{"report_id":"564b7b38-cca3-42b1-bac4-e94c85e67199","version":0,"status":"done","tags":[],"date":"2026-09-04T16:16:00Z","url":{"schema":"http","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"104.21.22.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"title":"Atlas","dom":{"size":7992,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2079)","md5":"9a997bba65374fae30c161fc642f8e27","sha1":"03dc75afd4a35b77a049bade6976db61d307658c","sha256":"073cbaf91c2c8982c297ec1644160fb0b88b0206b8b23a8eade4cb3f5713c79d","sha512":"d5ee45541b924bee32d1850e1000dba3f72321af2d261e8940ac08822134adebb25c89fed2a414bfb3512334f468d73fc48b9b552acf2b9050a6619d2c0cf7e4","ssdeep":"192:eoeanpudT7qvh/hjssbyHZCxfZ22nfD3bYi/0ZRNEmfdB1NYjf1u:5npudapKZCx82j2EIujNu","tlshash":"9cf1e8b369b8682a122346e9f5e7b4042522f307c50e58207dcc60ad5fe1fb9d8d77b9","dom_hash":"domhashe3bff8200e44efd51720337056da0a45","first_seen":"2026-09-04T15:56:23.974586Z","last_seen":"2026-09-04T16:16:06.85863Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"104.21.22.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:16:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.coinexvn.cc","ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":882,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cm96.pages.dev","ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-08-28T13:07:34.872341Z","last_seen":"2026-09-04T15:51:58.773541Z","alert_count":0,"request_count":1,"received_data":15233,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"coinexvn.cc","ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":2620723,"sent_data":5977,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"api.frankfurter.dev","ip":{"addr":"172.67.69.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-07","domain_rank":0,"first_seen":"2025-03-27T21:41:51.44369Z","last_seen":"2026-09-01T05:51:59.806157Z","alert_count":0,"request_count":3,"received_data":2833,"sent_data":1539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"echo-res.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.151.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-07-17T15:24:15.169144Z","last_seen":"2026-09-04T15:55:47.016469Z","alert_count":0,"request_count":1,"received_data":1690,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"recharge-override.pages.dev","ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-29T18:41:47.03049Z","last_seen":"2026-09-04T15:51:58.521953Z","alert_count":0,"request_count":1,"received_data":3824,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ca44e9bca92396a335849eaa2de3436","sha1":"3a5be3e04bb2cd6e93c2013ad65619bebe381e16","sha256":"e17f8bc546ee3f22eb125e6bda5dec493cdcee05fe4e4795678ee7497a6fc1aa","sha512":"8f3cd8ace881aa4913b27f5f51781c3eb1231786b167a476b95c8b3376f22f38cfb1c9a854a8dcd30d945456811ffa3893004981ac6dbc4fd06ce24a1ff22c5f","ssdeep":"","tlshash":"cd11abfe191a602a6303404e976b7811643250a9000a184173ccee9ebb9af6dd0cbb8c","size":1034,"data":"","first_seen":"2026-07-17T15:24:23.275526Z","last_seen":"2026-09-04T16:16:06.885399Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T18:19:42.160014Z","times_seen":42271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T18:19:42.161906Z","times_seen":43655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e53b09d6a7afa83f6cf8da8f77e2528b","sha1":"8d6bf157346fb097d79d56ef17406dec06ddae36","sha256":"4baca0abf36d1ace294003116ecb8b10bc06c998b28bb8f1f766e2a32fa45645","sha512":"c64f21c4a277bd42c7cd3a253300abd08890e5b37231805ab44b714a7c028dc0d182f04603ac7dfd8bb4d6755733b2db7224e62b3c0cc6e4f9d06d6e991cbf08","ssdeep":"","tlshash":"82e0268da2e6ae016622027a181f55e594249c6ef5503572ce7cec146e33a78c22aefc","size":323,"data":"","first_seen":"2026-07-17T15:24:23.287869Z","last_seen":"2026-09-04T16:16:06.888136Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40a05ab20895a68f28da675062f60e3d","sha1":"351a323a2f7393d0b4f8559fd1d16109a845e364","sha256":"38ed474d818df892f6c5f02494d85c58b180b15ff678a7228a25a6fe0e7ca8a0","sha512":"5ba1d45e43dfb6baa61908c03056225a371f6330f20e3782645e330d7caf195764107152f4e7167a66950074764076bd91a2cb656759d5cbbfed605a154d139f","ssdeep":"","tlshash":"4fc0c0cc70c27e1011022460256f25d88134842675980b03cd9cdc083e130bc8233dfc","size":178,"data":"","first_seen":"2026-07-17T15:24:23.272962Z","last_seen":"2026-09-04T16:16:06.889006Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"504c350cd6aba7fbdc6b473bc01bcac0","sha1":"5aaf78ad998830a371db4af1a538ac894a62a0a4","sha256":"009efbec1c93669d927494ee964d81bd7a241aec57c0ee0cdf12f01f9567a36c","sha512":"6d2dd777e8f4a743f1f376d9ef942dfeba36e2e79cb28f9bdcdeb5f0d40bc61992f386eb1164f041acf9ac7407209c7244d6c19f1c5827904e39a3ec81850290","ssdeep":"","tlshash":"245194a94a54c27749d20febf0b3c6cc7e623459b107e8659b0c0c2d5447ea74ea2d9c","size":3030,"data":"","first_seen":"2026-08-28T13:07:42.328984Z","last_seen":"2026-09-04T16:46:51.678596Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/charting_library/charting_library.min.