{"report_id":"c5de67df-e2d0-4be4-8f4c-8b29c8245bec","version":6,"status":"done","tags":[],"date":"2026-03-13T19:29:11Z","url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"title":"Royal Capital","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T19:29:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54286,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.477076+0000\",\"flow_id\":1476918548514744,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54286,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:50.935864+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54312,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.480740+0000\",\"flow_id\":1184691121178817,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54312,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:50.936129+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54302,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.491334+0000\",\"flow_id\":1260059207288958,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54302,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:50.936062+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54340,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.497339+0000\",\"flow_id\":1573364186630463,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54340,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:50.936255+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54296,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.501593+0000\",\"flow_id\":664336505915447,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54296,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2026-03-13T19:28:50.935991+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.509158+0000\",\"flow_id\":643770055018751,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54328,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-03-13T19:28:50.936191+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54360,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.750535+0000\",\"flow_id\":1179277315005376,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54360,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:51.187328+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54410,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.753020+0000\",\"flow_id\":1035063050624256,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54410,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:51.187648+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.755176+0000\",\"flow_id\":1813869470407821,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54394,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:51.187533+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54382,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.760849+0000\",\"flow_id\":1186048330947654,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54382,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:51.187462+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54374,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.761857+0000\",\"flow_id\":202850859998214,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54374,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6037,\"start\":\"2026-03-13T19:28:51.187398+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T19:28:51Z","timestamp":1773430131,"ip_dst":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54344,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-13T19:28:51.775174+0000\",\"flow_id\":2012041408928541,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54344,\"dest_ip\":\"47.79.64.214\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dukewangluo.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-03-13T19:28:51.187165+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-26T18:31:12.618924Z","last_seen":"2026-03-13T19:27:16.955475Z","alert_count":0,"request_count":23,"received_data":1547061,"sent_data":11454,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"royal-capital-ex.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-13T19:27:16.193902Z","last_seen":"2026-03-13T19:27:16.193902Z","alert_count":66,"request_count":66,"received_data":7082172,"sent_data":35005,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.royal-capital-ex.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-13T19:27:16.194222Z","last_seen":"2026-03-13T19:27:16.194222Z","alert_count":51,"request_count":51,"received_data":564014,"sent_data":35248,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":4,"received_data":6589,"sent_data":1921,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-03-11T02:50:34.795985Z","alert_count":0,"request_count":2,"received_data":5900,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-03-12T04:53:18.869969Z","alert_count":0,"request_count":1,"received_data":1584,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-03-13T05:08:23.504074Z","alert_count":0,"request_count":1,"received_data":1425,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32fae26755e828dd6b7b79454004e459","sha1":"01fbc71456519b5d512c79bdadd8db164a875049","sha256":"179f4b72d732ab9122e9b21c7482c0598c5f13da57917628959329b440f7d476","sha512":"8a897726e639fc6e859d7b49f593b8f006e9d9455f83400529fd13ff09d7d2a32065a131bcad816e31a20ce19b0eb463ab1385403224dc1f78242a52b1f46938","ssdeep":"192:LN2gvWSdqrSrmGH7JZt8guvAJLWiT0QwCqVy/Uh4ZF7:L5lmSxH7JDBXa51U","tlshash":"e9e143aeadf73071a87370395b6fa10471374417241ded80fe9c53409f55a2a89e8fe9","size":7051,"data":"","first_seen":"2026-03-13T19:27:25.993691Z","last_seen":"2026-03-13T19:29:19.777302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4133819b5d435d457ecb59e58b645337","sha1":"929debbcf477cd6bd814915473ad982f9d44ff3e","sha256":"c80e5fe5bb3a9b3a10e20c33e8323b796a4199fec28d2d5f455a0d066c5a41e1","sha512":"975fccd59c81d6d255f11737383651ae7fd97fb5845d3467145ecd2556390e23e2e6be853fddf5584e2b1565c0bc303964eafe281f085f6704c2626f575fa40b","ssdeep":"192:1fRBb28HqaoP8qd6CqxxzWLVYqxYyBvWAecSyq8GivWU0StqIkLT:ZbDovexzByBvWAe6GivWUe","tlshash":"2b02954cae9722f16676613edf3bb94c31358413204bdeb1b94e07607f8531a1ab87da","size":8210,"data":"","first_seen":"2026-03-13T19:27:26.006405Z","last_seen":"2026-03-13T19:29:19.778015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-16T17:17:23.328011Z","times_seen":7209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-06-16T15:46:25.160609Z","times_seen":870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e4b4206bc20cb008f303cf651c0db578","sha1":"6e024921ea6d51cce05db53df0a0dc84fa8e41f9","sha256":"8b8e9dc546bc69e6320c657030eae12192ece9d93c9065e968693cf2b59da265","sha512":"5d20a9269f499e90ef063da6d5b36b59391d6c7ee5519f1842ba87f669dc5684b6d15c92050902fcf10e1e5edbcc480aea978166e2334f0b080951363f12fb0f","ssdeep":"","tlshash":"e9c022c8718a2a041a01781429ef28e0a0309026b0581602dcc8ec483d334bc8237fd8","size":190,"data":"","first_seen":"2026-03-13T19:27:26.008939Z","last_seen":"2026-03-13T19:29:19.780232Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"01665d27b980659950dc482f6e2acd37","sha1":"1e341f6af6af33e552100d319e0c58bcd4087dd6","sha256":"3bc5d357e2d3a5ec5f41ee05f13b82ad1e140fc6d57d933f7387406e7675cf03","sha512":"609543543a7f4f8bc4632c5c9bb262fcc4a72d0d3cac94885f5aafcf91e781da5b5a12576bfe22428ae700238eb5bfdb0ca7364cb739e3258453dafd60249822","ssdeep":"","tlshash":"6dc08cc4a0d67e101613642060bf24e890244027b0481f53ed94dc482e620b4823bed8","size":147,"data":"","first_seen":"2026-03-13T19:27:26.052621Z","last_seen":"2026-03-13T19:29:19.781513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"efb8cc336dc81023249abf6a576123fa","sha1":"11aaa23e097a68386a445a02b56bfc99f8c08abd","sha256":"03ff84b3ddbf426069e55ca6d1162e98f88e674632fafc43bc8fcdb1346b9331","sha512":"26e73ba9946e070a340bb01c96f8eb9afc29f68d703347b2db124f06244aaba2c6d35057b124d5876b324f35497d9fdee79f3f66c359dd5d82e298688f784b68","ssdeep":"","tlshash":"20c08cc8a0c66d001652682020af24e490244026b0481b029c94e8492e220b89233e98","size":137,"data":"","first_seen":"2025-09-05T12:21:32.665208Z","last_seen":"2026-06-09T03:22:56.805473Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-16T11:19:38.861232Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"722e95b449094ffbaab5f09f523ae495","sha1":"4a4c987ac683e8e7a3534c140f1fdece1babc234","sha256":"9b31280db6a01c1c879ebdd9f75080fd5f75491894e37728f8ecb632f7abd9b5","sha512":"821ccf07c8a7e14d5302091f8149094f431fe10283b4f6260fdeec9b0318af9a833ddb7a92727e987c626e6ebf098777713cb9c3edfdc34dfd902d0238af8f4c","ssdeep":"","tlshash":"31c08cc4b0c22d206a22a52124af29e490344026708c1b028c94ec482e230b88233fa8","size":148,"data":"","first_seen":"2025-08-31T11:06:39.061735Z","last_seen":"2026-03-13T19:29:19.783627Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"08d23c8406907d5792134733940dad41","sha1":"8198bb3171e9e677a344f3cd2bc7a8d41c00b4ff","sha256":"705d72df5c29bc50b1ae7051f2a80ce5fafd5172dd64a9cc1402dd53d6f9744e","sha512":"1544d17c03c20af8f515ddedf7de73b83733f3268429b16713746d96fb35a63b1cab6d4142b1b347d5e677f2b7850a924e74f3b7081d85231b67bbc36a164d65","ssdeep":"","tlshash":"2ec08cc8b0e23e001a02642054af34e890384026708c1b028da4d8483e230b4923beec","size":146,"data":"","first_seen":"2026-03-13T19:27:25.986544Z","last_seen":"2026-03-13T19:29:19.784169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-13T13:54:53.623052Z","times_seen":1071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"708d0bbe42ccf217f5ee94d4778406ee","sha1":"07c6c07401e9cc7287f8aba8db13b4dfe6092b26","sha256":"32c915efcf4dbdfca7a89c5280800f110b712e795ec42839c2cf6f6b6aaf478f","sha512":"4539c54a270edae585c03aefd751585dcfdf7220d03eed6f28c5c27f15c91a9cd2821cf371eb53f3098fd80064d6a89f75192224f226a31213b29a70384c2508","ssdeep":"384:QzZZ+wKc/D8SNEzDPqigrG6+IwiMKNoxdP1inCu7RYAwtFrifqzqFQMj:QnQqiIcqVhj","tlshash":"1e526e82bb3e38a72b5656f800eb0d8475a8129fd1760d47f2e180addc1db0513bae4f","size":13304,"data":"","first_seen":"2025-12-25T22:01:33.872566Z","last_seen":"2026-03-13T19:29:19.785581Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/study-pane-views.ee901b6c4a31f84ba03d.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0300d86f10721941d4e39986d41c7e35","sha1":"2ddf6f3f24e65c9da5329af4672590e27acff2d8","sha256":"e6b3a9ce8c5be4da95a73421ee309db0906499534c1c2a409d75af8a83ca97e4","sha512":"7743af0af5787c4d0c2bb951e491296001d4070a96950eaba8ff5d30b02e723268bdc06bfaf1747738ac8361513f67ddbd948be8e6b11d0167b05640a9c043b2","ssdeep":"","tlshash":"83418692fe70795acb6984f8adb4584a6756384e464b082831b8a1fc20ecd1c3d3cb7c","size":1922,"data":"","first_seen":"2023-05-08T01:41:09Z","last_seen":"2026-03-13T19:29:19.721719Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/4.80bf1a925965757be6d4.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6eedcb8c4a5e6ade257c4ec2bf467e4","sha1":"92abc901bf62ad5c2da9636a5f5c56f283408ca7","sha256":"5c4c0e6f6371d83844e5c37334fbfb241dfcee91a157d59fecf5cc6ac4caddd0","sha512":"78141a0c85ed027d853a2f3d922ab035b2b86d56581b28369fdf05660c48b71174830e5db75375adcdeea8844c8b6d9ef5357120168e61a6a76cf07972b6180c","ssdeep":"192:wJAbCejBBdD1V3i6/LwGJrdOEdTB62s/TaPlPmP6Erlv:wJ0Bl/Jd42s7J","tlshash":"3312a248309121f104ff20ab80ad660ae1b69dedc519d072b9b2c5fc5db998573b2e7f","size":9145,"data":"","first_seen":"2026-03-13T19:27:25.889161Z","last_seen":"2026-03-13T19:29:19.705998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/9.855edb9bea2352bd5129.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b3c6ba3c272a38d64e6f98aee05b9ee","sha1":"b8a054f8622668809a399b91d15ca4a0df585735","sha256":"80de5334f8510c735dc9a97ebbb23bd83ee485d317f3ec3d715ab1a0486d0ccd","sha512":"008c7f4517df339bad90df70696711de22ed4dccc5aa7daac958401c88797d17a848c5c43752111ca996b464448a863202af362a5ca9256409769f5b0f6d6235","ssdeep":"384:Ubt1LjieBpNTWGf76DyniSjBv53Ij2/XPU6h/O7piyE5KJ4Y/d4P0j4GRtCwU6PB:WvuvB/T186b6Pc9RORZo","tlshash":"9c13e698f264353253a3b1e5267f9907d23b925ca00580acb261eedd39bcd4c526bf3d","size":44360,"data":"","first_seen":"2026-03-13T19:27:25.939401Z","last_seen":"2026-03-13T19:29:19.760277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-2885e3de.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9285bf1513dfe8039f80754b5975e551","sha1":"e212c03f55d0ae58926cee15a269b36a24698edb","sha256":"76d6f5dc91a4c2d60f1e964a15fcf3c2e08ff16d900a42db77526c3c608349f7","sha512":"1f67cea7ef9b1de5650e13b2fb228eb2f0d3030deb3dec67d9c39df47aac9414ec4b80ba2129a7f84b1ee2bd8de331d7860230d7dc78b201214590f69adb3cc1","ssdeep":"1536:RJCZYcyr54piHmBVkhbP4w230Jt3OTEjz/9O0ham2+:aeThbrGEjz/9zab+","tlshash":"fbd35c8eb5070fff5cfd0888a56b450021641f926ccd8ca3b2be6d8537f9c95638a729","size":134960,"data":"","first_seen":"2026-03-13T19:27:25.847991Z","last_seen":"2026-03-13T19:29:19.768813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/en-c461c46f.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"172299f6a5538989c15c1121767ab92c","sha1":"253b6287f8f54ac5b3cd22fe09da4e671f23caba","sha256":"c719f48f5b2519259050b1fe737bc5270b078a14ff5d2085f854dafdc0785fff","sha512":"f698d4efdc50b9f340982f6a67013e19ab0d6f3da02ec6949bd0d1651e7738bd081d3bc17d0c04d9ca057c06c5769ec374920cd9afb5ed5426544f3c4acba11f","ssdeep":"768:LHtjMK4bsVsM6fpaOh47OQ6xEX69JR+7VLSZFhlpOpZcEw/oPrhjP4mthDJPLT05:LHVx4R3ruOZhXpoThjThDJPLDl4","tlshash":"9c331a897d1ad99d08f35326b4ce6e1120f909c18166881f4fecc9fd53e2b63a367768","size":51206,"data":"","first_seen":"2026-03-13T19:27:25.896152Z","last_seen":"2026-03-13T19:29:19.755309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf7ece427aa503c58393bcda6b4ad01b","sha1":"ada05703e66438a300412868a6003ba71c433d18","sha256":"5668cb3dcd486873593a0c1bac8398ee94e324b5991d49e7c338da752461f2b3","sha512":"84f31a9a41ec6710cbc39b57a7fa61fe105fffebd2ec7d36c6a52a940c1daec415eb14ea85b62937d0036079ff18aa93e566884cb9cb8ca01f4e0c05584bb880","ssdeep":"","tlshash":"bc11abfe291a60296303404e976b7801642650b9400a184177ccda9dbb9af7dd0cfb8d","size":1048,"data":"","first_seen":"2026-03-13T19:27:26.013345Z","last_seen":"2026-03-13T19:29:19.78636Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/info-43fcafdf.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f5a30ea48001c996c34f56017feef796","sha1":"3c072e1ba63a6e72ed8680ffc8442cedc5b8bb0a","sha256":"6d4e6986aa9a11013ad768e7911de89397cae23408e6cc44f0116332f7977f09","sha512":"87086ebc7d6ee3bbd9085ce674aadd003243c4f80a2cb43e1e52efc80cbccac7ffcce57f4d52d53d23c1037690fac6bf2199eb615f329760409f07d007b314ed","ssdeep":"","tlshash":"81c02b0b0d2243f32239149a32d00d131263007c2f834eec001ecd5148f4cc1941d914","size":146,"data":"","first_seen":"2026-03-13T19:27:25.962301Z","last_seen":"2026-03-13T19:29:19.72768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-16T14:19:51.190642Z","times_seen":1602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/24.319f9ed9725f3cea260a.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5eaec00569619bbc7c22f76ad118a1a","sha1":"fee80075ccb2377bb1890d8140c5b4fdca7684d0","sha256":"259a657864e56f1f9ad890a5dc5297f4d12f0aab88bbac6a426fbf174111dab4","sha512":"935e05fc862f72af5e73c8025ce5d7ff14a57b763c56b2bc07a7a9e32bb642da4492f9b11ebd63a3b24b03bc94d64cd86ff9e3367c89bcc7f67bbd274cffaab0","ssdeep":"384:cW8tuWmKp5FZH9CuJUkMdbmmg43NbG/nrlh1r60Q:cWTWHp5Frh3obz5da/nFNQ","tlshash":"5da2428793ba28c81d2212b43f6ef74c17ae65b3be149c949cb9472440fed4fd817588","size":21436,"data":"","first_seen":"2026-03-13T19:27:25.893084Z","last_seen":"2026-03-13T19:29:19.726262Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-17T09:23:13.67132Z","times_seen":37743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-06-16T07:29:28.215131Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-16T13:36:53.047237Z","times_seen":4092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-06-14T07:12:41.138909Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc8bb16e3bd2f8d3a27266100f65ab42","sha1":"e681b7f7bbdd41eb3403d38a1bc2e60cbc37d1d3","sha256":"180734a185b0e01619bda4f6f37b21d8552c9ad6ebcb97711d3793432b58fe2d","sha512":"47ea86aa183e83f4bcf4d6edb992ad5e3ec2b9aa976852d2b25958f3b35f20eb793bf7fc90f56377eb0465549767b41ae086299322a5649d6e755da5004c553a","ssdeep":"","tlshash":"72c08cc4a0c26d001612a41014af24e4a024842a704c2b068c94e8492e220b49233e98","size":141,"data":"","first_seen":"2026-03-13T19:27:26.024951Z","last_seen":"2026-03-13T19:29:19.789631Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5133f26cc89fe9df6bd06bb14200a505","sha1":"e23fb70804248b7494616b8334dc9998a86d7429","sha256":"e85a86e52a9021b127eb7cd4b22f3c7b616cd6bae892accf8deb5552bbf81433","sha512":"4c0adc3c2011aa077e425f31a8e373e55df36e588bc07ce294f824fb745172699b6f14eeb4ac7c9e7463ceb96e48fbef31400a8037305d9d881515f651b861e1","ssdeep":"","tlshash":"02c08cc4a0c22d001a06742414af24e490244026704c1b428c94dc4c2e220b08233eac","size":139,"data":"","first_seen":"2025-09-05T12:21:32.659275Z","last_seen":"2026-04-30T14:43:21.708731Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e59a4f86e0fde81d015f68a7adbce8b6","sha1":"9a639b7c280171c4fc1ef54aca8d49123dfbced5","sha256":"687e813765b0dee8640dd84e1eb0aa48d78df95f114e33be93ead835dbe20a5e","sha512":"20ea6aa07a3d19686df8ce0a9b3aace8061b48ae97d3f82a29439f4b64ee4547111ede9fbd9c55c30ae14efe440fc670807ebad26e401c8f652493e841dff549","ssdeep":"","tlshash":"08c08cc4a0d23d001606665011af24e8a0288026705c1b038ca4d94c2e220f09237e9c","size":144,"data":"","first_seen":"2026-03-13T19:27:26.019513Z","last_seen":"2026-03-13T19:29:19.790727Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f3e4b454dd305fe5b982121538e6feb","sha1":"4edc466d32692b8336f7ddb3551bee8b54311f64","sha256":"a345092ab8fe456751ff810cdeee9064075c383ec6e73e09093281dda0eff436","sha512":"f06e2b6bf5c6b51f86517abcc636d59874882f5560c3c228187438dbd8231a6468312516e78f161827ef8248a43fe81b4d694a1061f267a5e6981d3767e614cb","ssdeep":"","tlshash":"5ac08cc4a0c22d105a86a56514ef24e4a0248026b04c2b028ce8dc882e221b0a633e98","size":148,"data":"","first_seen":"2026-03-13T19:27:26.010925Z","last_seen":"2026-03-13T19:29:19.791476Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f6b4b317dc5e3357910ac88dba9f1ae4","sha1":"885fb0d0b37e8a1aeb641d80c51708ea829ed0b0","sha256":"69d4d6ee59aedc968b10adbe50d72ee752252f99ba2eb6a6a3ba2b749aa1969e","sha512":"6e9cc1378a80cab83a7dde57b9b81311c5c1c58d87a70feab50579e06560822e76c5d355cf8ff26fed8781443d609168275f59bca50505d84be629139a89547a","ssdeep":"","tlshash":"d6e0abeb3135c120c6f12b3b6cc90cabe68b62324e4c0a17fcf595041e79d24617cd99","size":420,"data":"","first_seen":"2025-12-21T02:17:09.210116Z","last_seen":"2026-04-30T14:43:21.740477Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-13T13:54:53.624407Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c66f3cd91ab845ea23322694e2faaf3f","sha1":"649bb3a76aaff335f8e1d09d8b304510fd81c26b","sha256":"17bda6d7bc286799963d5adaa1cd11afee44e3fb01783cd574caf868d8947002","sha512":"b5c25964b4836232c44eea4454819a5abbd5ffab42509556a58d1c460d8774f263f61acae73e2c4b391b0836d25085f26a692277275cfe9b1a273157cce53618","ssdeep":"","tlshash":"32c08cc8a0c62d006a06641110af34e4a024402a708c1b128c95d8492e230b08233ed8","size":143,"data":"","first_seen":"2026-03-13T19:27:25.988306Z","last_seen":"2026-03-13T19:29:19.793662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-13T13:54:53.615189Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/library.ac4616c46f24eefd2d78.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea41d15bc7c3ea905e926b469a9960af","sha1":"a09a652d3d73d774db2b5b4931644ee8af67d0a5","sha256":"5be5bc656b82671e766a9ab6e92222ea44cfeca2cabc4fbdf262f674046df603","sha512":"0bd867722884721c5d10e8af2e553a7d3d07af5dc3593c00680fb68429c82e986f94596b949457c5db4bea8c5b21159a02eddf578223d43ff5f03fea1b3a4865","ssdeep":"24576:bp5+RgwcMArW4zvZ7ecmNoJgSC2tN2cgp6VVVeTXzlqzynji3oBYKHFyA6ietfdp:bprrWVc0hSCkwp6VfHKHFWtfGAClLSWC","tlshash":"9085e8a9f6b074a9136751e0177f150ba37a245e980a056cf2a8d4ed2cbc94c273bf3d","size":1864775,"data":"","first_seen":"2026-03-13T19:27:26.004232Z","last_seen":"2026-03-13T19:29:19.795109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/17.00b04a06a8cd9c6f5f6c.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"879ba13ee10c0714e852a4bf5f29e170","sha1":"abdd86fe9ea74c64d628cd0da65926d7bc7caea7","sha256":"2903a9e8f072b1ad6cf40d8422b64ea24bbc0e966c60ad4f7daae14612852775","sha512":"3377abf4f0ac84fd3be350eef1f67173681c4a08f073c0b441543a6950cb0bf892013989c67dd4b444d2c6105b1a4ede8c8c5f36a8a514d22942eb952ce90933","ssdeep":"192:EY3TLRyxVU3cKyFUnIiqbo44CG48/+VxaM3df020fgtgw8v5lypnjeX4PJvXsBtP:EgZUHrbJG9/+8n4evXKX8X9RjrH","tlshash":"0142c785f1b1b0e1427f72d6c60ba50a673650a9c94a0464b5a589fc2efcd8d3237f2f","size":13065,"data":"","first_seen":"2026-03-13T19:27:25.980851Z","last_seen":"2026-03-13T19:29:19.678816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/floating-toolbars.d7f25f59513991368767.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f472b421aab44f64ef1b886dce00d80","sha1":"2966f7c4befa0d1f638341eafdc5613ebc4865a8","sha256":"ab54ae4b98b57213f5abf3e0f197a398b7b5364d3d0cae78da3058e7f124f8b9","sha512":"4129f1f86f82db10396565231219bd99c120d34718bfde02331c2c217cb228fb92b628d18338cbb205a4355dbb7210a1ec75bfbf1d13cbe25f1e192d7dfe3df4","ssdeep":"768:FPczfjF09lxmEMmcMcka82u5UaNWk5p9uYsxaELce5wA19thEllM:doxmlxmE6MckaJu57NT2lLd5919olu","tlshash":"4a33b445f264383e039b90b55a7f120aa33b216ce55501ecfa6cd2ed05fd8c89a27b7d","size":53233,"data":"","first_seen":"2026-03-13T19:27:25.969709Z","last_seen":"2026-03-13T19:29:19.715675Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/currencyItemAll-6af2355d.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e5eb085c8b3df53911628d1ba7fe1270","sha1":"6205e24f21b191ee7358a5483f69384c6b215c7c","sha256":"3aec8732a734707bc6783c8259a2d7090e0f9ad8fe3b3db475ae5884f85e4ae2","sha512":"f6418e83bcd57aabe6c01f1fa89de924c9c9d5f30992781c6b4a15e153b1a5516253111d12a8b90d73a8d01df11e6cf10cede1aa022a9bbc4784090396ab916e","ssdeep":"","tlshash":"9f51b73efa02c636c5f62853d01e100585897f97d123a8d6e6fd1c29931ee98f36c325","size":3043,"data":"","first_seen":"2026-03-13T19:27:25.817019Z","last_seen":"2026-03-13T19:29:19.710933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/datafees-8cd731d0.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1c186981420444382d4e32fc96874e51","sha1":"490561f00eafbfceb41f581182bbfd91be8f1927","sha256":"c93acde34ab2f726eef4a8d712aa86133e95fe069c5387c9e343029760841d2b","sha512":"d6027e0c2c54bf387af43807e3dba905d92385c53c9a21f3449853d63e2938ebf49c60bc2bf33dca1fb8d796c0acc65f1b02eccb0f0ce223c57fef214e727013","ssdeep":"","tlshash":"363157e35923b16104f5a4e64c531f9393491906fc45173cb0ed6fc55b4624f29b7c76","size":1487,"data":"","first_seen":"2026-03-13T19:27:25.849269Z","last_seen":"2026-03-13T19:29:19.696581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fc2131866c38ef4ff724bd98efff367","sha1":"df6ff71a44c573e84a622b07e56861450715dc60","sha256":"ad0b252875780cf92a0c79ab806df4f30c9490a10dad56be6d86117993558fb2","sha512":"a339e93c7702b02377c1c573b5d14ac25536fc7fee1b23439041dd2faf100b9a578a3f551489962a6afa00e7630a13af528880da26118e943831080081d52367","ssdeep":"","tlshash":"20c08cc4a0d22d001602a41010bf24e49024402670481b028c94e8483e220b08233e9c","size":136,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-06-11T20:20:57.788296Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-6e6d0330.