{"report_id":"9883169d-5ec2-4234-a0a8-7a0ca665f55d","version":6,"status":"done","tags":[],"date":"2026-03-24T01:16:18Z","url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"title":"Royal Capital Bank Int’l - Dedicated to innovating, simplifying, and humanizing digital banking.","dom":{"size":983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (982), with no line terminators","md5":"44bc34c6c036dd05cb06607acc340c6c","sha1":"e51bdb10050370e93d5115563fcfeb1c94e60b4e","sha256":"df1553f7de2ba7551c9f2064d2df62200fd168d79eca4be33dd518d23eaaf28f","sha512":"4276545cc5cc6ee73a60bb9a40bf2ec1f99b8645bab146bf98cef58664d5767083d63fabf49fa03fc4d46798915ed71375acaef181290d0f540d0aefe8da39c7","ssdeep":"","tlshash":"3711e572d084241e9352d188e0e5373da3c3d50dc595cc967a5925b3f1c5b369c575f8","dom_hash":"domhashdda2f72fae377190c818cc3070d0de92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:16:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"roycbank.com","ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-03-23T20:17:25.456573Z","last_seen":"2026-03-23T20:17:25.456574Z","alert_count":213,"request_count":71,"received_data":2613235,"sent_data":83946,"comment":"","tags":null,"fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.142.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-22T22:38:17.64832Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-03-23T10:45:16.033884Z","alert_count":0,"request_count":6,"received_data":423764,"sent_data":3072,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":5,"received_data":5027,"sent_data":2389,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.google.com","ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-03-23T13:33:37.750471Z","alert_count":0,"request_count":2,"received_data":83254,"sent_data":936,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":4,"received_data":154361,"sent_data":2059,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":12775,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-03-17T23:48:02.125726Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":898,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":6,"received_data":69791,"sent_data":3172,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-22T23:03:50.420873Z","alert_count":0,"request_count":1,"received_data":70232,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.LlVS8J9fVFs.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfqdAOm1QvcqdqtKf4soWmNCW7lqOQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f677d539d44a59c3403e8d6c8c3edff","sha1":"80714f9579e9a551afd05e6638132e83b2096a1e","sha256":"9602f4ad861c13a6c8e8f9d66dd8cd219d7ada4a2fa114b1afdc36368d1d5448","sha512":"27089d47e673b7c3cf5589a870f772df8b6f319e8afb21f72887ba85dad641a97bf07cf1aced50f30fc209d7004dc91aa6c74f0a0e611364a480010d901c8786","ssdeep":"3072:9lnpLczNJZMKDPKXx3tX3GnECZpCDVBIJLL4bh+NqdRuBHKaO+D/ldzVENqSadNX:XGxMY0gJIaOadzdSCTys","tlshash":"9894d7d9b2a274629266f8a0e47f00c7b53dac57a4884c6cb248dcd65df090952b3f7f","size":416889,"data":"","first_seen":"2026-03-23T20:17:30.890498Z","last_seen":"2026-03-25T20:10:38.948703Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/fancybox.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","size":68446,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","size":144259,"data":"","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T07:20:31.611307Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/contact-form-script.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","size":895,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.appear.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","size":1198,"data":"","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/aos.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T18:57:07.784746Z","times_seen":9627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/odometer.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/_/translate_http/_/js/k=translate_http.tr.no.LlVS8J9fVFs.O/am=AAAG/d=1/rs=AN8SPfqBCWz8oCQaoZdNU4jcDJqBDpVDYg/m=el_conf","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a387a42854ccf8293b4d97aa0189992a","sha1":"266c5aaa95aecb5c861c82fb2057d8ea7640b5b4","sha256":"d9b2c8abf064aafdeb9ced6d96d0c1ebe31a5cb6e4c1542c6e89d7837ae8293e","sha512":"f2a35b22fdcd7e86e3b7f7643ca6dccb2c801bbe3a3bbb68681dafac0042f546227acf50351a93864ddcff8112ddaf352914cb5679704401fc0cc24f22a44ee5","ssdeep":"1536:XNzr38K4KeLoEZeUd+S82KXbp0T4lLPKucbRrWKiMwNW/d:X9GoEF82KXCKKi0d","tlshash":"e583b7c8b6a574a59353b5b5413f000eb23f699de8084dbcb288d8e2adf4948453bf7d","size":80938,"data":"","first_seen":"2026-03-24T01:11:50.874729Z","last_seen":"2026-03-24T01:46:52.17656Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/form-validator.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T18:43:48.973559Z","times_seen":11853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#212","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-06-08T05:58:59.336825Z","times_seen":36916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","size":5360,"data":"","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/main.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","size":5498,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"80e853efeeff993cfad89a034d719edf","sha1":"11bc47070ad9a1d89a2d3674e92160238948aa02","sha256":"30a5bf376df299635ecbdce59b9383c398adc1fe4af3b2a51ff3f360653e1853","sha512":"1311e47c2f225312c9d985736280c74c2d2e919e62c98f2fd5e2f6da36f58060300d1c1f09e3b1aa8fd8a24edcec87823bd234004f1a011faed3a848ac36578a","ssdeep":"","tlshash":"29f0d4730139b415c2429620e5c8693de153e70545586c96335411b7f1c4719c4dfaa8","size":470,"data":"","first_seen":"2026-03-19T19:49:45.369247Z","last_seen":"2026-03-26T14:45:22.396734Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9b07ffc0631a98d0561cd750e82d34c","sha1":"3da0df809b27e8fe955adefefd0b158b82372534","sha256":"20892d60b3d7038abddeed71a2ddab56d7dbd4f5add08fb09cd3cbeb8e9a75af","sha512":"0cc896cb89dfacca960f71d25d92cc5eac6f6dd6d6411c769d7f250ecdfe00daf7c8c483648652a056e73c550274663934a7654404f7993750446ae2a7e98ca4","ssdeep":"","tlshash":"24f0dc730139b815c242d620e6cca93ee153e7058698aca6336811b7f1c871ac4dfaa8","size":470,"data":"","first_seen":"2026-03-19T19:49:45.370361Z","last_seen":"2026-03-26T14:45:22.397305Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"21dea70927157f35a7e6fd5ed824fc87","sha1":"a8240a810cb513cbe217de83a364786013c48f66","sha256":"69e3841d7839cd619b1f1f785014c3a3608195192737df81ecd17eb808db5d0b","sha512":"905fd11d45007cb16067f3d1f0ee95570b20af8cab200322d47937ae52adece3927759eefbf8d40a09a973384324c7945c7210d1ef4bdafba178dc486c5c4b3e","ssdeep":"","tlshash":"f55131a2605ca01b5503d5d0f8a23eeef4de0058c77169d07e1c29efeadad77049716e","size":3011,"data":"","first_seen":"2026-03-19T19:49:45.368389Z","last_seen":"2026-03-26T19:10:28.32379Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:15:56.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; expires=Mon, 15-Jun-2026 09:15:56 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nroyalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D; expires=Mon, 15-Jun-2026 09:15:56 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":36758,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (340), with CRLF, LF line terminators","md5":"1c58914cae24602b3ef73dab58078f59","sha1":"f1812833f5a8d8e58554de8739099254887d00cf","sha256":"0d1e04534c24db613300856c58c0c7abb3ad2c4e17940febb710f5292b65b1b5","sha512":"bedaed23c869ea9f2837adf89353300c66cb38581f80e1f25f4eb96e5e07af6c6d9dbe599424fa89951b9a0ef16097a93d213c15022332e7a75c1f4015d5c2a2","ssdeep":"768:bSYrFn/Xn+Z6sKnJ8+BsQ52zmCxpd0F/4pbXq1N1jee7yFc/m:ukn/Xn+Z6sMJ8SCxpd0F/4pbXq1N1jeF","tlshash":"bcf23f2124f2113301a394e1aa256f4bafe1d303ca6b4a147af91feb6fc7d92cd17519","first_seen":"2026-03-23T20:17:30.910481Z","last_seen":"2026-03-24T01:16:22.899923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":94,"dns":58,"connect":16,"send":0,"wait":276,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/odometer.min.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 384\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3123), with no line terminators","md5":"6c6b4fd147a0f12f7702bfc0533b1d61","sha1":"ec5d35465e472d207dd16056b477ed5a643119d9","sha256":"de4852787adeccdbf98fbd828daa10e3ff7733dbecd8a94ae9f297e5f907049b","sha512":"30a2e4e97a9763cc8eb7e923a45e1c3e8b676308ab213a2d528d60ec3f974ee46cae763882ad032d37ef132bddd14a094c21d1888a5b87f4315ec2a59d02ce03","ssdeep":"","tlshash":"eb51e2154f91136863367506bac81b60befce9015123e98e731da54bcf43db9e398b0b","first_seen":"2023-04-07T13:32:55Z","last_seen":"2026-06-08T16:32:30.191183Z","times_seen":935,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/hero/hero-img-2.