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b229bc2332e0adb3d419d80982f7702a","sha1":"22aad35b26581773fedc6659565655ec01dbd92a","sha256":"8640f634cd6cd90576e8a60d9a368d5abe7458e4629a4015b55a265846ab9355","sha512":"c9a69d9b2768708655409e59d28a6d6e66262410d48ad5566bd254b1f98570680ce87a4515953f466ddc9b3f874c5bc9f27b3e2bb713a7cdf6161f612c7350b7","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa6l:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvm","tlshash":"4d324158ed2478720acb54f0427f190f8279e278d84a44ed3c84e6ec59fd4467a5fbb8","size":11172,"data":"","first_seen":"2026-08-28T13:07:42.368349Z","last_seen":"2026-09-04T16:16:06.881379Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/vendor-3a1c0b56.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"623a02d31a73a37cb74d34ca1088f3bb","sha1":"ec462e77b3c6f286bd33050575ee12007beea01d","sha256":"cf7da1497312f211eb447c334fc809dc9d3968b5940b2ffa9226846e386ba590","sha512":"85281eae897a5730edcf9e85a8c1dba8aa4f6d6515f7648d77c471cc1c6973d926ce1cf257a503f8fbded001a71ee8bad84ab67689f7109a217c3b4037f895c4","ssdeep":"12288:qlFQVBKGHG5VE+/pc95VrDK/1n+Jvn+AEOWG60FNAOPa2BUKBW:qlFOBKzVhxc1rPJvnxEOWG60Pa2BUL","tlshash":"ed153ac57292f06147ab24e250bb0006f3396e59740e84a4f1add8db7d7ad89a277f3c","size":890611,"data":"","first_seen":"2026-07-17T15:24:23.247619Z","last_seen":"2026-09-04T16:16:06.883553Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","size":14449,"data":"","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-04T16:46:51.664089Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/ja-ccc3edb8.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e7c7865b93f456bf32db544c2de8adfc","sha1":"d59ddf030dbfaff6edffd861c45677ad4c386b37","sha256":"fe4af0607bd0cce7903762d41992c5d36dbd1bbc78b7fa3791ba95a9ef687283","sha512":"cce849dcc9410ae6afe8e61ea3e9e27e574b36ef21c26e63410ccfd6df73e695368726f2070fa12049473e0324501b18a4fab624c240250f928ffa1951ebbb2f","ssdeep":"768:2vMeabmWRQsnk5OyVcb6ARs8kwD+FqG+EAb6EaUwnuZDr/zQERsQTt7WU:nbmWRQf8AA6ARxRD+FqG+EOr/z/d","tlshash":"da331aac9fcecc1d44b59233715e69c120b24c8ddaa262a64afdc9743351b2fe347a74","size":51869,"data":"","first_seen":"2026-07-17T15:24:23.21621Z","last_seen":"2026-09-04T16:16:06.865723Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"480311eaaf1a8b1be0e239c0993d3b61","sha1":"8e9f54552ec4c67f6065ad7c04881c1b65f0706f","sha256":"0a1f879a987b9174c215facf119aceef09cd2bbc18e29f0bec70115be5d17850","sha512":"4f0e0582f17b9c42c8c596095c52024b18102129cf34afe02a6d13b25da11c744bdcfcb15d81d53bd21ef427ec4ce9fe27592120cbb9fb81b92e1d3dc336aeb8","ssdeep":"","tlshash":"d7c08cc8a0c22d001606682116af26e490384427b4489b128c9cdc592e224f4c233e9c","size":145,"data":"","first_seen":"2025-09-12T15:54:17.434594Z","last_seen":"2026-09-04T16:16:06.889919Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b6ebd269fbfbc12e1bc94b40ef3cda1f","sha1":"0a0480e36ffe373cf01c23ebc30952269ee0b7a6","sha256":"8f8b3bb2450a4d65b04c75ff0d63d5217eccd0da423bcf4087a64b6c2e006760","sha512":"fcfd48a028f04c0844e6e4ca2b3a43d86aaa3d3a17414fda127f3d2b824641b89ac9e6b907a9e731c5239f4ab69adf1f1136a2cf3683f1ff211f870c9629c8e7","ssdeep":"","tlshash":"5ec012c4a0d76d0056165564206f25d450248817f14826128c9cdc552e731b0c137e98","size":166,"data":"","first_seen":"2026-07-17T15:24:23.283238Z","last_seen":"2026-09-04T16:16:06.891475Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f9d0499f4dbe9ad003a2399018af7fac","sha1":"fb9a717b29e27ad18af21be2a55dc8709d769483","sha256":"5a4ce5b64580eb7fa7ff8d563aa2aef8cbe312d04ffbb51322d4201e77a9a1d5","sha512":"95a3399318656b45602c002edcb7e2a771b3b327803198381b86a5b8e94c253c30ead0f9d305130c38c246e839d82e0b598e4a399c24e00b3f59c3aa82054217","ssdeep":"","tlshash":"1fd05e8da1d628105502b426486f2ad4b0284c56e8867b128dacd9952e226b9c266df9","size":239,"data":"","first_seen":"2025-07-12T20:24:33.337614Z","last_seen":"2026-09-04T16:16:06.892417Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d58b6a254c847870c0319c1dbaaba278","sha1":"c4c81e84c6eb01a8917bf0ddbc93a5d7c61cb6a7","sha256":"75d1b9c1756850f02bd75817f7f264390e6967a78df94db5a990f14eeecef2e4","sha512":"257c9b3868da4d6e2d6aeaa7dc4e1085d5d9ed8e5dee2e84601386e909c8c3f37da641516c7ea1dd7cc97efef89e838c4e7a423fdcd5d2b7d8062e19293e8eb8","ssdeep":"","tlshash":"87c08ccaf0d72d101606681210ef28e49034842a70889b168c94d8482e220b08237ee8","size":145,"data":"","first_seen":"2025-09-12T15:54:17.432172Z","last_seen":"2026-09-04T16:16:06.89331Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/index-bf90d89f.