{"report_id":"9d6f5dc5-e015-4627-8340-9e6661911ffc","version":6,"status":"done","tags":[],"date":"2026-01-04T15:34:12Z","url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"172.67.148.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"title":"Coinomize.vip - #1 Best Bitcoin Mixer | Cryptomixer | Bitcoin Tumbler","dom":{"size":117486,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (836)","md5":"310a8cc87a4700d60abfe457451ea627","sha1":"dc1025d40be164264432d00da7bdd9df90667148","sha256":"75f95ff208314fa7441d53b447a55e17bdb2b4c9d330084a110e4e6fa211d75f","sha512":"f076f3ea2cf35952b59b33ce9a8bb1d54358e2cd969992e8be8608b13c9d4e10350ffae5e74065e84fcef653a7f19c6d7654d779491d033be46781b182061e67","ssdeep":"1536:Y4cC3kDpuDsMlzp/BUe1+P/m89k9CakhOSXpIm12tX8xnoI/0aeAyP2zu:IKpD38h31WX8xoAyf","tlshash":"30b3d771a5e0257703a391d025f51b6e7e61d267ca2a4d1773ac8f6e0fc6eaacc2314c","dom_hash":"domhash020c87710ffa1b92a8a970dd6c00df33","first_seen":"2026-01-04T15:34:21.295939Z","last_seen":"2026-01-04T15:34:21.295939Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"172.67.148.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:34:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinomize.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-01-04T15:34:13.463312Z","last_seen":"2026-01-04T15:34:14.554093Z","alert_count":68,"request_count":34,"received_data":2300122,"sent_data":15866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":701118,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6cff1f9257020b78e3a9e9ebe1f5df3","sha1":"8698e967f52375dd24df7b519db728d3f85587f7","sha256":"f1d6e9b14a8988f62c5a2472c13452bb6e154913634a76d21fb2a347bfef4e84","sha512":"140638876c71e891782fffdb047b8f88d3df5d1ce35e2b68048cc6ef9a5c621a45b5fc34270024e9a709556778182d7060651e2c8c7401a88b4e82cec2bd9311","ssdeep":"","tlshash":"83d097286ee309a07877b0b82b4ff2082a3a20a33085d3007c0d8840afc4f3481338c1","size":252,"data":"","first_seen":"2025-09-02T15:06:43.377277Z","last_seen":"2026-05-11T17:00:21.047515Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"276b927c824f6a6efcb4c9161345c37d","sha1":"58507b525220698c130e5a2f91e2fc3880e5ceb1","sha256":"ea8a1ed84f8e150ffb7fcf2922a7514c72aaa424d30bc6558129ea75d4919152","sha512":"d53ee8ad32332ead59a35d434913629786d7d6c0d750eee82ad3b86af0e5ec4358740b96e60cf84a317c338a7439109e84ef1ebcfccb6ad853f76770237bd853","ssdeep":"","tlshash":"75110008f000228000c328b8802f002800328200c0820820000202c8cca20080022808","size":993,"data":"","first_seen":"2025-09-10T14:47:11.171074Z","last_seen":"2026-03-31T11:22:51.523562Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/coinomize/asset/coin-modu.637378.js","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0789864c1e9c3a6fc2b295a1f9ef15e","sha1":"395fbac12bdff8666d9a99b57400ce744ccb9411","sha256":"185da79804a47a222b8b754919cc231af03a354c7b62a012ceb1e044a32bb872","sha512":"fa0d0355d28a508532b0c850dcc43da2dda2c8990afb642984874b453326c096a8d33e11ce658ffa253fb1bdf294f7540252a9635682fe1e871d34c0f973557a","ssdeep":"","tlshash":"22410a0d39242ea815681ab4ebffafcdb620b4694e9fc1c0c591f9503ce0706562665a","size":2358,"data":"","first_seen":"2025-09-10T14:47:11.105656Z","last_seen":"2026-03-31T11:22:51.513312Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"be4ce2d3f4c4f42b1ff257dbd507b4fe","sha1":"b9b70dde4dee65cecd292a91c0d8ba4a7daf5e70","sha256":"7f702342aff212e1d21aec90cd3fb47c331cf1428447f0cac21b19a4a229aed3","sha512":"39070d33b4bd9b1e7c54f2a899c176bddd72132218b5be8de0e7083ef7f149401a652f11f6b4af8cda61aebffd8d1cabce0690eb19576f412d13a60103ee1fa4","ssdeep":"","tlshash":"3621bb46247ca76c97a39032154f4c8a91217d51be4eec84c183dc54ab3119b6f9bcbf","size":1287,"data":"","first_seen":"2025-09-10T14:47:11.156181Z","last_seen":"2026-03-31T11:22:51.515825Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-156835383-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef86104d5a562aa9787d762cdb35bfbd","sha1":"455d092d14af9e0d08e842b6a0574e87fd352b80","sha256":"4410eb0f24d204eb261b72f376013c8a091b03e24c272b8daf06dbdddb29f9fa","sha512":"4b1e914fa1a1d5f7b37c51d421e6147d62173f5b0a34b7429672fa210e2dbeacc4a8ac3f4f25e5d367213718f713461d76df97732033a64595344de80b06d5f0","ssdeep":"6144:tIeJW2bulKYv9VGDmHYmyBFzfnsFTWO4Waa5N:OEbu7lEDnsRWOtaa","tlshash":"6a5408c8b3da742683a36478503f104bb23b79d1f84cd894e186d8d52e74aaa4277f7d","size":291562,"data":"","first_seen":"2026-01-04T15:34:21.321511Z","last_seen":"2026-01-04T15:34:21.321511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/sandbox%20eval%20code","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e8f71e85605dda14f2a2279b94bd31d","sha1":"1b5c890327a1e944d95b27201ccb4354bd945cf4","sha256":"bc4409a6ccf53d07a1b34d9d8add5b1c82eb464b46002386e0fd1614c8396b57","sha512":"745a550ab65678bad81d86561462f572ca19fa0a6dbd55b1db9402adca4e0382da83f26f3b4d344ad45aaa81a015cff4dde2bf9c92a21e8241f60239c5d5083d","ssdeep":"","tlshash":"1ed0227d2cd334b481bbb471993fe2042a3f90933008a801f40c4084afe47540632c00","size":202,"data":"","first_seen":"2025-09-02T15:06:43.379863Z","last_seen":"2026-05-11T17:00:21.048483Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5996fee42e12dd9b74a844b1df393aa","sha1":"5ddaf61ae3d5c959c0afbdfab405ed88cd320db4","sha256":"8720f64c5ff29a417e34e32049560e330e0fb15555b8e3e207314de45c788d4d","sha512":"7f5e7f0aab7142679baa8d4ccd2b3a56d40f2deeb8988da2e2c17468dcaf1f3249d87520fd7b55b42a01729ddc657cd0c965ae54de572358f6f74c13dd93c09c","ssdeep":"","tlshash":"bec02be785440c7073e3b013c869e206083758df30004401c03082482848f0c03b3c8d","size":131,"data":"","first_seen":"2025-09-02T15:06:43.383016Z","last_seen":"2026-05-11T17:00:21.049467Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20447155ea1136840e7189c557e4ccb7","sha1":"ba57ede2bcf921071d29591f8b5811269119633b","sha256":"a5cf432a6e0f6a08f3f538908f0d9411f55373dbb1d55216fb70644510dae938","sha512":"aad1fb1f821a4f698114cb965d99c299bdf750583fcd7e5e979d62821f98fc67ea08cd332c40abdb6e59d01e636328b2bb6ac753638d43e5aa9b302361031cd1","ssdeep":"","tlshash":"40a022b83c80b028fb8a300300af00082b3c8203000e8000f08ce0b03fe02acfef2c00","size":80,"data":"","first_seen":"2025-09-02T15:06:43.384928Z","last_seen":"2026-05-11T17:00:21.050362Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/jquery.bundle.