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-2.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105301\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105301,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 350x600, components 3","md5":"ea529e62480d99d1b422fcec9eaa2f1d","sha1":"b9f8d9a4caf23bca86e05685c721b7f589d40833","sha256":"1240b60640a1c7771fec7de942ac101ad9e6e22824bede8db0b49897ab919134","sha512":"84a2f408bf3c589a5f4513119767e9b13fe5e5316bf2c1b993c806f988daf09ae7c0ab1e6e39644bbb6ecc84bc5341ab95e6e95e5d789bce65fa012f3016c853","ssdeep":"3072:uqbNc/qbNcuWHokYoTebgfudUE2r50rGtCU/s0XMco1:uqqqUHHTeeRnv8","tlshash":"e9a302bab376bd46d5c202b3a665e2b6329a1f5cbd03220e345db19473f4aa0185c389","first_seen":"2026-03-23T20:17:30.925238Z","last_seen":"2026-03-24T01:16:22.902055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/about/about-img-5.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-5.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141805\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 480x650, components 3","md5":"5e2a9a8715ef44bfcc4419c54e7d9906","sha1":"9534d84ea5d0a143bfc6ed695f7d9aab4058f9c5","sha256":"1cf2e1d7c174d3155616e66fbe49a1f0458de06c643cca6c9d1a056ce526aae5","sha512":"1f4b821f50e90980d14e89a77682166006ba52bd5dfc709f1ee8ae305ae3973c6406c321fbba66d236c6a1f8991303299444e90dfe49cb35e70abea1f8d220de","ssdeep":"3072:lQfm2Kp4kslg26ZJkyBAvzHibrkW4o8newrZ7B/IokyJran4MhYkx2:l8yxsq2eryb6odnew97B/Van4IFM","tlshash":"ffd313b89c6aedc74804813b3f1b42aae9fc95c2f1c76a113356b955c8f4061db7703a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.159723Z","times_seen":786,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/images/197375.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/images/197375.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22668\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b4a241ab7581cec5290118ceddb37bd1","sha1":"0b9925bc2676310d006f67cc2b856f158311569b","sha256":"e74d72b279797f0486c4659a646354c787a55f7c3f062f7ca91d6fc35e097f95","sha512":"1ad0de7fdda06be768174805ab7adc1f1997ef6e84dd0d8f555182036f9b652080fe5e1b3f39539adbae5ba884a2bafbf6827ecb08808a1ed01bdf770daff818","ssdeep":"384:u8qi0vYPlnzH1/XtHktr+wIWdTKEmYYwhZNiWqMP7sriGbV9knwxRMxCxGIT:uo0vgxXtEtr+Vem4PVkuevkIRlPT","tlshash":"1ca2d102e90501c4813ff887a252b6dcd91ffc0d0fe7138aa3b94a6eaa5715fc45d239","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.158714Z","times_seen":919,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.appear.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.appear.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 497\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1198), with no line terminators","md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-4.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-4.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3448\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"c7b36c0c4560fdea98eab463db51a474","sha1":"00e01da4b9a08cf4f859f4ba3c54fe292be72388","sha256":"fce1540a6b8cf77da50e312a7d5eb2dde2176f7f1ff7fbbad1e5a4c30ef0cc44","sha512":"b5a856be934819a91c325f5b8a9430175136dba7cdc524706798dfc484bcba4209e442cf48f3290f043d9f88e0ee5cb153de19e98f9a2fc1ad6bd240b2921df7","ssdeep":"","tlshash":"7c618e9e580af69503a83390e9605dcd60169026b75936b5d30342effb6ca7350bd307","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.190218Z","times_seen":771,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-2.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-2.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 534\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit colormap, non-interlaced","md5":"c9eb18efeaa14310c0b3db2bc9f93a27","sha1":"c48275e79ca07a678467c7ede198b3ad2061f39e","sha256":"5f4957ffe8a2e4b25b354480b2ef2e44a663748a2bbdee7e172a62f16cfe58ea","sha512":"4281040fc9d75e2101d34f28221e97676f7e76a49355c81337dbb4a8f7704d8928c22aabca3f79db08544d721cf265817388a72a018b58e89bfb5327010d088a","ssdeep":"","tlshash":"8df005e2d5984f8c556c845113734ee0663c079b674071459d33d0a22ffd6acb2ebbc0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.172023Z","times_seen":771,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30268\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-5.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-5.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2656\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"61c77cb7361420123fab4e5ff696e405","sha1":"613d84c29ddcc17fe9e28a4b5686b4085cd3dd37","sha256":"a3f892da036b38fee09c448d981a4cddaabff59cbd9b696ef00c93251823c596","sha512":"aaf68e8753df896f7fa70033e5ef62c4fdb1c7f71c9eb18ebfef2d489a01af0b994146dfec11dadeb3d0f600abe75412f20f677be44dbf3a308f9616d67353d1","ssdeep":"","tlshash":"ef514d452da30859e1f3a25d3d28203b9df6282e4093ce61b1973c667b505a3f0ab556","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.159222Z","times_seen":761,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-5.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-5.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 452\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 17, 8-bit colormap, non-interlaced","md5":"e3a4eda0513a1b921ff926d9d93d4f76","sha1":"f297d2ba283fb256eeb948e945721f8f53daaf51","sha256":"95b9133d00730f47385e1beac188df6493a3c17d694c6a5d3c808b7c8081dd4a","sha512":"a061bf8205b818f45b57e5cf688cfa9b74921b285a497855c27326009619586d76fdef8763b8f40f8ebefc8c9a67c5385182b681856424dc93d14c56f31b1f60","ssdeep":"","tlshash":"8ff0f8c293d66a2eda540af5cfaaa31ce0b03c4a0e744e0f4c532e0b566010a1a8009a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.154402Z","times_seen":769,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/remixicon.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/remixicon.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12487\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1f4e764479f95ac22b0b77cf9920d5b","sha1":"c6185202501a6084f83273ad6fe099641f11a8d9","sha256":"3c8d0233a1e66ba081468ad728a3032f70f10a5a5c890b0f9541722cba8a5bc8","sha512":"9cee62ab5c81be3db0750c47cb20030f7f0b2ec6c95638b8a130ea22548b7c01a10f5835ed9091cc74059dae399782f751cbaf15cce47982daa28f258e58bd84","ssdeep":"1536:Fc+QQP3ILxAju/j/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJ3:H3uxF/KPbdwRDn3","tlshash":"3993f2ede64e44c13732c886db74b78a60e9fab6c5815c95f85b500deec76a102c4ebc","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.164955Z","times_seen":801,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/dark-theme.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-theme.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1686\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8642,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8642), with no line terminators","md5":"2db98f202b2ea99a2c0e546c85d9899c","sha1":"71cb4231c618f94ef4fe9d1882f8a4e730f016f5","sha256":"04849ae2f5fa626f72455997b529e5612c6413077047c10486073461417b9a8a","sha512":"48a3e8bedc02c5523783f299230e749b7a6e080d8d5355f6b40b6e4f8ca9b477b41a8521014219d3cb50f88959c0e73910f5930822e7c9dfcf1a6d27d7eac207","ssdeep":"192:0KBCZ6B2nSPehnzhOe9mVxwVdU19HSkiwo7Ux+hvGb3lijIj3Yp2y3yZp1:0nSeyeY9khoEjIj3Yp932p1","tlshash":"9d02be20ed722e3a21138518f488bf981f7e31a0d6067b7df22b15e4de5a1de63b1b45","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.168042Z","times_seen":807,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-1.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-1.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4435\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"a0870e62943816aa1e7f2e60dce300c6","sha1":"2eb84c3e61fe5487c4f6e7e440a7e187866ca3d6","sha256":"6adcebaadd6ddd2bf42738c5db2b218c03dfe964bc1e5cb7c49d64fab90401d0","sha512":"02028698c0accc01ed05d12f60151eaf42fb25cde450cfb77443e0206b43381fceeec91e296c9dfc69115448c755a04c628137da4c6e1540ffb0838e3a87af8c","ssdeep":"96:+PrlHu+NacmxNKnUj70me81PcLSehjedNiBd/tSaXmg86lVA4xAN:0ZO+oji81PcLXjedNiB1bXt86rAN","tlshash":"c9919fe373a5319758c101634cd68eadc21b342f401dd4262a37fa7b5be5e290956af3","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.167549Z","times_seen":767,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/about/about-img-6.