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c222b138424824ff0644794fcb387eb","sha1":"0d60dae37eb35f3719248932b365297dc99c761c","sha256":"52cd88b3c7362f237512bd3c29a2475df867802955b2ce285ecb14c5e2489b13","sha512":"8749563d2e98de665e8efaf8f93a1ceac1011fb204aaff366d6ddcd384b6f601fd3db119cc0c69e346208362f96c1935904c29dd615ebc50441a144f4d2ea5a4","ssdeep":"768:Lu6dtPzWhsPf/Ar8aDO4HZ5LB+6FnVQGzgzv/CKaPu/1B7zg/SeNetyIpixYpZxJ:LjT28GnQvv/tCetyuVDO484UK5hVLtD","tlshash":"4db34c4ea5070fff64fe0848759a151020280fd75dcdccd7e2beae5527faca4a24a729","size":113806,"data":"","first_seen":"2026-07-17T15:24:23.263395Z","last_seen":"2026-09-04T16:16:06.882492Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/#/no-wallet?mode=install","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"18586dde8b6df7f9b6543b03785d48e1","sha1":"e2ac7fab20d6410bf513f7b96fbc357ab899caa3","sha256":"6eea747a8ce683699bd1a9e9592f47d806b60928b4924a4054c0b586c1530129","sha512":"e164b1aacc6646f7203b5321585c3a68bbbf9ead03eb1fc726582d04231bde9ab9a16d4feab87297ce60610f9533ef2ba64b658efffd1aa62bf00ad59ef4980f","ssdeep":"","tlshash":"98c012dd60c6ae006a02546564af25e450255c17f89c2b129d94e9493e520f48123dfc","size":173,"data":"","first_seen":"2026-07-17T15:24:23.285619Z","last_seen":"2026-09-04T16:16:06.894481Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinexvn.cc/","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:15:28.295Z","timestamp":1788538528295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 23 Aug 2026 02:08:02 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F%2Fl6i00zNWXDaDsYBEnBluKs9PE6mwipKzpND4sYA1arfBzwxJ8nA3QqakoyxnR%2BoNApmRGWmd%2FVmtDNy9CcFVh6jiaOME65qQbQU%2B8jLba5OpDccjCQSzjg6nMJQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a35e4b0a0bf756c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5811,"size_decoded":2851,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"c2a01d5da6a15a619bce87ace365580f","sha1":"85d98ab50eca149678f33ff5dfff6c5fe357f8ab","sha256":"8c8661c8515865a71cb24a21d4086be379d2379cc4e01fb56effa92ed801b539","sha512":"df37aaea3ba054baeac86863556b4e82d9f819062a93dca00d3b6d652823d5c1d2a7d96fec8666d6fad1b53568407c787ca3105d0173bd190179b58345b20b5a","ssdeep":"96:+r82dDiUpu/f53uSPEJmDvhwhHDbDx3/D3Dur6TCZydHRH/gn22mUsGKAiowGwuw:+FtiUpu/9PEKvhwhj3xbzaZCxfc22nf6","tlshash":"5fc152f36da4882a13b1056aeee7f008db605187851e5890b4dca4ee5ff1fe488c7b75","first_seen":"2026-09-04T15:56:23.989539Z","last_seen":"2026-09-04T16:16:06.862941Z","times_seen":4,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":0,"dns":4,"connect":21,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/api/api/common/getAllSetting","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.606Z","timestamp":1788538529606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"POST /api/api/common/getAllSetting HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://coinexvn.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKZKLaMVpaU7AavOSltGajov8LORF3TDtn%2BdhtpHzSjUZgPSeqbB8E1U3UAA1LE3dLb657LAyCi5M0Uh%2FSCQnBSgBJjZ87UOtDNa249D6odrZVY2wRzGuyfKKWPKFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b120c6956c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11345,"size_decoded":4323,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11063), with no line terminators","md5":"fad6d58470d6318f9f2bd5fbc7eb6971","sha1":"db286ceb9f850036c64373b1563ddb4a43c325ca","sha256":"7cf28b3d80657d0790bb37eec4d37016dd7454303580e1d15c5b56e17f12fb60","sha512":"0ec588578e6b0123c4a368811d7e5001232426d02ab489296c08a01e142f2ec3fd8e112d488b37a81dab2768dbbe874e333e79d0086542f4ec5f6ba662042595","ssdeep":"192:cuvt7KOFgQxKsS+Ibhc2hJ5uW6kHLA8Zf81AiqLOAtJeZs5uewNoaLl7gIdnh8l6:+Z5zzYbh","tlshash":"ca32239e36d8cc7856d223d8c4b3738fb9a83c77f8949c46d2a7ee1ca492b30540b556","first_seen":"2026-09-04T15:56:23.988687Z","last_seen":"2026-09-04T16:16:06.863933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/ja-ccc3edb8.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.924Z","timestamp":1788538529924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /assets/ja-ccc3edb8.js HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 02:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840f0-ccdd\"\r\nexpires: Sat, 05 Sep 2026 03:55:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1217\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vqRnau3B6f4ib1bA6GRjyZAMjeS1IXOFrMJJBZSG1DfmlunLbp2z%2F%2BMgHqzlhZ1o4aSyGsAvFN5U0%2BstTS2kqEO%2FzWAE7LZ8JpsK6RIcs7DCZN8WRvfVeTRei8JFg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b140c9556c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52445,"size_decoded":17584,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (34307)","md5":"e7c7865b93f456bf32db544c2de8adfc","sha1":"d59ddf030dbfaff6edffd861c45677ad4c386b37","sha256":"fe4af0607bd0cce7903762d41992c5d36dbd1bbc78b7fa3791ba95a9ef687283","sha512":"cce849dcc9410ae6afe8e61ea3e9e27e574b36ef21c26e63410ccfd6df73e695368726f2070fa12049473e0324501b18a4fab624c240250f928ffa1951ebbb2f","ssdeep":"768:2vMeabmWRQsnk5OyVcb6ARs8kwD+FqG+EAb6EaUwnuZDr/zQERsQTt7WU:nbmWRQf8AA6ARxRD+FqG+EOr/z/d","tlshash":"da331aac9fcecc1d44b59233715e69c120b24c8ddaa262a64afdc9743351b2fe347a74","first_seen":"2026-07-17T15:24:23.21621Z","last_seen":"2026-09-04T16:16:06.865723Z","times_seen":7,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.frankfurter.dev/v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN","fqdn":"api.frankfurter.dev","domain":"frankfurter.dev","tld":"dev"},"ip":{"addr":"172.67.69.