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"29a0768faab788f6005350def255c8a8","sha1":"0fd6f0f791f6b5fc4dcd2554a685198bad48ca38","sha256":"b288ced18fef22461b0702b3c859ef5dbf8d348312ed1dac73ef0e2d3e2b8e8b","sha512":"241cf10f6d49dc7837f701d6e58bc446054cc5c0087d9136be5082fa6182fbe0b6dd512181070256d3e8ab9c7cfb8ea0a82d607356affaa2f5b44b6cb76cc583","ssdeep":"","tlshash":"c3f0057fb57a41771be388d862730421e65c0b853720ccd4b90f0a108b388f6f16ea59","size":581,"data":"","first_seen":"2026-03-13T19:27:25.821715Z","last_seen":"2026-03-13T19:29:19.727105Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/filters-fe0122a9.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8335322e222bc102a76c88bc3a844404","sha1":"1357a9ba8955b5d2c2dea3ecaf052728b8a41c80","sha256":"8c35b760dfbf549bdecc668015a62821d576a6a45e4545a8c73d33f02f587500","sha512":"01ed549bef393875b45b9ab449b76340d38c10a16b36e1c069435d6abf6264f57a0b92aa531ce408f8d184542cc331cc80c6bf84b5cb6bbbf14250462e15f342","ssdeep":"","tlshash":"cb5134fdfcd7a13356e95efa40288414728eae24686f0a4df54be0455933888e07fb68","size":3098,"data":"","first_seen":"2026-03-13T19:27:25.920369Z","last_seen":"2026-03-13T19:29:19.77397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2257e6658cf88c9b0d4d4b781086a63c","sha1":"554b5627dc3cceb2e8f2b093a019a91dbf93869f","sha256":"1a86e75b5a1a8ac8e7836ba9ed9d1988dd8b06b4401ad5c59d2f7dd69044061f","sha512":"5ea59eb8e489453134ec6180e88baa7067bf1798b77400ccc62cd39ae75b8831d787d11716e915d97c34cff34a51d3b16288f69bd9b730531dfee91befdb4f24","ssdeep":"","tlshash":"c6c012c560da29102951595424bf28e49024c026b55c6b129dd4d8a82ae64f8c527d98","size":183,"data":"","first_seen":"2026-03-13T19:27:26.015353Z","last_seen":"2026-03-13T19:29:19.796421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-06-14T07:12:41.139633Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/chart-widget-gui.8005316cfc1f06be4bf0.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48701653fd461898db41d7c54dd1f62f","sha1":"b32e05e7aea1abfdfdc41dbcfaaff0a11d47438f","sha256":"e99d781ac871ec3b72b8f362819fac46c54c80f95e630a7a489e792648ca0c63","sha512":"5f98b49f8ca47cb244b84545ac6bbaed4179b3b9df3fe822b61a657fce14ff5b4ef981665286dbb6aeb4f5c245cdfa2c5fc00b71e18f3224ab26668f1c1bec93","ssdeep":"768:Wb3gc1+f2isUTAhQAJwtJEeBbssbjMFLU2l1jG:Wb351+f21UMHJwty35TG","tlshash":"ae03e8f1f2b41c7501ea92b26a7b280b6327646dd452015c73b89eec15acd8931b7f3d","size":39415,"data":"","first_seen":"2026-03-13T19:27:25.906791Z","last_seen":"2026-03-13T19:29:19.712737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-13T13:54:53.61951Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3ea61add53c82ef4eec6dfbee4adda06","sha1":"531207870d28da7f5454c0dccd86d63dba37dcdf","sha256":"d7b8326dc99608dc5762d86e64c4f5642fd016bf5de8d9f86ba6d64f16c71935","sha512":"83ac6eb090fc3f3288d39921921fd6bd7c5eba24a4e72accfde4d485d8ae41c80c27d4f30a24907811343af6e7ddfeb2b0fafc7a7fd0f00c3abbd7fa8511f353","ssdeep":"","tlshash":"edc08cc4a0c22d001652641010af35e49024802670482b428c94d8482e620f08237edc","size":138,"data":"","first_seen":"2024-03-19T17:31:32Z","last_seen":"2026-05-17T04:09:20.133904Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-10T10:44:31.294159Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ac6a7367e8275d13763f502a08648f8","sha1":"4afc9659a3c687e8a72340fbcbac482663033dbe","sha256":"cbff398ed6a6450cf868aa1a9f8109053bc543861fdde7287e6781a1ccf91a60","sha512":"57f41e65ec8109225e9dced074d35a39ce40156de07c65b9aa2de680fe8bb1d7545301ef6be17b6464eb52d6c2557b5c2b7a9a3758a40595a1a5f698fdef280e","ssdeep":"","tlshash":"8bc08cc4a0c62e001602645060af35e4a034402b70489b238ce4d8482e234b08233ea8","size":142,"data":"","first_seen":"2025-02-23T20:39:22.996632Z","last_seen":"2026-06-16T07:29:28.170632Z","times_seen":479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-74e72f44.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"702ae3c533dd4bdcc0946da77534f72a","sha1":"9d01b587e3af5d18a734a7fd2a09448a7a31ba72","sha256":"211ab18fbdc17a8d4266eb816bf1a33b87dbaf20d027fd24a99a9f9bd0344cdc","sha512":"f17e5b52e0014f1a605ddbc29cbd725c3d04078da118ca2fd2ad2acf9aae4722f63a469ea37587d814af24f8cba548fdb404f0f1f1bef8f4c5fe8a6e4c584da8","ssdeep":"192:1ZXoZx5Z6xFZtLZrrUBwUSQbJASH1g442yngeuN8isIbt+FJ9Fz:1RbZdZrrFsi442ygaIbtefh","tlshash":"50d10e24e4560cb942df146c6d636e43af493408c1f1abb2f71663b111a2ed8a27df3b","size":6489,"data":"","first_seen":"2026-03-13T19:27:25.805824Z","last_seen":"2026-03-13T19:29:19.701462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/line-tools-icons.c89643eed013eb0ff7c1.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"577db91184467e921db9de1284993633","sha1":"5b5160133ce8684bdfec54dfc59c60284a058c38","sha256":"e000f3e10570c1e2f794480850c412906d9d2c4a96cfb25abf1171a5b66dae26","sha512":"c9a0ce2297ea46784cc12b2c2a90665ea816ea6b42fc1964473434f36f8eb9746ff1ffbde6a7651866edfc22e96fb189583c9519ced0489d6e1a7d66cfef1661","ssdeep":"384:6DfUDMw/UZlCLopjzhR5G0IHEgXKkiHyYH29fhHiTGqypoOj/Sl:6DfUowMp/hR5G/HkkiHyYH4hHiT7z","tlshash":"8f637bb5c7e6e884bd9ac6bc9f58909fc57f53408986064cda3ee97410c6cdb2c4f924","size":68670,"data":"","first_seen":"2026-03-13T19:27:25.857323Z","last_seen":"2026-03-13T19:29:19.712176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/vendor-9732a1d7.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"94c6c683a853dd41c629016aeb6e437b","sha1":"b2419067c3e69d59d375e452922e5625de3105c1","sha256":"b0378d4578b956eea2f5173b7109dd674675bb66141f24aab6574cd692297bc2","sha512":"823551456409640f2dfaed8782df584d030f33756717f44fdd7a6195a048f171e3cdff1cc5379da0baeb6df6a602d117b814a32dfd9559adb747fc40bf587b0c","ssdeep":"24576:uUk26Q/YXN7kblX+e5LXhgTpWIDb1WGa2qo:uUk26Q/YXN7kblX+e5DhgTpWI/1WQn","tlshash":"fa1529c97292f06147ab24e140bb0006f33d6e59744e84a4f1ad98db7d69d89e2b7f3c","size":897865,"data":"","first_seen":"2026-03-13T19:27:25.785847Z","last_seen":"2026-03-13T19:29:19.679796Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/kline-0df3c478.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4ba74089236d193fe48d7a6d21eea60e","sha1":"b0b850aa03c387442ab39d5872a794299df6236b","sha256":"5c7ab54563e2922745fa0c1d925363e5fc9bcf3083db28bb16b6e7eb856520e6","sha512":"a85d8302a4d7a0c0bd7babf1bc9532b4ec4e793d109092649f5958a378abf01f728352fafa731146a749b27a41aa01d21474df55b02006b100a663adc1750baa","ssdeep":"","tlshash":"46a0241705f013f111344ccd53504d00013144f4134345f4500dc75001100c1c44df00","size":82,"data":"","first_seen":"2026-03-13T19:27:25.793928Z","last_seen":"2026-03-13T19:29:19.705439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0016ca8b49e24972f5ca1c9902ba3968","sha1":"e0e563872266256896f9fc12405cfb70dcdd9d88","sha256":"0b29eab72f3a54f1e3d437a4f0619df7143d2028e484ca9228c18147963d2610","sha512":"a4084eb6638eab363b33fb344c357c92c5eda1751fd2aa748bdf9a7c20eed557ccabf685908feb3a39c9cc0a863f838c17fe04de954c68bd907eb913dbbfb1cb","ssdeep":"","tlshash":"e7c08cc4a0c22e002606642014ef29e49024402770481b428dd4d8492e631b89233e98","size":142,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-06-13T03:32:08.724834Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6fed0c5693323b121deac3394423faf1","sha1":"89a36f3dc8bcd06dfd77d425c109d8155decdd0e","sha256":"1f496f45c5e2ead0f56068dd14545b24983651827a1991a566e257f8f95dd375","sha512":"1116eb4a0220530f71adc041e27ae997ca82458b663198e0f3aa8206de81ec2e9bc4c996f808760d607b3878724ea102ef4ce1297842760c69412b00bf928e6a","ssdeep":"","tlshash":"71c08cc4a0c22e101602a41010af24e49024802670481b028cd8d8482e220b08233e9c","size":137,"data":"","first_seen":"2024-08-20T03:09:54.366514Z","last_seen":"2026-05-07T23:10:33.808456Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-13T13:54:53.625559Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-06-16T09:18:13.226588Z","times_seen":1543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/vendors.f7dbb6a11b34b2534314.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b82b2f19195d971611d20a1d286fbcd2","sha1":"a8fadb9f2bfe72c521fcb967e78418859f804d29","sha256":"0454144836628d6bc3c4608ea03f606259afd9740d1de5d6f51b7c5691d59d29","sha512":"c7d33fa0f204a8a0478451d2807a265234c58cf6983be34cddc7b7ee1eec99c8d1c835b35a47125e5f4b8b7c5db3e55e173bd471ee1a3b4295f12aeba6d608f5","ssdeep":"3072:yszsY9TbgpFAZSxjsvZXoL/PZtHovppDwQWfyaj/GtQVIx46:8xhsv9oTEK9CtQVIxZ","tlshash":"1d5418cd72d2b0a203e361b5403f650fb23a595d680d8844f265e8e5bcb9a9d9237f3d","size":285474,"data":"","first_seen":"2026-03-13T19:27:25.978349Z","last_seen":"2026-03-13T19:29:19.718946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-14T07:12:41.146921Z","times_seen":1443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-16T11:19:38.861232Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1f36bc50429a748020b45c658f8fae4d","sha1":"50fa942ee8fbdf5f39cf81665c5ba7971d2d8094","sha256":"d8d11c8af26f2ad9d146fcff448a959f5a265093850bf0196c18df03af3159a9","sha512":"a72f286d054f846b13cdf3f904f2161e06b4bbea29dad8a4aceb773f648de24b8c8158571b15de8d82e61534e9ebbd7615fffa6b387b5148a5871d2fe767c14e","ssdeep":"","tlshash":"4fc08cc4a0d22d101602641060af24e890244026704c1b068c98d8482e224b09233e98","size":140,"data":"","first_seen":"2024-08-20T03:25:34.007543Z","last_seen":"2026-06-13T14:18:03.223284Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-32c36efe.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe19b74ceaa93fc1e8cab96161ce183a","sha1":"7dabbdcf6a13b08a552d391ae8ce3088c5f66192","sha256":"0a1c4021384a75d9dba8da7d326276ad84c639f793b8d09f658ae740a2fcd562","sha512":"48c2a8601a6abcf15209be0c23b1a30e94236d9fc0606821c3c49532dbe559e9b070fcaeebc599ce00e348453472c54171ef1704ae5e35cd37dc0bd89907852e","ssdeep":"768:0vAoiznJNK4+3yYfoDY5LwxWOdbHK4mGd608MyMqqTeM48NjFIIJ8jjYM3dt3AEJ:pJNK4+OxzOpaxtJ8HkS","tlshash":"00f21955ba16a93dd3b650e9446a0010361d2fcda009c0a3fafd1d0f17a6e69b3bdb37","size":35558,"data":"","first_seen":"2026-03-13T19:27:25.927597Z","last_seen":"2026-03-13T19:29:19.685918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7cd7cb90de8b874411cb4f33d9e014be","sha1":"6880f65a3f0b3ce74a1ce31a50d7fa65e53ad91b","sha256":"f1c426191274eea8e04bf77923f76fbfd8903c45d623a46a91859a528e44d317","sha512":"7b92f8f6e9fbe8188bb638bfcd251df4157e9b837914de4028c9564dbda98117a875550f8f9c89171e4d80000eba4490bebd46e8e23adc55de4ea13159c8b354","ssdeep":"","tlshash":"32c08cc4a0c62d002642645020ff34e49024842670885b028c9cd8883e230f18233edc","size":144,"data":"","first_seen":"2026-03-13T19:27:26.001285Z","last_seen":"2026-03-13T19:29:19.80371Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/charting_library.min.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-14T07:12:41.1016Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-16T07:29:28.184768Z","times_seen":3231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"104fcdc4a9366462e572b5f7e3713446","sha1":"21898140b47d13ffc2225fddee2d2389caba90dc","sha256":"05b21ea7468f9e86d605bc54dbcef3997de4bceab98206e2648ae33756e7ec8d","sha512":"c32bd13e3d5916a8f979545d9c3d4bb8b49c6e01e41fd4aff5ec1c5158f0ce0278830f0840e5f895147154659d77c135034e44cca54326337ac906abb82e5c87","ssdeep":"","tlshash":"0dc08cc4a0e22d002612a56060af35e8a024402a70486b528ca8d9892ea20b48233e9c","size":145,"data":"","first_seen":"2026-03-13T19:27:26.017381Z","last_seen":"2026-03-13T19:29:19.80554Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29b6e8cf99f3145a643fc5855f3ec56","sha1":"bb4a4d2deffc493c7ae08609d11df3f8574898eb","sha256":"6ee508cf1a4c5929b3402490eb8d5f0d5afbcf3da96efd01322e20bb87df3ced","sha512":"58aee89a2946a863e380dcc7fb93e8d96449495be2e0021e50f6d8c7a9c33c0651504438bac22799ec916a9149a2c80271c7adf427f251d139087445551028a2","ssdeep":"","tlshash":"a3c08cc4a0c32d001a0a655110af24e4a028402a704c1b02ac98d8882e220b08233ed8","size":143,"data":"","first_seen":"2025-10-10T03:30:10.582703Z","last_seen":"2026-05-17T00:03:50.963482Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-17T09:23:13.670577Z","times_seen":39945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-13T03:34:39.543916Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/runtime.d2ecd186b98a62a23c4b.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbde6591610690ae582d4ec5eb50947","sha1":"875d245db4bd5e5ee6bfded7c4e643451ade4b96","sha256":"b1f1d030e4ef3132a22f5deae28e37945930ee0f62de93eaa0cf52117338a6a3","sha512":"dfed1f540a5929497321667ebf35437b4ec44cc92982db5fed4f1fe146e440b21990dc797f5c33a9c9bb4c4daeb64a03f88fc492496a614ecbff95a523b7663c","ssdeep":"192:FKp8QbQRPWufAbDxIZMDZDaZRCOS4gDnMi4DNPJLuy9wUfau:FzQ0ToOMDZDaZzS4gDnSlun3u","tlshash":"9732f95ea71eec572976589330271c53d0c948935e1a429827ded77b690bcc0fb22e8f","size":11407,"data":"","first_seen":"2026-03-13T19:27:25.976123Z","last_seen":"2026-03-13T19:29:19.738951Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d5f5fb323127cc01e930ce9ce75fe38","sha1":"f8ffbcadcb60670c6d79cf9df732bfb629c97b34","sha256":"587299224ce0f75ac3e4e5dea33b6ada7bf30a57d76b409cf75759084a4a528a","sha512":"8d2eb3c1aba0022f909fe10ef451e1a13a895a1b70f79919de42507429db3c7bd1e8cc14264194bf88ef2b8483a9e6b73927102aff90a5518885a1bfe73ff95f","ssdeep":"","tlshash":"5dc08cc4a0c33d102606641018bf24e4a0244027b0481b468ce8d8483e630b09233e9c","size":144,"data":"","first_seen":"2025-03-13T05:08:31.309553Z","last_seen":"2026-04-27T17:16:46.408526Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b9debdf16f84f27d8a4bf1769a217017","sha1":"4e36ac7f41087de52573cc461b9eaa76f05bb703","sha256":"b2ff26b546af3c6b639913e29bd447421c195af364fe6276498538a00ffd26b7","sha512":"02b8f7164cb783f138a5c7784cf90e93b3525534e43d289da053853caf08846bef64a9835e416861ea9ab4d1956bdcd855f9f85b144d2ca9e1d2be2ffe070d2f","ssdeep":"","tlshash":"0cc08cc8b1c32d106a66a42024bf38e490244427b08c1b468ce5ec483e230f88233eec","size":156,"data":"","first_seen":"2025-10-21T13:52:00.368368Z","last_seen":"2026-04-03T09:24:52.270538Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c76532fd8b9fb56d0c62eb58efc9306e","sha1":"93148be6d3375f01eb1c22b960a86fab9f3d4e32","sha256":"af0a1a50657543fd00fb15baf84acad4d7c4ffd008eabaf06c5509e50e54d446","sha512":"c58c646ea8e02cef83bbcfc777eefca68b93f24825f4a6fe0a20ff860e57e21d30c25ec896968f9d3140304e4cd63dc88d31a16f24897aa2b9defbfefb0fb59c","ssdeep":"","tlshash":"54c08cc4a0d22d002a02a49010af24e49034402670481b429c94d8882e631b08233e98","size":139,"data":"","first_seen":"2023-10-02T09:33:50Z","last_seen":"2026-05-07T23:10:33.788156Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f42f85f762a6161724e0de925ed82f2a","sha1":"1ccdf32a5d779ca27cb0683114345ef3be1fe8ae","sha256":"709e267cc618aa05996bacc40e5d0d1b95299d3c19551f4f65d75b783a2f7c94","sha512":"229565f2d0cb299bcc7bf1e7cb93fc185fc2ac4b917227e148151fc1fc5ce51cd2bf28e6534f37cddcfa13b625ad166f36164c67af8304ee69b91b5a2718221e","ssdeep":"","tlshash":"58c08cc8a0ca3d001a12645011af28e4a024902bb48c2b128de8d8582e630f08237f9c","size":146,"data":"","first_seen":"2025-04-07T11:28:27.012211Z","last_seen":"2026-03-13T19:29:19.810309Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"47999163224c5aea9318cc23c49214c5","sha1":"8ee628c21adacaf15f86bd55f82fa70b4daac7f4","sha256":"a426cd58ead022d7c476d83e60efbf4769e48481e1d5a6fc1e45a67127675dbd","sha512":"a27f507675385fb6bd3a76d20594d912db208dd331fd39b5d750670173ca1d1697b4d4e7795d2403a4bdb22e8e8ef43d721fb509b073b2e84df2c136c43fee1e","ssdeep":"","tlshash":"95c08cc4a0c22d001602a42010bf24e89024402670485b028c94d8492e220b08233e9c","size":137,"data":"","first_seen":"2023-12-22T00:03:13Z","last_seen":"2026-06-13T03:38:45.255961Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8ef0c6860f77f90bc68a7a2f163c2b38","sha1":"6fcea8dbc6598812c59729a490d896f874561828","sha256":"497805c610715af17ac583b6b5265dc17a4628c04b0a5570858f9ad61a1eff2d","sha512":"2e7ec79969f2cbf1ae698d8dc856f2c166dda05cde16966974993cb1bbce72b99f966539b3dd0bea97bc1f1169274a2158bd8c23e690628c4bbc38967da4f614","ssdeep":"","tlshash":"73c08cc8e0c62d002a06685110af34e4a024402b704c5b028c94d8483e230f08233edc","size":144,"data":"","first_seen":"2026-03-13T19:27:25.996436Z","last_seen":"2026-03-13T19:29:19.811767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"112be066b54c655153a5199fc3cd8cf2","sha1":"5844a32bfdf6643317f15be59d1f8c923afcd1ab","sha256":"8bb8e9e578d62694a4b3a9e79989b4f19e8c1aa7c2dd2dd9ba1a542ec8711caa","sha512":"7b7a6dcf1ca19cf92734648b2e1dd140f9fe4ae63988ceafb486b3721c73462b0af7e42aa130a469abc2426c968e8cfe75536d84340099a463598a564eb475f9","ssdeep":"","tlshash":"f0c08cc4b0c22d002a06642068af34e8a024402a708c1b028dd4d8582e630b08233ed8","size":143,"data":"","first_seen":"2025-12-19T05:06:04.23139Z","last_seen":"2026-03-13T19:29:19.8126Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/#/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"200c435b0ecf05b8b0e43b0e5d3e66dc","sha1":"96c3b80532ec5390643ab2ccf2f44f304122319b","sha256":"bbecd0d48e51b9f60ecd5f5ba716c8c3819067bdc5a4342c9adbb9038870f80f","sha512":"788474b8de1b8e7584f6cde9c146b83323415d1edea920d5a34105f225b75166e02ebf3f989f24c4c61aa2c6e16c47eac1be68410f439f0a1e6eaaa3b59f8e47","ssdeep":"","tlshash":"43c08cc4a1c33d002602661020bf35e4a024802670485b128c94e8482e230b08237e98","size":139,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-06-14T15:10:38.938216Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0f2c7c3f36bd8435fbd91bad066fb4618.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f2c7c3f36bd8435fbd91bad066fb4618.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1093\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574CE63A83833E04D7E\r\nAccept-Ranges: bytes\r\nETag: \"4618D23E5C13A869EFB9C5AE7D25C0A7\"\r\nLast-Modified: Sun, 26 Oct 2025 16:08:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 339227393043835880\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RhjSPlwTqGnvucWufSXApw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4618d23e5c13a869efb9c5ae7d25c0a7","sha1":"08d72cc189f7aa59f46f5a6aff8b1d3732624fdd","sha256":"f4b1226a3e23a732d8b4910a5cdb9c87695ea573a9d7226e9c3ff11d2d1a76ed","sha512":"01b669d6ecdd76ea6fd83885de8ad98604154dcea8748000b7b5845a675eee7fb0f8b9031dca2d7eeabb50d0855cba01de2a46420f777e3cd654ac58857084d6","ssdeep":"","tlshash":"ea112c637645756c518add2536171031f917f5db0654cd093f48502c0c7f2b381cf4a3","first_seen":"2026-01-09T02:40:15.053911Z","last_seen":"2026-04-30T14:43:21.592788Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":1403,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/fonts/DINOT-Medium.otf","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/assets/index-325d47c3.css\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\netag: \"69173875-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCiXEYWgDqViMQ4CxGzRj%2BarcUEf7enkccudXiYXnI33wV4tJRsC9a8AwzuVN1iSMXXsDj1xf%2FSWFFtu705WSdtUDGI8YWZwy3nC%2BiUR%2Fj2k1TAN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b099f85868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-14T07:12:41.118043Z","times_seen":1503,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/17.00b04a06a8cd9c6f5f6c.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/17.00b04a06a8cd9c6f5f6c.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-3309\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzvmF9sc0FQ2wGJ%2FoWcrOwg7M19hFW%2Be9FUqV6utJZhLoQktaF%2BiSq8b7u6IWJN4302m%2BVR3jADAhrLDSzEWkYXsBSYSwBDPxJN7pjxBokJ3THNH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4aa5d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3072), with CRLF line terminators","md5":"879ba13ee10c0714e852a4bf5f29e170","sha1":"abdd86fe9ea74c64d628cd0da65926d7bc7caea7","sha256":"2903a9e8f072b1ad6cf40d8422b64ea24bbc0e966c60ad4f7daae14612852775","sha512":"3377abf4f0ac84fd3be350eef1f67173681c4a08f073c0b441543a6950cb0bf892013989c67dd4b444d2c6105b1a4ede8c8c5f36a8a514d22942eb952ce90933","ssdeep":"192:EY3TLRyxVU3cKyFUnIiqbo44CG48/+VxaM3df020fgtgw8v5lypnjeX4PJvXsBtP:EgZUHrbJG9/+8n4evXKX8X9RjrH","tlshash":"0142c785f1b1b0e1427f72d6c60ba50a673650a9c94a0464b5a589fc2efcd8d3237f2f","first_seen":"2026-03-13T19:27:25.980851Z","last_seen":"2026-03-13T19:29:19.678816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/vendor-9732a1d7.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/vendor-9732a1d7.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-db349\"\r\nexpires: Sat, 14 Mar 2026 07:26:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BSgvdg%2FbO3LwfOqOT6Oa1ztZ0YP9ssWy8QJKSMDB9jqfMxx%2ByiEQQ8x8lL1N5K%2FnZGUgovJURL4CpZW4ISFVk9FtDCCTW3WgD8sNpW4SK2%2BavFA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a3c8d15868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":897865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"94c6c683a853dd41c629016aeb6e437b","sha1":"b2419067c3e69d59d375e452922e5625de3105c1","sha256":"b0378d4578b956eea2f5173b7109dd674675bb66141f24aab6574cd692297bc2","sha512":"823551456409640f2dfaed8782df584d030f33756717f44fdd7a6195a048f171e3cdff1cc5379da0baeb6df6a602d117b814a32dfd9559adb747fc40bf587b0c","ssdeep":"24576:uUk26Q/YXN7kblX+e5LXhgTpWIDb1WGa2qo:uUk26Q/YXN7kblX+e5DhgTpWI/1WQn","tlshash":"fa1529c97292f06147ab24e140bb0006f33d6e59744e84a4f1ad98db7d69d89e2b7f3c","first_seen":"2026-03-13T19:27:25.785847Z","last_seen":"2026-03-13T19:29:19.679796Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-b1449923.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-b1449923.