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"523298e0ce41803501d75a94499757ec","sha1":"d0ecf83c96977b7ca0310ac88f09b1888370d802","sha256":"6800f94a207c329cea487e92e331fe64a24353645bcde900b273e2520401ead7","sha512":"8c2d897fc9c1a9d206b2ec03929dfba5acc7cd7479c5a404a4df522bf4cf09c35c1967b1ed16bcd350a5c0f907998733658504a55c18a221708cb08279bd4388","ssdeep":"6144:5k6oxeeQPYLLmwpjr9T5filT6uYvZEQ+iV4OGrA3mBX2cl8Qc2OftOkzQPCbN:Ux5QPvVOGKcl8QwFOkzQPC5","tlshash":"cbb4398c7292743243ab20f5513f010bb2376969a80a8568f579d8e97dbcd8d217bf7c","size":524154,"data":"","first_seen":"2024-12-21T17:08:03.738973Z","last_seen":"2026-07-20T03:10:52.48458Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/jquery.min.js","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"425cfeec066ded5ddcc4e4bb7982a133","sha1":"bc86fb701bcf7bc89dcaff4815e0abbae9b07483","sha256":"3ea2372437fc6f22b3b602f59f15dc259d9708bec6ef8d1d141a11d03853c9bd","sha512":"897556cf790d212d3dbd1d7e86d0a58c6b5e94be84a9f5ab42cbbc24049c2ba1dcd10e98b9852992e12cbb084f9ad1583e98ca8f716b9ab6b8ae318c716f205c","ssdeep":"1536:BJkievZhtV47++bN0rkOvueif6WuNnzBjCaEL7PAOBZe1mIBaIr53z:e/iYNgrPA6e4w3z","tlshash":"01831bdd72c6b06257a7307a40bf610bf2361899280d8850f175e8e9bc75a4e827bf7d","size":83749,"data":"","first_seen":"2025-09-02T15:06:43.353757Z","last_seen":"2026-07-20T03:10:52.498047Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4de6d66cfdc65a07b5bc3d50ab20560f","sha1":"60b79e7be0244a707b8c2df5679ac73ef1e3aed8","sha256":"70f1d349ead09d1b6771ac2f7267b3bcb46b7e71e83a00d4b09a311221f0f522","sha512":"4a8f8f91af0bc0c69ff5e7470210730388e3f6e0fbadc27c5efe400f4f5325b59c522f7dfd3c5b1743fb2acc098072add059bd879f124363429a5e5ed12b4570","ssdeep":"","tlshash":"e1e0df8a67a6228046a7a0761cbf570d70344a0b1c49ce0439dc56d1af3af99356aaec","size":355,"data":"","first_seen":"2025-09-02T15:06:43.386622Z","last_seen":"2026-05-11T17:00:21.051248Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z2ZYPW200R\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c71fc2bffd05ee0fa901c3a9a923f478","sha1":"4c77b0fc04db69d8e41ee34e49b18a1a88b6019f","sha256":"3d81a562544365125dd6085e83df12744a20b15ec95e0e1137138966a73333b0","sha512":"2c690f5485db34ba033d250f6a96e91a80214613d63497ca85d138d403bca12f224b9a88a10d34a1c2fa2f603d4bb5a8bdfc55b3307d2a5c1f5e604aa576734b","ssdeep":"6144:AIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:xCpbu7/1mbrnsVWbMpB","tlshash":"059419ce73c674669396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7c","size":408368,"data":"","first_seen":"2026-01-04T15:34:21.317288Z","last_seen":"2026-01-04T15:34:21.317288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5c30fce248067421e8c731acfde6a33","sha1":"bf2b670475f9cc8d54aea189c50b87d087e0dfe8","sha256":"aa6204d4dc1213a6f9bf89ca6ea6d5ed09018802227b8ce549cabdea3a2d2a6f","sha512":"a20686313f2c524052899b843870f75e3be54043e2d2884dbd982754b96f1e0c8592cd7b173fcfddb1cb7e2d7d81964259c24ed23975dd3dccf2ab7184a1b3f6","ssdeep":"","tlshash":"f2118c670a1505ad0ee405c30dbf129a8cf99b704e49f0649a51f9c3d6e8fd255fdf24","size":916,"data":"","first_seen":"2025-09-10T14:47:11.153812Z","last_seen":"2026-03-31T11:22:51.51979Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4364f9ed09a0bfc3ea5e7e4a6a00649","sha1":"03c65f0ff386bfd62b5c5c4b2bddad973638c107","sha256":"08b13955a96bf30b3215b6e63d3bbe8164b1a00f6d6c216c2bc93d2970e2be91","sha512":"f896aa00fa557c8b5064a6aa9afc4ff1ff93edc6967e8284168ac5a5806b28c971a45cbcaae6152934f881797af8b890fb26c6f4eb6a73b639b51b199664f5b0","ssdeep":"","tlshash":"e3c02b8c320b0c7191fb2700cf3ffa00f402322495d95d32481d63055d20e03e7e4840","size":155,"data":"","first_seen":"2025-09-10T14:47:11.168697Z","last_seen":"2026-04-04T15:22:23.232282Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/scripts.