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-6.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100901\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 320x400, components 3","md5":"f7ba0df7243cef46807ff8d03bc34777","sha1":"0afd7d2058543a89f2f84742fad305ab8283f7aa","sha256":"0bbd00e0128ce44e69e51fa7167c7e68f73f6d08c6d27f2723c5a85379b8f7de","sha512":"318befb2561d1471fbf0f6d3766dd5f0d8bcf2ce051b479ce64712e92be2251e609434537067cae7bb6b5563df41cfe7a3ce6f39a8bae960283c351f1986dd3c","ssdeep":"1536:JTV9Ij1UhMHAHn2zOEJUmOkm/r2EP80x2Ad1e6SzavRvCpMoPBgFwJrEQxQ:Jx9I+hwAH2zPqfkUr2ELrejs4pr89","tlshash":"cda3124f8c73fc60e61fa612882ce1bc26b6860df862827c44d0d715f63b76b7976045","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183102Z","times_seen":798,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:55 GMT","end":"Mon, 18 May 2026 18:21:54 GMT"},"fingerprint":{"sha1":"EA:E6:47:26:9A:0B:B3:6C:6B:AE:E8:B9:D6:BC:75:92:2C:FE:B8:ED","sha256":"5F:49:E5:ED:4A:20:39:8A:4E:34:2D:41:2D:FE:BF:2A:79:ED:E6:DF:13:0A:2A:AD:38:8B:BC:21:9A:73:31:20"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Tue, 24 Mar 2026 01:15:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-08T19:23:15.379225Z","times_seen":73598,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":63,"dns":3,"connect":8,"send":0,"wait":18,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/hero/hero-img-3.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-3.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88293\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 350x600, components 3","md5":"35276ececffefabfdd1e3a886bc17ead","sha1":"89f38808a5ac0e23c749704913f95c746705facb","sha256":"db6b534f8e5ae90ba770e2089088232a51a352cafcde25a5876c09f37c225b81","sha512":"760d200c348b122af0fc997662f2309f2d52709a9c5d36ad0ce323242f7cfb40971f625f5a85dc8f5d4a9d4f61cdf5088540b886b273c72d2316764e415f286a","ssdeep":"1536:EirLiZJqqoBODL6325b9pf3dZWVY69N78E34+DR+ae9i6IkuoN09b:Nqu1m5DF69N78bERQIVXV","tlshash":"0c8302075f08be72e1d30772194093677137aa0203c7952b740cbed67fb27a54eaa6e6","first_seen":"2026-03-23T20:17:30.920202Z","last_seen":"2026-03-24T01:16:22.912089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-6.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-6.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 669\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 20, 8-bit colormap, non-interlaced","md5":"78a60559b34e8dd28b65b95903036c6b","sha1":"965f510a8283effd5154049e6db5d6569da7edd6","sha256":"6ede0ad128484c30e39ad7dbe5881844bea4360d7d0f65d8831597e0b058139a","sha512":"c3391299c37c1f097c04cc1091e8950102b486b6e1b823745ba43046f327e70071b8277950c118f641bc50b4d26ea69db9e98fa5bd424f53008a3eee55e6582d","ssdeep":"","tlshash":"f701239ab9458dad7771b09d03220f0591743b2023087a145db3d0b14adff09c222741","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.179136Z","times_seen":769,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/testimonials/client-5.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-5.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21569\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"f75371f848157b639ca47a4d97fe61b1","sha1":"43d0633b744d3f35897d67179b22ce4591a3cb90","sha256":"00b5e239f9e62e1be8f00408d8551a87a14542e0cf1d46b5e405ef000135b455","sha512":"89996ad5a134bce17b5b8e1f448621cd4404e11eba12722ba3b875f26a67bdc7a909493dc77ff0549cbf4c1641b2a08eff5a36d66ae4d6a031e48a768adc1610","ssdeep":"384:LSRA9lhtmhdQZM5eOWgwNKFaRLQlvXxe0QzkcQzqjt/YXW0ngd:G9eOGNua5Q9XxeTkfWZYXW0ngd","tlshash":"27a2e190d9968388e9b9f534761433f37a800fb216979622afd1a0f9d71815f047cf7a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185601Z","times_seen":804,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.097Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-2.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-2.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4424\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"bdc7140f040e5fe80b9cee96ca8e77f8","sha1":"92c693ed81445c35abbf7bcafd15ebdd18ddf4a1","sha256":"e782d18eb3e52bd22b5b7e81e9ef38cb890aee35f3826efe90e84db4977fe76f","sha512":"fc0a5c14d3d554fb3661d46aeaa3b5d73e25ba4890dfc5d0a19eb4554fa502d3b55da657f972d206bfeb729e278ccd6aebf8d5ec4471f2b4e0cd986e4be0f682","ssdeep":"96:58UgvPikQZz+WcvcsA6w2T1ZmfVdhgoLB3JVDH0aecj69mc:1oPkz+WsAAPmfb7B3JF0aecjQmc","tlshash":"2b917e6b23147b7d9dd972a48c953c2fece4bf2622ec47805c4b0235c3f951c4d62118","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.168531Z","times_seen":772,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-3.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-3.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1737\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit gray+alpha, non-interlaced","md5":"c8709f528bdf5908fa48eb0c8a96f855","sha1":"ac6bdab15e367ed6a1099fb91a8e71d3e80ec2ed","sha256":"821314c8b7cdbd225c05422daf867d1311816503399937c799e499ce9eb67918","sha512":"825c50712378108e37a0dd914d355384a757ab8e7444968441185da3e5cd6e01af5c3beea9a5166f89a323841ba0ef35b69c9b6a90445a5d83c82b724174a397","ssdeep":"","tlshash":"d3312b76db91fa2dc0313a32d418e35d6720bb8b945bcd223044bc54f1593b4bd23210","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.175427Z","times_seen":766,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.796Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/flaticon.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1149\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5680), with no line terminators","md5":"09bfb87f4fc89fa772195da8afa1489f","sha1":"88ee2649f1e1b1e8048a0f8fb8ee750a16f339ea","sha256":"53f7eaccc5cabff8999753b23d2e2aab91a4fa445707494f4ce0d0af103fa211","sha512":"37dba85918d11177c8c46601bcd6651181afdddf0659ca24bd31213d8482e647faf0a0b25a532b316ce4fd80c9474c3ea0ad575cc98f378d5cf13634f87a512c","ssdeep":"48:s8HaHKHAEGQ4GDb3aHF1bmZmr2mHkw+JbO+TnVBGa045LDyeXoiXA:pHaHKHAEGQtQb6cF+JbO+LzTXG","tlshash":"dcc10fa4e46a10c47732ce0bafe9b218e698b128cdc19d15f11f4e1cbdf1b554386eb9","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-08T16:32:30.178116Z","times_seen":772,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/uk.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/uk.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2254\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"1bd9dc32aa8ede4f19cd64e835d80597","sha1":"2d0586473fae3a4e3ada5c9b22dac6774c62efff","sha256":"1a81d14aa39b355e2fdb76619ae06df4de572f55904cd63b584546af42fd025c","sha512":"034f69c608575c364eec64ff64c2440c2125526ede4dfeec140eaaddc9253b04c03681cfb62435b1bf4cd027a9886305913fca97c54d85872269a59f087aed6f","ssdeep":"","tlshash":"d14129f1310cdb68c89686ef50e010c1a9e6aa4709080357aa3fa492a638872905b99e","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183587Z","times_seen":795,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 19:00:51 GMT\r\nexpires: Fri, 19 Mar 2027 19:00:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 368106\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":57,"dns":0,"connect":20,"send":0,"wait":22,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roycbank.com/","date":"2026-03-24T01:16:07.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roycbank.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1168\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1168,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"zxx\",null,\"TE_20260322\",null,null,[4,0]]],1871,[[1774314957847,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"75391A4B-272D-448C-9523-4238A26A48D4\\\",[\\\"https://roycbank.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,1000000],[null,12000000],[null,70000000],[null,70000000],[null,109000000],[null,89000000],null,[null,386000000],[null,386000000],8268,6925,36758]],[\\\"translate:page_load_to_initialized\\\",[null,386000000],[1,418000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1774314967848]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://roycbank.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Mar 2026 01:16:07 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-08T19:34:28.805149Z","times_seen":556009,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/hero/hero-shape-5.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-5.