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-6ad0\"\r\nexpires: Sat, 14 Mar 2026 07:26:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BA1jKUBTzuBaUgJW%2BLrUa63HZufTzY%2Fpf3SI0JRxQlcaHlYPhxqKepq8LIBaiHmRGG7GuDG8oo0lojRztz85qkg9s3DJ2AdMYWuO06SlxOdhLOJF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66def5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27343)","md5":"9c9deea19cab4dcd7a7160908d98f0b1","sha1":"c6ee1de315ab0792e4a950c9d33d6b96b2ff9c9e","sha256":"b1449923835d50e82e67ad3273067fdb6b25cbaf368a7d8b8da4ec6c6dbec332","sha512":"6641adfdc2b2cefa89c4a56eeb4d1ac8622427bc2cd2c27e4fbae56b5dabb307876c118728efc9555d42a9c87cdac87a8f7743ee234f3f611558fa9b2c3ba230","ssdeep":"384:n05YecsMbzakweoam+umXzX4dR0sfiQ0diLbA8p8a:GmsMbzakweT1umXzX4dR0+iyLtX","tlshash":"7ac2a869b6d83138bc77d2e27e806ecdd0187b11d1878dd4e627a9224ccb1e32b3565d","first_seen":"2026-03-13T19:27:25.9607Z","last_seen":"2026-03-13T19:29:19.680572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/fonts/DINOT-Regular.ttf","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/assets/index-325d47c3.css\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\netag: \"69173875-b6ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cK1Sn8EYZD8pGOqQ689X8k4Ah1GqYhWyYXMnC1r5cQiM8dfu3E7dFyZeb05bODxRq2maPCFhtywl%2FDiCbN8xDbMEBmLF7jN%2Fi6VZARI2qglylft\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b099f35868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-11T01:44:15.91201Z","times_seen":267,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1isdmZFOT9RUHeYktzbofpaFvJaWEor410ohsSrhgRMLYbWQyBc3mpqcfMFlgakGqDaA3hJL8k%2BW3A5oLeSZgTX0b9EStimTx5i%2B%2FBwidV1GJ0BiGulNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0da575868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievb1ea1q3k\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDHYv7KiddhZ47ksKwQOo5VsGZsb0RzNUMBSbXOYNuMLtFeEXOPjg3a7g%2FjlDWBxkL6ylL364HHSOZt%2F8xeGrx9%2FbMkY%2BQy35UxwapiPXpKG68z3bYxj2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b25d5b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e1c2eff8326f8bca46b8ab74cc85bd21","sha1":"6f6ce8d290fb3261af5b042af84d8ce8e40e07fd","sha256":"6dca851d6ea5e592b71e825ac3654102ce6b575defe9682b7f6293079552ca89","sha512":"6eef1ff0224aa30ee74cccef38b93659229e3f7b6498c0a2b587d53bd7beec1db56eb4fb59df65275fb3134226f8e1074c4a390fdc74bcdf5c81fa768ea21870","ssdeep":"","tlshash":"9a11021f52349e351e53088372de75cd632d1a93b7208e75496f8f4c43e51bd1b2b644","first_seen":"2026-03-13T19:27:25.840421Z","last_seen":"2026-03-13T19:29:19.682437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/type/defi_activity_type","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievbv2l6hi5\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZb3Cu8pcUKod5n4rEbVmm1%2FGRn7HsvdDYvu2%2Ba4iqo%2B49YPKFq67HTtzWwoKicTQzs%2BvwpEgmPkt4Nd3GvD5SFZEPjZhowGQB61SFhXpQnc1JYMb2jreA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b27d9a5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-12T12:16:48.401727Z","times_seen":701,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaig90bn44g9n\r\nX-Timestamp: 1773430132932\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 86\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"{\"symbol\":\"eth\",\"interval\":\"ONE_MIN\",\"limit\":1000,\"end\":1773341032,\"market\":\"binance\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWW1DZblWPpFeY2z1QBjNDTQ9D1OHkKC57mUDC8c4xAJAGY69FtgMnBo6Ylj2xyW3bk6bd1knAHaclMDRuxedx6L0HX%2FEbP6Rna4Us8MCnbYZzTCiJhidQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71bc49df5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"49bc4bfddadd9af4b7ce6e30b63dc3a4","sha1":"2bb14c3000ae9f774d7de3cf7914879c0db96409","sha256":"cf4fa29055d7708a3f8a7d52cbac8d61761d341f8cd44f89eae4985fb3b3792e","sha512":"c8249c1471acf22881742eeb6f146998fee20a6972351e95b99c0b5f39ee7a9eb161d4ed7c3b2752fc32bb236d213d43384cffffe78bd711738f4b54d549ee80","ssdeep":"","tlshash":"24c0226a69a048b2c02b82c74b8337008290301c10c01b0caabd9510415963f2b4ab84","first_seen":"2026-03-13T19:29:19.683613Z","last_seen":"2026-03-13T19:29:19.683613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0402865b35cea4bbe82424dc2a05f3085.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0402865b35cea4bbe82424dc2a05f3085.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7389\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574C390C334300E9A60\r\nAccept-Ranges: bytes\r\nETag: \"BAC352A90AFCDE4E10AEA7851EECA69B\"\r\nLast-Modified: Thu, 26 Feb 2026 16:55:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5651062245129918599\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: usNSqQr83k4QrqeFHuymmw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"bac352a90afcde4e10aea7851eeca69b","sha1":"a3a4aa41fee60b8b66c8b1817d6d76a5cf9be91c","sha256":"35f61b63deef13918bc88d29045c15a1ea76949fa9105025cc3c154e7b861ea3","sha512":"048f198ab0d8c821566556590019a78218e5b940a472ab803c9ba75d15f3837e21214db9f9ddfcd41f64982edae68eb4479e18f7e94b909817fc6f10bae3247b","ssdeep":"192:XaYmhbLli4XalGGWscbFA7T8rFtXK/CVvhdGZt1CZY:XipLE4Xac5bIuK/CVSP1CZY","tlshash":"dfe1ae046350986bbdd4b73029dc9bf15fa36f4830aa1ea9b398c01e6f506904b5f39b","first_seen":"2026-03-13T19:27:25.983914Z","last_seen":"2026-03-13T19:29:19.684593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1460,"timings":{"blocked":1170,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/currencyItemAll-7bb4c61f.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/currencyItemAll-7bb4c61f.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-52e\"\r\nexpires: Sat, 14 Mar 2026 07:26:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1NqL%2BTOIo56fI8NzxRDui8SYbviZtVMIODm4QiuRL6VE9v7V8G%2BjuWVuC9DjU2BWet7L%2BALtEZfXM%2FXNzEJlCh5dmlrI%2BoFy%2FtS06ULjo0eShbJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66dec5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1325)","md5":"04e1068e0a8163bbe71aff7e56e4c1af","sha1":"ad3d7ccfe0586d5b27c823eeee47ecbab2f1c630","sha256":"7bb4c61fb7d790ea5026509e77ef12cbb976b16b8bed01fd79ad882b25350f4c","sha512":"441e143a9df39e927475fd15f4548304767fdbab22390c66ec051e1cbab9b3acbb9e22d3f69e1ac4d55631577e02cd18f0ec8639d3a398e2655e2175de76e9bb","ssdeep":"","tlshash":"7921999af1180a2abc73c0467e5021cb99903f91c29fc2c8d41795270ccfb931afc6d4","first_seen":"2026-03-13T19:27:25.835012Z","last_seen":"2026-03-13T19:29:19.685274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-32c36efe.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-32c36efe.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-8ae6\"\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1g16Ii5DxDD3GObN2lL0izREG4o95yb4zwRtl830580ut2dWyMtzZycmlqzWhbLwHBJCJj4so0Oqz49Z%2BsC7lTeIRVrBgPnEhOb4WRL7%2FFvTPcw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a6be935868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35558,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (35489)","md5":"fe19b74ceaa93fc1e8cab96161ce183a","sha1":"7dabbdcf6a13b08a552d391ae8ce3088c5f66192","sha256":"0a1c4021384a75d9dba8da7d326276ad84c639f793b8d09f658ae740a2fcd562","sha512":"48c2a8601a6abcf15209be0c23b1a30e94236d9fc0606821c3c49532dbe559e9b070fcaeebc599ce00e348453472c54171ef1704ae5e35cd37dc0bd89907852e","ssdeep":"768:0vAoiznJNK4+3yYfoDY5LwxWOdbHK4mGd608MyMqqTeM48NjFIIJ8jjYM3dt3AEJ:pJNK4+OxzOpaxtJ8HkS","tlshash":"00f21955ba16a93dd3b650e9446a0010361d2fcda009c0a3fafd1d0f17a6e69b3bdb37","first_seen":"2026-03-13T19:27:25.927597Z","last_seen":"2026-03-13T19:29:19.685918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getAllSetting","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaidotmoxim6g\r\nX-Timestamp: 1773430129613\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxZvCOa63JOiujqXkPdomA2ewW99rFS7vbbMBoIVs9yGRNGD3JfKSbhBhX9HKa1q9krC80JvBXLBWSUGbbx4LSkZVPm9l%2B5xD2uds2%2BwE3aEPj%2BHtckgFw%3D%3D\"}]}\r\ncf-ray: 9dbd71aa48495cf6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41501,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (35845), with no line terminators","md5":"3e80bbe26304db867d3c82843c41ebcf","sha1":"d1883268b6101da9f9b3d50579d1b900aeb10240","sha256":"615fb864bad7c36c0559b1bbd7f1fe5c6febe1ce3111e93f9cd675afd9a0c9b8","sha512":"7c04992b87fc6fae93aa8a34819ae0a6df3609195bb0b330829942874c948498f71f779be40a179308a4cf56483563c81174b28eebd788e1338ad23869c9905c","ssdeep":"384:dRuat+/joZG5Ut8mltMOjwAqMpibUKWFvlU23BdDvyDSRLeYvTRC6PACU+2/bckK:pltMXAqy/rPdDyDSLegR5BGcf110OZ","tlshash":"0e13e92d73d4dcbac1d335cca5fa7a4a679c38abd284ec45e558ee5cd8c8479102e02b","first_seen":"2026-03-13T19:27:25.918176Z","last_seen":"2026-03-13T19:29:19.686525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/rank.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/rank.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173876-6ee\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieHG5hidXT29LLhY8vxu2F3cPBiXPTUZhNEayD2susCVu7jKuv2khhs77q%2FYR1MUDhWc2UiwXKYXG1DEGidnmWZAhyB6HFAQrlLO69HyvgudujZc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aede005868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae921e77ea888b53b16554a215da95fa","sha1":"c5a1866b44a60cee06129465f65b5d5c0ddccd9e","sha256":"a3d4d7d3c7602da32c28dafc64f1b3807874c8b461c1ef82c545456d074b4d69","sha512":"9cb944941f67705964410b18b406d714074f012fc194f6f7c7fe512d20a9947e248af7d3588f316bf1fcd9b43d2dc1255eb39f1bf4305a4c7443d1ce5c4afe7a","ssdeep":"","tlshash":"3d3125fa57c886f59a0ec770fe2e4422e9229cf95f9c81d453e074e754050a4f456a94","first_seen":"2026-03-13T19:27:25.807874Z","last_seen":"2026-03-13T19:29:19.687221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=ngas","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ngas HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel12eqsm1g\r\nX-Timestamp: 1773430130773\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDz1TlxV9TAYGZCJWzMALF5puVZgslokISoUtrnklnNWqpfjjKDEEV0CBA8dAvoZOKMl%2BihaXvTIiK23MR7oIOemkt7YJ96Bnqegjnk6hKZrpyAsY1Qk1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af0e6f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7928006fef7f056c829aedf6e1a5a770","sha1":"e670c98163bc439248706e36310ad04c825553fc","sha256":"366a8e6f312f736ba25b792bf187c8f105ea6130e3bebcee137bad022f418897","sha512":"a38927980479612d236bb651a3d191c5bf2a6f2bea58145d897e6ad4f48a6f340ebe635fe0629ed4c74f093ed21bb18f530702608357ba7122048e18c6431555","ssdeep":"","tlshash":"2f9002551c188242a88300a595169204002531606628924c5c69522680881632080c98","first_seen":"2026-03-13T19:29:19.688155Z","last_seen":"2026-03-13T19:29:19.688155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.00d9c2fa7047f4d8d94fb849d74a276f6.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.00d9c2fa7047f4d8d94fb849d74a276f6.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1093\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574C390C33531099A60\r\nAccept-Ranges: bytes\r\nETag: \"4618D23E5C13A869EFB9C5AE7D25C0A7\"\r\nLast-Modified: Sun, 26 Oct 2025 16:08:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 339227393043835880\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RhjSPlwTqGnvucWufSXApw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4618d23e5c13a869efb9c5ae7d25c0a7","sha1":"08d72cc189f7aa59f46f5a6aff8b1d3732624fdd","sha256":"f4b1226a3e23a732d8b4910a5cdb9c87695ea573a9d7226e9c3ff11d2d1a76ed","sha512":"01b669d6ecdd76ea6fd83885de8ad98604154dcea8748000b7b5845a675eee7fb0f8b9031dca2d7eeabb50d0855cba01de2a46420f777e3cd654ac58857084d6","ssdeep":"","tlshash":"ea112c637645756c518add2536171031f917f5db0654cd093f48502c0c7f2b381cf4a3","first_seen":"2026-01-09T02:40:15.053911Z","last_seen":"2026-04-30T14:43:21.592788Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1111,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievba2t58ry\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 71\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"XAUUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpvAb1NjT4HMMNbkgfx7Z4O2RuLFj0WzOPjjlJE9gB0VV%2FbgkTEo%2F6rM%2Fb6v9CoeuIHjCLcILGIw3yG5p4y4uo%2Bpa5a%2Bg1H7Bh3XI%2FvP%2BZbTnFu4TzfwFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b26d6c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40988,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6134548416f20fd6bddbe99141604f11","sha1":"9d1c4f44bc7cafce8eb0eb0f9e0ba05c3ddc4ead","sha256":"1f6c8ddf322b9402a586f4018385c069040a2f3fc435151887e944bea2c6fadd","sha512":"937fbc2d0622224800562db213c1d7c574c62903db9697c18627b862e8030fec204ff7923c8f46a2298f12c2164ec8cb4d643131e4429b9370da8ac1ffae7224","ssdeep":"768:0gRz0Hh/MzdjV7D15vxsufkg63z8+DSNYVQvPYZTE40:1rN5vxsDgiTViQhE/","tlshash":"9c030a794eeac024d8325ce677d7bcd08e1733c30eefada706af51081ad5325a1647a6","first_seen":"2026-03-13T19:29:19.689603Z","last_seen":"2026-03-13T19:29:19.689603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0332efb4b1047494d99c2317fe8c65d01.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0332efb4b1047494d99c2317fe8c65d01.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9555\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573794D103936839AC6\r\nAccept-Ranges: bytes\r\nETag: \"53F051503477A394626643F7CBE497A7\"\r\nLast-Modified: Thu, 26 Feb 2026 16:56:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18028838391549905004\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: U/BRUDR3o5RiZkP3y+SXpw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"53f051503477a394626643f7cbe497a7","sha1":"57ed3208ecf9a01ef2607f0d6cfa1834f0299acb","sha256":"2e1d47e17240d7db977636b2077dbd7ef28b78ec8fd797de4befa2077cefb6c8","sha512":"cce35bd46a40b524752f7d25e361456bcd910f37b9b87290ae6ef0691e9db9145c37fe93c416a7633624bf0626619ad985f2cc890cbb97bd562ef0533421be5b","ssdeep":"192:TKPHvEBzYQ844DhmOZKKXmSOgIcqP3Le++7mBxO5jpekfU8chz:mvM9YPzDh7K4BInLe97mBSplUL","tlshash":"3712b047e4c683d3a85759fb4dc3ab10b9d7a2e13022e1c725064df43199679af806f9","first_seen":"2026-03-13T19:27:25.861119Z","last_seen":"2026-03-13T19:29:19.690764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2031,"timings":{"blocked":872,"dns":29,"connect":282,"send":0,"wait":281,"receive":1,"ssl":562},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.01f11c11266b644d08dabddcbd1be07a0.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01f11c11266b644d08dabddcbd1be07a0.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4996\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574794D103936209BC6\r\nAccept-Ranges: bytes\r\nETag: \"ADF21F0D372CCD3AA264311833AACE82\"\r\nLast-Modified: Sun, 26 Oct 2025 16:12:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17489423683722500043\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rfIfDTcszTqiZDEYM6rOgg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"adf21f0d372ccd3aa264311833aace82","sha1":"6b1777e9e74e63e48aae2ba2ad2aeee3e120750a","sha256":"325585d4c5831b06a44ac9b64becca7eadf01c0eb1dc4204727d2f9e67ca1f08","sha512":"05a4e951123a5b7aa6373528d41b877c4f4e32f003d42d13397a40245a876512cb0f9da92f1e7bc67cc953bce1fb69edb9ba826b4b80934fd10c001239f262cf","ssdeep":"96:n0F77eRz3IWwJnEOhCa6umMuXUbfWXF+oOKMW4yVnj:n0Mt3XwJEm0tMuXUkRZ4yVnj","tlshash":"67a17c2c3481ddd0baffb56b83e4ae684a1116efe3480272a0ba051cfbc350f758d145","first_seen":"2026-01-09T02:40:15.221426Z","last_seen":"2026-04-30T14:43:21.638272Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1673,"timings":{"blocked":1390,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievbirm7pkb\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 71\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"RUNE\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fApVUTGOHgzof8D6J%2BoSBxtroxCLBEP%2Fxun3lRqmCR0oFH%2FURvUHP0hFMkLsoOfUutV%2F8pv0HGMoATSp9VNaVEa0w%2BDkG7uaVa6a778tbNJwEa2H3Eos5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b23d245868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36382,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"74dbb76ef50c9f954ceae31e5f2c4996","sha1":"9f7ed60908b024a61e683984019ae789f134387e","sha256":"59521bfc31456ab80275beebdfc271e160740360d81b889f93e24371da43a3fb","sha512":"b97fdadb09e32b01f4a2191c886587389c58478cbb49ff0b77a8204a97911d1cfbba9e1d8449c20b3c40ce05cd987e77748ebf9928648e5f913952245b25dde0","ssdeep":"384:KqJcluMgCKsMg3Xqb20LPG/wUEpX4ef7bQ:12luMgCKsMo6iIPG/wUEpX4670","tlshash":"0bf285334b49824adc359c8aefb3fee016253ac34ede4dc572aa1d047a50765e3947b2","first_seen":"2026-03-13T19:29:19.692133Z","last_seen":"2026-03-13T19:29:19.692133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/7.e98fce2ffac2c552565f.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/7.e98fce2ffac2c552565f.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-1ac0\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZt6QnSfIflwtbYF%2BWceKT2cbiLLW9EfyO8%2FKdIeJaB1IU8qwxuFjCz61eLJ1fJ9uS4NRzf82l87Zifb6PlTDU%2BCCJ7qPLP8CdrYMznmQheh5Cw0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b48a205868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6848,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6848), with no line terminators","md5":"49929ec7d4fc0d854ff44a82d4918c50","sha1":"4bf0de5be907f19e9a8cd925a709c15252f0676f","sha256":"f7192b6468d3ceffbc30b0681d5bf39ad491bd58c7c942875876d705ba68f17c","sha512":"2cab34f513d9f005cf98090f4bef5fa5d6858b9a70c0b06b42401de36624dc20e43b32037fe0b931152890e6610bb351feb1309765f7044724aa5a3ceab2d3ce","ssdeep":"96:rVI+IbTr8InURmfzmuFJWF/Vii5gxIpl/MzJIRQL224lctdTevtai:ryfCtRmneVai","tlshash":"47e15a00de912a74b0ef9dbe68a0be4d37a6f202d3443efd741ad615cca1a45a1f2503","first_seen":"2023-05-08T01:41:10Z","last_seen":"2026-03-13T19:29:19.693232Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.06ab572a563884b24b0c193bc0564f40e.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06ab572a563884b24b0c193bc0564f40e.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 834545\r\nConnection: keep-alive\r\nx-oss-request-id: 69B465747CD23C393381FBFD\r\nAccept-Ranges: bytes\r\nETag: \"41C7D25014BDB6D0D1D11232A0AB039A\"\r\nLast-Modified: Fri, 25 Apr 2025 00:19:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2736913832101311076\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QcfSUBS9ttDR0RIyoKsDmg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":834545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4318 x 2000, 8-bit/color RGBA, non-interlaced","md5":"41c7d25014bdb6d0d1d11232a0ab039a","sha1":"53951f0d49e6dcb24a6e7a8d7ad5aa5508b06348","sha256":"f64ca53446e4da262572119aaeee7c81dcc92134635b09cfdbc7b3eb73d53a8f","sha512":"e4b99937fe18be3f7ffc0aeb936c0525e0fd16f4d8229e5a5bf81ca1efa2d666bbdb879ff55a4eb7bed87428b3df949ceaa81d4090df7f90919b05dcd96ce513","ssdeep":"24576:9kheYLubOqRe/JYINZ7rM0hjzpFCezjsSHv:0eaURezrMu3TCwsSHv","tlshash":"f6051248553be610de2f297caa301fd3825335b8c2d4aef7d274901ddd67ea520b86ca","first_seen":"2025-12-21T02:17:09.18551Z","last_seen":"2026-03-24T13:59:45.701464Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":1210,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fb840CiG7%2FfM7NPFMOpgvECAUN7JMbQKiB6lrzThMMWAjdy2Mtncy9%2FBHsXvdHT0stA7AV5Yk2qDL%2B9eTAwh9YFC9BmafwHlsfxzfI6TTAlxhCqjEwazVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71bd0b6d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xauusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4FG%2Bwn0Dqi371uFUwRTik%2F%2F2HTE0FzRas3tiFzqxRa35w6tPUj30rsRK%2FAOiyO2rpk5tS8UvtGeZnvtRs28Mu4UmneycaPpK61J7OrG49khvPfdHkEIAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad6af05868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0ff5298aca2bd4df28f8b359f6580816e.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ff5298aca2bd4df28f8b359f6580816e.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1397\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574C390C33531409A60\r\nAccept-Ranges: bytes\r\nETag: \"69635D94DE789018B65C723DC0DE1624\"\r\nLast-Modified: Thu, 26 Feb 2026 16:53:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17279292300679987689\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: aWNdlN54kBi2XHI9wN4WJA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"69635d94de789018b65c723dc0de1624","sha1":"8582a31248883e035470c9a677eeee7e368feac6","sha256":"3327b621bc0af20340ec6376576aada621fc3568a4777a5df1ec66cffa1471b6","sha512":"3c3f2e0b4e79b27d9c090d8c60771a0a2371f6384faf9ba561150809ffc5ada601a8a92b4823032c436360929a22e7ce6db2f282b5d30d463500a568c8cb208d","ssdeep":"","tlshash":"612194f313e708f1af4413f18cd74ee29926423b7a6a5a6a002ce35662451e467da720","first_seen":"2026-03-13T19:27:25.963907Z","last_seen":"2026-03-13T19:29:19.694326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1692,"timings":{"blocked":1418,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/jiantou-y.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/jiantou-y.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIEvqzCE%2Bjelsimviz2RozIiKD43dfefQ2aVdXrysbeXinWfqI5FXXz3I5gElbsTCxCbS4HuD10KrAdXJs7OCL44UEz7t1p4WusdyZj%2Bs1QAGMHa\"}]}\r\netag: W/\"69173876-fa\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71aead8c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5e4e54a5487158893ef8fca262aad6f","sha1":"879f44734b22643e6ba791a178c8d11a0fe76b5a","sha256":"1bd4c74e3b54ca46732ddc67b3e4ffaa129f1c4f3dae7b65136a09eda48e2f8f","sha512":"26f9eb0d272fd8df273886adc832d11f5c13e3a168aed3aedacfb97accaf4753dd9e09ef78d2de438e1d6333dd2212aca5330eed91787e26af52667d24b6a4d6","ssdeep":"","tlshash":"48d095ed915d304cf4569660dfe4154555adf107c2a408f4fff0493b927449158545a4","first_seen":"2024-12-02T08:41:53.544239Z","last_seen":"2026-05-11T12:44:38.634726Z","times_seen":32,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.021e0c7a3a1304b26b1ddfa36e5e425b5.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.021e0c7a3a1304b26b1ddfa36e5e425b5.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 326\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574794D103936F19AC6\r\nAccept-Ranges: bytes\r\nETag: \"903E672C14BB35FEC7C21D51E9398F5E\"\r\nLast-Modified: Sun, 26 Oct 2025 16:05:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3006354696497191698\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kD5nLBS7Nf7Hwh1R6TmPXg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"903e672c14bb35fec7c21d51e9398f5e","sha1":"72eb535954b6c870342632428b1129c899097a63","sha256":"75a54b59592816b3d73f529f2bd83a05db7dacc12af0ef326418011b41572f62","sha512":"ed4960b83ef43e67629f55ff2764120eed7fbe5a7ad045c1f8ce1d89285e9e129787d59f46c0ff8a3b7f207d1ebd90ef034accdc5f9c6a9f822ce3d317ef4864","ssdeep":"","tlshash":"f7e07df5d98a87dceba60a5b58072c6efe22d1ace511230e1e415c110e059c37fd0667","first_seen":"2026-01-09T02:40:15.108341Z","last_seen":"2026-04-30T14:43:21.690764Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":1132,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/en-tv-chart.c63b141fec55a3c31066.html HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBZASZJ%2FOIyD8KUQEmjqxdYMjoiU%2BCPho9MgEEP3NBEavAafh7xXW2f%2FG%2BMXWU3b2P8vNjpI9My%2B%2FhKn2O5Wi9p8zCITaN8vPdbQVBOt5di5Ww%2FB\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dbd71b099dd5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22277,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (13312), with CRLF line terminators","md5":"321d3fbddf50de1c4d8b76fa20b971cc","sha1":"bfde63c5a5cfe51c588b7697ca607bbc5c6484d4","sha256":"1ecef40e9cdf4f5695dcdd3f0e5560d369a668d006fb307879b186d11edea0c4","sha512":"4a966a2e8994be7ad24da4809ca8ce95297e4333fe6c09361c588a27e80d726200436ab52961c018afa8681bf84a6d5b0cfe718780eabdc6c99398d0e38e36ba","ssdeep":"384:LJCmjyVsfA8SQfUkACblr3zZZ+wKc/D8SNEzDPqigrG6+IwiMKNoxdP1inCu7RY4:VjyVsfA8LUkACblr3nQqiIcqVhV","tlshash":"5da2a3427a6a38bb16535bf401fb0944b168915ed2364d4bf2e594aecc6df08037ef8e","first_seen":"2026-03-13T19:27:25.859696Z","last_seen":"2026-03-13T19:29:19.696072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/datafees-8cd731d0.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/datafees-8cd731d0.