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5072a0be7ebf3396a5b7c19e6a73002f","sha1":"4298b97dff8acc46daf6de0a0727fbca635dcca1","sha256":"9145d2109930abe0c3a794359a339057da2207cacb6d843de979ba4b89a5dcdf","sha512":"d13a34be487143461a8c788c1339ddcf98f9133bd3c847da20951309a55625276f73768b8f85d289d6dec23c6041ecca62b49ae6144c75e0419b5c03f1d282cb","ssdeep":"768:CO9SmAWO9uqLB/47lo40lDN811WbGJaQLE:1gmAWO9uY0q40UBLE","tlshash":"12e24f74b0a4117b17bb67cc156a2f1b21a351aace2746023bfc8f5d4fe6e12dc2590b","size":31423,"data":"","first_seen":"2025-09-02T15:06:43.365318Z","last_seen":"2026-07-20T03:10:52.491696Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/charts.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd849aeb9b9bab3846ee69c16918f2f","sha1":"714a050c94a3771b97ebf5c84f907698d2b63a84","sha256":"165b08b23cc1bf0046ab4bce3c190e84ee772479fd75d301896286c19d616df4","sha512":"27c5a33b2368a8db5a533cf55fea06a402af169dbd0d1455fab308dc87ea7eea5a0a1ee69c5d52d4e3ea457293e6d4cd9dc511d22e6c393248d956d6ea09ca9c","ssdeep":"192:RIu6HStE1i4yCu6HStE1HiWyu8i21Vyi2gyAz/MaLhY//CzaLa4/JrDtraq:RCaEarLStCSrDz","tlshash":"1462fe1af0b395225563706d07af4a209371b883990def28bd1c8b705fac52ea6f5792","size":15698,"data":"","first_seen":"2024-12-21T17:08:03.728976Z","last_seen":"2026-07-20T03:10:52.485594Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Medium.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Medium.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 66792\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-104e8\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbzogVIcX8%2BbhlIxrl4CczZyvMPy%2BUWEvCkNRabs5gAaDC%2Bp4zFJSw1hsTDLxt%2BfLihwG4zpUWfbMA58AvG53duZfUTqLUgiTWOb%2BXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf05903120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66792, version 1.0","md5":"50d01d3e6c994995bcaf829e63d53d1a","sha1":"c78884cb32e7b020971ffae746fe21d90502bcae","sha256":"998b049e731114e2fa35d65f23fc6e6e153249a4ef328912e3c7c49546e2d207","sha512":"9b8b97f7778e8a740de8be26d889fa93bf5984dc1e1dbc61bbe699f143186807da985e76f5352b9b13cd92b5c88aeeb344078e13f9e4b811ecc12f6ad5665c6f","ssdeep":"1536:Gx386A9UYEHdhGr1WuXc/ce3NV5rFE/2xEpmpFq8NVjd0yiPFsiQCqCaYl2G:GZ86qg4N947E2xIGZVpTEsOq/oz","tlshash":"2563023cf5c929a4c6d3215efe11f625b4d80af581518f0cdda90b096f7eec58b99413","first_seen":"2023-04-07T14:33:54Z","last_seen":"2026-08-06T00:18:21.285332Z","times_seen":3608,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Ikon-Crypto.ttf?uoi4h6","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Ikon-Crypto.ttf?uoi4h6 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/vendor.