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1204\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit colormap, non-interlaced","md5":"15cdeabd4f3cd0386e7557ab0c2c2fbd","sha1":"b85c817311204185520d819bfba5b2d68aaae19f","sha256":"817769cfe84fed4edce7451771448f921384e09f73364ea105924ca25a01c305","sha512":"86561281d81b263b73a1f94295f6e37380d074e05bd46cdb6bc7bbb907c09a45d52251e30d42dc64ddda2b4ea0955c0a0c155a803bfc6b18726997e5eeb825de","ssdeep":"","tlshash":"1421ba897809bf1ac6df763d4640b878cd4d78149f00c6060fc55a6c0e96bdd37d4516","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182113Z","times_seen":783,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/shape-3.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-3.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1124\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 55, 8-bit colormap, non-interlaced","md5":"8cee0389372162c0a2352b2613c13570","sha1":"57a2a9b090d7b09bb3dee3290e1007ec71b4e663","sha256":"f731de19b6012dff0f19cfbda37e62c01c40e8e29280203a92d4a2f0643229a4","sha512":"dc4891e78970e3e68a4cbdbb1bef3028f16f8b8796a352042c49805dda59a9cb8247ccaa8c018daebfbecd8367fad0c62adebd077b209b21f6f21aa6f6e90fce","ssdeep":"","tlshash":"d421128a5f39de3950ecc6688314c513499cb1bfe38a309baa424685f67040d00d6b83","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.158145Z","times_seen":813,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/temp/custom/assets/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:57 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34936\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34936,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"ca8030904ed567a42f1dca62d90c5043","sha1":"c1f31d849c90b8815bb080068aa45aeea24e3d63","sha256":"506d72967add3dbedaaff32751d8d2dd5ae16e42771043148bc3c5d54515d8db","sha512":"bafd57abf0ba2e26a4583aa9d8ed75ed3f22c22add2b36d3c61d3239f36b1b2e429eff02c045c7b849458877cce6d50bd7d25a587f9561b4e334d853e08ede5e","ssdeep":"768:D0UbwR62v2kfJw1ssaJnqmfzOhXsoRvr1tksU:DFbwRF+kfydaJqmfrObk5","tlshash":"b0f27bbf735f4e3ed3233abf9cc865224ae1a90815a379836d8d690dc9160c42ef0259","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.180116Z","times_seen":865,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230067-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 25536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDcVZJy6FG9f8Z5%2B3DWSR3zqDfPWRGVhllPTwT8RNiaHl6%2FawQHxX7Sw8zsknZEGI0%2BZMtwzDW7unbuP54%2Bq69boKM5r16DUWVc%2FIOnkBw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11d3df0b5835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":5,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/usa.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/usa.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1123\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"71f2b9f8290de4e2ef115bbd7e88e606","sha1":"772dd8595caf015645f933ee938df8602afce809","sha256":"2c842607ca094c8e0e7e92951eb9369860ad967fc8a52e664098efb53b78665c","sha512":"8f7621171112c3302a8b6f433b176092b0f45d2f6108875619321acfa6dbc5485fd8f676e3adbc65455410dec1b60afb2ac83699860ca4059a0a451a86f8d805","ssdeep":"","tlshash":"6d21b96ef7e018c1c8db60074ef4357258257c9e8fe0f874b562940fd8b51092a46733","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.152985Z","times_seen":795,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/newzland.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/newzland.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1040\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9bbf5eedca3d147d0cf857312515c461","sha1":"1ba9ff83d4174b87d2703262df63834f4bb3c197","sha256":"0587301dd2fdd00f161a1a6b8d420bff27b5fc47b1f74b2ee07cdff24141347a","sha512":"28e65e6d2ba05247b5d9942b140e16429677aea34a2cbd025503b43009d504f051446ac1eb628e76f0e797e07dfb528b125fdb377cb75d2c961c568ab33877ec","ssdeep":"","tlshash":"7511b50e70845588c225030603d4503a0e339dba7db07b4ebc0f6c1dd640f5619e1f0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.163506Z","times_seen":794,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/blog/blog-3.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-3.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 139098\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":139098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"abecac2374b69bfbf1fbe1f751af2bfe","sha1":"781881d6416298a043e790fdf8746b7f4f298214","sha256":"76097e57ea90ace6051dbb1bd2444a8ccf4dcc9893d600e080938cc509fe6d8a","sha512":"156f7cc6426c41e4bf86205d72d37b64fa3bbb95094631550a9c732b6dea9a2d792e8b8a395183901515457978ac29b5ca1cce75c5391d5a2d5c254bb9ad246e","ssdeep":"3072:cowBbjNObpdlXVA8rAjS92y47Ofs+W1joFTWrP10FxBARtaP:lmvNObjle8UjSJIOfajosxKyRtc","tlshash":"add31258f23bca28a7b2311b45adec80ba0cdf5c291333c7935d2a65d5cf4226f92751","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.192788Z","times_seen":774,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:07:08 GMT\r\nexpires: Mon, 22 Mar 2027 10:07:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nage: 140930\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-06-08T19:07:00.435775Z","times_seen":13051,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/hero/hero-shape-6.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-6.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1934\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 97, 8-bit colormap, non-interlaced","md5":"f83b8c90bfd681efd73d4819b6d12b7a","sha1":"443a851b10b6d2b331b4fa05f6ec6bfcb8482d5b","sha256":"35f443944fc4ae8a47098e39823bc5d967f9d440dac39971d5b3f0858f185f8d","sha512":"2a13e0f0e85cdd5b8c14c84dce56950c6e3071b5a39fa380aca3aa8f509745f8f1cc23df22038338c29d523107135d3530db173fb08cbea9a7579b950fcdc3c5","ssdeep":"","tlshash":"d8413b62c4063c7bfa4468b5d612088fe4b9c62a079502353bec71e17b6606c993057c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.174423Z","times_seen":781,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-1.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-1.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 470\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 73 x 25, 8-bit colormap, non-interlaced","md5":"b8a8d813b7c568f2b67946e982849db8","sha1":"1eb599fd13d98b754576447d2293fd61e74c8c61","sha256":"5ba5170dfd922182cdf09481c0e70c3694eedcff35a61d6c146dd031a6f5eb92","sha512":"18cbe818a68cf02983b06ab3057bea38152b514ac402ce03a9e7be81b6180b1eb845f0de6176a313aeadc94d9959a24d111cb470939e658b6de231cc13fa1474","ssdeep":"","tlshash":"2af023d6f409ee58b73960674e3acf108572bb9210045d04dd33c13546f734486b7d80","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.169519Z","times_seen":771,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.LlVS8J9fVFs.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfqdAOm1QvcqdqtKf4soWmNCW7lqOQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.LlVS8J9fVFs.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfqdAOm1QvcqdqtKf4soWmNCW7lqOQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 19:46:44 GMT\r\nexpires: Tue, 23 Mar 2027 19:46:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 21 Mar 2026 01:10:21 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 19753\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":416889,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"8f677d539d44a59c3403e8d6c8c3edff","sha1":"80714f9579e9a551afd05e6638132e83b2096a1e","sha256":"9602f4ad861c13a6c8e8f9d66dd8cd219d7ada4a2fa114b1afdc36368d1d5448","sha512":"27089d47e673b7c3cf5589a870f772df8b6f319e8afb21f72887ba85dad641a97bf07cf1aced50f30fc209d7004dc91aa6c74f0a0e611364a480010d901c8786","ssdeep":"3072:9lnpLczNJZMKDPKXx3tX3GnECZpCDVBIJLL4bh+NqdRuBHKaO+D/ldzVENqSadNX:XGxMY0gJIaOadzdSCTys","tlshash":"9894d7d9b2a274629266f8a0e47f00c7b53dac57a4884c6cb248dcd65df090952b3f7f","first_seen":"2026-03-23T20:17:30.890498Z","last_seen":"2026-03-25T20:10:38.948703Z","times_seen":270,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":77,"dns":21,"connect":27,"send":0,"wait":29,"receive":70,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-4.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-4.