1cc","ssdeep":"192:HoHN5gJZRDpPhDpn1rp+N8MjioexKIGvn8MSbmxGYasrOgDeYfxr6JPe:HGsPDpPhDlptMMs8XEZrpqMx69e","tlshash":"6212a65db64eea7ce2b398e8a008180897196f8ad1f485a1b1dcbc150392d74f3d6f2d","first_seen":"2025-05-14T10:59:31.217095Z","last_seen":"2026-02-03T09:39:01.130063Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-home-other-ea059356.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-home-other-ea059356.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8997\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28394,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (28310)","md5":"ad37d4c1737cbce327cadb42e72da08c","sha1":"a8154698160af6af2de2ec68be19871e4166c36d","sha256":"437e056639a5b0ebe0607283bbb3adccd5eba909e57e72088a88cf7102e25271","sha512":"9c99b77f084bd683857e85e8da1fb167c9836c7b0b69026c0f8afbb8f7de7bff64e924e1345eab4353b9f07cca6f2bbbdcfbb1cc066462234809108baeb14782","ssdeep":"768:9OUoBr8/VKRkdIZbZjMtsjglhBwE86Jqpp6xmP7AXaDJuUM+cCMW:9wbeLkJP7Aq3","tlshash":"cbd2c668f04a9ebdf2b2d4a864181805662c2fcfa20484e2a6fddd1417d7d7857fe722","first_seen":"2025-05-14T10:59:31.223691Z","last_seen":"2026-02-03T09:39:01.138529Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/border1-3b6518ec.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/border1-3b6518ec.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2447\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 127, 8-bit colormap, non-interlaced","md5":"861786e7e3f08fa408a207d6e7ab9f5f","sha1":"37741fe906d03651d883dfc1aa55e3501986e301","sha256":"3b6518ec7631b0eafceae6ca18bfa95dbcc1bb44eef33acd49a3840b8c4baa91","sha512":"48c370b80ba9126a1b279c2a8b603f17ddd4d919eb9135f926df202286a933875998686061ec60706e3ac941232e46fa480333034998e569ec01961ca1abd197","ssdeep":"","tlshash":"74515bbe2b9180205c2836f2436d22427f0c87aef550e48267ce908d1834ca332b42d3","first_seen":"2024-01-27T05:56:08Z","last_seen":"2026-07-25T05:09:27.698302Z","times_seen":74,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/t6_home-0a6ae2d5.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/t6_home-0a6ae2d5.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/index-806b22ff.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19206\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 146, 8-bit/color RGBA, non-interlaced","md5":"88f424df7ae03b3bd46ab1011eb3ee92","sha1":"1a8fcd188b6f8043908c10909f58dd5a76f24a83","sha256":"0a6ae2d51f2781173266ac7c775cf38f325be61d5eec2617baccb86ed836db1e","sha512":"9df20728641871886ae2c90c59e5478e8cb34589fcba3a48f4bd31fb85f112f91c453b36abb37416778ba9c5652c1408671b128b12c74278c43356de9c90c7a8","ssdeep":"384:uiK/EUec7CB/IQmZR4dkuPndrCxavyf3ZDs3hF00:YD7CjMm1rWaK4u0","tlshash":"a982c0a4761d2844b1443043fd10f6e3ab985a5f6fbebca6c5d609869cb764c08f39e3","first_seen":"2025-05-14T10:59:31.257167Z","last_seen":"2026-02-03T09:39:01.146372Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetCustomerServiceTypelist","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetCustomerServiceTypelist HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/common.modules-219f1756.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/common.modules-219f1756.