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.977Z","timestamp":1788538529977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frankfurter.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 17:36:11 GMT","end":"Thu, 22 Oct 2026 18:35:55 GMT"},"fingerprint":{"sha1":"5B:2D:3A:D8:F7:94:2A:DE:5D:F4:5E:14:3F:16:18:1D:C6:C6:22:AD","sha256":"F4:D6:87:DF:8C:CE:47:DA:30:62:33:AB:EB:8E:19:12:EE:D6:51:01:43:C6:F7:FF:8A:A8:5C:B8:FE:8A:AE:60"}}},"request":{"raw":"GET /v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN HTTP/1.1\r\nHost: api.frankfurter.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:15:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4YRESrVQwR6Ph%2BEfWwdYL6kPjfgn4jmO1X71RyX80JAak0Wc8d5CPjGxuofkZnJpa4KXMIbmN9DV3VMBQtF5%2BCFl1N73HTugXyysdnOlUzIan7pwR8dmv7nZBjeEm0l4DkK2iU%3D\"}]}\r\nvary: Origin\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"ac100498b3d3694d524d4b87e1fc7e3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e4b145928569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":906,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e9048802ed52fcfb8e5d5365806d2e1","sha1":"8d7ef6c32eeb094f18bc1e93944d64b3d364007f","sha256":"83c7904909a9eab20486c37d0ce8370f3a239ad59b77979fa45f8d7099609ec3","sha512":"48d73f06ab9e4283dc98f3a6361323067aea30e2a1612055655bf868eda112fd5cf6dd8859fe48f47bc06abea09baeeaac9b89c74bc94e0159a36951c043ddd9","ssdeep":"","tlshash":"f7c08c01aa3e5ea9c1b05da9dd21ea281f1a270d86c8ce825995e282b4a2537931885a","first_seen":"2026-09-04T15:56:23.981643Z","last_seen":"2026-09-04T16:16:06.867146Z","times_seen":4,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.frankfurter.dev/v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN","fqdn":"api.frankfurter.dev","domain":"frankfurter.dev","tld":"dev"},"ip":{"addr":"172.67.69.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.979Z","timestamp":1788538529979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frankfurter.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 17:36:11 GMT","end":"Thu, 22 Oct 2026 18:35:55 GMT"},"fingerprint":{"sha1":"5B:2D:3A:D8:F7:94:2A:DE:5D:F4:5E:14:3F:16:18:1D:C6:C6:22:AD","sha256":"F4:D6:87:DF:8C:CE:47:DA:30:62:33:AB:EB:8E:19:12:EE:D6:51:01:43:C6:F7:FF:8A:A8:5C:B8:FE:8A:AE:60"}}},"request":{"raw":"GET /v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN HTTP/1.1\r\nHost: api.frankfurter.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:15:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfzI2KbAxTfuf11pzRwUch1OPHjbwsbtULKdiWg0vGmjrUpDxdqhl%2FAXAIDU2%2BwpCW%2FLMA%2BEgEddnRwCNHrucl%2BCt6HfhCXm6YrjpBg%2B0EpB%2FOOnHG8HO%2FYi3VEWxzRJzLgv%2BNk%3D\"}]}\r\nvary: Origin\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"ac100498b3d3694d524d4b87e1fc7e3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e4b14692b569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":920,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e9048802ed52fcfb8e5d5365806d2e1","sha1":"8d7ef6c32eeb094f18bc1e93944d64b3d364007f","sha256":"83c7904909a9eab20486c37d0ce8370f3a239ad59b77979fa45f8d7099609ec3","sha512":"48d73f06ab9e4283dc98f3a6361323067aea30e2a1612055655bf868eda112fd5cf6dd8859fe48f47bc06abea09baeeaac9b89c74bc94e0159a36951c043ddd9","ssdeep":"","tlshash":"f7c08c01aa3e5ea9c1b05da9dd21ea281f1a270d86c8ce825995e282b4a2537931885a","first_seen":"2026-09-04T15:56:23.981643Z","last_seen":"2026-09-04T16:16:06.867146Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/vendor-72ef657d.css","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.197Z","timestamp":1788538529197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 02:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840f0-16997\"\r\nexpires: Sat, 05 Sep 2026 03:55:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1218\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8Hf1Gu9D7WQDQJ8Dfobn%2BnKcXWCgc82fFqnIg7ZL2TPPhF0X55Lvlcw58wuLuL3FAXVEMElpprtcAO7%2F4T52im%2FswQW7DvZD7%2BwHO5cw1Veukt4Q%2FAKvFEoaRzxjA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e4b0f7c4856c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":38378,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:46:51.687996Z","times_seen":382,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/resource/fonts/Arial.ttf","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.465Z","timestamp":1788538529465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinexvn.cc/assets/index-ad4878ed.