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 538\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 27, 8-bit colormap, non-interlaced","md5":"aa02aae884cb578bc0a2f1f9bf3f2954","sha1":"ba60f34106249ce0cc7485947434d7d70f411f64","sha256":"141b88a15608b337ef1fe9d476747cad1ce911f92d02c006699c61debfe00ac3","sha512":"caf6a311961b15e9628bb422e93b95131f2194b2f2fbe886de83c753edacd87a19fc243554cdda490889003fb2baa4693efc4ef78dcdee7b11fcad1a157eb2f8","ssdeep":"","tlshash":"67f00e580c70ac36cc969af3f762c03c4901bda5520648033f0c31cb9ee3b908981387","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184096Z","times_seen":770,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/partner/partner-6.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-6.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4525\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"fc41f4a53986aa873fbb5d6d9480e7a8","sha1":"ec5fda8c50ae629693b80cfb833e8ecfccb94c0d","sha256":"aff05b470f5f5b13fced8c6f71ea75389014ff83831ce96512b8494304ce8c33","sha512":"85253276198c3e73fd3d5a8a658169da010ad1479beb5ed9d1476095464447ae60027e2cc5cb132de08f3488a1d635b491339d81822901f1b8fcd0e70b25b999","ssdeep":"96:l0ljl98zyFpJxVoEkWgNn+2NeNK5l+cwbxewTJe4:mszyFpJF5snzNepcExeGp","tlshash":"c0918d97199a443f63f8421f8b6d48672f4cf5a810d7f6ef4b500a203627b0f3655a28","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.169016Z","times_seen":766,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/why-choose-us/wh-img-5.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-5.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67987\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"083d0f173a285cfc0eb53e99897bc5f5","sha1":"d469132a26088e0fcf6145047ab66d62f563dbc9","sha256":"d064673fb05387d838701073bb4a7647c713d341338fa3ee20c42d27b12e09d1","sha512":"77331315e43d22ca8cd1d7f718c1e5c402055bac9b9c987626f8008c4dd61a23dfdf4457e05983ff3618f9dc06297a65309ede467ea5e834c61170671b65e382","ssdeep":"1536:98qroSdUhTMeWoDtKAE5Sfe9WDOimovxvIlzSB/NbiY:9Vrn+hTfWoDtKTs29WDOYv9hN+Y","tlshash":"e663020f56007ceb8aaad24280f545dcf7551ba665b312b4d247beed412973bdf24c0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.164477Z","times_seen":787,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:59:17 GMT","end":"Mon, 25 May 2026 19:59:16 GMT"},"fingerprint":{"sha1":"D4:8F:1E:B0:14:C8:C8:4B:66:84:99:92:FF:15:C1:72:AF:67:3D:2C","sha256":"9B:B9:46:7C:39:C6:40:22:E3:20:5C:48:33:23:1A:56:9B:51:3B:AE:71:19:7D:1A:88:4A:DD:AB:70:BD:DB:4C"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80938,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"a387a42854ccf8293b4d97aa0189992a","sha1":"266c5aaa95aecb5c861c82fb2057d8ea7640b5b4","sha256":"d9b2c8abf064aafdeb9ced6d96d0c1ebe31a5cb6e4c1542c6e89d7837ae8293e","sha512":"f2a35b22fdcd7e86e3b7f7643ca6dccb2c801bbe3a3bbb68681dafac0042f546227acf50351a93864ddcff8112ddaf352914cb5679704401fc0cc24f22a44ee5","ssdeep":"1536:XNzr38K4KeLoEZeUd+S82KXbp0T4lLPKucbRrWKiMwNW/d:X9GoEF82KXCKKi0d","tlshash":"e583b7c8b6a574a59353b5b5413f000eb23f699de8084dbcb288d8e2adf4948453bf7d","first_seen":"2026-03-24T01:11:50.874729Z","last_seen":"2026-03-24T01:46:52.17656Z","times_seen":4,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":228,"dns":8,"connect":21,"send":0,"wait":85,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815 HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/temp/custom/assets/css/remixicon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:57 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125268\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125268, version 1.0","md5":"9915fef980fa539085da55b84dfde760","sha1":"4d375abf43ed18aa54264c1b59714b0a59c593a4","sha256":"e61f0d10c8cac8cd0ecb36790d6cce883380c0b185ff3c9bf849ed336ba8285c","sha512":"1e4c9a5e0f5150fe33870544c7d70a73724096e60ee10e0ade4def46f31647664afe361292c7ffb39a2edda98cab06bab206f64feb7f610ab137d17fc789a3b1","ssdeep":"3072:5vCveG1NooSPyIFS5WDTVKAQI+UHmfGsrKwfGXoiEw:tq5eTFa47QIVHmusrKWGoix","tlshash":"bcc312b6e11a945cfc80e9a278dc932d4d60145e4f80b7c7ce1912ac433ecdb4bec5a9","first_seen":"2023-04-12T01:04:15Z","last_seen":"2026-06-08T16:32:30.170544Z","times_seen":3183,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nage: 1414551\r\nx-served-by: cache-lga21963-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 27537\r\nx-timer: S1774314957.714424,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":39,"dns":12,"connect":26,"send":0,"wait":27,"receive":5,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/style.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13192\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"231181ef0e78afe4c8c369f0b0cb8066","sha1":"3c14c3667faabea86bd4bd4f138100718a8f9c8f","sha256":"a7209c2137b1636de472b042fe4753d31967aff75a81c2869e9d3763bf165e5e","sha512":"1e54b7d227773bacf1bfd3e1f23b5b7216e584a17943b3a559fbd7fc265010fc651523ea3cb1ee9003c6a12a7d5681b1b461f539d16bebfe152aa48e07f5a4da","ssdeep":"3072:+gQgrtgMg7/TXecD1thqi9B1Gr8JZV+UhM3HFCwEdXN1yiZIwfdxgH:+gQgJgMg7/TXecD1thqi9B1Gr8JZV+US","tlshash":"2da3a9619246232ea127c61192cc66d43e38c563e72707feb6163716c7cb7e7226bf09","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-07T20:31:52.530179Z","times_seen":672,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/why-choose-us/wh-img-4.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-4.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76566\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"ad20b9108d7c8c4ed34ba2566f113085","sha1":"3f90f5b5d8148b0c0e9f1713aeb2cade62fa632a","sha256":"6bdfde425c88941e7ab7768dcf616bcf59bc90d1177dcbcf11a2edb3d1052e38","sha512":"addd313edb714f7021ff17b80b0c37436eb422d51de667d0e329c7cd43a7dbd4ba88ebea97d91e87a57a87effda3e04e942ed635aa2373e847184f8f9f1cafdf","ssdeep":"1536:IMZBuqtQoqyjU8PlyECB88eU5jCtEL80nfAICK:ph39yt8S5AELXYIn","tlshash":"f47302ad9a036e06efb0afa1a55727fd95cf7b9c408374238181f63177548e018b72ad","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.192263Z","times_seen":800,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roycbank.com/","date":"2026-03-24T01:16:07.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://roycbank.com/\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://roycbank.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 24 Mar 2026 01:16:07 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/testimonials/client-3.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-3.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38351\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"0b0594273fe1b0c138afaec55d626365","sha1":"42fbe28cd4401ff7905592ef8aed7e257de18c41","sha256":"ae7da33946d2beb7729ca295821719219230adec8515594ddc697edb228df028","sha512":"f4af1f08a8c8337f2710e438a7c9dbf02486ab24f9ce916d4b21305bb1ab5c64a88562608bfc67880fc3ab870e591a3b5f5c7b021da4e228201f5459303e456d","ssdeep":"768:efjnuv39PX16ZmtIET7ST7XNzGU4jtku6pzL+iePBObysNY7z:QjK3lXamtHOoPt34iObysNYf","tlshash":"dc03f2a4bb4f1c2ae6535488548d87de950bff4c396f36812ce845636c1b3279c1d19f","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.162486Z","times_seen":813,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/eu.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/eu.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 868\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"b8bcad392a1d7f64622798d6e0059920","sha1":"b41ed94de447df832b59e53abe23fdd52e179523","sha256":"ce61c4677c93bfdd6c804e6100859ab906fe93c565cce3a368686b15c68d49a2","sha512":"f0da32809a628ed6b09c01d456b3b313600853a7641246a30079204fb0ca43c2d4610e0b2aa64fd4e472dc92c775f865d3316c982cc941850a46cb1f92e1a124","ssdeep":"","tlshash":"ec11561a5f64c6acd08806afa09438b4f47540461d257a17dc4e346499ffb6c6d36381","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.175907Z","times_seen":797,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2238\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators","md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-ber1080030-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 24130\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXvNMqQEvXiQbeC42Fxp5PSOZEzf3y7SQbE%2Fn3bkcweo6%2Bj7dB6ROT8fo3R3IbQNGbqg29h6noc76KALwTvzNsUW6PM5%2BkhE7UVj8LnG6w%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11d3defb4e35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/form-validator.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1913\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 17:57:46 GMT\r\nexpires: Tue, 23 Mar 2027 17:57:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26291\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-08T19:42:52.672665Z","times_seen":69561,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/images/197582.