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-5cf\"\r\nset-cookie: server_name_session=0c1d198e557616e3cdd0d8b1f81222ed; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOM9Si0Ohk%2Ba5cqikAfN4gj4In0ngtqfLidQJQDtF1DlLGySA8gbovDJpqJgvKb8wMVSsdgRbRdV%2B3g53LHsdBT3SfgSWFlqkiSlVfpATJw43VTe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66dfd5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1486)","md5":"1c186981420444382d4e32fc96874e51","sha1":"490561f00eafbfceb41f581182bbfd91be8f1927","sha256":"c93acde34ab2f726eef4a8d712aa86133e95fe069c5387c9e343029760841d2b","sha512":"d6027e0c2c54bf387af43807e3dba905d92385c53c9a21f3449853d63e2938ebf49c60bc2bf33dca1fb8d796c0acc65f1b02eccb0f0ce223c57fef214e727013","ssdeep":"","tlshash":"363157e35923b16104f5a4e64c531f9393491906fc45173cb0ed6fc55b4624f29b7c76","first_seen":"2026-03-13T19:27:25.849269Z","last_seen":"2026-03-13T19:29:19.696581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/datafees-8cd731d0.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/datafees-8cd731d0.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-5cf\"\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UW5FnOuxkPh%2Bo5J61a5WWwjD3fwGjSN%2B08h3kRW7ZjoPLsNsPt4EaEIFUcS16cT0oqJ7GzYBwxRrBibGSA6RNi6p3p29O8HIc%2FMfJf0jBYGFw7Tj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ac08875868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1486)","md5":"1c186981420444382d4e32fc96874e51","sha1":"490561f00eafbfceb41f581182bbfd91be8f1927","sha256":"c93acde34ab2f726eef4a8d712aa86133e95fe069c5387c9e343029760841d2b","sha512":"d6027e0c2c54bf387af43807e3dba905d92385c53c9a21f3449853d63e2938ebf49c60bc2bf33dca1fb8d796c0acc65f1b02eccb0f0ce223c57fef214e727013","ssdeep":"","tlshash":"363157e35923b16104f5a4e64c531f9393491906fc45173cb0ed6fc55b4624f29b7c76","first_seen":"2026-03-13T19:27:25.849269Z","last_seen":"2026-03-13T19:29:19.696581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/menuShow.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/menuShow.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2f%2FcCF1ILlPwhezkGtrUjBxuY2S33%2BA7Mt%2FD3GVPP4W2nL%2BocKpyVNxXriefJFEZrz%2FFCPlSA1DFpKTxplEDy%2B%2F2KbvD8Svt3lS3HF7JaxFRTb3S\"}]}\r\netag: W/\"69173876-24c\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71adebd05868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":588,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d629d427ed424ea4905da6f5ffbd3cdb","sha1":"89b88c754a6f9ce12b178fc8f83e5d82c80f561c","sha256":"14e254f82dfe9d21bd26ba45d94550b66b0a5c296bb15c79a516e146c146c115","sha512":"c08f158616e7b2e4d48b5e6c2bac9c120c3d9d9b2004f5734415e24715993c0e2b3f5d07a8e33d54d4318da7bdfe88831576c8a7c8067eb7a02d5b58ec7ebc04","ssdeep":"","tlshash":"68f0f46c892595acb2274696d0ac8698e35e04a6b0d22308cd9f7c64d45aee1ea07298","first_seen":"2026-03-13T19:27:25.855238Z","last_seen":"2026-03-13T19:29:19.697194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/images//defi/chartImg.gif?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/images//defi/chartImg.gif?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-53921\"\r\nexpires: Sun, 12 Apr 2026 19:26:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVPKLmG3Sh3GEdbt3L2d78bkn2Ej0P5cNLoFhFu4UpeiMjJijDiOsTk0NY%2FD%2Fci9K6Z%2FID25WKXMO%2FBGPsKw7%2BzDzLLJ2T5qrxLJ%2BibvlIgx8jCo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af2e9c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-06-07T01:05:18.921393Z","times_seen":193,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/10.c0a8664f16f3834961e4.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/10.c0a8664f16f3834961e4.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-11b7\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7tFHHR7ljWfOZpxij739v9p2owqCH4jzj%2BZ3MlnTmLiMhMMgCxXjbrYpWQXohV3VpRJjavIzoCyq%2BV%2FoS5uAyIVwzmcagQWBGJ2TUDBXCCYFEJ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b48a295868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4535,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4535), with no line terminators","md5":"22c7f674071a66cdc392976464d57a01","sha1":"9cf2225e19c28dd8c9a2aa5852b1c2a5fcbe2cbe","sha256":"0e0af2f681fe4fad32e139981ae445048152381d2542b5692f7457896169a25d","sha512":"70554a8edc063c8973a9f10e7b4912809fced38180710f126bae9b5239f96827cc90809dbd51990061f75398ab2bdb32cab067e18a8565bfca84f2d2922407be","ssdeep":"48:8kI0jQVqGN2K5eQND5LVXJTX3tHo4PqeCFEvMnjW/0oLw8A/j4vWjSPrSRa3:8jrc2LdLDzDJMY0oNK4vkSPmI3","tlshash":"4d91ef30d2c3311fa837d22a7161fedda1eb44d5eaa21b7a77d4711ee64c6d4006e4b0","first_seen":"2023-05-08T01:41:10Z","last_seen":"2026-03-13T19:29:19.698602Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaigihcqrwt3x\r\nX-Timestamp: 1773430133273\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 71\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ATOM\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PDpFOAZ9MdskNpKK37PWmyIEVPt8W8gPQbQFvtCiV8l%2FZug667wfFIfR9nHmS9%2BPO0sMvd%2B1RwYC8d%2FMoga8KkZoW3wKjQJtVqRiBwzPy10PGjAmpVOwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71be6e795868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36579,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"22a801d6a42fe8a6d4f8f13507c01cea","sha1":"ff24a2be793e8d1d274caeb5787af8680b1d739b","sha256":"a52fc14d5f58294694ae3631d6a5a916ca09f7296196e032f3423a1d75b5e878","sha512":"9b9af4a34d31261a21a1db4b38efe304bf50f959422fafb70db478384f9a9cbce8180ae6daacc34118ddc8006eb903270c17f18c1e5828fecc174116377024e2","ssdeep":"768:fFTbSFnlDQ5qXPSBD3LgWJqtatPlIQI0gvgpQ6okIkILsUPDDLR:xGFnW5qXPSBDkWJq8tPlIQIZIpQ6oHrJ","tlshash":"20f28eb09b99d048c535bcc62fd3bfe83e3636c68ade5c43059b19057a90379a046f97","first_seen":"2026-03-13T19:29:19.699181Z","last_seen":"2026-03-13T19:29:19.699181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaigihr3l6ldy\r\nX-Timestamp: 1773430133273\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 70\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"XLM\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nT6wn59ppH93YxYAhWwEte0xuqJD%2BPg6JbEiNnsh5N0HYPPFDtajwL3kddwtq0SbNuqbghF6BCHAihMRYg009CpfWSTYzy2MX7tBMIIwVbwKGnK7wu4W%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71be6e8a5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38858,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0b09b40ae971de4d914a54e1828f7302","sha1":"e321efe7f3ba40dd5b5f60154f041839283756f9","sha256":"3479b99bd53eb01ed2c0d005ab2bb17765caa0adef62734b18106140659e3e40","sha512":"a9d1ccf72eac822754bfac958503eb0a0222c4f27cb2288e786063cad4d0849486c023ef98cf1b1069c7484d1d460dbfc656f1595b6106c1c2201e72c75fd52f","ssdeep":"768:NJz/KuDZc7sMzMKKjOYUUh/vCIHwkFbUVdPh:n+sMzDKuUh/vCIHwkFbip","tlshash":"32034e394ec982f9e5318c9a6fa3bee01511f5d75acd9dc1d09b8f08ee40325b4943ab","first_seen":"2026-03-13T19:29:19.700283Z","last_seen":"2026-03-13T19:29:19.700283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-74e72f44.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-74e72f44.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-1959\"\r\nset-cookie: server_name_session=b97935aa3c7e19041d6ebdf212ff5c44; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8B6wPOsNLq4VWT5lN3mYtyd7S34%2F3v4DX9yc77vCgr1e%2FfNFg5xojVV6e8eEOiEey39UK74GXy%2F5wu8DPz2upqPQtXae84MqAlPPPCx02zZdy9j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66e015868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6489,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6488)","md5":"702ae3c533dd4bdcc0946da77534f72a","sha1":"9d01b587e3af5d18a734a7fd2a09448a7a31ba72","sha256":"211ab18fbdc17a8d4266eb816bf1a33b87dbaf20d027fd24a99a9f9bd0344cdc","sha512":"f17e5b52e0014f1a605ddbc29cbd725c3d04078da118ca2fd2ad2acf9aae4722f63a469ea37587d814af24f8cba548fdb404f0f1f1bef8f4c5fe8a6e4c584da8","ssdeep":"192:1ZXoZx5Z6xFZtLZrrUBwUSQbJASH1g442yngeuN8isIbt+FJ9Fz:1RbZdZrrFsi442ygaIbtefh","tlshash":"50d10e24e4560cb942df146c6d636e43af493408c1f1abb2f71663b111a2ed8a27df3b","first_seen":"2026-03-13T19:27:25.805824Z","last_seen":"2026-03-13T19:29:19.701462Z","times_seen":2,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/selectStock.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/selectStock.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173876-732\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WffdGyavKDVFSbJX%2Fbno7l1p1XgxpJA6gCAGjtkivFi%2Ftzhf3SypHP08RdUGU8QcyBQS9sOV3Wklfb4kWCoLgAe9TaqHlaawYkuFVG4Ie%2BI7OQg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aede075868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc5e883dcb748dc218717aa0cf885fbd","sha1":"0f9e20e1c921421afdb3fb85a5646da1d02dd872","sha256":"f69d3b055109f14808b201866caa65304b7cce984e191f2a28332af2f3d55e84","sha512":"31f7148c90407ab6bff96173a38fb5127d4f9ada51a5df2be49e86d228f72467829d81dcbf2b8cf67893ea28f24d04e6c94f7e9e82463e29efa207db82b02c55","ssdeep":"","tlshash":"553153fa27fced605a096b27dd2e5c91c11618fe5b8ccac8e255e8a3e4228e15d42f04","first_seen":"2026-03-13T19:27:25.930544Z","last_seen":"2026-03-13T19:29:19.701992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xpdusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel1kjcpsds\r\nX-Timestamp: 1773430130773\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLZ6LsfZSeGa0rqIS%2B079NdeSrqtMOJEAAthCMreDG0Fcchnkm7KAJVGAT6Q6AIFT%2FQV4sfOqKrWGZW3vTgZrfMh9ICUZda87WTc4dNgrbrWbMbKNT3SMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af0e685868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a95c41ff81029737eb6d89ae2a459929","sha1":"3552e21d7ad0adeeaadc02d3a68c583703bd0fe3","sha256":"92c38461cc7d34003d4c7a8a80645c84ca38696b9da003c1b3b99435b87371a5","sha512":"8eea74361381024ae2f0428830124fcd660586cd426eb49405bede099c4487f4c83d60a3d24323fb10d3707b7b11de9facb66ce38b92302a63403be8c901b34b","ssdeep":"","tlshash":"cb9002551d188242f88700a5d546528500243160662496484c5a512580c85762050d58","first_seen":"2026-03-13T19:29:19.702577Z","last_seen":"2026-03-13T19:29:19.702577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/indexFooter.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/indexFooter.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173876-ea31\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9h95VdjIA7c1VMXgwsmahSCNIJnRquWM4WRZMTQRHoO%2Bs7Fk%2F3%2BSGp3THxIVz3WyGTY4aUvoqKaiqhua3qUUeO2FijvYGigA5ZnNIi92l56cGz1i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af3eb85868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"636da9ca4f5967418849a3713fc7ffbc","sha1":"7145566f7a5c36529f79007272fcf319e5806417","sha256":"18bd3966b7a2448c2ece047c9dbeaf0a2612667e705f4a1da98156f8d1dc144a","sha512":"50b9e05a4f2ae9e433814db6beb02c9990b1368663a312e7611ec13b9f4030595b47e49df80660f4f9fea966ff4250f28fc4f31e8c012b8ca5ee8239437af711","ssdeep":"1536:0isgfPqW8QQ+ewtSHfARDmUUCz32y1HkNtJSJMV7AuG7:Jjx8QQbr0HDVlkUkrG7","tlshash":"504301f0fa1d6cec81b8453c969fd69fade6349bdb8c39098805f541b84bd88583489f","first_seen":"2026-03-13T19:27:25.830236Z","last_seen":"2026-03-13T19:29:19.703322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievb7z5xhih\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 70\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ETH\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyVsF%2BDWp6oy7pOXOpy1dvUuOzed0llRX5J1jmsVo2xYIEaWJYkGJcg0B3tRAvi%2Fqp2PtqfxzDHDWAYV%2BqW3oZk9qwNCKqyF2v9Am%2BtPbKwKhXA%2B2ylGlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b24d2d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41213,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"67a721b7d0408cf4836c6e0ba1945c55","sha1":"a210d1474a33272f02213bf4762f5b2dfe36e735","sha256":"f695bbf64e709e88c4725aacc727d3a9c84a40ef658085f8776f0fae8bee6815","sha512":"48dbf3cdfbb5aad7c3ba96917d67d8cb40562d67c21b7a3deb5d43b6effad6513e067cfe95ec76e84f6a0c0e6cd4289af8504a62a47c1c5bee0b37f2a204fdbd","ssdeep":"768:klBpQdSBlJP1hWehuQjCd+0nCPt7YB3amXJ78kQyEbXhBAor69z:UltWehNjC80UG3r6IChBAo+","tlshash":"580343358f99dc4dd8359ce65bd7bde40d2633c34bee5e6205ab5a023ac463ce0067a2","first_seen":"2026-03-13T19:29:19.703877Z","last_seen":"2026-03-13T19:29:19.703877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-d253bac1.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOr2gOdmaasiu%2FmpPpMUApc0wCpB9nlrCOoJWnMd3uucoYcG%2FmFcxz2b%2Bpq759WvGdYhCUWPY3mhqXF1zojHzr3P4pdkeMsIIX8C3aUGyaWm%2BW6r\"}]}\r\netag: W/\"69a597fb-3d\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71a66de85868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-06-14T07:12:41.052866Z","times_seen":321,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/kline-0df3c478.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/kline-0df3c478.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBiDhQzu7tJZnr9nIAVlqF57Lkjr1qfeJoEIAQLnzXJO%2Bty1ktLf1ZB35qbP4U%2B7SWwYO3Ml1oisrPeEcXZB%2FUzw7pUg1c9s%2Bre8CEZvw%2FaNWsJ8\"}]}\r\netag: W/\"69a597fb-52\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71a66dfa5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4ba74089236d193fe48d7a6d21eea60e","sha1":"b0b850aa03c387442ab39d5872a794299df6236b","sha256":"5c7ab54563e2922745fa0c1d925363e5fc9bcf3083db28bb16b6e7eb856520e6","sha512":"a85d8302a4d7a0c0bd7babf1bc9532b4ec4e793d109092649f5958a378abf01f728352fafa731146a749b27a41aa01d21474df55b02006b100a663adc1750baa","ssdeep":"","tlshash":"46a0241705f013f111344ccd53504d00013144f4134345f4500dc75001100c1c44df00","first_seen":"2026-03-13T19:27:25.793928Z","last_seen":"2026-03-13T19:29:19.705439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4plx%2FuCB8cMBYgmTQA5Vm8sRUMq%2F3S14EoY7r45BSIXNc4m3XJ6pEydZAJPeENNU8qIs4%2Bvm%2BFEWBLX4%2BmwYPztHKIysFfc85qrI6jo%2BMGCuvqHHCakGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0ca4c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/4.80bf1a925965757be6d4.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/4.80bf1a925965757be6d4.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-23b9\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvprD9TF1mOLm0Y7AeNslfCqEDOBy5PBFrqiAJYbdDq%2F7dciT9CWJ4XZOZddPkmcxauK%2BN3ZujE11t0%2Bu8g23tpuEZG37QXlFbn3048WqXQE%2BUjy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b49a4b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3068), with CRLF line terminators","md5":"c6eedcb8c4a5e6ade257c4ec2bf467e4","sha1":"92abc901bf62ad5c2da9636a5f5c56f283408ca7","sha256":"5c4c0e6f6371d83844e5c37334fbfb241dfcee91a157d59fecf5cc6ac4caddd0","sha512":"78141a0c85ed027d853a2f3d922ab035b2b86d56581b28369fdf05660c48b71174830e5db75375adcdeea8844c8b6d9ef5357120168e61a6a76cf07972b6180c","ssdeep":"192:wJAbCejBBdD1V3i6/LwGJrdOEdTB62s/TaPlPmP6Erlv:wJ0Bl/Jd42s7J","tlshash":"3312a248309121f104ff20ab80ad660ae1b69dedc519d072b9b2c5fc5db998573b2e7f","first_seen":"2026-03-13T19:27:25.889161Z","last_seen":"2026-03-13T19:29:19.705998Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTBWDPopZrd3S%2B7WiP8pUwqLi5OFeL203pOUmcGyLcUwoBg1iOUmUQgGfTvFvFQUnuRLcttnACtTL%2BvfQkuvi98Cb%2FdSZyKbTR2GRTX44AWHTLrg%2FMwXaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0ca3d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=ngas","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ngas HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BJMq1pMV2WmyftV%2F18%2BNl16r7l8qj57NxX%2FHFEj%2FSx4iA%2BE4n1IaWuJzEcIaxmw8%2B%2BqJsClPBTqZ7%2FrKPrSzdZutTxo4V5RjEoNIoph8cH%2B4LYnBNZYlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad9b405868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.050d27ef7077a48589666f432f72b4d7c.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.050d27ef7077a48589666f432f72b4d7c.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5802\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573AB4B813537100C53\r\nAccept-Ranges: bytes\r\nETag: \"C2E3E16AB46348F91EA793EE22A7C681\"\r\nLast-Modified: Thu, 26 Feb 2026 16:59:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16009992518495014651\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wuPharRjSPkep5PuIqfGgQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c2e3e16ab46348f91ea793ee22a7c681","sha1":"82c5b55553810a4dba89f2b5efb374287bd4fa0d","sha256":"8fc6cf4d233a24501009de403cc66e8168134e25dcc413845456a27c7ed84882","sha512":"702f6186327096223a0bada95d68bacc6bdc3f752242c188e21ac1fc6294cc39286dad04d5cd9732d70f39526248e4f7e360a0e1d481a6710492e7323cbe2713","ssdeep":"96:GTJ19Ai09iNNX8SltN/mYQdR+GnmP5CmVczi3BpTkdXtcNlXn/kHZN:GH9Ab9iNN86vpA+KyUOBRW6NlXnEN","tlshash":"3ac1aeae40bc6e015ae8e537ddcf6890530571839ce884d812e8b9fde9f02ec0697d26","first_seen":"2026-03-13T19:27:25.92535Z","last_seen":"2026-03-13T19:29:19.706726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2026,"timings":{"blocked":870,"dns":32,"connect":279,"send":0,"wait":282,"receive":0,"ssl":561},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/more.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/more.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:03:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FF4QZs0REsd42OH0BSEhWmDD7Q8B3Bugy93UR0hX%2BCar4v4iEX%2FeQsigZZM35SFEtFP49uFneqo91q9aCybOckGEC8JKBkOvfXADzsJ%2Fq85616%2Bj\"}]}\r\netag: W/\"691b011f-2a0\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ae3c8d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":672,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"888c4897f7314f860df6948118e1fdf5","sha1":"e40835fa9775518b145926f1d3a098f705ac3ac2","sha256":"709f65397dcf613d5f5ec4966c4fdc7cd74bf93e6f1aa43e75cd50494525ea39","sha512":"ba45900676ad2f97e9fa50dd5ead28ae2a04eff33cb2b9f9c5efe8b90592092680fab89685329673fb300806fcf01647706373999a541634923d7d25b848ec4b","ssdeep":"","tlshash":"8e01fe4c4b1c49a86c46c3c682f83462c30cb0fea1712bed9cc32d7080d3de29d8a98d","first_seen":"2026-03-13T19:27:25.899398Z","last_seen":"2026-03-13T19:29:19.707335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/cryptocurrency-icons@latest/svg/color/eth.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/cryptocurrency-icons@latest/svg/color/eth.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"20d-FLcUhkeijrT4YfjaKDqJ8Kzx3sg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 7008\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\nx-served-by: cache-fra-eddf8230042-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 257\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed79179a3b6bc2c2ee4c54d8ade79b01","sha1":"14b7148647a28eb4f861f8da283a89f0acf1dec8","sha256":"1f94df8533f61806f7b17eaf9cd28678cdba66e1d82a9ca8f9fb38d35a907e9c","sha512":"590a8fde3f1bcac91ccd4dc2cc02f7ba602cc4b15f137c1f3758bcc5072c545167f7dae4c16837bde366561fd08ffdbfe5a087dee8f7e75feaec9ecc77a2fc8b","ssdeep":"","tlshash":"a5f08be95d287450682b1ffce67c98d3306771f40a3d0cf9b1800512e94995b9cd2b40","first_seen":"2023-05-10T14:51:47Z","last_seen":"2026-06-15T14:41:57.664598Z","times_seen":4198,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":1,"connect":26,"send":0,"wait":29,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/cryptocurrency-icons@latest/svg/color/xlm.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/cryptocurrency-icons@latest/svg/color/xlm.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"26a-ue6QXKGyDGddapZVPO3kM0wt8zg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 39185\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\nx-served-by: cache-fra-etou8220063-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29ac2fa4e98cbd3cafe6d55bbee72938","sha1":"b9ee905ca1b20c675d6a96553cede4334c2df338","sha256":"65b922105452f2c5276a2da9c289ac839b8a4d1b94d716c1aa5dd5b7f06fe52e","sha512":"883fecca60e132d67941b6cd0041963b3fb85b1a8cf346e35c36524520a0a5cee2b5300f9cc892424175ab9ba6d38421084fea852c19de1fa019709c374d0912","ssdeep":"","tlshash":"b1f0a2e67d58a51d5d4dcb2c2f08a299105e348f1bf909b5e5c59705f0c71cff614914","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-05-30T22:53:45.958986Z","times_seen":65,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/indexNext.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/indexNext.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173876-66ee\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fj4FsX0tHAiCgzElQlA1GaV2M4tXkYC2jjG7W5SleW0ewZkiahi4cRLvdm1OQ5m%2BZkoruC18uTHDB9tAfij6SCskOCjPpKvZbMrL3q3uf3IO%2FIOO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af3eba5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26350,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7485fb1d82cf27ab545241344abcfc97","sha1":"c5b2defe5a0a4e588c909e538b0ff8d2bf61d47a","sha256":"424229657eca2c2686b4ca1e36a27b5483f2e1aae97f3abc719542807c25aad5","sha512":"36aea5a4d2c5829d6bc6f2c9e77ef1394a97b2a367d1238522a2885de2f9fcd3d4660a0d678f62ba10dfd7692a240a7356b602e4f5af715b5cd7957475a2c362","ssdeep":"768:Bfs9Z1W6+Jr1TIoqmOGuoCdvPtvMW7MOKKiqtCOJWJvrS:Bk9Z17+x1TIof9uoaJx7MOlxtQJvW","tlshash":"66c2c03cf1090cced7d5622e7730ab589e83a06bdb5c9502e648f18762aacc55d7d09f","first_seen":"2026-03-13T19:27:25.972694Z","last_seen":"2026-03-13T19:29:19.708841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0a12e493e65934326a663bd53bef5f357.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a12e493e65934326a663bd53bef5f357.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5965\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574794D103936B89AC6\r\nAccept-Ranges: bytes\r\nETag: \"73959771C49918D055A280DA3830E732\"\r\nLast-Modified: Sun, 26 Oct 2025 16:12:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12406221751221022781\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: c5WXccSZGNBVooDaODDnMg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"73959771c49918d055a280da3830e732","sha1":"2b0284a285b927a7aaa0169a3f67f2e1ee5623dc","sha256":"de6d3f75f9a40aa31054d84edd546dda12890e3f745192140589ba22e9183724","sha512":"2eb5f23b405bb35861a9b200b5881259ecff35601f383219ea3f4bdceb52633b16e7fe2fcaa762fd987d056543b092f67213748ecb4647341636f92f021412b3","ssdeep":"96:J05gOCMnSCOjU6WTjxhe1uBJHHet7QKifw3gcVW1qG0pbG8c8P/nLksL:J05V5b6WHeFbSwL3lGBlsL","tlshash":"76c18f9a7c3cd611d68b0937e0e669840515ace415612fff403d381de24cc6579eba4e","first_seen":"2026-01-09T02:40:15.067336Z","last_seen":"2026-04-30T14:43:21.602887Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaifflvd9zfi5\r\nX-Timestamp: 1773430131873\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbUSOuvXT6rP3f0iKAN2%2F1sHceLWOPPqWaPbtHIv4z6UDimeu9EzA9pze1PZkcbHuFS9RZbL%2Btxas8YDUAzxnGXnnTDKf9Zgb3FdA8O29q9JTzmcgMT2Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b69e795868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3fc6a964259cb7b88ea3550b583c369f","sha1":"e4970a5d6a980de48414b0e776f2447bf9e77f65","sha256":"f231b9de8e4ed166f39d6ac5b3bc8fccb70d146732503cde37f5bd41d1ecfc27","sha512":"4cf15c85ecf69e3dc167dd8fba8eb1c9fe43fee356499b4d0ad72f0180d576127c9ac3323b6c6d2588ba8d9f886a84521191d48aa76c96bb8bca16a52dbdbe67","ssdeep":"","tlshash":"b931780b1038ceba0c4958c769ccbdca929e1a9bd360cc309babcf5c85f54b70b1b604","first_seen":"2025-12-21T02:17:09.199586Z","last_seen":"2026-04-30T14:43:21.619873Z","times_seen":19,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/currencyItemAll-6af2355d.