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 02:24:35 GMT\r\netag: \"6a5840e3-ff9e4\"\r\nexpires: Sun, 04 Oct 2026 15:55:11 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1217\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nC2i06SVvHTCA%2BuwZsgl9fb6RVYv7yqarQM6%2FgE%2F6pbBIT00irehRQN3fuiXm5ZUk5jvM1%2FfFTE5x2lDQRFP%2BxarKc00is70qtpByLbzqIw2sb1RS19yQ9KV%2FyTsag%3D%3D\"}]}\r\ncf-ray: a35e4b112c6256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047786,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/api/api/common/getCoinList","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.609Z","timestamp":1788538529609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"POST /api/api/common/getCoinList HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://coinexvn.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfzhEAxYsfXfGy%2FxbPl6SWlkvE%2BfbbxWwHdh9zSSpc%2FoSLiUYVBSaKgjYVCcOYlJcUePjR3leUduRU8VNZQrbvwidscYxZpTEhx4bG2QnhbWRxKO40olivmQLShtGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b121c6a56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64517,"size_decoded":6705,"mime_type":"application/json","magic":"JSON text data","md5":"12c1df8c54d5127c884be78c355b75af","sha1":"ad158e9f22456884b579e4ed2c8d8196954134b9","sha256":"38630c1d503f794a8c7ba0f1183ecb054be18b827166b015c6bca8b5c231ded9","sha512":"163866bff62701ed85a7d7309726b457a494814e2b47d29e4700125f7d8ac07484d754326cfbb1700337b805f6394cfde336a785d19880bb60ffe4b6b449e3c9","ssdeep":"192:ZXPoXCqX1sPCX6sMXnHGXXiXWxsXUM4XCqSXfuX7TXF/YI57JzfYHKMcj12bVWg2:s0g6444tSwQLXst+un","tlshash":"0853ed465628d879c57f82d19ebf7e57a08d323fe4d08e1e96ca8d488ed8f74540af02","first_seen":"2026-09-04T16:16:06.872117Z","last_seen":"2026-09-04T16:16:06.872117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/platform/gatedefi/logo_144.png?2.0.1784168688461","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.832Z","timestamp":1788538529832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /platform/gatedefi/logo_144.png?2.0.1784168688461 HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jul 2026 02:24:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840e3-14d5\"\r\nexpires: Sun, 04 Oct 2026 15:55:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1217\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNomLfZiA9%2F%2FIo8QWAeCnWejddNMYYui8MKQeGLjDBpCgZjPe3Je28Sevgx0tAFXCYwhF2exIyE%2BLeVYOuJMLVPKM7GKc%2FHyQgtsPcVYwX2UFyjfh5qHLbuLY%2B0Ydg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a35e4b137c9156c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5333,"size_decoded":6156,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"da1eb91c16d5aa9612a3a7e9106dc7d2","sha1":"468a14c973ce68ea65ba67dc7cd189a112e6e272","sha256":"448a7e8de2d50458f14c13f879f5ac65acaf4aced758b3fdf6c51d1731b57c9a","sha512":"7b3268e7e8a46d748e382eac1ceb1de292a3dabed41727d1f49fba7421d2f837e8a0703872a6827437a028a962a62b41df22221f46ff5f838b249e3412de4877","ssdeep":"96:0thlw5F/FDwKr6gjurhG5ncXe7Bv6cQ7+Sfjxs3x/5nGJElUSDzo8kMd8rxScdyH:0tm5rJj0hG5ncoyH7PfdyxtlzkMd8Z38","tlshash":"b7b18e360b0664275ffe1c2f094d35168b1c04fc77e8a4d9e383480468b8da7c996dad","first_seen":"2026-07-17T15:24:23.26739Z","last_seen":"2026-09-04T16:16:06.875142Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/platform/gatedefi/favicon.ico?2.0.1784168688461","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.834Z","timestamp":1788538529834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /platform/gatedefi/favicon.ico?2.0.1784168688461 HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptxd1ZbYrWVA7rRVcsKw8mIZToD8I0ZR8kb3s7Lg7c1PtduuIqNVSXgX3cK5nYOXBfPj8GLCNv7zkfny145KBEoac7V8Xdu8u8tLZd%2FN0gektHV6kQy7S8mg2DsMGQ%3D%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 02:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Oct 2026 15:55:12 GMT\r\ncache-control: public, max-age=2592000\r\npriority: u=6,i=?0\r\nage: 1217\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5840e3-10be\"\r\ncf-ray: a35e4b137c9256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2302,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"7ef28e11a57cd9a64b22cd5228fd500e","sha1":"360993ce965fbf91dc87b70a2f379cbd185d2131","sha256":"d1aad156e0ee3acbae16f2926c403e8caedfd84c0390dc035b07cba165c2f18e","sha512":"496a5f54f08db72511af65706b0c303dedc4911bb4f934a7b98bb99f697c9b2001dec817a3da342254ee4d4ec391ec3c8df92a2e8f229f1a918fce82b8e00345","ssdeep":"48:blDwuntvfWd7nAw79gpdee3HW6SWS/Rc6IuUUgaiWWqMG:hDTnVf5csrnk1IWg9JG","tlshash":"6591cd55f0c1c929cf1904bf4c9255bbb2f758467f94812b8874fb9a1c227ee3b54c19","first_seen":"2026-07-17T15:24:23.210245Z","last_seen":"2026-09-04T16:16:06.876126Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.frankfurter.dev/v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN","fqdn":"api.frankfurter.dev","domain":"frankfurter.dev","tld":"dev"},"ip":{"addr":"172.67.69.