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/images/197582.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23698\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"905fcb9b1a36f5f816201b4108a4681a","sha1":"1a5913195dbd63eee109041a53f4421e53a088fa","sha256":"6b3af5b3118aa1b73600bd038e97ccd56643d6c076ecda896512f87c3a46fe61","sha512":"15b7e358ec2dd5a3cf524a285529f4cae6cea292ee75126fcbecea154c2103f1677a21c1260f5d3bccbb23f6986d861c1f7fffad88d6289a0a7637eefcdd0b11","ssdeep":"384:F+uZBeEnw+Y9sziZDWm/SWHbE8qTsQpxSMtetCh3mldBEc+y6nR:F+uZnYUiZDWGSW7O/ttJ3md6R","tlshash":"c6b2e1ad42712d32195e5dc57a5fad404dc03dd178f4dce2234ba8887e02be0dc6dea5","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.176375Z","times_seen":875,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/fancybox.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/fancybox.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2931\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13039), with no line terminators","md5":"32ea6a4849f931f79f4ec5816923413f","sha1":"c9fa6fa910b8cd76cf14faf4ff98933c7bae6b45","sha256":"e2d2ac9b36a0e51b450d1f32059ba46fbadcc5ad9d3063abfb562ac714211af5","sha512":"bbcf2ce681b368745003b3e64a8aed9bed1cafb08bce2ddd375ee5e6fea16d68ce5bcb452bcd603a3e0937f41401660ec3703430ada8d2877eb894445c6964b3","ssdeep":"192:yJ6DcJ566s6kC/wEvH30trWc/p2/Pw8RvGgNmUKJwe:yJKQJl/wEvX4jx2/zvG1Nx","tlshash":"db4251336540312c407bcd22d7cfe948e13a9155aa2216fbea4cfd69cbc77e911d62c6","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.151947Z","times_seen":896,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/hero/hero-shape-4.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-4.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2828\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 41, 8-bit/color RGBA, non-interlaced","md5":"c6fa237e3615874a95f25dbe241465e4","sha1":"a8e42d5c5453d27fbca195ce866df66ad677babc","sha256":"e72300940f13f799954928f3ef73bebbe4c59f1664cd703adac82e3a99e7bfbc","sha512":"be45a8d14ffaca88309cb06e7460a61dd745be4bd1be3de782307c615c075c5521ad46968a135838f8e6d499611fa07d98064362245942fc556ac598c32ba4d3","ssdeep":"","tlshash":"fc512bb1f4d2e7fdc0ee3a018a7c205e646b32e3640637c0ae91120efbd79646649881","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.195929Z","times_seen":792,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/testimonials/client-1.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-1.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29011\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29011,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4658267f97ddc4e728a30e1b34f3dc91","sha1":"803b36fb2ad050ade535685b5f3ac92a32a87598","sha256":"6d8b362584cdc3dfc95309e4af19147517ae92c27d28e602c212ac92913e3f0c","sha512":"883a1f2574964f274f6f0daed68f7c8f8c9194a3a0f320f56629874800146c33941d683ce5216632651af18f7937452ec937b988d2142a2a96e686f7ccb01993","ssdeep":"768:2NeLTkSwjEri/BzR+qGPiOcSni777QMa3tAofJ3:SgoZEriBGPiOmwMa3yol","tlshash":"29d2f18841e749819021c3f2107af51d678a695c6d2b031b91d93c72ccafff64f5ea78","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.196427Z","times_seen":826,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/shape-2.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-2.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 519\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 50, 8-bit colormap, non-interlaced","md5":"0ebb76b1d4f0c812b15c580a9d4f31c6","sha1":"39976fc87dff1ac0b6f0ba6a75324a318e0aefbf","sha256":"5c7e35d5c7a4a76e878b644d412a529023fa9719915f1849b8cab2dda9ad56ae","sha512":"402cd9d6fc95b1ef4473fe11e14037b972cd32b01b7343501a722fc90fca919c8132b4de15b5b2b34f31cfcf4d53c90ce9cfbadfa3d8377a93734cd37b4aa5aa","ssdeep":"","tlshash":"86f00e82ebbced78a51286aa47314821823a73082011304aa833b0389af978ac5d39c3","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184584Z","times_seen":803,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22162\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/japan.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/japan.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 676\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"d6d8f49eb74c68abd38daee5abdd0846","sha1":"59da5e99ad295277d09a2a1e0d14ebaa04ac75c9","sha256":"775b622f42ac6d8adad96c7648ccc994c542ee70cd400e77ca9cce9d4b8ee03d","sha512":"f93fbfc102bfad1b05f118085f424210180c96c5dd483c81db46a44a1d8de9b35a9d019c9ba917fad18022061134c14797b6c7975792608d446468c673441006","ssdeep":"","tlshash":"6c01fe73383ae4650cef0acfb27d6502a4a646011b22fb487b4634ed64dcc4969b32c0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185126Z","times_seen":795,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/canada.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/canada.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 801\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"43508a151ab884d973520b83487b4ccb","sha1":"5379f54f4468a64d2c0c9512b2df7a7936ec043a","sha256":"579aea648f78215dac32b2c68101a5cd62b03d868d92a63c4b70545f1bd1aa78","sha512":"37cd272abd993d706f9b059a0dfc31cb3d1c49cf3619c370436318267ff91f717c8eb61f9a4535ce4e4218aec909f85fd95fc41741c76875c70f6166e4c4cf70","ssdeep":"","tlshash":"5901c58e730880cced46589283badd81607a15f014babcb13201052dd152bff8fccaab","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.153715Z","times_seen":793,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/testimonials/client-4.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-4.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28230\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"04fc1ce1a80a1ff934ed63d7c439a5de","sha1":"057c48e27645778485beeb5965d046d7ac545893","sha256":"cd322a5aade9d9947c3dc9c9f846bb0b942dbc569e6cbe3bdbbb79246bd7b151","sha512":"cc9094b4d5b1e41f852f8d0f9e46dee475b8e72697d789bf0aa8859082e32e922efc35b694cb8b7e9ae37c031db8c70c54348c4fab51997e9bfb7f8790be9650","ssdeep":"768:4kzuA5cufgMAaSY2m7NBvcsoqHJ+Gv+1Cj:Bcgg1DJqp7yu","tlshash":"00c2f123f15aa446c4903d7811b2c28e9ccde362ce47da25379158ebf6077f8338e565","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.160244Z","times_seen":811,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 140987\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":96,"dns":1,"connect":21,"send":0,"wait":22,"receive":29,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 140989\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:07:00.586551Z","times_seen":13401,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/blog/blog-1.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-1.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146739\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"1a204446aae01ddb18add26e1aef1cf0","sha1":"74c5be7f2130aeb6abd5c4771f1d3b688ca4e352","sha256":"87fec55557cfa10c01ec8981f5ddac8ee9be98836b5dc05c32566107ee43c5e1","sha512":"000dee354a645e4b171a438800cb0ab5b0ffcebf04c3af64c1eb4fbc6f370a038ad9b772ae4563bf4eb3044c1f9614da8af00a99c214ebab8374f133e88e011f","ssdeep":"3072:KalLJQKWDAWNMjUb16xrrs8BkiKhpFonssAfYjCOcUKBnefd:HQRDAWNMk1aOyssAgCOcPad","tlshash":"31e31293a91747b5e55b0dbb00caef1c121a4bc676f811c9367c97a206b939a74ce2cc","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.155764Z","times_seen":775,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/odometer.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3453\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 140987\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":116,"dns":0,"connect":21,"send":0,"wait":21,"receive":13,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/down-arrow.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/down-arrow.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 438\r\ndate: Tue, 24 Mar 2026 01:15:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"6f1f1acf5c62fcda73ee05662c8182ae","sha1":"e09fc52fa587eb882b2f31f4e6380c820e5078b1","sha256":"777bfb6de1e8019c69bfcf4a6a4113b04ac9ff635ab57457686820830b68a6e5","sha512":"84d1fe9adb2b18c8f3aa3154c6fb59e285c8a55b08d24b5d99abf8d8f904d6cb2046dcbdc3cb6114baa5ec21f8bef1b149a1d3f3d2baf97ea2b71593e2343a71","ssdeep":"","tlshash":"fef023f7535250a8dfb14570696d00f4dc37202d9d02910646094eef65d1090c8c7802","first_seen":"2025-04-23T10:50:27.724108Z","last_seen":"2026-06-07T20:31:52.540314Z","times_seen":144,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230142-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 73366\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGqiNboPlXlhX8NFtbB7u2hyoehJGRg42arO%2BwSdIjXo3CYZSkHVhDvK49fWhuIOBHBvYRMPgse3rAh4BUpc0iypFHVmkvU75LqVkpbKBQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11d3df0b5a35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":2,"connect":6,"send":0,"wait":4,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/aos.