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/currencyItemAll-6af2355d.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-be3\"\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d90UCjveW8eKAJtX4hSzCvRg%2B4HdphG66sVeQfO84ah2hbSzbKzUop2x3n9zN%2FlaqDs02kRa9JHNvnw13NOpaoH366no5DqOluxALdv5aXpcxaSJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ac08815868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3043,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3042)","md5":"e5eb085c8b3df53911628d1ba7fe1270","sha1":"6205e24f21b191ee7358a5483f69384c6b215c7c","sha256":"3aec8732a734707bc6783c8259a2d7090e0f9ad8fe3b3db475ae5884f85e4ae2","sha512":"f6418e83bcd57aabe6c01f1fa89de924c9c9d5f30992781c6b4a15e153b1a5516253111d12a8b90d73a8d01df11e6cf10cede1aa022a9bbc4784090396ab916e","ssdeep":"","tlshash":"9f51b73efa02c636c5f62853d01e100585897f97d123a8d6e6fd1c29931ee98f36c325","first_seen":"2026-03-13T19:27:25.817019Z","last_seen":"2026-03-13T19:29:19.710933Z","times_seen":2,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/6595/small/Rune200x200.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/6595/small/Rune200x200.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2596\r\ncf-ray: 9dbd71af1f301525-OSL\r\nx-amz-id-2: XkpLsMYMsBzw0+NmyZtRxBFEuoU9f5uhY6UVP3wTX2bzlzOO5oMnZwGPTQzRre0uZo59a5ptA54=\r\nx-amz-request-id: JWKWHBGXEQQ6N5ZV\r\nlast-modified: Fri, 16 Dec 2022 08:29:55 GMT\r\netag: \"c4e0994b91761303531f3580733f44cf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BiJi3t1qTWzqu62CIstem0ffNlaUhK.4\r\naccept-ranges: bytes\r\ncf-polished: ok, orig_size=3561\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 382;u=5;i=?0)\r\nvary: accept, Accept-Encoding\r\nage: 244959\r\nexpires: Sat, 13 Mar 2027 19:28:51 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a773d9d01b62cfd48d6db29e6c4480f1","sha1":"a5d9e8b800c5d33a04cdfcfadd00508364022f2c","sha256":"24a178d92a1eb262dd4eaccb6cc7037ab25e3b4b21cb0024b475c7cc743385f9","sha512":"6ea44eff5865ab8e3f024562055b31b96d57ada6f37f79087828a612d2e01cf3d965a96bbbb8709de055214e6a8a18b716de0c0788fda0d473cba8d899c54de8","ssdeep":"","tlshash":"e1516c5ecce4c5a48d32e343985d52ec61f7e07d5d466edb623710e32c84aad3617a34","first_seen":"2026-03-04T13:56:21.620047Z","last_seen":"2026-03-13T19:29:19.711604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":50,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/line-tools-icons.c89643eed013eb0ff7c1.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/line-tools-icons.c89643eed013eb0ff7c1.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-10c3e\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKHBqHjGbQTBRSpUQKectbjvlwl%2BzzfThfuoVvq1Pcq%2FosT1EkhunDylpC8XArA6WJu5Z23mmSVU4WWBt3QT%2FPpDAhrkTmFY05z%2BPFgZhPH09wKY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4aa5b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68670,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3066), with CRLF line terminators","md5":"577db91184467e921db9de1284993633","sha1":"5b5160133ce8684bdfec54dfc59c60284a058c38","sha256":"e000f3e10570c1e2f794480850c412906d9d2c4a96cfb25abf1171a5b66dae26","sha512":"c9a0ce2297ea46784cc12b2c2a90665ea816ea6b42fc1964473434f36f8eb9746ff1ffbde6a7651866edfc22e96fb189583c9519ced0489d6e1a7d66cfef1661","ssdeep":"384:6DfUDMw/UZlCLopjzhR5G0IHEgXKkiHyYH29fhHiTGqypoOj/Sl:6DfUowMp/hR5G/HkkiHyYH4hHiT7z","tlshash":"8f637bb5c7e6e884bd9ac6bc9f58909fc57f53408986064cda3ee97410c6cdb2c4f924","first_seen":"2026-03-13T19:27:25.857323Z","last_seen":"2026-03-13T19:29:19.712176Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/chart-widget-gui.8005316cfc1f06be4bf0.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/chart-widget-gui.8005316cfc1f06be4bf0.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-99f7\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bt4c5DyP68MAW%2BvDy%2FSBpJ4gsge2UCdXGKfuDV9EFo%2B6DUVo4EFBNk6y2PpnkwnxAaEHwBK5bX3RRbgq%2FVTBvgUO60AI%2FS2WCmUoD8xO6IAJap5n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4eaf35868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3072), with CRLF line terminators","md5":"48701653fd461898db41d7c54dd1f62f","sha1":"b32e05e7aea1abfdfdc41dbcfaaff0a11d47438f","sha256":"e99d781ac871ec3b72b8f362819fac46c54c80f95e630a7a489e792648ca0c63","sha512":"5f98b49f8ca47cb244b84545ac6bbaed4179b3b9df3fe822b61a657fce14ff5b4ef981665286dbb6aeb4f5c245cdfa2c5fc00b71e18f3224ab26668f1c1bec93","ssdeep":"768:Wb3gc1+f2isUTAhQAJwtJEeBbssbjMFLU2l1jG:Wb351+f21UMHJwty35TG","tlshash":"ae03e8f1f2b41c7501ea92b26a7b280b6327646dd452015c73b89eec15acd8931b7f3d","first_seen":"2026-03-13T19:27:25.906791Z","last_seen":"2026-03-13T19:29:19.712737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xptusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel11cfzj22\r\nX-Timestamp: 1773430130773\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnqMnz%2F%2FeGinPSPVjgPk1vr%2FlGwMapRsvNuq2aSIlVdVy%2B7nUe06JDSMED7pKNFrcvASC3rz5E5ww0Tjheve%2BeCr%2ByolthlLDReImbKyvimwU8g0alSvzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aefe4c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5c8731bcd9496323174ddf2267da9ac2","sha1":"36cb8041e4464f716d5e986a106a89bf9e9ccc90","sha256":"3aead1de553e98bac1a162b26e91f3c2eaffa26bc5b628cd9c31fdc71c4d9fbc","sha512":"e756872811170f1c2235dc62f1df61e817825e390968790e8ab8c43bea47c5bbeb89e2c88c3e5d9b9f7f6cabe0dfed92d26167294b229b7dba8e64f7ce80b343","ssdeep":"","tlshash":"169002551d1cc282ec9301a595069204402531602624924e4c59522580881632040c98","first_seen":"2026-03-13T19:29:19.713237Z","last_seen":"2026-03-13T19:29:19.713237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/images//defi/service.png?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/images//defi/service.png?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b011f-3c5f\"\r\nexpires: Sun, 12 Apr 2026 19:26:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUjzP55YH6D1P0Zoh2sUid%2BdNmS5iLR8c3pUQfytQOZEQiIoJO6NNPr84%2BnfYExEUZwSxvKJCOpvzT0eYpsXvoqcUrh5kWF7JfFlXDJfofK9jNwe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71af3ec15868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 254 x 254, 8-bit colormap, non-interlaced","md5":"63a2943fe18fd7f64d0efadfb565bf4e","sha1":"ee076031ede893680040e1c489df7c6a27393210","sha256":"5a6481ca943176fe020d965c6956fd5e23c4a373dca35ea302a0edb18a14ec35","sha512":"1e6863909ea4f5b19e2189b058a9a2a2d12ceedbecc66da696ba9b6052bf32d8b712f02ee4ae3eeb401eb84a229aeecce92397987d37591b061243904e4144f3","ssdeep":"384:1v7p13941ZEElEVsXyJ6It589zLzx68T1Xv69:N71qlEnt5CYgI9","tlshash":"8762cfe68231c44ec5fc6e14602568a36bee30fc7e84f56685c7e8760dd8a685d3239b","first_seen":"2023-05-23T06:10:01Z","last_seen":"2026-05-29T22:10:46.721621Z","times_seen":487,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getAllSetting","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievb0xh9f7d\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuDqJlWAdTx1aPqzszdir5F4TDnGeHvHvCoUyuFyuoBSgwFvP7eLZX4sodOJhIDghtYtK0T31htLOPSr%2F1U1uCAYBjb77ZtM7SN%2BbrU9eLIK33VpSFLKCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b26d8f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41501,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (35845), with no line terminators","md5":"3e80bbe26304db867d3c82843c41ebcf","sha1":"d1883268b6101da9f9b3d50579d1b900aeb10240","sha256":"615fb864bad7c36c0559b1bbd7f1fe5c6febe1ce3111e93f9cd675afd9a0c9b8","sha512":"7c04992b87fc6fae93aa8a34819ae0a6df3609195bb0b330829942874c948498f71f779be40a179308a4cf56483563c81174b28eebd788e1338ad23869c9905c","ssdeep":"384:dRuat+/joZG5Ut8mltMOjwAqMpibUKWFvlU23BdDvyDSRLeYvTRC6PACU+2/bckK:pltMXAqy/rPdDyDSLegR5BGcf110OZ","tlshash":"0e13e92d73d4dcbac1d335cca5fa7a4a679c38abd284ec45e558ee5cd8c8479102e02b","first_seen":"2026-03-13T19:27:25.918176Z","last_seen":"2026-03-13T19:29:19.686525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/49.6dd84af9f74f79a41d67.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/49.6dd84af9f74f79a41d67.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-3213\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9lDVitU%2FqGDGltt41Q3Z8gRKrkv58SGamsxhg%2BHc9ICOJMLxc2czlxl%2FONgJO1vJyZWfORByNdMkTchmYJLBxiztXKkLm4vL4PZ84i1tlUPCqNL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b49a3b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12819,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12819), with no line terminators","md5":"3a9617975b10fccc806405b21ade9ca6","sha1":"cd994ab67479c864a4ff1087a25555c251ec37a0","sha256":"4c5f4d3c02445bca9d06c6e20828a4ff3f159fb7a0eabe82cca64a87559caa33","sha512":"4941dcb92d5ca08b82bd3037356a25b85c5880b9da42f087090223c7b1810d20d1701ec4a31bd8171eb5b6f86c71002db77c2fd7fb5fcbd3384a2522816a96ee","ssdeep":"384:vdbPylsn6t0jwia8FC0iAOpmqOEtQOf4gOiP9Ot64OYBUOjcPOmTaOxe4OMldcEn:4fcmskTogV+4zvHdi0xJ","tlshash":"79428b18f6b23a3c118b064e99d07c46d63f9084e37339eeae4d71c50ede5c623729a5","first_seen":"2025-12-25T22:01:33.810205Z","last_seen":"2026-03-13T19:29:19.715006Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/floating-toolbars.d7f25f59513991368767.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/floating-toolbars.d7f25f59513991368767.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-cff1\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMNyYqqjUUzy8W6ngqbUEFTju6cyjiqEa8FhamBgtgBfpzSgDiIor3O9W6edvCqWBRYBH4z7cirkaiwoedDvVkCJEGi8kwg27AFeFaj%2F7%2BY%2BUcoX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4aa625868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3069), with CRLF line terminators","md5":"0f472b421aab44f64ef1b886dce00d80","sha1":"2966f7c4befa0d1f638341eafdc5613ebc4865a8","sha256":"ab54ae4b98b57213f5abf3e0f197a398b7b5364d3d0cae78da3058e7f124f8b9","sha512":"4129f1f86f82db10396565231219bd99c120d34718bfde02331c2c217cb228fb92b628d18338cbb205a4355dbb7210a1ec75bfbf1d13cbe25f1e192d7dfe3df4","ssdeep":"768:FPczfjF09lxmEMmcMcka82u5UaNWk5p9uYsxaELce5wA19thEllM:doxmlxmE6MckaJu57NT2lLd5919olu","tlshash":"4a33b445f264383e039b90b55a7f120aa33b216ce55501ecfa6cd2ed05fd8c89a27b7d","first_seen":"2026-03-13T19:27:25.969709Z","last_seen":"2026-03-13T19:29:19.715675Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/charting_library.min.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-2a6b\"\r\nexpires: Sat, 14 Mar 2026 07:26:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 120\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5Rho5HefrqQpp14FenT4dTDP5bjU7evooHQgkwweR7AR%2B%2BDVDTS7J4ZWpeo%2BP%2BJPhAJGyLsWumSXzb90BzTwGdwa8Pgcqagp4NG%2Bd7a5U1SIdMY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a35fc95868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-14T07:12:41.1016Z","times_seen":1021,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/vendor-9732a1d7.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/vendor-9732a1d7.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-db349\"\r\nexpires: Sat, 14 Mar 2026 07:26:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEusF9bOUSKgYuOKbP%2FvlG%2FYVYZhYKrw2RzgugCJUFzjt55Z8RG0Fww5HePlCgnPlN7bpE41CNTHHPdW1hNkWjOOuRMug7jxK%2F%2FIJ9dfpPjxb%2F0s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a4baa25868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"94c6c683a853dd41c629016aeb6e437b","sha1":"b2419067c3e69d59d375e452922e5625de3105c1","sha256":"b0378d4578b956eea2f5173b7109dd674675bb66141f24aab6574cd692297bc2","sha512":"823551456409640f2dfaed8782df584d030f33756717f44fdd7a6195a048f171e3cdff1cc5379da0baeb6df6a602d117b814a32dfd9559adb747fc40bf587b0c","ssdeep":"24576:uUk26Q/YXN7kblX+e5LXhgTpWIDb1WGa2qo:uUk26Q/YXN7kblX+e5DhgTpWI/1WQn","tlshash":"fa1529c97292f06147ab24e140bb0006f33d6e59744e84a4f1ad98db7d69d89e2b7f3c","first_seen":"2026-03-13T19:27:25.785847Z","last_seen":"2026-03-13T19:29:19.679796Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getCoinList","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qcCsJg1yAjd341uySW2IGbM9nRvGvOKEH2MyricVTEYRlygvwTicKqFpQs8AITj0Fb3tR5mRKYhESPOBIGbSMUHfCCppZlpPJQO0ebvF4TzLbvqFZfOEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a62d7c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.003659b9be6454820bd0182a469681c22.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.003659b9be6454820bd0182a469681c22.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5788\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573C390C33531E19960\r\nAccept-Ranges: bytes\r\nETag: \"B51F0553FD241FB38165107C7F4F3D51\"\r\nLast-Modified: Thu, 26 Feb 2026 17:01:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17407943765663582046\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tR8FU/0kH7OBZRB8f089UQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b51f0553fd241fb38165107c7f4f3d51","sha1":"6ea9f596a23200d2715ff10c8a7d94b9a5563105","sha256":"4bac16c0f9c918516decaa37c82da65f352d62ddb4f32afdc91e1bbf7f348b67","sha512":"c2fdc4933f907e505e5bd52004f5d301e5677f78468f93bb1c83900f177bde39050be3a707d976b78099ef7b7bb276a20a9de812a9c9a7053beb56ee0f1f84c2","ssdeep":"96:bA83ltJXUMbhKo314K6HkSI3B23LD2lzqV4l6mOZ+cVfUR0YhgCihOkJ4:bB5oolh6XRkzd6mE+cJY9r5","tlshash":"74c17fc0e7f87125e4f82c4e355927e1096736608038ad5977bdc39e105b9b922b2a9f","first_seen":"2026-03-13T19:27:25.872777Z","last_seen":"2026-03-13T19:29:19.716765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1985,"timings":{"blocked":855,"dns":38,"connect":272,"send":0,"wait":271,"receive":0,"ssl":547},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.088ee0686298f416f9215f3fe3a4230a7.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.088ee0686298f416f9215f3fe3a4230a7.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4307\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573C390C33430EA9960\r\nAccept-Ranges: bytes\r\nETag: \"4E40223A0FDE896EA1937CE8347F4386\"\r\nLast-Modified: Thu, 26 Feb 2026 16:55:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9599457770326134721\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TkAiOg/eiW6hk3zoNH9Dhg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4e40223a0fde896ea1937ce8347f4386","sha1":"a806a2ac9493ee77a77bf911078845e45e1003ff","sha256":"42ba8258314eaef2ea7dbfacf1155b03b602b4ba8cbdba8b88c17b7825c74e04","sha512":"64f5f5306aec8b9d58438770a8e62a63cd9a8d6e45cc43ff2d6d0244a916543a2d22b043f5838088fe6e3e45c4b67a8a67c04025c47343d0dc35b9a0eb3b095d","ssdeep":"96:UK0j+RLa3Z3j42T2l7rBVvFtkqjWEyPTJntBRW:U3+haO2yRBVvLLSEal5W","tlshash":"50916b33f4d0def6835021439bed94035a764410bdf90b8816488afd37e896a66293cb","first_seen":"2026-03-13T19:27:25.883862Z","last_seen":"2026-03-13T19:29:19.717376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":881,"dns":27,"connect":286,"send":0,"wait":289,"receive":1,"ssl":571},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0911e954944074825906fe592c6d2af51.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0911e954944074825906fe592c6d2af51.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 818\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574CE63A838336B4D7E\r\nAccept-Ranges: bytes\r\nETag: \"7B0A628EF42F231DD910FC85266929BB\"\r\nLast-Modified: Sun, 26 Oct 2025 15:52:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9772430290165869986\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ewpijvQvIx3ZEPyFJmkpuw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 20, 8-bit/color RGBA, non-interlaced","md5":"7b0a628ef42f231dd910fc85266929bb","sha1":"eb250d93edd215d123e655eb8e4e7c155451814d","sha256":"347ebd475016f8004aa3672aa6e02d4e7177effeb458b0bd872448c30abad381","sha512":"fd9a3f54a016e743aee349fd79f6e9bbd9f95cc28eb47363fede9eb38d04b6d692f6c159b1644c3c7789a48920d8e46e70cde08ecb1696d6c3a08ec69737ea3b","ssdeep":"","tlshash":"dd0186884da145d4c59de2549e2620d4867ad32f12208e6f76a805a700e80a29c33e3b","first_seen":"2026-01-09T02:40:15.121609Z","last_seen":"2026-04-30T14:43:21.588463Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":828,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/vendors.f7dbb6a11b34b2534314.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/vendors.f7dbb6a11b34b2534314.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-45b22\"\r\nexpires: Sat, 14 Mar 2026 07:26:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 116\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CO0CG3dvwS70122uCXq7E8jZ%2BNOCT%2BZz4%2FqfrzeT8aw5Cq2qIIpDg6I7PbM4QtyddXiQhWfaNZkPjS1bE3rW3e0iem%2B9BtIoCNHumWy9vIJzat1F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b20cb05868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285474,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3072), with CRLF line terminators","md5":"b82b2f19195d971611d20a1d286fbcd2","sha1":"a8fadb9f2bfe72c521fcb967e78418859f804d29","sha256":"0454144836628d6bc3c4608ea03f606259afd9740d1de5d6f51b7c5691d59d29","sha512":"c7d33fa0f204a8a0478451d2807a265234c58cf6983be34cddc7b7ee1eec99c8d1c835b35a47125e5f4b8b7c5db3e55e173bd471ee1a3b4295f12aeba6d608f5","ssdeep":"3072:yszsY9TbgpFAZSxjsvZXoL/PZtHovppDwQWfyaj/GtQVIx46:8xhsv9oTEK9CtQVIxZ","tlshash":"1d5418cd72d2b0a203e361b5403f650fb23a595d680d8844f265e8e5bcb9a9d9237f3d","first_seen":"2026-03-13T19:27:25.978349Z","last_seen":"2026-03-13T19:29:19.718946Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaigih55hhik6\r\nX-Timestamp: 1773430133273\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 69\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"OP\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4O%2B%2Bl%2BTmQfD4M1mRR84AEPRKWlA%2Fv3DXYF6rCqm6HElqmOFg0zlwr9e%2BDhmqGSKJm1ykU1ljWO9cHgiyOXcM0Z0tZHxVZKiPvxdP%2FNEuEdcWtLrBR2bVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71be6e8d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39354,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87989d5c89e7b143272d83dff94475ba","sha1":"ef5f1ff4245a31d245ae67297b7b61c91e398eb2","sha256":"689eff3b8ba36554ff884bc9463626c7a9decc0cf38382d03304d4495bd017d4","sha512":"4f05b52fac19c9e76667d7bab57a0182c039913b3fbbf6a6af96bade04a2716144088b48fca3f5f485ecce270c26f5b49852a858d5f8aec615fd38611a630f5e","ssdeep":"384:+rpJ69vVxA/1QfmZZiGqmtMW90g/tZTmBG:+rK9vVStQOrqmt990glZCM","tlshash":"65039d704e88d23ad5338cda1fa3aee01921f9d346ce1dd5429f3f51fa40265b3987a6","first_seen":"2026-03-13T19:29:19.719537Z","last_seen":"2026-03-13T19:29:19.719537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T19:28:48.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23gIeLXMFU4g3ki40mf2n%2FmHQDBosx4imDncusHyE7dRimuLR9x8idm5q41e%2Fg9Ojv9bvtYgVR1An%2F0%2FPagrcOjItBrXLnA0zuiWWGplUPve8a5I\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dbd719ea947958c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1395), with CRLF, LF line terminators","md5":"6755b2f0cda0b60198fbd3d723bcc366","sha1":"4df05e5c6fd118e60cb629d0620789a15e7fea01","sha256":"d857f894c9d77ed01148c5dbe6337414daf838fc8254867ca1acd45701ce8a83","sha512":"d420f6a4c668060c067994f3631ccfc058b645589d22bceadf3e206bb7860428e53aea9717ced286b4eed4db3bcd0ed5f4cd1cbb7ab90eea9a183dba6074e804","ssdeep":"384:kYBX37AOzKKzA8CbRzT0H6gyuTxmtnNvoNHaFhvoRo0JsYBnpquMqoZCxX42NiRj:kYBX3xzKKzA8Cbx4lxUn2NHaFCRXJsY2","tlshash":"00a2b69aad5010656772233aeba7f60cf637452310078da1bdec42912ff1a8584dbfed","first_seen":"2026-03-13T19:27:25.944419Z","last_seen":"2026-03-13T19:29:19.72035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":23,"dns":1,"connect":8,"send":0,"wait":636,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/crosshair.6c091f7d5427d0c5e6d9dc3a90eb2b20.cur","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:52.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/crosshair.6c091f7d5427d0c5e6d9dc3a90eb2b20.cur HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/bundles/library.b9460c2b30f8433101d6.css\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 4286\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\netag: \"69173875-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6vn68zV3WSr%2F%2BNw2eN3THoVar7UgnyO3fcA2UAddBD%2BKElgiNa6df%2FLFLq60jYZw4TzVq6mpi%2FZJXWaPWPLFpBryoARB459tp%2Bbd5TKeeW4UhO9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b50b245868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"application/octet-stream","magic":"MS Windows cursor resource - 1 icon, 32x32, hotspot @11x11","md5":"6c091f7d5427d0c5e6d9dc3a90eb2b20","sha1":"015b0f29dc048435fc71a477761a719b8804a880","sha256":"3d11276759ef5c4d89ad1b1d1b450ebac13e96e6769d46e047d3938681029f9c","sha512":"23cbce9fd068645cd0367850c2f7b0793929ceb13aeb7374ff60f93757c3f378e86cb66c37a63128c9a5214efefc2b948031ae9f944e18eaad9d1393021a73fd","ssdeep":"6:Gl/Si6l4ZZZZZZZwBBwZZZZZZZwr9Xrait:C24ZZZZZZZwBBwZZZZZZZw9Nt","tlshash":"9a915b423fe0c05ee203ea30cc82f7e2a1143c084fe99100f308330ec431100282be20","first_seen":"2023-05-08T01:41:10Z","last_seen":"2026-05-23T20:55:31.935263Z","times_seen":23,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/study-pane-views.ee901b6c4a31f84ba03d.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/study-pane-views.ee901b6c4a31f84ba03d.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-782\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLMINbVGsx%2BVrqgzFkKYjw8mSn47xzRvMITC7KY%2Bqjp5AFWSnzleLRaTvgw1g85auIUk1ubgHBrwGs2%2BkVC%2BRPMbakeMXTp2rncv1vr48TpoDdXw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b6ae8c5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1922), with no line terminators","md5":"0300d86f10721941d4e39986d41c7e35","sha1":"2ddf6f3f24e65c9da5329af4672590e27acff2d8","sha256":"e6b3a9ce8c5be4da95a73421ee309db0906499534c1c2a409d75af8a83ca97e4","sha512":"7743af0af5787c4d0c2bb951e491296001d4070a96950eaba8ff5d30b02e723268bdc06bfaf1747738ac8361513f67ddbd948be8e6b11d0167b05640a9c043b2","ssdeep":"","tlshash":"83418692fe70795acb6984f8adb4584a6756384e464b082831b8a1fc20ecd1c3d3cb7c","first_seen":"2023-05-08T01:41:09Z","last_seen":"2026-03-13T19:29:19.721719Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0d771ec6acb2648ad84bbb961bdeb843f.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d771ec6acb2648ad84bbb961bdeb843f.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 956\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574AB4B813537630C53\r\nAccept-Ranges: bytes\r\nETag: \"9A988F5A0F9CD374C366D9CFD0F023C5\"\r\nLast-Modified: Sun, 26 Oct 2025 15:52:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7025498104082679992\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mpiPWg+c03TDZtnP0PAjxQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9a988f5a0f9cd374c366d9cfd0f023c5","sha1":"83a86e60800e4c45889b512078a9059dbbb2500b","sha256":"32a83281f1ba4f9ee249ada2e716e8237f8511620b3bf3a9893ed096fe21d47b","sha512":"3468668567b0b7c850682688d94a6178522ab5b161652e86fd1f13497fd27e4d7d56d0dd1700c3f059304084bb610dd3c4c7260fd2b269c12e1f090908587d08","ssdeep":"","tlshash":"a011c8f64b10ea38c4db3f03e74b88dfe635345594e5783da304c2846b5eaea42c4795","first_seen":"2026-01-09T02:40:15.11768Z","last_seen":"2026-04-30T14:43:21.630208Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":1124,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/images//defi/logo.png?