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 240207\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":728053,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27463)","md5":"3d076b9771c154086650a4561746485e","sha1":"96a23bf78304ea0f3e0dd6cb73278a45cd6f26f2","sha256":"15d14d289ea1c3efb4aadff8d010fc7dc5ef06984b85cb9792cffa58ea53b29e","sha512":"24b42ebeab2957fda6db2d42b73037e98a12563e0583ff6a6c26c76ab1a7536fd71ad0bb42717234ebf66a6eb20a81a1bd8af91a043fc13bf5b338defcef1055","ssdeep":"12288:jErZcuMvQTXvACwbthtKE97Id9a4VzS9qfIYsmsiOuCox2Jvms+cHkE3:jWcuMvE/xwBN4VzcqfITm7aox2l","tlshash":"8ff438d57292b42243f71ae9507b0002f2391a58b40dd4e4f16cd8eb3eba85952bbf7d","first_seen":"2025-05-14T10:59:31.215561Z","last_seen":"2026-02-03T09:39:01.14355Z","times_seen":5,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"POST /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1032\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1032,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1153,\"startTime\":1770111512578,\"versions\":{\"js\":\"2026.1.1\",\"timings\":2},\"pageloadId\":\"90ca7fd6-169e-459c-b5c1-482d48cf5971\",\"location\":\"https://www.usdt.royalinvestment.xyz/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":660,\"domContentLoadedEventStart\":1188,\"domContentLoadedEventEnd\":1192,\"domComplete\":1587,\"loadEventStart\":1587,\"loadEventEnd\":1588,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":11,\"domainLookupEnd\":11,\"connectStart\":11,\"connectEnd\":72,\"secureConnectionStart\":40,\"requestStart\":72,\"responseStart\":103,\"responseEnd\":103,\"transferSize\":1044249,\"encodedBodySize\":1043818,\"decodedBodySize\":1953351,\"name\":\"https://www.usdt.royalinvestment.xyz/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1588},\"siteToken\":\"13e20786e67347d68c4fdedc84c847c6\",\"st\":2}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: cloudflare\r\ncf-ray: 9c80f4c419177127-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/css/page-activity-ActivityDetail-b950a2ed.css","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/css/page-activity-ActivityDetail-b950a2ed.css HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 02:42:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 574\r\ndate: Tue, 03 Feb 2026 09:38:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2639)","md5":"b6856c7482451e1666de142fa4a7e211","sha1":"feb6847c3980f8d7ad90a63027b044f2eb885b56","sha256":"b950a2ed7cee428fc3b94a145626cd80a668a0f58351665f3f20737baaa65902","sha512":"69c4c343872144691ff9e9eb10e7ef657febeababfdc52ea1fce6d1bca00d7b95561d90b20b238dcc7d4a818f84b87c977694bb87897fe7d5f926f23042dbaf1","ssdeep":"","tlshash":"9251115b3265131d6533cd9aae6d3beac148dd62d98336f878835b248fcb3c33554206","first_seen":"2025-04-13T11:49:28.971841Z","last_seen":"2026-04-15T23:44:07.70663Z","times_seen":26,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/page-activity-ActivityDetail-346b11b6.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/page-activity-ActivityDetail-346b11b6.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Apr 2025 07:40:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1132444\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2385611,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"97699dac8c93f9b3010cad0523fd67ad","sha1":"77bba6a561e1587148a717654465c4efd8bb315d","sha256":"9dcd41d1b3575cf29e3b48b982bec0939f5c74ddb890ded27051337498962ee4","sha512":"a61d925789dcd89e6b18f9c532a5ec7af5bbe0ed3cd3817d149c5e4b42cce1b685924fdf5abb5bb720ab7b403e9d5a227583370c7f24b916cd382ba1f05e7880","ssdeep":"24576:TUAyuur6Ut/ovd/fiWxD8MaKiT6THavdB:v3E/t/bWxQHKBTHaH","tlshash":"1d2501f943b054ac836a4638ffb7ac8013ee61bdb187828485edd674d497dd6f90b860","first_seen":"2026-02-03T08:56:15.24183Z","last_seen":"2026-02-03T09:39:01.144031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/icon_sevice-65e9fbf7.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/icon_sevice-65e9fbf7.