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.906Z","timestamp":1788538529906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frankfurter.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 17:36:11 GMT","end":"Thu, 22 Oct 2026 18:35:55 GMT"},"fingerprint":{"sha1":"5B:2D:3A:D8:F7:94:2A:DE:5D:F4:5E:14:3F:16:18:1D:C6:C6:22:AD","sha256":"F4:D6:87:DF:8C:CE:47:DA:30:62:33:AB:EB:8E:19:12:EE:D6:51:01:43:C6:F7:FF:8A:A8:5C:B8:FE:8A:AE:60"}}},"request":{"raw":"GET /v1/latest?base=USD\u0026symbols=JPY%2CCNY%2CEUR%2CKRW%2CTHB%2CTWD%2CRUB%2CTRY%2CAED%2CINR%2CPLN HTTP/1.1\r\nHost: api.frankfurter.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:15:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0t7gBznvregx1TMUt0kluV2Jhx%2B3ytFClzTFarVTBRoyvm5CUjWC9UiMXOFXZHBwJYMSDD96vXPvySHekqKEOOG2NVHEp1Ru%2Foa7picaSGPNTPOvA1NAT7rb0Y0lY9rGn3zUe5E%3D\"}]}\r\nvary: Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"ac100498b3d3694d524d4b87e1fc7e3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e4b1408d6569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":899,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e9048802ed52fcfb8e5d5365806d2e1","sha1":"8d7ef6c32eeb094f18bc1e93944d64b3d364007f","sha256":"83c7904909a9eab20486c37d0ce8370f3a239ad59b77979fa45f8d7099609ec3","sha512":"48d73f06ab9e4283dc98f3a6361323067aea30e2a1612055655bf868eda112fd5cf6dd8859fe48f47bc06abea09baeeaac9b89c74bc94e0159a36951c043ddd9","ssdeep":"","tlshash":"f7c08c01aa3e5ea9c1b05da9dd21ea281f1a270d86c8ce825995e282b4a2537931885a","first_seen":"2026-09-04T15:56:23.981643Z","last_seen":"2026-09-04T16:16:06.867146Z","times_seen":4,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":168,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-res.s3.ap-southeast-1.amazonaws.com/echo2.0278ba7fc759740ad9365929235ff1cb1.png?2.0.1784168688461","fqdn":"echo-res.s3.ap-southeast-1.amazonaws.com","domain":"echo-res.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.151.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:30.005Z","timestamp":1788538530005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Jul 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C8:C0:88:DE:84:24:F2:2F:A4:DF:96:16:D3:BB:30:BA:A5:4A:9E:B8","sha256":"A7:6C:D9:08:B5:3A:A8:3C:70:FF:9C:84:99:2A:77:A9:04:93:75:AE:FF:74:49:D0:00:F2:A4:96:3C:E8:D4:15"}}},"request":{"raw":"GET /echo2.0278ba7fc759740ad9365929235ff1cb1.png?2.0.1784168688461 HTTP/1.1\r\nHost: echo-res.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4SEaOeLIYocEApmn3sKsNcSr6eybcIGXWmnLueC2zlQw8Q3+11MoCk9hXOVLpVHvJ8dXtK6/XJktsu6lRx5+y7mfV42d3ZhW\r\nx-amz-request-id: C6N5TKY7YYM67WMG\r\nDate: Fri, 04 Sep 2026 16:15:31 GMT\r\nLast-Modified: Tue, 06 May 2025 12:11:45 GMT\r\nETag: \"2ae746493820e82075bc8d320d1a5631\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 1260\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1260,"size_decoded":1690,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 16-bit/color RGBA, non-interlaced","md5":"2ae746493820e82075bc8d320d1a5631","sha1":"9785c05e05be1e7ab2a7f4f1234af4d9f10f9da9","sha256":"33af3236be5d4c21418afbf43f36266e03f581fe2aa4203b4bb46370289cb8e0","sha512":"de59c603d743d42c8bb773d4f9e753a28fdcbabbbebf7db2ae3a68e82a99ada82e8a2fb855c1afbbcd4d4670a86acc389201254eaa9f157d0202d4d3bac7db27","ssdeep":"","tlshash":"1121bafaf6511299c00df829bd38161871b5c691123db0ad6640e24d922c4f833c7ef1","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-09-04T16:16:06.877054Z","times_seen":324,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":0,"dns":8,"connect":269,"send":0,"wait":294,"receive":0,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/index-ad4878ed.css","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.389Z","timestamp":1788538529389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /assets/index-ad4878ed.css HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 02:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840f0-4bdf3\"\r\nexpires: Sat, 05 Sep 2026 03:55:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1218\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEX%2BP8gNT3THTNUcK5N7RjHYGo6fX9Ru6OfOX1BGo%2BcJ5SHrC4zCGNltxFLJBgSVuUhtgLl9aB%2Fj1EzdPDM4Vc9AruOuY%2Bk7bPFvH4H%2FQJXB2avEPdVcply%2BOiFMqw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e4b10bc5256c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310771,"size_decoded":68195,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"55cdb638ec8605c4508b0d9916ab8b77","sha1":"dbb1320c18a353134c0851340ed2a213d636ac0f","sha256":"ad4878edc440644957f7acfb964a4b08cf2867b6e6893bf85002d77698624935","sha512":"9f29ae3a0c1d06f247c7f81e825556e0d42447c1638576c91bc48b6acf7e350a9979c2e203faac07505d315b4e6153b05ee7227ac6c12e6c4590eebbd5ace2b6","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05ThbtX:+B/54NZ8w71ZACkFDS3vyf58rBeV05TD","tlshash":"7c64c6a9a590117c6f27aa7597ce5ad8f23ce6719c118de8f20160094fc3ffa2363617","first_seen":"2026-07-17T15:24:23.2267Z","last_seen":"2026-09-04T16:16:06.877908Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.391Z","timestamp":1788538529391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recharge-override.