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/images//defi/logo.png?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-42fa\"\r\nexpires: Sun, 12 Apr 2026 19:26:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAqqJYVT%2FQNyfLARi9aLT%2Bd3%2FH2qYI%2BszC7qhgclU0B%2By7i64fvxSna%2FiS8UkiCQazeQP9IX3Lga%2F3%2BTmUt0yJ9aPyPv9BiEXuKGa%2FCI555hCDU5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71adfbe55868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c07ac63f968a14dae5d9f5ec5fb791cc","sha1":"b0e868187b8930d357eb00b0c35faeb459b6f6c1","sha256":"66f195d4251b3f8dc4291b3cd2137249dca1df786d73766acee55d290032b832","sha512":"e7eacd5adc758b8d482b1b0f4b71c7ce4ae423a33d8ca87359a5f49f38628cabea7f39d5a74da24845399aaaca49ab644299c27112c4d003f4b5fbc9409f9d04","ssdeep":"384:oQ7FnegCVbqxHkVUOGH5h2OnCCwWksboZWY9IvcO:oQ7kBVbsnj2OnCC15sI0O","tlshash":"ca72d004e189e44ef132a47b2aea4427495eec869fd05330779ef44e20a539fc4ddf5a","first_seen":"2025-01-27T06:17:00.142989Z","last_seen":"2026-03-13T19:29:19.722836Z","times_seen":16,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=usoil","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=usoil HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel1whvl6dj\r\nX-Timestamp: 1773430130773\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2x%2Flq8r8CjnlRL2OcysH3KFq7H2fx2wjyMZ9fr77v5qSb%2FHTvpO7vSYFffB%2BMa4cV8RlqyDnVPMouard8x8mcWhjRxaoy%2Fnda5e1XgJ9nrg7JB5%2BbBwFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aede1f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"357185103fc6f8259def3ce41d64c9f9","sha1":"4d65557c17e0c3b6af52a44e405a6744cfd4ecc2","sha256":"c83d3450faa613996b67cfee1e1aca6e1ea7cc24a9b89de4b475dd5bad786488","sha512":"028e99924566d87cda1833d3c511433574a82b38b5c2cb101d1f61fa847153d07fe248f99342158da1d5c74d2709cbd4674257a0bbc25d50f0fd4752e8cabd8a","ssdeep":"","tlshash":"bf9002555c288642a88310b995465214002431612624a2885c59512580c81762040c58","first_seen":"2026-03-13T19:29:19.723406Z","last_seen":"2026-03-13T19:29:19.723406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=ukoil","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukoil HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel14z504of\r\nX-Timestamp: 1773430130773\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uz0sd7oATN53Yzn2PJ88Kki7d1HZROUHdID993JGeplJnKcNTuESOyKLKBMSUt7JY5qTaS9kHKMIVaXTdSFWsd3r2%2B5IG5SC6m%2FKs%2FVfKgMpfKCUHSNY4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aeee405868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"50c3892683d86addc956c8b7d81b03ad","sha1":"7712697a7ae2fd3c16cce1ec8d2ec0b5cb2685ef","sha256":"c4ec8edc5405260eaee4644285087c0a12189459c5838ad985f82fc42026046f","sha512":"3d79a51a1186ea0039adc7bf74e5022433f8b3aa9a17c581f808a2b3cec55998ad01f10280f958569041ad1cf35e98da5aa6bcc4f253500e6399426d5c6d9434","ssdeep":"","tlshash":"d09002555c188242b8c340b5d507520800247164262896484c5a552580c81a63450c58","first_seen":"2026-03-13T19:29:19.72431Z","last_seen":"2026-03-13T19:29:19.72431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/cryptocurrency-icons@latest/svg/color/atom.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/cryptocurrency-icons@latest/svg/color/atom.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"699-z6Mhah4zl/YbsYTsi4aNWS//SGU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 29171\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\nx-served-by: cache-fra-eddf8230192-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01295875cc6d71aaba5e750b8ba2e266","sha1":"cfa3216a1e3397f61bb184ec8b868d592fff4865","sha256":"e4ad7c3bdc0e8106ac66d57461d3d9f34fa19cf9d42e65b7ffc8f6c8066640e3","sha512":"09d0890525b8ed58e6cae442beeaa8ae3069025775d70ce847c8361e492b1bb0366f32a13ee68e39e04e91b337df22d9de2ee9e2888b1633f2cd484e96b006ee","ssdeep":"","tlshash":"f43145d11734f744214e8dadef2339f2158fb0f91bb643c8669d3a12b5d84d67800964","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-06-04T02:22:09.876383Z","times_seen":45,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":27,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUJwwL%2B0PcVzZoO9L7DmvLu855RNZF92NrrMXe0N7NSHh2AzojZv38L4lBfBsSM%2FPT2J%2BEtHDv5T7XjKAJBNypV5TUppemxNGnu%2FsG9AotqREy3cqO2EEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0da595868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/library.ac4616c46f24eefd2d78.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/library.ac4616c46f24eefd2d78.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-1c7447\"\r\nexpires: Sat, 14 Mar 2026 07:26:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 116\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a27zVCY8OHyeMgQOD4%2Bt%2BjZ3Skgyk9okQoQzup0F8rnc73dV4SEsk1NVIYIPdsFwMAGuYUOhDADiVQ7h0K1SNRvgZbhU5%2FReEWVmAlft7GzERD6b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b20cb95868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1864775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3072), with CRLF line terminators","md5":"bc52facc0c1fef6a6cf9e4df479c0d95","sha1":"e25835517ea4d659ca9d2820758c3122b3e618f1","sha256":"68a70375b05bd39b1c0504492d14ca3c5d751ba91a7ac2a47c35fc6821eb5dec","sha512":"e69addd39460ecc28994665da43e58350983e31583fb6407c7d30a3a99a5814a3dacdc4b8a632e2c711bc6477074ebd6bdb41933f24924872c8bf7a99e2a69d8","ssdeep":"24576:bp5+RgwcMArW4zvZ7ecmNoJgSC2tN2cgp6VVVeG:bprrWVc0hSCkwp6Vfr","tlshash":"5325d8a5f6b074a9236711a0177f250ba33a245e9849456cf3a4d4ed2cbc98d273bf3c","first_seen":"2026-03-13T19:27:25.868855Z","last_seen":"2026-03-13T19:29:19.725631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/24.319f9ed9725f3cea260a.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/24.319f9ed9725f3cea260a.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-53bc\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OV00U1dRcz9YkTxoGKPQHdpbLDJ87Vzwv5J3mab1d9k7x9PH2u1wroFJaOp9cPUe6CW%2B62iQ7P4EZqEGqYx4WiYjVFCrkKbKXM8SKNtN0Nm7EKd3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4aa5f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21436,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3059), with CRLF line terminators","md5":"b5eaec00569619bbc7c22f76ad118a1a","sha1":"fee80075ccb2377bb1890d8140c5b4fdca7684d0","sha256":"259a657864e56f1f9ad890a5dc5297f4d12f0aab88bbac6a426fbf174111dab4","sha512":"935e05fc862f72af5e73c8025ce5d7ff14a57b763c56b2bc07a7a9e32bb642da4492f9b11ebd63a3b24b03bc94d64cd86ff9e3367c89bcc7f67bbd274cffaab0","ssdeep":"384:cW8tuWmKp5FZH9CuJUkMdbmmg43NbG/nrlh1r60Q:cWTWHp5Frh3obz5da/nFNQ","tlshash":"5da2428793ba28c81d2212b43f6ef74c17ae65b3be149c949cb9472440fed4fd817588","first_seen":"2026-03-13T19:27:25.893084Z","last_seen":"2026-03-13T19:29:19.726262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-6e6d0330.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-6e6d0330.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5n7t%2Fvi%2BkfvobSQ2Px9GSoWmZIH%2BP2T7uMJux49%2FGlph4ghHm3wqdfnfCvcrZ6OFV0F01lr09m4Zmm2bCVfSLmzgCg01ml6jOsiC6%2BSMGt6RBR2S\"}]}\r\netag: W/\"69a597fb-245\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71a66df45868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (580)","md5":"29a0768faab788f6005350def255c8a8","sha1":"0fd6f0f791f6b5fc4dcd2554a685198bad48ca38","sha256":"b288ced18fef22461b0702b3c859ef5dbf8d348312ed1dac73ef0e2d3e2b8e8b","sha512":"241cf10f6d49dc7837f701d6e58bc446054cc5c0087d9136be5082fa6182fbe0b6dd512181070256d3e8ab9c7cfb8ea0a82d607356affaa2f5b44b6cb76cc583","ssdeep":"","tlshash":"c3f0057fb57a41771be388d862730421e65c0b853720ccd4b90f0a108b388f6f16ea59","first_seen":"2026-03-13T19:27:25.821715Z","last_seen":"2026-03-13T19:29:19.727105Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/info-43fcafdf.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/info-43fcafdf.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BgTdq7yMUs%2Fs096V8VBt7ra1wNEF9zUaTigog2QrUmVttrwZUEz27JvOVIuhQsSkpAod3G%2Fw0ym5WttpNxFUBiW5b7gBWoBWUqhYPIxBZCO5quV\"}]}\r\netag: W/\"69a597fb-92\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ac086f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f5a30ea48001c996c34f56017feef796","sha1":"3c072e1ba63a6e72ed8680ffc8442cedc5b8bb0a","sha256":"6d4e6986aa9a11013ad768e7911de89397cae23408e6cc44f0116332f7977f09","sha512":"87086ebc7d6ee3bbd9085ce674aadd003243c4f80a2cb43e1e52efc80cbccac7ffcce57f4d52d53d23c1037690fac6bf2199eb615f329760409f07d007b314ed","ssdeep":"","tlshash":"81c02b0b0d2243f32239149a32d00d131263007c2f834eec001ecd5148f4cc1941d914","first_seen":"2026-03-13T19:27:25.962301Z","last_seen":"2026-03-13T19:29:19.72768Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-74e72f44.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-74e72f44.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-1959\"\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxGPaYBU2x%2Bldee6x91jWBuRmgzNS4MY4alR5uD3%2F4LIY6TrM8YLEXnQLVLjA6P5hdYpjqg%2BCRO%2FQ7wwXlQMYrB1I%2Fp%2BZvpz1%2BpjvGLyvZDGAJ6b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ac18935868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6489,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6488)","md5":"702ae3c533dd4bdcc0946da77534f72a","sha1":"9d01b587e3af5d18a734a7fd2a09448a7a31ba72","sha256":"211ab18fbdc17a8d4266eb816bf1a33b87dbaf20d027fd24a99a9f9bd0344cdc","sha512":"f17e5b52e0014f1a605ddbc29cbd725c3d04078da118ca2fd2ad2acf9aae4722f63a469ea37587d814af24f8cba548fdb404f0f1f1bef8f4c5fe8a6e4c584da8","ssdeep":"192:1ZXoZx5Z6xFZtLZrrUBwUSQbJASH1g442yngeuN8isIbt+FJ9Fz:1RbZdZrrFsi442ygaIbtefh","tlshash":"50d10e24e4560cb942df146c6d636e43af493408c1f1abb2f71663b111a2ed8a27df3b","first_seen":"2026-03-13T19:27:25.805824Z","last_seen":"2026-03-13T19:29:19.701462Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yH5%2Bhd%2BbWVhY%2FT6eEQKxGyQdv7%2FHnc8gC7nJxvNIDusWCHYkIwQCDwxiUbFHhU9utYH2kI1yW%2FC0UTC8V5WbArQlYYcyribqMh7s3%2B4xaEw3gDNFcBceHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0ca415868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/library.b9460c2b30f8433101d6.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/library.b9460c2b30f8433101d6.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-1e8d6\"\r\nexpires: Sat, 14 Mar 2026 07:26:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 116\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NscK%2FSdyZntRi1ckspMGSKXCgumQDl9tifEpmyQGZhzXrklPW3anTqactiDL%2BBYqA3fUV86zQ3ntLvzxI5ivna5JHNLA24%2FsR24HZ50wgUZ1KRqR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b20cbc5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125142,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e418d9f5015d883c29380f6eb70b07b","sha1":"21e66ae7e7eebe46125f4eecd6a90732962fc270","sha256":"d8e5e756996d58fe3e414f565b0f76b4e5b554138e4a5444a830cedd7e0389e2","sha512":"b702a4ce5e527797eb4d60d4a69002fe4de1217b8923c1a98ef3b094ff4415f1a36364cad96277936fca9865763219bd085db3c697c51ce15e307e8d04c138fb","ssdeep":"3072:Sw/dtAwnOEPA3+2YctxujWYI2Lbs8mjOOuLuY:q+2YctxujWYI2j","tlshash":"b3c39922ea51213db12bcb29b093bd19633bd5c1d3923bbdb512b0a88dc65c56337b47","first_seen":"2026-03-13T19:27:25.832016Z","last_seen":"2026-03-13T19:29:19.729206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2Fh7Q0UXkLk3%2FSbOVfjOv0j2UkudQJPh1VaF6uG1p9h4VZbWKof2rQJnja0N8H2hHwuZz%2FPy8BkjDgP5rRFeoQAWFzyYaBYFdjCGQD2iHxpJEAV5ElvT9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71bd0b765868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getAllSetting","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUK4CVvcghMapAJeFsQjgJmEF1PuYDA%2BGvz8baaXQcS%2Bo%2F0hi2E%2FRr%2FLds7%2Bka9GCmI9uggejI8r2UCJ5%2BPueyeC2a7OG4g4IM6YVPyID5hwneCVtXDN3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a62d765868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=usoil","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=usoil HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0njv09eabGUTdr8r3f%2FiILatavaRU87RFN5Fm3BIkfDuaAXaYcVrTnOekQo7VPJQgbl98fDIMZ286FJsWbfjN45wlwUPHvZqKwf%2FXwW9aVz3hk9TS1LysQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad8b225868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xagusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel0lieilpc\r\nX-Timestamp: 1773430130772\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kGbEOVsFcaztZNZ63rs4nB7YvIFlkb4SQ3SAegIs4wrK%2BcCdjhZ8Q3vZhSgWr%2B5Bordazec6dOc7o2ZASRg4XyEE2Nby1FQaDaU0uXMOqGHnEcKLxKyOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aede0d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"917997ce48ceabb4627b17ebf136a552","sha1":"832674868e4fa71a08a219cebe1aeb33c62a85e1","sha256":"ca73dc20a7b9da02ca43bdc035a28ed773062304d41a090ce9af7c4c6202c860","sha512":"117725b6a37f7c8dd37a9e8d775efa74abebca933e7304def16c2a00ff4e2911160037318cceeaf11dc9d8a9f79706f2b1e5a3dbdb38e081fd7303e14663fd4e","ssdeep":"","tlshash":"499002551c18c282a88300a99506520800643160262493484c59912580c81a32040c58","first_seen":"2026-03-13T19:29:19.729972Z","last_seen":"2026-03-13T19:29:19.729972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/runtime.d2ecd186b98a62a23c4b.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/runtime.d2ecd186b98a62a23c4b.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-2c8f\"\r\nexpires: Sat, 14 Mar 2026 07:26:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 116\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2F5snRWY3GGxY%2FTaXpipk%2BxSain01BbFMt8Q4HZfvlDEOc3JFrzN0Crw9HYnO165pvLA8QU5ZLEIBE%2BLan5kpiEuuJj9llp3ZMa4%2Blvcu3%2Fq3nQ%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b20cae5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3067), with CRLF line terminators","md5":"ffbde6591610690ae582d4ec5eb50947","sha1":"875d245db4bd5e5ee6bfded7c4e643451ade4b96","sha256":"b1f1d030e4ef3132a22f5deae28e37945930ee0f62de93eaa0cf52117338a6a3","sha512":"dfed1f540a5929497321667ebf35437b4ec44cc92982db5fed4f1fe146e440b21990dc797f5c33a9c9bb4c4daeb64a03f88fc492496a614ecbff95a523b7663c","ssdeep":"192:FKp8QbQRPWufAbDxIZMDZDaZRCOS4gDnMi4DNPJLuy9wUfau:FzQ0ToOMDZDaZzS4gDnSlun3u","tlshash":"9732f95ea71eec572976589330271c53d0c948935e1a429827ded77b690bcc0fb22e8f","first_seen":"2026-03-13T19:27:25.976123Z","last_seen":"2026-03-13T19:29:19.738951Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievb5767pxk\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 70\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"RAY\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxh5gw8xjwLtKCfUb7K5Rsslkf3IN%2BifnEAFWLFoeuz9rotxChMf%2FbaOO3zIwSure84zzbPT1N%2FTQB6bDFvfw23tCa2OB5IX0ZtIVlb%2BWQxgwkAWYM49uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b23d215868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d5626eeb72d0b0c01063ce1174b95649","sha1":"77162648201874f5abdb22c2f98636432e97ed74","sha256":"39c6514d2d31a6ba8778e983d3558643a64493056f3e4a7fd8cb7319fe5c5041","sha512":"d535a364db9b10e644c8820b6548a68edc66b78d8cd0f11df7711cae8478738b891bc4f5f49684abd950536cc6c38643c3954dd9f9a1b3c3a6c1f2bb080d053d","ssdeep":"192:bukpH0jz21yPSPHUadyGjtW7DXfJts+pvlfL1JKcpoP8jQ:Bl0bSPptjsHXfZpN2cFU","tlshash":"e5f261304a8b8209d5315c8b6fd3bee01e253ad30ecdb8f101a95ed46951276f295fbe","first_seen":"2026-03-13T19:29:19.742896Z","last_seen":"2026-03-13T19:29:19.742896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/currencyItemAll-6af2355d.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/currencyItemAll-6af2355d.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-be3\"\r\nset-cookie: server_name_session=f327aed56b0e252426de6f1412e40581; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6q9DCNs7FIzJIplNpU3Ajcx%2B5OFK1k1SWTr8K8r4XnNEEagbj%2BYSM%2FZOQ7IVEcryWB0S46YJJe8%2BS5JS2xXW0o7bYE%2BFjVbNuaDxoP9PysJilGbF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66dfc5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3043,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3042)","md5":"e5eb085c8b3df53911628d1ba7fe1270","sha1":"6205e24f21b191ee7358a5483f69384c6b215c7c","sha256":"3aec8732a734707bc6783c8259a2d7090e0f9ad8fe3b3db475ae5884f85e4ae2","sha512":"f6418e83bcd57aabe6c01f1fa89de924c9c9d5f30992781c6b4a15e153b1a5516253111d12a8b90d73a8d01df11e6cf10cede1aa022a9bbc4784090396ab916e","ssdeep":"","tlshash":"9f51b73efa02c636c5f62853d01e100585897f97d123a8d6e6fd1c29931ee98f36c325","first_seen":"2026-03-13T19:27:25.817019Z","last_seen":"2026-03-13T19:29:19.710933Z","times_seen":2,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getCoinList","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaidowad3n7ai\r\nX-Timestamp: 1773430129616\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMkFs2p3Mi4lNw780sEIl0yg90UPyObCv65paZzaNbMqPKgSAakbBxdkW%2BpNGmtgbz7oDd9zNIlLtPMAeFl28V1TbTLdUOE1QYzmQMP%2B5%2BHRYVcvUBAq3g%3D%3D\"}]}\r\ncf-ray: 9dbd71aa2fe05cf6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34040,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (34024), with no line terminators","md5":"6576d13f51cfc27c0b0a3eecf7886c92","sha1":"ec89d269c0cc77b543606344db05400aa9cb84a8","sha256":"3a816e7b0bf56b9cff072bc16104499fa54dc082c6f411e49eb694cfdc19f575","sha512":"751dc95c191cca14a04773f665dbebc83e1d85d2e6ece56cab0eed5de1a1f74a74f524703ae8a4752217860c91d905e33841f496d8a242406f0de9fa8a95fcf8","ssdeep":"768:itH76NPswSoDY1cCp3NvapeISCqTLUXjD79Oa7uv1/X:vQX","tlshash":"aae24369513c95bdc57480e02ebf7d23529d316facca8f6b93dd4d888ae49b1610af03","first_seen":"2026-03-13T19:29:19.743959Z","last_seen":"2026-03-13T19:29:19.743959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=ukoil","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukoil HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ag5j%2FVR0gi6Ayf351YuIjrrdWEKKgB1LXMXt2rLiTbwW%2Bq1zgRWueVbk0N2%2FTUMmudzWkxSqvlpVWlcHP5iLKuIQa%2B4krcrVYptC%2BKbUjABgtjpWcUMvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad8b2a5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xptusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBMLT3Zbo1hPaLjVp6aVtUKMBW%2B7cKn%2F1kNgj21LrgLUFm1mnkjoiktZHq4yDdUd6z9R9GmGyg46ml%2Bny2D4elIfcCvMsykO0ZWhN3%2FKBmSKL2cXrUniKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad8b2d5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0bfeb35bec3df4832be255d738cb5fbe4.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bfeb35bec3df4832be255d738cb5fbe4.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7122\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574ACF6C537316F9DE0\r\nAccept-Ranges: bytes\r\nETag: \"E650BFD182EF008054F0215F68719C62\"\r\nLast-Modified: Thu, 26 Feb 2026 16:54:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9322601253984018556\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5lC/0YLvAIBU8CFfaHGcYg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e650bfd182ef008054f0215f68719c62","sha1":"0a86fc767ce1d645bb04e5e5f9743f65d688ac20","sha256":"573dae004404c52f8f623c751093bf44cadf81f1cf38fc6558f0a4bfb26dc79e","sha512":"a0e2eb63ba3cfa3b81cd19b2b048ce96d81115bdedd021d56526e6ca90c8eafe6c56b0b0ca3363216d6e52b383208d2e6232cf0a43a0d66d49b59c5afa1a30a8","ssdeep":"192:PHK74TYjD9mvPyuZM/XpZ8RQWs71YK8ohOc:Pq74Mf9mHZMvMRQWs26kc","tlshash":"99e1afbef0950eaa33fa2d1aa28050bc4596275ed17e0adc466fc9bdc40a6dc1171cd6","first_seen":"2026-03-13T19:27:25.910494Z","last_seen":"2026-03-13T19:29:19.747934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1701,"timings":{"blocked":1415,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0bb7d777f820649698b5400de38206909.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bb7d777f820649698b5400de38206909.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 384\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574ACF6C537313A9DE0\r\nAccept-Ranges: bytes\r\nETag: \"73CE8112685D49F0430483376220E265\"\r\nLast-Modified: Sun, 26 Oct 2025 16:05:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17844275050722541240\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: c86BEmhdSfBDBIM3YiDiZQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"73ce8112685d49f0430483376220e265","sha1":"5baa83d27b2b6ddf0b58e38878fcf2e78e737b3a","sha256":"53378b3a7c6287204d0f3a4da0a4ba5569c37885cc7031b42efecf46330d8888","sha512":"b49e6913c7c0a19cd63c0bc11ef61ce91922f2d64f2d7ab1f5cc87a533372f60e10d37769a083a1360c3e2a9bbe7767685f6444d8c25fddbce62f368a0420400","ssdeep":"","tlshash":"b9e0f8420e9028ca1b48a5ee421eb844ecf0e0a8932ea10805b28e529101282b0c5a0f","first_seen":"2026-01-09T02:40:15.072776Z","last_seen":"2026-04-30T14:43:21.675454Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":831,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-325d47c3.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-325d47c3.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-4be9f\"\r\nexpires: Sat, 14 Mar 2026 07:26:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 120\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mFyS0qfHV8y2hFPfzdfD8SLu2ZglidqzVm6ct1fdd97AvHdM3KRHEHDYPeeJhvkXadVa3jbHQ862LZguVGxuRLY7wrme6mI2cpznJUndjGQHauj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a35fdf5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310943,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"5cecaf7fb4fb1ac9d2b4a706c9779379","sha1":"fcd722084e28794522f46aa8893cc331a1cf2e9e","sha256":"325d47c3af7ce1487595d2a9b5915dc60d138e520d7b258b9199665223c09905","sha512":"089aec12d6399e2d5ded6f49c066ede5f746cd2fce900b1df858577fb45b84f278929e7ece051c26b5df465a1a6312931dd9fe9308531fc2c5d0030d7058b081","ssdeep":"6144:nTB/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05Tz:TB/54NZ8w71ZACkFDS3vyf58rBeV05Tz","tlshash":"c164d7a9a590117c6f27aa7597ce5ad8f23ce6719c118ee8f20160094fc3ff92363617","first_seen":"2026-03-13T19:27:25.965291Z","last_seen":"2026-03-13T19:29:19.75152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/platform/dev/config.js?1773430129606","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /platform/dev/config.js?1773430129606 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRngJmbopgCgP3dh%2B%2Fe2tHvuRdCD8kLAfn3BsJkQO0AY8OItYTkr%2FqVilJtmxTw4KDq0owgEWMW0XP%2FR7GX%2F%2BisrsTPj6wFPRvyYGEOb6eWF75DX\"}]}\r\netag: W/\"69173875-18a\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71a61d3f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b02911b48f7fa32bc8e0633db0e82539","sha1":"e117fa5a02c66de269f51641c929db763d1bc398","sha256":"55a744fae75a15c047368c04b48e135228890f9085d16400cf942060730c0193","sha512":"7a97816dd3cc0090108a6f3076dd7326e7f00e2978db682439d1beaadcfc51ff0ce8a6f4efcb77a3299304b30faf57c82d84bd46eda35b795bb9455148dd7449","ssdeep":"","tlshash":"98e02beb3134c16592b06b2b68c80967e68b62324a4c0917f8f595041e75954517cd95","first_seen":"2025-12-21T02:17:09.186689Z","last_seen":"2026-04-30T14:43:21.641297Z","times_seen":23,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/mengbanzu12.