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6044\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"0e25e66feb83fc712d02b1f9820bfd09","sha1":"412d395f7d78cf3e25feafb71b80c70783c29715","sha256":"65e9fbf7f0307c27e4223f58c18eed9f11ddd621347c0a7a8b48a9c66b5925a1","sha512":"c62c15f3a8991ad4679692fae7b8ea1bc871bd1724ce3645a9173253c43f81fa8b5c9a068a1ae87d24e81c67e94e104f0761d29377438e59effa842e21447b70","ssdeep":"96:b1SazWgRJJaC3ZBQXpni88naApqq/nWq+oXmee9uQdfv+DC3rBppIt7mdOhyCYkF:b1SUzROSBgenamnWqlsJv+DGB7It7z71","tlshash":"39c19feac11044694b7be1b72d3fd858a15c78ed12f3720bba170a1c5e11c118a7ae7f","first_seen":"2025-05-14T10:59:31.225179Z","last_seen":"2026-02-03T09:39:01.151849Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/svg/icon_rank-432901c9.svg","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/svg/icon_rank-432901c9.svg HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/css/page-home-other-4990e5c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 02:43:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1270\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b658ddde81d147cac38c4d423bdcf64","sha1":"e2145795d00f9ee430def42fcba5f7c67d4118d6","sha256":"432901c9ecb865a2db27531673cbf490a7d7ce634df82b171e53e56aa84a7334","sha512":"d32de578056fbc4bcada9f353d2030f86b3c7f30b5d727c2bc693fef1489c1cc9f3b0221403a7b2ed5a30236989ffcaad1b8e7412bcc7f6fc83967c1abf776d5","ssdeep":"","tlshash":"d37165aef38ed819f108e3e88744997822790df67e81c46482d7be2d9d244ce4c5d897","first_seen":"2025-05-14T10:59:31.192687Z","last_seen":"2026-06-07T07:52:42.622869Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/border2-7a806be7.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/border2-7a806be7.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2492\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 127, 8-bit colormap, non-interlaced","md5":"0f1b288144d621947c092aad60318238","sha1":"7e0cdc3cd9ebbc4f8ec2bccb5b802a2e53f2768a","sha256":"7a806be7d8bd6b6239524b5551538bbe63a7fd901caa0c5c5ad4086940953f51","sha512":"f387ae366f275ff0c5581539dea26751bbd0a9c24408a254167413657bd0fd41b61555b750ff26ec601825ba7201b1682c8cf04bed6b05477c2576d525a55d66","ssdeep":"","tlshash":"57515c8006e0fd7ba54acf7fb04c8c085f4945fce50529ca467fa37e992528a1bd4123","first_seen":"2024-01-27T05:56:09Z","last_seen":"2026-07-25T05:09:27.729708Z","times_seen":76,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/png/superjackpotHome-72bbeb43.png","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/png/superjackpotHome-72bbeb43.png HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 09:38:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 02:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14535\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 233, 8-bit colormap, non-interlaced","md5":"ed4a82730899ed2ca9bb6da7b87843c4","sha1":"6b33e3626c3cbfed4261d44ad15084b63b8766c2","sha256":"72bbeb43120b5264d7c57783b071954ad3fe2e84ca4627f45aac042394e4439c","sha512":"5bbb76fc112ee0ece981edc066146f76c7bfa6b5e235359a32cfb05eeaf3a401c6ee495866d15e80a4865a3768b271cb33b5a850b12db24eafe39beb8a997060","ssdeep":"384:tsk1vhsqUxgvp5ZgnG2MKHK3UuiULNKrtWGCFAfoE:Gk1vxZ33viULNKrUGCFAfoE","tlshash":"c562d0666700c48829014815fd8bab4cc3d6d2f3f1b9fce8d962129fcb0cf958195eda","first_seen":"2024-01-27T05:56:08Z","last_seen":"2026-06-26T00:57:28.234166Z","times_seen":75,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:32.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.1.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c80f4bc59634e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30200,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30200), with no line terminators","md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-08-18T05:30:07.729515Z","times_seen":5310,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/native/index-a8a2a0fc.