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 06:46:15 GMT","end":"Sun, 15 Nov 2026 07:45:00 GMT"},"fingerprint":{"sha1":"31:FD:F0:1A:FC:08:A4:E4:F5:76:F4:5C:C7:1B:4C:C7:F3:24:EC:57","sha256":"B2:09:71:70:0D:F8:13:51:A0:E9:29:C4:6A:34:F8:F8:77:FB:0A:5C:00:C4:F6:85:EE:94:96:1E:AD:75:A1:C0"}}},"request":{"raw":"GET /vendor.Z6835.js HTTP/1.1\r\nHost: recharge-override.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xGMhsgThBDsih4Y6q0B5G%2BlDq431aif8vHFB5gKlt1rauXSFeMScklmBuSY1GzySQ56vslfCw6ierX9o9puiSADc4WC%2FY5sxJrJ2hSaDnkKclLk80YcUn3dKC%2Fm3QWpk2nLs52pU9ZiWf6Kmb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ff691e356d6eced588bb084e9c0aab41\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e4b10dd9e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3030,"size_decoded":2068,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3029)","md5":"504c350cd6aba7fbdc6b473bc01bcac0","sha1":"5aaf78ad998830a371db4af1a538ac894a62a0a4","sha256":"009efbec1c93669d927494ee964d81bd7a241aec57c0ee0cdf12f01f9567a36c","sha512":"6d2dd777e8f4a743f1f376d9ef942dfeba36e2e79cb28f9bdcdeb5f0d40bc61992f386eb1164f041acf9ac7407209c7244d6c19f1c5827904e39a3ec81850290","ssdeep":"","tlshash":"245194a94a54c27749d20febf0b3c6cc7e623459b107e8659b0c0c2d5447ea74ea2d9c","first_seen":"2026-08-28T13:07:42.328984Z","last_seen":"2026-09-04T16:46:51.678596Z","times_seen":17,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://www.coinexvn.cc/ws/ea09385e-fe8c-44d6-8d0c-30b6673ef152","fqdn":"www.coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.611Z","timestamp":1788538529611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /ws/ea09385e-fe8c-44d6-8d0c-30b6673ef152 HTTP/1.1\r\nHost: www.coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinexvn.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kOPsleFQMEF+YdAIaT4UgA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:15:30 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://coinexvn.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: B5u8rSZsda7lm3BnBMYeKhlZ2Qk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2EjFnLOVgm%2Fs2fY6aZQBD9o4rzsYJCZg%2B%2FN6UrF4Hl%2F783KU6oWzzjBFAnetCEXRhaICw0fcO%2B5xempd33t%2Bd1d3VW7tr%2FazAuwmSEUMq9W23i4n7BMtZ9RXsoqKviuNfQ%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e4b124c2c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":882,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T18:58:27.736951Z","times_seen":18278546,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":22,"connect":20,"send":0,"wait":728,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/api/api/common/type/defi_activity_type","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:30.007Z","timestamp":1788538530007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"POST /api/api/common/type/defi_activity_type HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://coinexvn.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:30 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://coinexvn.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQJiXugezD%2BLlCqBDu8oxv2QbCLMVDxNl7zXQX4KDZKA02tCKaLN8YUmfPnrwRHtFLJXNDlPzNsyWRfrTDlt76naMKaT2zYYrGJGZD6f2rvh%2F6ZTSStFdpGV%2FyOPog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b148c9b56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":1148,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-09-04T16:24:02.728433Z","times_seen":855,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/charting_library/charting_library.min.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.193Z","timestamp":1788538529193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Aug 2026 02:08:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8a561d-2ba4\"\r\nexpires: Sat, 05 Sep 2026 03:55:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1219\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64rYhr2MLt4OvfAQwetgYjdNcm2h3I%2BuIx5AeDkoXJkZIhHPz5%2FQ5pIAMfM0O74VDQDPMaiHUxWcACGbqaZlvfxDKp%2BL8VeEk9eIe0NshqXkV4ZANigWYto9H2yeCA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b0f7c4556c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11172,"size_decoded":4130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF, LF line terminators","md5":"b229bc2332e0adb3d419d80982f7702a","sha1":"22aad35b26581773fedc6659565655ec01dbd92a","sha256":"8640f634cd6cd90576e8a60d9a368d5abe7458e4629a4015b55a265846ab9355","sha512":"c9a69d9b2768708655409e59d28a6d6e66262410d48ad5566bd254b1f98570680ce87a4515953f466ddc9b3f874c5bc9f27b3e2bb713a7cdf6161f612c7350b7","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa6l:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvm","tlshash":"4d324158ed2478720acb54f0427f190f8279e278d84a44ed3c84e6ec59fd4467a5fbb8","first_seen":"2026-08-28T13:07:42.368349Z","last_seen":"2026-09-04T16:16:06.881379Z","times_seen":10,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/index-bf90d89f.