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QL4PHWNteuVzLOBVOvTn%2B8E6ODUfgbm94TpLygtlhL%2BVyoI0g%2BYXj33Az72AwV5EhWMYdS7IInRBFp4pBgWu2aAbEy7uH5gBm0Ct8Cdp6LSqD66h\"}]}\r\netag: W/\"69173876-322\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ae0c0e5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-06-14T07:12:41.124227Z","times_seen":898,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4YM9sY4AbWOptH5PAOzVtXFPVfQN6cQtzB%2BMep4dExVd913IOHmVKtu7fnXE6fRj4NrY13AvYqsY7bzLU6wcYfz2ZOvvEWcdOhW7GytFF8Oc96kPeiKuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0da5b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0dc07dab51dbf4652b0b2336c4fe11f7b.jpg","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dc07dab51dbf4652b0b2336c4fe11f7b.jpg HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 82223\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574EE24003634A0BA71\r\nAccept-Ranges: bytes\r\nETag: \"27579D712666AD0A255785D529FD7F08\"\r\nLast-Modified: Fri, 25 Apr 2025 00:21:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8188375758580048554\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: J1edcSZmrQolV4XVKf1/CA==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":82223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x690, components 3","md5":"27579d712666ad0a255785d529fd7f08","sha1":"67929cc72f11c70edd360f80be4d3f613afd3215","sha256":"6ddfd1850fb907c79dd3ba92949a14bbc287606b7dca88d9d8a43f5828a672a4","sha512":"7d6cf8461249403b51caf91bd064eef1169e26d16fc0daf3185a52505c6f4b0a121b72d8eff85cdbe812e505af85ca029d266e409ab33d4c4b1530b8d69ad6f7","ssdeep":"1536:U0ThljdDg1pMt4AwN2OBgRW5ug5k5LF8SegwMLTnNFAQkMQA34/U7K20dk:rHtg1pMNwdBgREP5YLKSegwkT3ANQK1S","tlshash":"4f830289a34f3bf7c246917555e354cee61e7ca208a2939b0288ff5761f0d3de988790","first_seen":"2025-12-21T02:17:09.160377Z","last_seen":"2026-03-24T13:59:45.751189Z","times_seen":5,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/fonts/Arial.ttf","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/assets/index-325d47c3.css\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\netag: \"69173875-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 119\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVFza1kXlVKxXP1BhbhafxrERZLzdBFVkhD3H3SGf6%2Bpww5V1Rw%2FqchlrqerpSqETVYzS9PLfvoLCoIlWvAjvDp5KjfZJYzpExiIp3od%2B1WQhU4q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a3d9005868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-14T20:39:40.865962Z","times_seen":1893,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xagusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXFWhwLFsCyza1MLUoAUHIapSEBQ2q4Zll9oCMDsEXC%2BFke7eGzZ9LM6LSIFgI0JGngbykEtzOenEpvZfqpo7pomnrtYlXHp2uwOZwqWHWc5S7%2FLpqCIwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad7b165868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/en-c461c46f.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/en-c461c46f.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-c806\"\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgsKBTDUrnRPLty315AOvnWEWYvVAgcgR8vHDETdW3%2BbfnLYT8qYbl6l1gck8Nj54WZlXPlnVq2aHrFEEcc0a1XiQqTvZn3IFDd5oNLEiYzd82Jf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad9b3a5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51206,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (51158)","md5":"172299f6a5538989c15c1121767ab92c","sha1":"253b6287f8f54ac5b3cd22fe09da4e671f23caba","sha256":"c719f48f5b2519259050b1fe737bc5270b078a14ff5d2085f854dafdc0785fff","sha512":"f698d4efdc50b9f340982f6a67013e19ab0d6f3da02ec6949bd0d1651e7738bd081d3bc17d0c04d9ca057c06c5769ec374920cd9afb5ed5426544f3c4acba11f","ssdeep":"768:LHtjMK4bsVsM6fpaOh47OQ6xEX69JR+7VLSZFhlpOpZcEw/oPrhjP4mthDJPLT05:LHVx4R3ruOZhXpoThjThDJPLDl4","tlshash":"9c331a897d1ad99d08f35326b4ce6e1120f909c18166881f4fecc9fd53e2b63a367768","first_seen":"2026-03-13T19:27:25.896152Z","last_seen":"2026-03-13T19:29:19.755309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.06b0a48826d784fa1a32ae38d6e3c6238.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06b0a48826d784fa1a32ae38d6e3c6238.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7395\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573CE63A838332B4D7E\r\nAccept-Ranges: bytes\r\nETag: \"144508D74F354AB0A596902791E00506\"\r\nLast-Modified: Thu, 26 Feb 2026 17:00:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17725693097319440194\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: FEUI1081SrCllpAnkeAFBg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 274 x 256, 8-bit/color RGBA, non-interlaced","md5":"144508d74f354ab0a596902791e00506","sha1":"ebb8aae86bf6549c079dfed7af62249aff51df03","sha256":"40ac54d4c40fd04b76f067cdd9c635d9afba3a779cd73eb254336a269bbb6ce3","sha512":"569505b68494fd4eca01b014b2725768ab845248a663df3754865e2b65c8a8733d3281d0dc870c50d29d1bdfe80335d394c7e94dcf06ef7808355377d01f4c0c","ssdeep":"192:Zew7DS4jSVPPMUBnaDpAWn3Rw96ABZARDw3M0m2bg9ZKazytuIQHyaKd:ow7D90XrBaD6Wn3i9xIx0m2X8uoHyD","tlshash":"8ce1afc29e6a24fb0c0f76388e65463783f9a29c3887214399e4d44d1b2fb9c665f780","first_seen":"2026-03-13T19:27:25.922731Z","last_seen":"2026-03-13T19:29:19.755998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1984,"timings":{"blocked":854,"dns":40,"connect":269,"send":0,"wait":271,"receive":1,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/20.f75162343321d7d9178c.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/20.f75162343321d7d9178c.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDNK3dUod6qyxiYNsn2xL8bBKayOxQUHj8d1ltmrdBN%2B9AB0HzSAp5jee7IojfLPm%2B7%2BpeIepgtTDLr5CBBAv5668%2BquSYFFdSg%2FdVgJV3CKwv4g\"}]}\r\netag: W/\"69173875-258\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71b49a325868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (600), with no line terminators","md5":"33f5f0637dcd358014a71ae3670e83ce","sha1":"1aae5f75b7add51249c0c5fb92fc6e6e444a5bac","sha256":"d833601bcc8f9be9a19121b5a3b0506befd775136126ff521559d1e501043cc0","sha512":"7c4e774123eaf37ff1d2eba9519358c54156d2a8b95b25f857d96d340c8cdc6b6c42d87487fc3c7a471a929bc4e1978de1ab6274813728b204b29dd9f6e73f2d","ssdeep":"","tlshash":"3af07854f9200134c19fcb0262c58c986039ee91fb53a9dfb6c6a80b844a24d6df1a2a","first_seen":"2023-05-08T01:41:10Z","last_seen":"2026-04-29T22:18:01.221001Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/9.855edb9bea2352bd5129.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/9.855edb9bea2352bd5129.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-ad48\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGrxh0Jyf%2FgdCj5tRT09teXWrAzUsPXFeyV%2BwwkyZlt2CQb3VX9CQZykWt%2FXdTSens6zk5%2BqTRU91A9UMOGn4EBNfL8c9lgu666%2FYYEEFmfviMYF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b49a505868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3071), with CRLF line terminators","md5":"0b3c6ba3c272a38d64e6f98aee05b9ee","sha1":"b8a054f8622668809a399b91d15ca4a0df585735","sha256":"80de5334f8510c735dc9a97ebbb23bd83ee485d317f3ec3d715ab1a0486d0ccd","sha512":"008c7f4517df339bad90df70696711de22ed4dccc5aa7daac958401c88797d17a848c5c43752111ca996b464448a863202af362a5ca9256409769f5b0f6d6235","ssdeep":"384:Ubt1LjieBpNTWGf76DyniSjBv53Ij2/XPU6h/O7piyE5KJ4Y/d4P0j4GRtCwU6PB:WvuvB/T186b6Pc9RORZo","tlshash":"9c13e698f264353253a3b1e5267f9907d23b925ca00580acb261eedd39bcd4c526bf3d","first_seen":"2026-03-13T19:27:25.939401Z","last_seen":"2026-03-13T19:29:19.760277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievbradjhq5\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuT2vXBivAaa5u8bjFS4MppIhjfBv%2FsDIFZgbsSRfUtbdAWm0aQvhiKNtmcB0HzX04y5d7sKO%2F8ts6qhA5Oc7dhHze%2FrXMpN2bLJnqhQrMHwTHCh%2BbfW1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b25d615868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e1c2eff8326f8bca46b8ab74cc85bd21","sha1":"6f6ce8d290fb3261af5b042af84d8ce8e40e07fd","sha256":"6dca851d6ea5e592b71e825ac3654102ce6b575defe9682b7f6293079552ca89","sha512":"6eef1ff0224aa30ee74cccef38b93659229e3f7b6498c0a2b587d53bd7beec1db56eb4fb59df65275fb3134226f8e1074c4a390fdc74bcdf5c81fa768ea21870","ssdeep":"","tlshash":"9a11021f52349e351e53088372de75cd632d1a93b7208e75496f8f4c43e51bd1b2b644","first_seen":"2026-03-13T19:27:25.840421Z","last_seen":"2026-03-13T19:29:19.682437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/vendor-72ef657d.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-16997\"\r\nexpires: Sat, 14 Mar 2026 07:26:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 120\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgTSyvGfbq2hs%2BD4BMudqOB8QRLeBy2%2Blhpu2gPpETKLU4CMOSZoNipgWffBwcIzwNVGDiPZut0RRSeOhQmW8rHS6EPCKTOULU9cJ8%2F6kb%2F8lpgB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a35fdc5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-14T07:12:41.080945Z","times_seen":235,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.04a2505105fae4fb7bcd75707f05395a5.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.04a2505105fae4fb7bcd75707f05395a5.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7929\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46573ACF6C537310A9DE0\r\nAccept-Ranges: bytes\r\nETag: \"F83F4993CFB5CB0C5A1019A6E323ADDE\"\r\nLast-Modified: Sun, 01 Mar 2026 12:41:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11153519618656716880\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: +D9Jk8+1ywxaEBmm4yOt3g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"f83f4993cfb5cb0c5a1019a6e323adde","sha1":"5b97aa16c222908d89dfd95b6511a055c9da1b7a","sha256":"1e5e410b790bb17261bb853eb80945f47ff260d1383cb6a6ae3f3122cc26cf90","sha512":"c1d703381fb0caf79d5b04e97862de10e775719df8b32b7e71daf044d575915d75f28daadd758cb1cbc469a7281ce32b771b29905218816c5bfed3b36add95a2","ssdeep":"192:8RY9e65jGQXqVYMH2cvDdUL+UOKVDpfZ+RCK67IIFG2:4anH62eDuKKV1sQt1","tlshash":"0df19e1845ee276054796b9808c1bd9e2690843683f9e70943776fbf8a6d0d5337488f","first_seen":"2026-03-13T19:27:25.924172Z","last_seen":"2026-03-13T19:29:19.761659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2017,"timings":{"blocked":865,"dns":35,"connect":276,"send":0,"wait":282,"receive":1,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/25244/small/Optimism.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/25244/small/Optimism.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1486\r\ncf-ray: 9dbd71af3fb91525-OSL\r\nx-amz-id-2: EanYLiCK+2ERgtw7GyP/bJ9RlgfdGCKU3JJKaXlJFzM9XK/lBwYWO7HF9ZfhsbibkcvaynwdKPM=\r\nx-amz-request-id: EH63ERH6HKDYA96D\r\nlast-modified: Fri, 19 Aug 2022 10:23:20 GMT\r\netag: \"fd8bbe8f33c8452769aa8d038e4f1697\"\r\nx-amz-version-id: Kx5NAvsVaD4ZeKRRIkVLiclzAQGHqpfz\r\naccept-ranges: bytes\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2498\r\nvary: accept, Accept-Encoding\r\nage: 377250\r\nexpires: Sat, 13 Mar 2027 19:28:51 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e5216119ab3b6e68881fb40ab4f5ae0","sha1":"5f005e6b8fb2f0d1e72382350d1b15ef00c93803","sha256":"11cecdbfa2b289a022fbd4bbef7a9f0bb7477861f328af5f85e25e7b904fec71","sha512":"7aa957e1d61afbc44175b614eabe02250bfe3c69c9fa2e71d45061c930241365d7151a31470cc9f1f4bc057323bcd1a64777cdd3d9f735e3313d9b3d3bbb7bd0","ssdeep":"","tlshash":"bd31e9977441a435b0a8f97e186109a53caff24059ff1bd1e0eda63f08073dac523319","first_seen":"2026-03-13T19:27:25.782998Z","last_seen":"2026-06-15T20:56:50.41339Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":28,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Js%2BB8%2BIiD%2BqXY3tpi%2FKm%2FYA%2FK5rduuwEb2FNY7QTC048qypMjIWKp4Ew7ByWh8Zv0tf50Zx88WIh21aDViBRDeyGJeu2aK3be2YErSIof46Y%2F4B33eDVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0ca445868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievbnw1wcpg\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 70\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ETH\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oriMTWF14wSFsTabLUoSzuBUQK1ZiC1aDCrz1ejaTIkzlxER9XFwTLPbVcgJTUPBBTCgQa3NSrVdpzT4WrIfPFzLUlrt3tzT2J15poba3zp48l%2BTLSnaKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b25d685868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41213,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"67a721b7d0408cf4836c6e0ba1945c55","sha1":"a210d1474a33272f02213bf4762f5b2dfe36e735","sha256":"f695bbf64e709e88c4725aacc727d3a9c84a40ef658085f8776f0fae8bee6815","sha512":"48dbf3cdfbb5aad7c3ba96917d67d8cb40562d67c21b7a3deb5d43b6effad6513e067cfe95ec76e84f6a0c0e6cd4289af8504a62a47c1c5bee0b37f2a204fdbd","ssdeep":"768:klBpQdSBlJP1hWehuQjCd+0nCPt7YB3amXJ78kQyEbXhBAor69z:UltWehNjC80UG3r6IChBAo+","tlshash":"580343358f99dc4dd8359ce65bd7bde40d2633c34bee5e6205ab5a023ac463ce0067a2","first_seen":"2026-03-13T19:29:19.703877Z","last_seen":"2026-03-13T19:29:19.703877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyk8ucubTrKoQJlAKkWFyAcuEcDCj59p2OUtIcMfMCyPaBMPHsnS1MKaL69xHcpMX8cedTzMuDulmMSU4x1p7gayszHSjBozIaLUK%2FmTb7WXJhPrJgdTkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b449965868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/static/bundles/58.82b7bef062a290e587d4.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/static/bundles/58.82b7bef062a290e587d4.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-613\"\r\nexpires: Sat, 14 Mar 2026 07:26:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdHudxkn9PxFRoXIKo%2FPkEJiWfY9mR9k801rf%2FvPRfLLoAnZKDQbs5QbmRS1LzAJxsd7s3OvGHp5PKgM%2B2EQ%2BckwTg4teCyIzd9X9Al8newHise3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b4eae55868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1555,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1555), with no line terminators","md5":"2f62f691457c432d28931b75d92bb05f","sha1":"ffa16149656f0df50e94efa724fe984072209166","sha256":"9fccb233dd1794719f6cff165a53b8e2fabe77c342e8d45050ed23a31fbd6fb7","sha512":"669a5c21b941a1cdf26af472a39d9864b3afd0ed0858496483308f164fdec1c01a755c64cccc20bb9688cae048230db167c3a5cafe753d41c13b9a20c3fbb72a","ssdeep":"","tlshash":"8731cb20915117bf615f716e3bf1f1061226e583edbe134a382677a98bc2787007be2a","first_seen":"2023-05-08T01:41:10Z","last_seen":"2026-03-13T19:29:19.763637Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/kline-0df3c478.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/kline-0df3c478.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Icw4ApJ%2BEKunIyUrB4Hn1hcOTL6Qz8s9Qn9waZKpliwpXE4jQ2qZn8vJvnKTQ0N2kVvb50gemDbqxKnCFNcOI5TPa4A4%2BEeG5EjRoCT%2FRbj9Ht5v\"}]}\r\netag: W/\"69a597fb-52\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ac087b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4ba74089236d193fe48d7a6d21eea60e","sha1":"b0b850aa03c387442ab39d5872a794299df6236b","sha256":"5c7ab54563e2922745fa0c1d925363e5fc9bcf3083db28bb16b6e7eb856520e6","sha512":"a85d8302a4d7a0c0bd7babf1bc9532b4ec4e793d109092649f5958a378abf01f728352fafa731146a749b27a41aa01d21474df55b02006b100a663adc1750baa","ssdeep":"","tlshash":"46a0241705f013f111344ccd53504d00013144f4134345f4500dc75001100c1c44df00","first_seen":"2026-03-13T19:27:25.793928Z","last_seen":"2026-03-13T19:29:19.705439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xpdusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wc%2FgItcbE%2FbIhxyDh%2B6aLMULe7mLzesJ7vfP5%2BUoEbAq%2Fd%2BmIixHDcKGmGY7L68y%2Foolh4QlBy2cixPNP1hkT2%2F4bRlAGbqbn4pS8xou5YPNVTU8zTBs6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ad9b385868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0d45e8056103a499c99f0d76611f3ea22.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d45e8056103a499c99f0d76611f3ea22.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5026\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574AB4B813537350C53\r\nAccept-Ranges: bytes\r\nETag: \"4A3A193CCFC1DA83058DC1B1A6F9EFDF\"\r\nLast-Modified: Sun, 26 Oct 2025 16:05:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10633503614042356797\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SjoZPM/B2oMFjcGxpvnv3w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4a3a193ccfc1da83058dc1b1a6f9efdf","sha1":"6fe08704a1cccf65d07f46f51f23eced4f9d49ea","sha256":"3efa2868c79a6a489ed8a784a8e5f088bba7516d17e09fecfa2f2e47a555628a","sha512":"8beaf2c74082bef3793bf5f4d9a2801baeec6e5bc1e62c9c2c95f7c2094210e0c742a25af271346f402aa81ee4388c66a473aba2d8d6e211926be980d45889f3","ssdeep":"96:Z122fONIjaIwu+iEzPHqBcYqX+jppMTPcTIhTL/FPxAmETZ2q9:H707asqB916TPcWjFPevZ2q9","tlshash":"fca16e918f41293e122fb86e98485779495087578edf073d09f4a3fbe155ea85c9320a","first_seen":"2026-01-09T02:40:15.087543Z","last_seen":"2026-04-30T14:43:21.614886Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/charting_library/tradingview_light.css","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html#symbol=ETHUSDT\u0026interval=1\u0026widgetbar=%7B%22details%22%3Afalse%2C%22watchlist%22%3Afalse%2C%22watchlist_settings%22%3A%7B%22default_symbols%22%3A%5B%5D%7D%7D\u0026timeFrames=%5B%7B%22text%22%3A%225y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%221y%22%2C%22resolution%22%3A%22W%22%7D%2C%7B%22text%22%3A%226m%22%2C%22resolution%22%3A%22120%22%7D%2C%7B%22text%22%3A%223m%22%2C%22resolution%22%3A%2260%22%7D%2C%7B%22text%22%3A%221m%22%2C%22resolution%22%3A%2230%22%7D%2C%7B%22text%22%3A%225d%22%2C%22resolution%22%3A%225%22%7D%2C%7B%22text%22%3A%221d%22%2C%22resolution%22%3A%221%22%7D%5D\u0026locale=en\u0026uid=tradingview_aa7e7\u0026clientId=0\u0026userId=0\u0026chartsStorageVer=1.0\u0026customCSS=..%2Ftradingview_light.css\u0026debug=false\u0026timezone=Asia%2FDubai\u0026theme=light","date":"2026-03-13T19:28:51.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /charting_library/tradingview_light.css HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/charting_library/static/en-tv-chart.c63b141fec55a3c31066.html\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-4d0\"\r\nexpires: Sat, 14 Mar 2026 07:26:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gf116U4kusZc59CMN4afXSfJB6QhNMmyWkgLLam4pqZzoRo23oX9A3FVzvsXLVaXV4b96ZPtCy8qqy9NzEn9vFe2XjulHjHuorT1VOQDLnQT9Ta%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b28dcd5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6def0c0cc29dec51ecd40abfd66a0d92","sha1":"921901652703bedb96de2c2edaeecb9ad10d33b9","sha256":"6700ff72e65c4e93033c214bb2be886f5ed88faf58badc6587f5f80d31c03195","sha512":"dbc25d76a7bdc1ddc12a07cda6c95fc5228a339382b9840eafc8af8b0d5102956415016be4bb15bc6b688986dac10b646fbdb5a7ca109d0076d82b1337518c04","ssdeep":"","tlshash":"2d2195d5d5a261f7a537076c56e6923ebf3a24638d001f3836dc31740be04f99a50c88","first_seen":"2026-03-13T19:27:25.818924Z","last_seen":"2026-03-13T19:29:19.765708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaifq0mghkwqh\r\nX-Timestamp: 1773430132248\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 69\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"symbol\":\"eth\",\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kh1w8LvhTip7DZX0pk6BDKCU6kg8ixlly49lVHbWmZwLOJU89Tn%2FTyc54bFxnNkqUOqpHK97HGFgIXACSUwdtFQa0H348Uza27FOY0fFe9vCMg07jIzzYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b8398f5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40432,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"058c749a0291f1d6e35023eeab54c760","sha1":"98763814da4e8ed05dfe69e226ebb8616d20aabe","sha256":"3d640f16f5f262f6e222018c20662776cadd2d0850a22c8118365a244e41e61f","sha512":"c3b70c1e83403bad265701173eeb9a41c55e81810b2cfedbde4c8d8c0c4f52938a39c5c7bd899c1f3f057693802774816beb759cd4ef292ca23b5e44dfeba766","ssdeep":"768:Or8BjyTxHPpgZN+SEpA5mtv9aVpoSlNHFGpDPh:rB8OZcvpAK9Cc","tlshash":"a303233a5e8ae45ce938dcc65bc3efe18d2637c346ee4d9507ad57131a44220e093b9b","first_seen":"2026-03-13T19:29:19.766474Z","last_seen":"2026-03-13T19:29:19.766474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/platform/dev/favicon.ico?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:54 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 17:06:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 120\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6MNYqNRJsZfCtOLjzbywXPLRpfmT87raS6zIQjjbrV5WEUp7VJba1ea7WKPptrXXaNpCq4S3dJco5ihOS85NJZLy9WBNIrgRq8kb1aCXYHGjC5L\"}]}\r\netag: W/\"69a07d98-1083e\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71c1fd045868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"2a99629c75c3f144d5e64446a7994bb0","sha1":"dc864a3e49a4602b84331faf3b8ae4904f47c114","sha256":"7949e7fbcbe8f20b1dfae895b33155a67a2c9890d98a3000314dfd760ff234b5","sha512":"73478dda936853261c896ba79355631c07822fc46c4dae65fb9eabe51215759bc5adc69f68ea0d89c779104d10ac4a3a6d596193bf5f91ca9e30733652eea716","ssdeep":"768:6L6CQiLAilwpue2qb+pMfvRx+2oOrPjDGw+h:5XiLAicdWihx+XOPd+h","tlshash":"87636a5771c5f846d4f789394a81d0a1a122ec260e7f1da3bc8e73add033858bb65a7c","first_seen":"2026-03-13T19:27:25.858615Z","last_seen":"2026-03-13T19:29:19.767524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/platform/dev/logo_144.png?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:54.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 09:04:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a00cb8-7b38\"\r\nexpires: Sun, 12 Apr 2026 19:26:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 120\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6VvhD%2BLTvRUgcxgFSZOE9AB%2BiYBkcoR0i8A6oNDdvbt7%2FqhFzpnvfzsdmF7EWj03LeeVJm4tNGZSAqakHGM6fY8OzUQP8MpfGMzDxOxzLwy%2F5xO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71c1fcfe5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"6ec9f55068353c0bf0dc95c1e993b395","sha1":"39789dce04d9b2ea9ec7818704f85f34595a79ce","sha256":"a61f9975445d89317133122ef059073cdd4d6f6c3a6c7fdd15d1b41c3aa4f24f","sha512":"92bcf1b23eeab8966cad034a951f97566d3ed5975f88d42c6964ea7ab608a598686397246fd6343d24b7ab5f36068e5389f8b7aa6e2fb1ef9969f214e1d99325","ssdeep":"768:NSE19PndZPynkEL2lzq2jFs9c6D/gdgTKZhBi1:NSKfdU/L2luw2LYWTyhi","tlshash":"3be2e1a3818fc60073b15da38724fadc1112e73dc50916aecf5a36d7d26ecad298846f","first_seen":"2026-03-13T19:27:25.953449Z","last_seen":"2026-03-13T19:29:19.768061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-2885e3de.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-2885e3de.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-20f30\"\r\nexpires: Sat, 14 Mar 2026 07:26:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 120\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRUxF61mhH%2FnYSX7KlA7vpsk2hkk0p5kG1o%2BmutZihI0XGt7NvhXCyqvQq80U2vEpLJz%2FIe5%2FE9%2BsA0NMTrxfPcXYHb1d67bzkN5xrO0u%2F5%2FGiwb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a35fcf5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65447), with no line terminators","md5":"9285bf1513dfe8039f80754b5975e551","sha1":"e212c03f55d0ae58926cee15a269b36a24698edb","sha256":"76d6f5dc91a4c2d60f1e964a15fcf3c2e08ff16d900a42db77526c3c608349f7","sha512":"1f67cea7ef9b1de5650e13b2fb228eb2f0d3030deb3dec67d9c39df47aac9414ec4b80ba2129a7f84b1ee2bd8de331d7860230d7dc78b201214590f69adb3cc1","ssdeep":"1536:RJCZYcyr54piHmBVkhbP4w230Jt3OTEjz/9O0ham2+:aeThbrGEjz/9zab+","tlshash":"fbd35c8eb5070fff5cfd0888a56b450021641f926ccd8ca3b2be6d8537f9c95638a729","first_seen":"2026-03-13T19:27:25.847991Z","last_seen":"2026-03-13T19:29:19.768813Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/eu.