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 33864\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-8448\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ex47iLJrE9%2B66l3oOkACBQ1GJCBRRFZj7zbSB9Jd%2Bvw%2BAKBkfB6HdpEVfqh6Go9a0dkvSasaByRFN%2FyM6ZJ6%2FXbcbMWvTPBpT136XxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0ca2e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33864,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 26 names, Macintosh","md5":"d4bd159c88d46a8cfdc243bce675b314","sha1":"05da39a57ff3ca29eca1e56fa6c1fa1b5876e657","sha256":"0931c1650c69152d1bf3685d1090d24819a620e9e8a477e335ec8ca73a21e443","sha512":"7c70d72ee3e3039af0d3b4bc6229657b886f75930fe55ae628d7595a485e0d42db9e88fbce861a144099db849fa96e423d9db471098b4d954ebf6ca13cd9755f","ssdeep":"768:n5uPswFDfjVl/f197jVv5k7rinfX1ncuXtqWLRmcNAe:n5uPRFDfRl197jVvkS5cpWLXb","tlshash":"39e28c1be39acfdfc5576af78d50f22a0d96d2225b3ba34765c6ac08c5054a0ce6432f","first_seen":"2024-12-21T17:08:03.757481Z","last_seen":"2026-07-20T03:10:52.504812Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Quicksand-Bold.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Quicksand-Bold.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38404\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-9604\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lw3EcQIkAV5wpDM%2FHQZwGhpYd7RZr2uwfsLpBP9V5PkfwvXjaIVrAiIEZs4maYg6jMrAJsCKXulN4lA9Iqd%2Bf0jJNwJ8X8f8dAAgDX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf55f2f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"667e4219dce87028ff8cb72b1e3b0c04","sha1":"32bb1abe4497ed0ff3395df97bda9286c53a1574","sha256":"b9d5d5710e2a3b6178ce7246543147b7054eb53de2a3f08bc7a840bdb2c257aa","sha512":"aa4dd9a47103d5a7091a7dd19113073b2e6b4b377e44e763d576a3e65015aca8406880d7d0bc90002b01738054355d22a38c865536e0a76c86d81791636ddff6","ssdeep":"768:2t8TloDEKt9rNPwfm9VaoBxaRXAXnr2RTFdsEoADIVHNG5yW0sCGq+l1fC:2+GAErNYfWd0OXwTF+Eo0og5ydx8l1a","tlshash":"9f03f186e401097fd4be77e9dae6444bcc7f300a5e152974af7804ff890818a36e7a68","first_seen":"2023-05-31T20:52:30Z","last_seen":"2026-08-03T06:43:15.614156Z","times_seen":106,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/coinomize/asset/mix-mybtc.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /coinomize/asset/mix-mybtc.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 70962\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-11532\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tr3gZuopok2D%2BfZA4oRUld00RiIVtomyEMusJ6nAOmunqPmT%2BhGY9kIRO29VzY9qzzE0QQXKXcfgJDK6At%2Fm2xAty7jpWP0ITTUeHJw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a9c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"2a7c1df55f2ffac604c8205dd779a591","sha1":"2dcdfcb9ec2c4107f182d53675d590ac215fa07b","sha256":"abbe70c65ed51e4f215fa6e44089dad7be694093b30ca7816c4f44e7ac6d12d6","sha512":"7000ea0fa788f5e6ba2e1169a8f7baf97f72acfeeb4a1d2917672ba71f9666e9bb0946f7bd83e6db43659902a0aee59523a273177eec590d1d0497bc7d2f651f","ssdeep":"1536:gKkzfY+j3T1j0nJ+aDOUNuA7nrzofpFU5UR0yHBDErpwRW/vYcjvVjh:V+j3VeJ+qO87nrkpyxyHFuH/vYcj9F","tlshash":"bb6302a532f81b3367c7b8c79ab4d96721ddb210edec3e00b9d0790d376a85b8561903","first_seen":"2025-08-29T02:35:59.315141Z","last_seen":"2026-07-20T03:10:52.501824Z","times_seen":20,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/jquery.bundle.