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/aos.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-08T19:51:17.82464Z","times_seen":38274,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/shape-1.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-1.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1166\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 49, 8-bit colormap, non-interlaced","md5":"3083080a6061f2145dd6034a07f3b466","sha1":"22330aabb755df270ae0abd601bba8ec9546ac4a","sha256":"cedd61e88f5aee5bd98568302612740a234ef7f9039ed5d52f749fdae7b4d8a4","sha512":"6283e9c9df859df0d4e7d4b64530be8c37595649c4c3a5ec14f508c7cb67649786642dbf73cb625d930128a934953015b1b5fc6ff0a79f33d0f9bc523a5e30d1","ssdeep":"","tlshash":"4621938ee55ccce4de10017189a31d950511b56c0c034100fa3b31beecdf08c86d0b6b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182627Z","times_seen":795,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/fancybox.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/fancybox.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20810\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/storage/app/public/photos/uzJ50yuPP8imnu0ZTho6smwLZc0FSob8sHW8X5B3.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /storage/app/public/photos/uzJ50yuPP8imnu0ZTho6smwLZc0FSob8sHW8X5B3.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 14:44:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11680\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 204, 8-bit/color RGBA, non-interlaced","md5":"b1a58b6f5d800a43376f385bf26b7d76","sha1":"4fbeb589a7df5eee5ceb3e363e213e290cf91733","sha256":"06e2d94316a36c478ce37d8ce5470afa3dc304998495f20bc86ced30b2ba01ab","sha512":"a8aeb818c5d41cf039073173be3b9425e5968d4701f97d0ab90c89d376351ac89ebfaacebbf880d3504318769f7d3048b44341f9b7982259227fa83e873ade33","ssdeep":"192:eSMkknbZHxD5aOY9htWINr41UgbIDd5sjAZopt4jzFmhSFzVx35llPlkHwOck4Sz:BAnbZRD4OY9GIdcBbAd5s8jpzx3UHwOZ","tlshash":"6a32cf4e9c42dc92b4c4ef87d8e1966377a723043343c3c1a9dcf80be5a80d69125ad3","first_seen":"2026-03-23T20:17:30.837773Z","last_seen":"2026-03-24T01:16:22.944045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/responsive.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3160\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19549), with no line terminators","md5":"41f6f258e711bd2f007f2fa62ead6217","sha1":"7fde53fc9fcb23d73eff3c8e9a0194e33c0432ff","sha256":"a8b7d048746598b7abfaa4e69644003831806e2a4d87e8a702d49fe949e144b9","sha512":"2c2a6c94e122c0337dfc55ee32f5b8fba21c63722814f8bcfe22b2f8b971e8374cd12660c357d5a017117082161ebd9fd455e79e8bc3aaf66df53855ca76915f","ssdeep":"384:WtWRoiBxVVdRr3Os0djy9ScnTUUHaeXTl0vwzaxEF:lRoiBxLOs0djy9ScnTUgB8w2xm","tlshash":"d292359323160b3de12b4822408d72f43f199a72d7a742fe9d154a2adbcd3b713b4b19","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.17861Z","times_seen":860,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 01:15:57 GMT\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12089,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"639340ecbe89bfa40436d07e95d5d5c0","sha1":"1fcee10dacb1971ee08f65e69f1a0a15e7c8ea32","sha256":"48b7b8dc47ec45da9abacf0728f246ec8715f4689bd4caae4c2a2555077e1f14","sha512":"7eee30b686c61f845fd5dfcf0bd3ba751062db920e776d3d7e8fcc3ba50e3dbc5a19acc6e3ce36569c0633e9d82b25574bb41315585697c36e0ec7b2487ba1e3","ssdeep":"192:MicTxHyDi1iHT+H1Dl0iaTzH0Dkfi9ToHfDPGi4TtHGD25iDTKH5DpYimTvHYDIp:x+NMzwNYr2tWXCRg3ExsP9","tlshash":"5d42ada10917d404eb476dc663ce3e36ee8e62057047953a9bfd58bcbcaad3613a070d","first_seen":"2025-09-14T16:10:41.877473Z","last_seen":"2026-06-08T16:32:30.179607Z","times_seen":843,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":75,"dns":1,"connect":14,"send":0,"wait":35,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 19:00:51 GMT\r\nexpires: Fri, 19 Mar 2027 19:00:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 368107\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:07:08 GMT\r\nexpires: Mon, 22 Mar 2027 10:07:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nage: 140930\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:00:05.583277Z","times_seen":11319,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 920\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185), with CRLF line terminators","md5":"87abab2867922fef553680ba678dfa06","sha1":"38e873c124fb121992f7353080c62de7ff47c1ad","sha256":"eefff6e8d13f576add7c73285b00d6ef56d3d1d6e6f98af8561fd3dbf47500b5","sha512":"dbb7f9cf9d1f47ded41384e422050d480a1f718b9c5b15516869fe9b44cc18aa478471d589fec1e024e3c81354be71f64da311702f059dfbf515ef73b400e5e4","ssdeep":"","tlshash":"1461cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-18T14:12:09Z","last_seen":"2026-06-08T19:38:41.240887Z","times_seen":1587,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230067-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 25536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WggDCgnX31r6hYL2BxsiTf4Mu6HTcxZlvcTu%2BogBjyJZOsov43Kz4sBwmiy0WMZBpKDg7u%2BYNN3JmA4EgdU7umQhCM2%2FnJq7%2BnhDAUsecA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11d3e15faf35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:16 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 454901\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:42:52.67885Z","times_seen":48979,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 19:00:51 GMT\r\nexpires: Fri, 19 Mar 2027 19:00:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 368107\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/why-choose-us/wh-img-6.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-6.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 180305\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":180305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x692, components 3","md5":"5c9ea178a8573030d28ffb3525b2f3b1","sha1":"9ff7af508915c2488e5188bb3824f6c492232302","sha256":"866c823886969f332ee6ad51137f1daec2480cfa6fa78cdcbb411dc37be97499","sha512":"84d5e9ae8d06a1afc0cfa27b56d1ddbb9d8fe5dfcecbcd18a46e50a8041ca8c7ef875c84389a5f86f22efe4a61983dc2be5e65cf60e0c81f071b2aab7c723899","ssdeep":"3072:OpYQ94yA0CLKJ5Z36nneMWZNy8+ERR3RpS9d0DBD5VUe77AGI5:OpYQo0JZ3iGZNj3Rp4d0dDHXS","tlshash":"d40413ca08fd6bf4a6d80c235e29fb2457a66fba57098abd91c7f466c7d5000e097d0c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187676Z","times_seen":773,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/blog/blog-2.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-2.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 172759\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":172759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"6e8d6d81af41649e282d864bbd6110cc","sha1":"f2cf79b706b7a7ad5c4b3a1eb0188ae4ee8f0845","sha256":"db0b6f3926112907cc9316670c759eb24793d3da4271507cac4198c3b38fb8d5","sha512":"177e11ead66cb9967f35c2eae459de97b7199f046ef62313000a99ad3b5fe598f49fb3a43823e55ba003bb648cb84378e89b8807b354d15e706afe743c899d1a","ssdeep":"3072:ZgbtQno7ljRcK0uK+CevaBTHy0y6ayjQs8wlX+wfEgOqmLLsERVoh0l0B5Y:Z6yo7ljli8ag6dBX+wfz4LwEEh0yB5Y","tlshash":"adf3123c07c34500179d25a32db31792639c9111e94ad8af52d7f6a29ecebdd83648be","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.174949Z","times_seen":773,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11143\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T18:43:48.973559Z","times_seen":11853,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/storage/app/public/photos/dOOLAmAHX7ZgzCiTW4boCjEQPQLFHQ9tPAaybTYl.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /storage/app/public/photos/dOOLAmAHX7ZgzCiTW4boCjEQPQLFHQ9tPAaybTYl.