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /eu.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:59 GMT\r\nvary: Accept-Encoding\r\netag: \"6864014f-37b\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2107\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmTKPFnLBhxCC2uPRGTE26gHM3ntCW47J4VXrN1bXdk8dm7NwiChL5u9Y14Er4rMhYclCz%2BraaHsLP%2FTZuvWcHHx%2F070J0xYqmg1\"}]}\r\ncf-ray: 9dbd71af08b6b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b280ad64e29a2bc3622070383427439","sha1":"b84d5ec9827b2f3763f3af8a157f8e08f3de9d11","sha256":"cf15767517ce6ab1fc46a41b07fa66be2ab3db8085216be5abd43c1fbf36243d","sha512":"dccdb569fbbdc3e9a4888fdb25488ec58942989191f02996fc00be9fadef7846f26f8f4e472fdbb8d952f7953ce955bd83b51d77eebb510d903b0db16b2213a0","ssdeep":"","tlshash":"2911e706f006401c972db6acd2fea5acc11b6913558f0caff3706e8f81baa16964c71a","first_seen":"2023-04-06T07:35:21Z","last_seen":"2026-06-15T01:24:45.697898Z","times_seen":56,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getAllSetting","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hE9oPuI7xL1AToftj6ADoDZQuOCdtIo6thRN0rnMipq%2Bqf1TBXJp5oVPn7iWgAECZPET43YYiqHDTppyCXvI3dfMKUbkLGDrDaXhYwDbtwWVxNy4eVbpAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0da5e5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/images//defi/gas.png?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/images//defi/gas.png?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69173875-260e8\"\r\nexpires: Sun, 12 Apr 2026 19:26:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouKX0moYGpP3DvnQoOWoI6DECNEK5rbjJTu75BwpNmcJpdh73vTSHULovh46oNYlws3MogVnww%2BrT%2BYAY8CTZqreb8tiv9US7RFe54zjEQXhcPy%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ae4cba5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"542dcd45d28b1155ad110123285ac884","sha1":"6ab9daacb4e063d2b44fdde26dff0eb3b282f5d6","sha256":"f2a91cf960d21c74a2971e7f91e0f6f0ea546e3e3fbaf14ad126cce580eb2169","sha512":"32a3740eddca884d85fd498b45c8476824a63bc04c48d8358a5f975175699adb2589441ce04b5c81afcc33fb16da44ca0c2696b3d734f1d599d395aafc019ec9","ssdeep":"3072:pWBsGCfkpts681S3WTxWmgGNg+XT6uTudFGS2FOxvKNb:pLGECts64wqxPgGNFxTyFGSO8CNb","tlshash":"65e31240d23fa822f758731a0a610e693ed8d463e3b6c6f068ef44f754d7257a88572e","first_seen":"2025-09-28T11:01:39.34008Z","last_seen":"2026-03-13T19:29:19.770079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/cryptocurrency-icons@latest/svg/color/ray.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/cryptocurrency-icons@latest/svg/color/ray.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"302-3wqPvpp72QtEtLwBZoFdQVLuCRM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 29171\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\nx-served-by: cache-fra-etou8220085-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acfb3859901f51a959fe54eb65aa211e","sha1":"df0a8fbe9a7bd90b44b4bc0166815d4152ee0913","sha256":"8e1f9652252ce0aea0cc24cd4a099581eba2b696ae966aa92b6a86ee16d249f7","sha512":"23baadd803d67196e73deef83f513ad9629987c483ce9bda2fd4d004c71e8a9b80e8e37b1fd2a40e442877fd735eb0c1e75e2e5be24df484e665c6a4955c261b","ssdeep":"","tlshash":"380125f71224944e740f4ed8ff7ab010e12fe05a459d53d4b49c1354f5970dae814c54","first_seen":"2026-03-04T13:56:21.671763Z","last_seen":"2026-03-13T19:29:19.771191Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":2,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0040c1ee48355455ca04538b87a61eaba.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0040c1ee48355455ca04538b87a61eaba.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5026\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574C390C33430439A60\r\nAccept-Ranges: bytes\r\nETag: \"4A3A193CCFC1DA83058DC1B1A6F9EFDF\"\r\nLast-Modified: Sun, 26 Oct 2025 16:05:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10633503614042356797\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SjoZPM/B2oMFjcGxpvnv3w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4a3a193ccfc1da83058dc1b1a6f9efdf","sha1":"6fe08704a1cccf65d07f46f51f23eced4f9d49ea","sha256":"3efa2868c79a6a489ed8a784a8e5f088bba7516d17e09fecfa2f2e47a555628a","sha512":"8beaf2c74082bef3793bf5f4d9a2801baeec6e5bc1e62c9c2c95f7c2094210e0c742a25af271346f402aa81ee4388c66a473aba2d8d6e211926be980d45889f3","ssdeep":"96:Z122fONIjaIwu+iEzPHqBcYqX+jppMTPcTIhTL/FPxAmETZ2q9:H707asqB916TPcWjFPevZ2q9","tlshash":"fca16e918f41293e122fb86e98485779495087578edf073d09f4a3fbe155ea85c9320a","first_seen":"2026-01-09T02:40:15.087543Z","last_seen":"2026-04-30T14:43:21.614886Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":1154,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-32c36efe.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-32c36efe.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-8ae6\"\r\nset-cookie: server_name_session=1137aa3d0ef3383c16885c3dfab3ab35; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WV01MagrEHyEZ1M4UD0Mtc0CIB4PjY24Y2BFL%2ByqiaJAexhss0YBiqA31u%2B2pMgo6WMP7KcNhhqTCwTz5X0TGmK0h06ExS%2BLgiQHnKNVG1YXKD3G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66df05868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35558,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (35489)","md5":"fe19b74ceaa93fc1e8cab96161ce183a","sha1":"7dabbdcf6a13b08a552d391ae8ce3088c5f66192","sha256":"0a1c4021384a75d9dba8da7d326276ad84c639f793b8d09f658ae740a2fcd562","sha512":"48c2a8601a6abcf15209be0c23b1a30e94236d9fc0606821c3c49532dbe559e9b070fcaeebc599ce00e348453472c54171ef1704ae5e35cd37dc0bd89907852e","ssdeep":"768:0vAoiznJNK4+3yYfoDY5LwxWOdbHK4mGd608MyMqqTeM48NjFIIJ8jjYM3dt3AEJ:pJNK4+OxzOpaxtJ8HkS","tlshash":"00f21955ba16a93dd3b650e9446a0010361d2fcda009c0a3fafd1d0f17a6e69b3bdb37","first_seen":"2026-03-13T19:27:25.927597Z","last_seen":"2026-03-13T19:29:19.685918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/info-43fcafdf.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/info-43fcafdf.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B61Tlr0dD8yuYGTetlLg296dC1jFolj8mpBeA1JwOJWRh%2BVxCMGEjXkcGzzbYHyF20zRZjSvdoj%2FGMGeYidK%2BrfjfaqX77%2Bk%2F5HkLmVk865agnfu\"}]}\r\netag: W/\"69a597fb-92\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71a66df65868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f5a30ea48001c996c34f56017feef796","sha1":"3c072e1ba63a6e72ed8680ffc8442cedc5b8bb0a","sha256":"6d4e6986aa9a11013ad768e7911de89397cae23408e6cc44f0116332f7977f09","sha512":"87086ebc7d6ee3bbd9085ce674aadd003243c4f80a2cb43e1e52efc80cbccac7ffcce57f4d52d53d23c1037690fac6bf2199eb615f329760409f07d007b314ed","ssdeep":"","tlshash":"81c02b0b0d2243f32239149a32d00d131263007c2f834eec001ecd5148f4cc1941d914","first_seen":"2026-03-13T19:27:25.962301Z","last_seen":"2026-03-13T19:29:19.72768Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/index-6e6d0330.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/index-6e6d0330.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 14 Mar 2026 07:26:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mG0w9%2BnulOvr8nDScfTsYLYeIucXcRri5D33bcoVOrZYl7R4CDtku0pa6ccD%2BP8vGAcccyWeGeI%2FEA%2FBTsXEWHhqLUW2EYmKYBi3Uk6AeST7Q4gz\"}]}\r\netag: W/\"69a597fb-245\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ac086b5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (580)","md5":"29a0768faab788f6005350def255c8a8","sha1":"0fd6f0f791f6b5fc4dcd2554a685198bad48ca38","sha256":"b288ced18fef22461b0702b3c859ef5dbf8d348312ed1dac73ef0e2d3e2b8e8b","sha512":"241cf10f6d49dc7837f701d6e58bc446054cc5c0087d9136be5082fa6182fbe0b6dd512181070256d3e8ab9c7cfb8ea0a82d607356affaa2f5b44b6cb76cc583","ssdeep":"","tlshash":"c3f0057fb57a41771be388d862730421e65c0b853720ccd4b90f0a108b388f6f16ea59","first_seen":"2026-03-13T19:27:25.821715Z","last_seen":"2026-03-13T19:29:19.727105Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/getMt5Amount?coin=xauusd","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nlang: en-US\r\nX-Request-Id: mmpaiel07z2mj2f\r\nX-Timestamp: 1773430130772\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIHJwe8AvWgLbm%2BM2YrS4s0UqH4tluiawJoOE4nJrRmHIVNPsm5kvrvA0ytL9HC3kiy%2BMth%2BTjkpO2HKy0JADZmMR9uf5duaUSahxSsdMYGD19BENEq8%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71aecde05868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f78e2309d30dd90985505c45048e743d","sha1":"8e2b334639a3df3aec2180183c3da54471d4ab25","sha256":"2361dc7b195943dbd4e12317dbc1a3f636c8a2e90b8fa29372b55c55a872c948","sha512":"e7d9b6b63a4e3f6c4c7c55f3724195c0ab78162fba240f487985c447ad8b6c5a8ea9a85afa8b2498643ea5a92441d69d0fcbee9005355507787c93fdfb669406","ssdeep":"","tlshash":"f19002951c189242a88300b59506520400243160262592484d5ad225c0c82a22040c98","first_seen":"2026-03-13T19:29:19.77211Z","last_seen":"2026-03-13T19:29:19.77211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqga5%2F2S9E%2FlKjfS8HbFGiPONOs7pupQAT4vwAp%2F5LLrePFnM63m79ZTacBwJuZccxYRh12Q5cUSq7RuTCaeRzBQdtRzdOEwvszkDfxwRwb%2B5Etvk1TKsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b6beb65868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.010563bcaed6e464783e654b33357a287.jpg","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.010563bcaed6e464783e654b33357a287.jpg HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 526454\r\nConnection: keep-alive\r\nx-oss-request-id: 69B465748B90443536CAD634\r\nAccept-Ranges: bytes\r\nETag: \"3A540B4FD7CD8CA69F6592FF3DD8B6D3\"\r\nLast-Modified: Fri, 25 Apr 2025 00:19:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14486796953707587548\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OlQLT9fNjKafZZL/Pdi20w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":526454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 3000x2000, components 3","md5":"3a540b4fd7cd8ca69f6592ff3dd8b6d3","sha1":"152e1a034a872fc13b2da39c3a1129cefbd3e929","sha256":"fdaa56fb33b404d6b518c98aac11fc73cb910e6b5aafaef76fb830c2150d9edd","sha512":"1d93087064f8f9b759eaa763922c72758dd581bc26bb717d9dc35aeca64abd392e7fbf77f1dab582bf9b2560829d0087a62968506601e4e92d0a576e98c8956b","ssdeep":"12288:DEEEC2owOU6gLgQSQyRjQcF4PkjJneSZ5Y:UWRWp80y4SReH","tlshash":"24b412ef3f332b0ec60f2b71818a0544ed0bae775a16ae5be7759f9490503a0dd851a2","first_seen":"2025-12-21T02:17:09.194707Z","last_seen":"2026-03-24T13:59:45.716601Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":985,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/metal/gold.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /metal/gold.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"0e3001c0d28b4b59b37d7396e2282730\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:06 GMT\r\ncdn-cachedat: 04/06/2025 22:47:58\r\nx-amz-id-2: NokaIV6CEk3waMCEuVHcSwwIOsDk4JQNiqGHsQxBjH+BejP+fSdTDGPHNB0rP0tHBtqIVdTcxX8=\r\nx-amz-request-id: XG4WA581EPTZPB38\r\nx-amz-meta-hash: 0e3001c0d28b4b59b37d7396e2282730\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0c39e649b259f30ef1e16691cf4362dd\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (556), with no line terminators","md5":"0e3001c0d28b4b59b37d7396e2282730","sha1":"40a727481e9bf9f016ef58e0aaebc786c3e6cb56","sha256":"9ef7e93476a9f5132f0c3b909c3d8b569cbb727188f5a07f2abe7d881d786006","sha512":"6edcc400d9627cad6ff52b0f2795015d2f734a60927ce94ca25ac9a9d2764416912ade73ee71d9a0dff05f992fc0aa71f79adebed4646d5f96ab1aaeabb1d191","ssdeep":"","tlshash":"2ef0ac7629eb928e744555c0026014439546b8bef3dae1c8ea001793d94dcd9e8e02e5","first_seen":"2023-05-18T16:17:48Z","last_seen":"2026-06-17T08:11:35.421974Z","times_seen":727,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":96,"connect":7,"send":0,"wait":13,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:53.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6tkXPr5wAJs8gUY%2BZCiFM%2BH7eX0zFymhXKaRddh2zJRurSAuxSz0Y43HbP7vuVQbDcr6GZtQTdYogPIfKf5uKiQym4lfuMnnnFEsor7EjRk1%2BONaXJIsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71bd0b745868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.royal-capital-ex.vip/ws/b4c29489-0c27-4375-9f9b-c4fb40803180","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /ws/b4c29489-0c27-4375-9f9b-c4fb40803180 HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://royal-capital-ex.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: f/fWTQzub9r3FOR/IvOfog==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Fri, 13 Mar 2026 19:28:50 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://royal-capital-ex.vip\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: pxRGzBwFwcdlR7Gn7VLfQjfEvps=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=812f1eda6e253f03738d7790cc564125; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OdpE8QOJPiHulep8%2FtTr83IsaxC4%2BxUQq2ipPFz604Oe08UKFOg9JJkJ10lGEMNCm49aAB8%2BPRgZx%2B4sKX4YafBX1tuoNXNRmPm7Q25DkTId6bFginLJxjIBwyWZhn8BvnoMgOmJkZ8SrNE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9dbd71a678b0fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=9769\u0026min_rtt=7912\u0026rtt_var=5445\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2372\u0026recv_bytes=1209\u0026delivery_rate=182666\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=b9d1b2ea7bc60d4f\u0026ts=683\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":0,"dns":37,"connect":45,"send":0,"wait":664,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/filters-fe0122a9.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:49.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/filters-fe0122a9.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-c1a\"\r\nset-cookie: server_name_session=2bbd25f3eb9fd6241b4c262a9e07022b; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJXuEM4HodvJCR9LwUJVcGqaTHOxcY7JtZ%2FDbhriDcR2vL5MdHkoN%2B1DNtXBlso2TrSdRYQ1NjKASGffbuNkmGmaPqF%2FQbGZTJXtzeWdDiKlhCM6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71a66df75868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3098,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3097)","md5":"8335322e222bc102a76c88bc3a844404","sha1":"1357a9ba8955b5d2c2dea3ecaf052728b8a41c80","sha256":"8c35b760dfbf549bdecc668015a62821d576a6a45e4545a8c73d33f02f587500","sha512":"01ed549bef393875b45b9ab449b76340d38c10a16b36e1c069435d6abf6264f57a0b92aa531ce408f8d184542cc331cc80c6bf84b5cb6bbbf14250462e15f342","ssdeep":"","tlshash":"cb5134fdfcd7a13356e95efa40288414728eae24686f0a4df54be0455933888e07fb68","first_seen":"2026-03-13T19:27:25.920369Z","last_seen":"2026-03-13T19:29:19.77397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukewangluo.oss-cn-hongkong.aliyuncs.com/echo2.0be94685513364891a7845011c43fe205.png","fqdn":"dukewangluo.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.214","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0be94685513364891a7845011c43fe205.png HTTP/1.1\r\nHost: dukewangluo.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://royal-capital-ex.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 13 Mar 2026 19:28:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8259\r\nConnection: keep-alive\r\nx-oss-request-id: 69B46574CE63A838339C4D7E\r\nAccept-Ranges: bytes\r\nETag: \"EC951AD0802CCCF7F2E9550446B345B4\"\r\nLast-Modified: Thu, 26 Feb 2026 16:55:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8099240540112572022\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7JUa0IAszPfy6VUERrNFtA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ec951ad0802cccf7f2e9550446b345b4","sha1":"08ec64b7b7231feb0c45c7fd7d397b7deb8d984e","sha256":"4bada6314d2e1dcee7d422e31256c7717bea91cfd88aa2907ef764139e1a715c","sha512":"ddbfba183267bc9315c7dd4310d37a597656babc7041f1536b4f7dd670560b8c01b167d7e6ebb4c579fa9c6f3a3b29a0456db70ae199b7352d8abfbed6d6982d","ssdeep":"192:5t+pRiHI1NKGeJDCBYR2jSCyMHJ1+zwtdNVY2:TeRDUPJOawjSCyKgzEL","tlshash":"0702afb5d4a927e3cc32a9ef2823a7a9cf53bdad1018411dc76fea44d08072843813bd","first_seen":"2026-03-13T19:27:25.825649Z","last_seen":"2026-03-13T19:29:19.774733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1684,"timings":{"blocked":1401,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nX-Request-Id: mmpaievbqb68zsm\r\nX-Timestamp: 1773430131143\r\nX-Fingerprint: Z1Q2Qjk1WkZQcGZnMGpDVEFBQUFBRWxG\r\nX-Client-Version: 2.0.0\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nContent-Length: 69\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_HOUR\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"EURUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:52 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tmxmIUieUdFJmGp6KfTRkklqCjWp83Iljg48N2tLYMfrsRvbm3ruMv%2Bo6ogv37lyAp4cH6DkbCSpc%2Fg%2FUpU9jSDYWjZbxtFAq35DMpTrbAt5FtJebSwQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b26d785868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39572,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04b09b9e23e7e869bc0986122d740f1e","sha1":"6c8ee73fb2c6d2259cc7e0c08865a072e050156c","sha256":"a516a355e8ce6f5ecbb7c2bfdca7df069dc1b0b940305a5332746b2e91714355","sha512":"2774c52bf407fe9f6127c5c2aa94e3aaf2c988812c1acf2ab059a9ab7cb06ef313c456ef8d1c884b84c865de7ed125740e32c93f327870e03948747165abbc35","ssdeep":"768:yI9JTt+UB4s6ABVuHOJiP43DTBePdSPFMi8:vt+U76ABVuHOJiP4xydSPFj8","tlshash":"260352754fc9d159d5324cc12fd3bea03e35f9e2aacead8281dd1c0ceec4659a04578a","first_seen":"2026-03-13T19:29:19.775556Z","last_seen":"2026-03-13T19:29:19.775556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/kline","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:52.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,content-type,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, content-type, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ucaWvTlZl2mBNDUOT3EG8Br1dVCDermLzvg0nl4tfIp48IR3NHcD9TtIaaCKebFY7jTtIo6mrq1bVNkneOz0XsEXP1ztU55Cs8COn%2F0v%2BCNWIqZ7syoDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71baeec85868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/assets/filters-fe0122a9.js","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /assets/filters-fe0122a9.js HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 14:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a597fb-c1a\"\r\nexpires: Sat, 14 Mar 2026 07:28:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wkf%2FkJg2bpMoFBqrhwIu2KvaogP6IOl9dYC07LsbPwWEVjHtj4gt9xSwYoal%2F1TRL%2BUb%2BPtPeKPPycJKNBKVQaEAMYeytWxgqf%2FdKhP9I6g8BjSb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71ac08735868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3098,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3097)","md5":"8335322e222bc102a76c88bc3a844404","sha1":"1357a9ba8955b5d2c2dea3ecaf052728b8a41c80","sha256":"8c35b760dfbf549bdecc668015a62821d576a6a45e4545a8c73d33f02f587500","sha512":"01ed549bef393875b45b9ab449b76340d38c10a16b36e1c069435d6abf6264f57a0b92aa531ce408f8d184542cc331cc80c6bf84b5cb6bbbf14250462e15f342","ssdeep":"","tlshash":"cb5134fdfcd7a13356e95efa40288414728eae24686f0a4df54be0455933888e07fb68","first_seen":"2026-03-13T19:27:25.920369Z","last_seen":"2026-03-13T19:29:19.77397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/common/type/defi_activity_type","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Euo%2BRWRgWRZD5SHcZoOg7nmpJx6gI6RveRkp7SMgHwvCzUebJ0ces8IdATlrO7fiVEX4bchb%2F5L4nKnS76uKR4VR8StajdeK28RxLcLx5OL3NUrHbaaUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0da645868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"royal-capital-ex.vip/resource/svg/light/apple.svg?2.0.1772460027676","fqdn":"royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:50.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"GET /resource/svg/light/apple.svg?2.0.1772460027676 HTTP/1.1\r\nHost: royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://royal-capital-ex.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=47ab52dee555ec10eb148a47b02cf6bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 14:11:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 117\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oe%2BsiR8SDedBD0ykNXehlpK9erx8nwnf5f2rUtFOaEClo8Nwl8aPr4drN3vtVgLYxw17ODxTNe8b6uELKfEMc%2F6KJBHAo%2BxRKGs5v7ZjI6keLdSh\"}]}\r\netag: W/\"69173875-2f9\"\r\ncontent-encoding: br\r\ncf-ray: 9dbd71ae4caf5868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":761,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cc56003aa91a76b1276cf924bc36f6d","sha1":"3c8661e7d63239752a5ba9d4a47aff9a2371abaa","sha256":"abdcd8736be95ba086294ffc7d109a144348663bf7a065fdcc9138f53ceb0a4a","sha512":"74640eb53da552e998b0adecf5a9795dc51a1c416ba933da47a58c1fb79f040a0ec16281ceb0d26f9b0acb17329aed61d45d958f718096106d75bcebb30ec87a","ssdeep":"","tlshash":"2f0120ba013b06ec72012a715fd82c403bbdf34be662c4d5fba110239d6e82b289cc15","first_seen":"2026-03-13T19:27:25.921422Z","last_seen":"2026-03-13T19:29:19.776684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.royal-capital-ex.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"api.royal-capital-ex.vip","domain":"royal-capital-ex.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://royal-capital-ex.vip/","date":"2026-03-13T19:28:51.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"royal-capital-ex.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:23:45 GMT","end":"Wed, 27 May 2026 09:23:44 GMT"},"fingerprint":{"sha1":"C3:37:11:63:38:0D:5C:D8:25:73:A5:F8:57:19:30:29:D4:4B:EA:0F","sha256":"0A:87:14:3A:E5:BD:FB:E4:9F:46:76:BF:3B:FC:78:0C:1A:E1:64:99:78:2D:EA:60:BB:26:15:4E:38:D0:62:09"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.royal-capital-ex.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: cache-control,lang,language,pragma,x-client-version,x-fingerprint,x-request-id,x-timestamp\r\nReferer: https://royal-capital-ex.vip/\r\nOrigin: https://royal-capital-ex.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 19:28:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://royal-capital-ex.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: cache-control, lang, language, pragma, x-client-version, x-fingerprint, x-request-id, x-timestamp\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=9531f89a6e107e4a22b81a3d9ab11d66; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwG0ONIhtDCnJ0hIyNkjes2klsBIC5xcG61dnlfxvPBsJeObdDY4x2JYvIW%2F3WWyBhLoLFoYSNt%2F9%2BCJPv8D4e2hLSN76D1%2FWsS9EXcicI8AQECVLmcawg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbd71b0ca535868-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"api.royal-capital-ex.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}