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/jquery.bundle.js.Download HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 524154\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=3,i=?0\r\netag: \"688e4a52-7ff7a\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyrz73Dhh3xLzTSLAbiJglMKSLW1c2s2USy2pgVRsEmiyvzg3J2cCIsfFve4XGM0PY3QpSlptcKimr01gqD4dvJ5UlAwdgs6DICW4pE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6ab6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524154,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Quicksand-Medium.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Quicksand-Medium.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38564\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-96a4\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPowltlEBDiDFQGe6lanQpsK5YRmwKfk1lp9krrsx08FdkNEbaIIAN511p1AuM5ncdEVydbjIBgncUxbvdn%2B7e6j1OdmkChf%2BjxEdPM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0ca3a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38564, version 1.0","md5":"09d354016e07feb1638e50b63b7fe1a1","sha1":"576b35d559c525fb5ccdb6299a36b95d5b6bb96b","sha256":"d7d3e4239f13a76553b35b7eca0709d2838f4c414a8964a058fd67b08083b2e6","sha512":"916b625c55288d09c178dd87203852026e3e2553e515c8b794bb84b9f3553116de6ce0943caf983ec6c338a051cec999adc790664c9244a6db8fd8ba485a6e51","ssdeep":"768:oqA9yUCJ2+975llxBxha74NCcWbLwYpG9dRgvzKmea2rCybCCpVQnTIw:oq8yU8pa4UcWbTG1gv36r0CwnN","tlshash":"1d03f10357292739eeb480416a38f7d2b75b8b641ad42bc3e299c4158a09fdb52f173d","first_seen":"2023-05-31T20:52:30Z","last_seen":"2026-07-20T03:10:52.483354Z","times_seen":30,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Quicksand-Medium.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Quicksand-Medium.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38564\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-96a4\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKkYNEpFO3g%2F%2B4qSndWnMWL10nxf8acKflZuF3WhrHeDzq18MkKpiF3JZ4esCx3VlWsvmqWI77Bdu%2FCwKqrIMAAc6EB4A7TtMhCly4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf57f9d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38564, version 1.0","md5":"09d354016e07feb1638e50b63b7fe1a1","sha1":"576b35d559c525fb5ccdb6299a36b95d5b6bb96b","sha256":"d7d3e4239f13a76553b35b7eca0709d2838f4c414a8964a058fd67b08083b2e6","sha512":"916b625c55288d09c178dd87203852026e3e2553e515c8b794bb84b9f3553116de6ce0943caf983ec6c338a051cec999adc790664c9244a6db8fd8ba485a6e51","ssdeep":"768:oqA9yUCJ2+975llxBxha74NCcWbLwYpG9dRgvzKmea2rCybCCpVQnTIw:oq8yU8pa4UcWbTG1gv36r0CwnN","tlshash":"1d03f10357292739eeb480416a38f7d2b75b8b641ad42bc3e299c4158a09fdb52f173d","first_seen":"2023-05-31T20:52:30Z","last_seen":"2026-07-20T03:10:52.483354Z","times_seen":30,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/coinomize/asset/coin-modu.637378.js","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /coinomize/asset/coin-modu.637378.js HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=2,i=?0\r\netag: W/\"688e4a53-936\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVwpV3OkWlHLT15LEEK9Pj6Xf1HJPS4RUT%2B%2Fa%2FYmjglxJieyTjC56reTBygtiO%2FpMBA3Gp9Ac%2FEqYv%2B5Ec7%2FbtOzP1lFYJcL3cyE3mk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a73120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2358,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2358), with