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/native/index-a8a2a0fc.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.usdt.royalinvestment.xyz/assets/js/index-33345150.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:43:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2627\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6706,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5242)","md5":"ef26fffe5e90f5a8c40bd67d1b67f65f","sha1":"0a23c16580492eb07add646afa3e644ee137e4fe","sha256":"e60a489ad783e54cefaa6039b9047d9f807fc8d863ffa480ed04dc42101da4e9","sha512":"0abaaf1f28014e7049ccae54751dfd651c1fecf773414ab7ac6b9ddeb8af66f68f91a8e9c23f5a9df86a4457d3fc7b098299d9645cdbc1df39dafb2e537e89d1","ssdeep":"192:CNImAP5Za3BjVjIEtdFCDRetQeExLK5tWsqssAU:CNIL/a3BF9dAdMQHYWos1","tlshash":"18d1c5944715f02c58a9c14a82cf6d249cee0ee097c8cc405f99c3ca4fee1597ea5bba","first_seen":"2025-05-14T10:59:31.241851Z","last_seen":"2026-02-03T09:39:01.159792Z","times_seen":6,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.usdt.royalinvestment.xyz/assets/js/native/index-a8a2a0fc.js","fqdn":"www.usdt.royalinvestment.xyz","domain":"royalinvestment.xyz","tld":"xyz"},"ip":{"addr":"65.109.126.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:33.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdt.royalinvestment.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:51:27 GMT","end":"Sun, 03 May 2026 05:51:26 GMT"},"fingerprint":{"sha1":"E9:3E:71:04:E9:AF:54:95:E4:E8:7C:6C:B9:A4:7D:1C:46:0F:FA:45","sha256":"62:1C:DA:30:FC:A2:E9:25:D3:50:36:93:E6:C4:AB:EB:4B:8F:E9:D9:97:9F:71:11:C5:38:DE:70:30:42:57:E5"}}},"request":{"raw":"GET /assets/js/native/index-a8a2a0fc.js HTTP/1.1\r\nHost: www.usdt.royalinvestment.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 02:43:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2627\r\ndate: Tue, 03 Feb 2026 09:38:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6706,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5242)","md5":"ef26fffe5e90f5a8c40bd67d1b67f65f","sha1":"0a23c16580492eb07add646afa3e644ee137e4fe","sha256":"e60a489ad783e54cefaa6039b9047d9f807fc8d863ffa480ed04dc42101da4e9","sha512":"0abaaf1f28014e7049ccae54751dfd651c1fecf773414ab7ac6b9ddeb8af66f68f91a8e9c23f5a9df86a4457d3fc7b098299d9645cdbc1df39dafb2e537e89d1","ssdeep":"192:CNImAP5Za3BjVjIEtdFCDRetQeExLK5tWsqssAU:CNIL/a3BF9dAdMQHYWos1","tlshash":"18d1c5944715f02c58a9c14a82cf6d249cee0ee097c8cc405f99c3ca4fee1597ea5bba","first_seen":"2025-05-14T10:59:31.241851Z","last_seen":"2026-02-03T09:39:01.159792Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numberguest.shop/deepanshu/api/webapi/GetGameCategoryList?cache=true","fqdn":"numberguest.shop","domain":"numberguest.shop","tld":"shop"},"ip":{"addr":"161.248.163.118","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.usdt.royalinvestment.xyz/","date":"2026-02-03T09:38:34.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numberguest.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 09:05:18 GMT","end":"Sun, 12 Apr 2026 09:05:17 GMT"},"fingerprint":{"sha1":"B2:69:B2:35:3E:E4:AA:4F:D6:C0:DD:33:0B:1B:53:E4:3B:0B:A6:C0","sha256":"52:ED:0A:14:A6:97:D7:05:0D:6C:71:CC:BF:C8:A9:B6:D6:34:A4:03:B3:4A:89:91:C9:43:2A:7A:75:DE:93:0F"}}},"request":{"raw":"OPTIONS /deepanshu/api/webapi/GetGameCategoryList?cache=true HTTP/1.1\r\nHost: numberguest.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: ar-origin,authorization,content-type\r\nReferer: https://www.usdt.royalinvestment.xyz/\r\nOrigin: https://www.usdt.royalinvestment.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 03 Feb 2026 09:38:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}