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.194Z","timestamp":1788538529194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /assets/index-bf90d89f.js HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 02:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840f0-1bc8e\"\r\nexpires: Sat, 05 Sep 2026 03:55:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1219\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9OEccmgdWLYozCHvzCPSBcIPVpN23DjThLNKquf5F1KDVAQoTmy4v0ve3iBE5UJFSdHp%2Fm3dQgvEjUd9M61jhUq9lj5ATSjCV%2FUc6CjLQWE6SQVtcvvIuQFx5nF0w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e4b0f7c4656c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":113806,"size_decoded":33911,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64485), with no line terminators","md5":"4c222b138424824ff0644794fcb387eb","sha1":"0d60dae37eb35f3719248932b365297dc99c761c","sha256":"52cd88b3c7362f237512bd3c29a2475df867802955b2ce285ecb14c5e2489b13","sha512":"8749563d2e98de665e8efaf8f93a1ceac1011fb204aaff366d6ddcd384b6f601fd3db119cc0c69e346208362f96c1935904c29dd615ebc50441a144f4d2ea5a4","ssdeep":"768:Lu6dtPzWhsPf/Ar8aDO4HZ5LB+6FnVQGzgzv/CKaPu/1B7zg/SeNetyIpixYpZxJ:LjT28GnQvv/tCetyuVDO484UK5hVLtD","tlshash":"4db34c4ea5070fff64fe0848759a151020280fd75dcdccd7e2beae5527faca4a24a729","first_seen":"2026-07-17T15:24:23.263395Z","last_seen":"2026-09-04T16:16:06.882492Z","times_seen":7,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinexvn.cc/assets/vendor-3a1c0b56.js","fqdn":"coinexvn.cc","domain":"coinexvn.cc","tld":"cc"},"ip":{"addr":"172.67.202.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.196Z","timestamp":1788538529196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinexvn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 08:02:36 GMT","end":"Sun, 11 Oct 2026 09:01:04 GMT"},"fingerprint":{"sha1":"3C:D1:2E:2E:9F:3D:AC:B8:C8:8A:2C:A4:CC:3D:B2:C0:7C:B9:81:A2","sha256":"EF:2E:24:46:82:84:D0:AF:F4:FF:C7:28:06:A3:43:42:38:68:D5:FE:7B:C8:82:12:B8:FB:D5:A8:10:DC:45:2A"}}},"request":{"raw":"GET /assets/vendor-3a1c0b56.js HTTP/1.1\r\nHost: coinexvn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 02:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5840f0-d96f3\"\r\nexpires: Sat, 05 Sep 2026 03:55:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1219\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Pn13jYWKRIIPZ6a2P7uo3vXmjjY%2Btr2fudu11YmiFAR2Ngh%2Fcav5DB9EUgFVhDXD%2FPrK3zzz7Up3QEy0CqYYvGGJn%2F4%2BNOBN4GflhljhIaOThuCf0AlmVhiaK1fTw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e4b0f7c4756c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890611,"size_decoded":295408,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"623a02d31a73a37cb74d34ca1088f3bb","sha1":"ec462e77b3c6f286bd33050575ee12007beea01d","sha256":"cf7da1497312f211eb447c334fc809dc9d3968b5940b2ffa9226846e386ba590","sha512":"85281eae897a5730edcf9e85a8c1dba8aa4f6d6515f7648d77c471cc1c6973d926ce1cf257a503f8fbded001a71ee8bad84ab67689f7109a217c3b4037f895c4","ssdeep":"12288:qlFQVBKGHG5VE+/pc95VrDK/1n+Jvn+AEOWG60FNAOPa2BUKBW:qlFOBKzVhxc1rPJvnxEOWG60Pa2BUL","tlshash":"ed153ac57292f06147ab24e250bb0006f3396e59740e84a4f1add8db7d7ad89a277f3c","first_seen":"2026-07-17T15:24:23.247619Z","last_seen":"2026-09-04T16:16:06.883553Z","times_seen":7,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"coinexvn.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinexvn.cc/","date":"2026-09-04T16:15:29.541Z","timestamp":1788538529541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm96.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 20:37:40 GMT","end":"Fri, 20 Nov 2026 21:35:14 GMT"},"fingerprint":{"sha1":"2E:51:33:E5:01:E6:80:F5:90:A6:7B:84:FE:59:1F:C4:16:82:F0:4F","sha256":"89:B3:C0:9C:05:73:1A:F9:40:60:D3:4B:FE:D0:B4:4D:6A:71:72:5B:DF:36:5B:39:6B:51:D7:78:01:60:20:14"}}},"request":{"raw":"GET /boot.js HTTP/1.1\r\nHost: cm96.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 16:15:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHhtN2%2Fv62gT0dYhSZgNSV%2FmJVbJD63XMmzdVZDo%2F0pr1oPeecoykpgYSrbFp6ZP9UhDCQgC0OkgtOOxTi2DbG8m%2BvzbxBAkcMZG%2BGpdpRYv72gjgVSS2IFSqPNizRu8vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"416b2396ec5ed3364b50800c87aa83be\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e4b11cd305691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14449,"size_decoded":5525,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-04T16:46:51.664089Z","times_seen":19,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":5,"connect":16,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}