no line terminators","md5":"b0789864c1e9c3a6fc2b295a1f9ef15e","sha1":"395fbac12bdff8666d9a99b57400ce744ccb9411","sha256":"185da79804a47a222b8b754919cc231af03a354c7b62a012ceb1e044a32bb872","sha512":"fa0d0355d28a508532b0c850dcc43da2dda2c8990afb642984874b453326c096a8d33e11ce658ffa253fb1bdf294f7540252a9635682fe1e871d34c0f973557a","ssdeep":"","tlshash":"22410a0d39242ea815681ab4ebffafcdb620b4694e9fc1c0c591f9503ce0706562665a","first_seen":"2025-09-10T14:47:11.105656Z","last_seen":"2026-03-31T11:22:51.513312Z","times_seen":10,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/coinomize/asset/mix-myeth.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /coinomize/asset/mix-myeth.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 72278\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-11a56\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKNMFaBlCO5KNXSRY383DTdsjus81OKbx1wTXGBP0II5kRSBkh6WfOu4YQrzMJBlUTT%2FFIvC8oxAksXLAZ5Gz96BuAY5Be4sbVzSfMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a97120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"c94a2a9c886888466eaeb4da6b551fc2","sha1":"9890a7a7728456599b1f7a0b5a3406ed6293193d","sha256":"5001dc4bd08951c79b2a093e4f292434136590a4efb5c1df9b9c93f97d047cc9","sha512":"0970b57d689aa4913e7093026549446ccca7beafe75844c20dcf29a02b54d061a44cd697531d0ce4f8a8479c2028203f42f22ccbc8190229a51bd8609474527c","ssdeep":"1536:6GND8Z3r9Zi5XOH8mvi3m5InJIe0jCS/87Jz39hXBeUOaMwPSaw:6GNiXi5XoviW5IJujah39hXkaRw","tlshash":"f0630260cc2936e35c328d96c5f74262783c2d5175e598033dcae087dcbb5699a13afb","first_seen":"2025-08-29T02:35:59.326229Z","last_seen":"2026-07-20T03:10:52.487894Z","times_seen":20,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/images/shape-i.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /images/shape-i.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 26883\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-6903\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUTVv8DL8AGGTWSYtSDu6i0Ij7G5I%2BPzVZZMYOliOf51G5TfiNsNowtdVO5cxV8hr0LLAUPFrYN3zBzhKMakB1utFDhj47SZ9BKaKvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf04880120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4651 x 2582, 4-bit colormap, non-interlaced","md5":"a6e4fd11db0af74cccac47075b0bc70b","sha1":"b12008ae6b0f3a320b918e90dc96913fb8ccb08e","sha256":"752b6c64b70ab6672b3061d5ed8f59b3a07284928e8a2ae718074922c220b057","sha512":"fcdb7685bf437b4c25b7bd342f76ed8b562b55b02bb5e10fa417e6006c494fbaac34e60149b170e3768586649c47ce45657567c74777b7dbe583c1f2d3d9fdd8","ssdeep":"384:xM0mlNKKyy6od36AcgWhsEDu4FRhlvvzs0rLgShUoJz0+S69y04Imt20HEKOBMLt:xW0Vyd2WOu4nvfrLg6ZKH6NmXOBMH2uV","tlshash":"75c2e1474848c75cce54a4f1a6c579d24f3393ef9f236310c4e415b94c3ada5998a7b2","first_seen":"2025-09-02T15:06:43.361791Z","last_seen":"2026-07-20T03:10:52.480925Z","times_seen":19,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Quicksand-Bold.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Quicksand-Bold.