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 14:44:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27696\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 876 x 204, 8-bit/color RGBA, non-interlaced","md5":"53266e96706ccea5fab806599b2dea0e","sha1":"b42302e92e5e625636f8f420b8b60b6ca5591b06","sha256":"e568108cb822ec82fd7b05d1d9bb5f94b69daa6981386d56cac89174fa1e84ef","sha512":"13733ab3374cd5d0820b1cd4b9db95c2e924aca9ac12f1b00e43a2d4a9f527b2ab89cf67334a16dd532b0d2508144362638bb91cf2eb2edd16459a89e28ad5d1","ssdeep":"768:j7DPmEvmZIqBgJnxtPpzM6+D3cN06en9vFNW+tbbbbU:j7TtbrtPpzM6+scFCmbbbbU","tlshash":"03c2d08bf405a6cec3eea10c7ce969a30466d31bfe2559a6dcc0d4015981f31b53a3c6","first_seen":"2026-03-23T20:17:30.85162Z","last_seen":"2026-03-24T01:16:22.949408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/testimonials/client-2.jpg","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-2.jpg HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24322\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4492070c33a5a620c7f74f67f13ccec5","sha1":"eabfa0faaf8877499c8681aab77236dddbe948ac","sha256":"079d830b47f34df1cbfc52ad478b4ff995e0c28b20925a877c3f09f91ca8c797","sha512":"2b84b864b1bad11c6937c1fce97ec6b0c10df32cc9952a2bd5b174ab86f9fabcf09811574d1b396a682159969e68a595fd5ba625ef99beaf64e2b8bc0de4b051","ssdeep":"384:LeOMbPiVLUNSNs6C9RiTsqW/ioVwVUFtGBbzrEzKg7JIMr2hKOdCXff:XMbPiVLUNS49RUsqGiNGFUBbzKTGO2hs","tlshash":"9eb2e1572f838c8f6a3a4b3ce61e82a36911033d9523e79c2d6935c2d72b3fda45c854","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187147Z","times_seen":812,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/flag/france.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/france.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 704\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9b5b3d7931b3029b5d87f478c3879a21","sha1":"e31575340bbc26635b43c3e4b48e1efb379c494f","sha256":"d0af89d9567368a223db1b6345148d40e272a3de4c2d6c378c6301ec10864328","sha512":"375b8a5b5eafc62eb88ece2cd5c38d6dc35aabcb1e7adf3a98975c1855b3b7138729716d1aa666e83fe471bb417a38ce384e0484941d085b0ab014770c583412","ssdeep":"","tlshash":"bb01449ee1045851ca15c44e1b9ae861ee1a595fc9b4d0b93c43c41cd403b7c18d1743","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.155072Z","times_seen":790,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/main.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1451\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3752)","md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 140987\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":164,"dns":2,"connect":23,"send":0,"wait":22,"receive":10,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260322","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:59:17 GMT","end":"Mon, 25 May 2026 19:59:16 GMT"},"fingerprint":{"sha1":"D4:8F:1E:B0:14:C8:C8:4B:66:84:99:92:FF:15:C1:72:AF:67:3D:2C","sha256":"9B:B9:46:7C:39:C6:40:22:E3:20:5C:48:33:23:1A:56:9B:51:3B:AE:71:19:7D:1A:88:4A:DD:AB:70:BD:DB:4C"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260322 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Mar 2026 01:15:58 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-Lxihxzc16CYmU8n2yfMhBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw0pBiEOLmOHe6_RybwI8DR-yVlJLyC-NLihLzinMSS1KLU4vKUovijQyMzAyMjYz0DCziCwwAFfISoA\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=32.SE=nrWwLFVOqWmSXNIm__Pqa7yjB-Yl9muIeVYWckiMCvvpgqCCEWLKpUrjzCbiFsUfmSpw8LItKBik8eflO9faXTbxFLW7wGq7zhgEShv7skWJnvoaCAGgfqdL_L7ODdCFV0TQYVzPcbnuj29Xk4SClSbmsDjK2RSqsqKiz-UHhlMl0eDrWo9_-d1lYH8Ch0F1lnnfokAZOLWJ7aFOfzsMwwcvVtaDDDGi5lDIcl_DYMgz-dxUD34Ngg; expires=Fri, 23-Apr-2027 17:34:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/img/chart-img/chart-3.png","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-3.png HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 462\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 22, 8-bit colormap, non-interlaced","md5":"93371548ccbe732f0d4da146e655a847","sha1":"713328fc5b2ba4605d234f8fc6a447d4e80fb081","sha256":"65e31de86753a271f5b52be6716a181ff8931fbcd48a4f056e65e275e690d6da","sha512":"bbc03e8d358fe0d35c38b9e7ceffb6c9628ef69ba8152168349aacf1d462940f8923456a7a0215f1d524ee467bde7192756b861de7d843be0bb2dedf89a42741","ssdeep":"","tlshash":"c5f0abdae5e8a82bcd6949fac73c983d2a463e44200d2007e814382b9eb9c408658a48","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.170058Z","times_seen":769,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/aos.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/aos.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4224\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T18:57:07.784746Z","times_seen":9627,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21197\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163864,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"d72fb46fdfcc65998d65ce27889e95fd","sha1":"8aa23d660df97231c14b1d247ff2fcbe25c6fc8b","sha256":"ac9e331eebe875842c3e7605970c374521815c4277502bbb1c66dc57aaeb04bf","sha512":"6c297b6d0bf706339fdbde201b8e4281d521991746ec8be2b9d8192662902cecbaf26845340d26eb6fd9ab0260a883286f0a2377e7a8619c714dceba7d7eb3d9","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt0430VUpz600I4fT","tlshash":"38f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.157563Z","times_seen":891,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roycbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ndate: Tue, 24 Mar 2026 01:15:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230142-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 73366\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJbC3bZebSKmXqrwhGXHg2kas2aVAGwuM3LIYEBOtXtoDt43dZ%2F5sd1Lg9ceuAR4TwKhU6X6tqcZQb9LgIKMmbDXhDxUZMChWP1Tdoa%2BDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e11d3e17ac10883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/contact-form-script.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 425\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (895), with no line terminators","md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:57.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAG/d=0/rs=AN8SPfqm7DbgjGLNGcEqJ_tQEbdcffij-A/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 20:30:12 GMT\r\nexpires: Tue, 23 Mar 2027 20:30:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 17145\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:51:45.4145Z","times_seen":65097,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:58.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:07:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nage: 140929\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-06-08T19:00:05.583987Z","times_seen":6417,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roycbank.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"roycbank.com","domain":"roycbank.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roycbank.com/","date":"2026-03-24T01:15:56.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roycbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 11:38:48 GMT","end":"Wed, 10 Jun 2026 11:38:47 GMT"},"fingerprint":{"sha1":"C1:D1:6A:31:C2:2E:0A:D2:FF:D9:A0:2D:74:18:EC:83:31:CD:BA:77","sha256":"43:6A:B3:9A:2E:58:73:76:DA:F1:E5:F2:DD:B4:35:46:BE:FB:4D:87:CA:F3:80:93:4F:1F:26:30:C1:83:9F:F3"}}},"request":{"raw":"GET /temp/custom/assets/js/tweenmax.min.js HTTP/1.1\r\nHost: roycbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roycbank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZsM1lBenkvU2N6UlpDSndJSFZqTnc9PSIsInZhbHVlIjoiRzdhYlpSMjhLdWJ2MjBaTEdXeklXVnFEdWNycVNVamo0SkZocEE5WjA4amkzMzFGTElSbjdzQml6UEdRMlRMdG56cVlmRWFjWkxSQTVhcG1xM0RSL3B0dnVFOG5MQjlJNDVGZ1NOdXZ4cmp2ZHQzbW4yK1RNSXh2QWYxVTBXblAiLCJtYWMiOiJjODkzNjM4YzgwYThkNTExODk4YTVhOGQxODM4NGIyNjFhZGQxZDJjMWRhYzg2NTkwNDM0NjExODllN2NhMzFjIiwidGFnIjoiIn0%3D; royalcapitalbank_session=eyJpdiI6IkVsVHVZQTc1SDJMYktlcC9vRkhlcnc9PSIsInZhbHVlIjoiTzV2akpsemJ4dnZuOGtGcWVqU3ErekhQRXNzbWY3RElsWEIwd2w2U1ZRc0I5SmQ2UzJEMk02OFRzNWtRMmdpQnBOSXhZRjZhbWhWZ1JDblJic3Q1NzVQN015QmkyU3BnRTVIVFhxeHFIdTZEQm9VQjlKU29KN3pXVGlGek42b2MiLCJtYWMiOiJhNGYwNzcyOGM1OWRiNTk2ZDBjM2EwOGY4Mzg1M2U0MzMyOWY2ZWI2ZDdkYTAwNTJkYTdhMjVhNDcxMzU1YzNiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:15:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41298\r\ndate: Tue, 24 Mar 2026 01:15:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36174), with CRLF line terminators","md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"roycbank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"roycbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}