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38404\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-9604\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwN7qaJSh9tYIiifTyLDDxoar%2FlP3j0eeq1dgMWam16%2FD55fVQw%2BPD7gvU%2FSJ5mEjUwC8%2B8Mz6ZZ9XjLXPdIh%2FnPy%2B6HDYKkhF1GmZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf058c8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"667e4219dce87028ff8cb72b1e3b0c04","sha1":"32bb1abe4497ed0ff3395df97bda9286c53a1574","sha256":"b9d5d5710e2a3b6178ce7246543147b7054eb53de2a3f08bc7a840bdb2c257aa","sha512":"aa4dd9a47103d5a7091a7dd19113073b2e6b4b377e44e763d576a3e65015aca8406880d7d0bc90002b01738054355d22a38c865536e0a76c86d81791636ddff6","ssdeep":"768:2t8TloDEKt9rNPwfm9VaoBxaRXAXnr2RTFdsEoADIVHNG5yW0sCGq+l1fC:2+GAErNYfWd0OXwTF+Eo0og5ydx8l1a","tlshash":"9f03f186e401097fd4be77e9dae6444bcc7f300a5e152974af7804ff890818a36e7a68","first_seen":"2023-05-31T20:52:30Z","last_seen":"2026-08-03T06:43:15.614156Z","times_seen":106,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Regular.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65916\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-1017c\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vm4BL8yaMUHyZv3ToELuycVqP1wfezjUKBhZYQNtQrxouAT3qtJRsLIByc8SFmOwo1S22w%2BiC6OWvypBcNRSvqp1ItsP9oHckzy6oDc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf058e4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65916,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65916, version 1.0","md5":"9feb0110b6dff9ee2b9ebd17f7a1aee6","sha1":"90bbe308a02d7cda492e3beb1a6091809b8f35c8","sha256":"8cef08634dc57d6519717c5a99a9e502bdc96586fe64770520a4820b0b089920","sha512":"e5b4c7643a1e2f3c134d2a0a4e08922d01eedb5cf7f463e885d58167f438cb1745d16aca2e455733f59ac5b63d85d4a34efb37d86281fb51273569a3e35d7085","ssdeep":"1536:nAwBjS40rROWAAffkRf+aFDExB8+m+bHvYc3uezUAAxmn:AQh0ymaFDypmcHvhumUAA0n","tlshash":"0f5302d162117d6596ed003a427b7696d800df22f3baf2698c7fb9d3e2689c603c25a0","first_seen":"2023-04-07T21:58:55Z","last_seen":"2026-08-06T16:17:38.739262Z","times_seen":5437,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/themify.woff","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/themify.woff HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/vendor.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56108\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-db2c\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Usnzf3xplL12MD%2BSR6kRanZ9cJjar5dezT3r0hVKCs0Orr4A8hRmAbjO0MEK5vJzT9vNF7wJt5Angi4lOdTRIC11IHs8yhUBHpr8nk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0899c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-08-07T18:25:59.94745Z","times_seen":32105,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Bold.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65972\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-101b4\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liIzCW6PNmWpdqSv5LBZTc0uh7l4V%2F3pRwsmqrxgAxJi1cxBcl28e7pSs8j0ElF%2F2B2faztNTDnnLOCXtr7swZIeINot6Ovee%2FwwRhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf08984120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65972, version 1.0","md5":"f3a02e2578bee50e620e515912278bc9","sha1":"168e9a9e4690ec3437a6a3087dd2f76fadc47888","sha256":"4d7dd6e02d849e181e51db84d9d230d369b8ce7412dbcee9d7d1d19ad8a16741","sha512":"005bafa483125a3ef78548818143102ff56d0be9e17bd9a386fec7ff3d6719f3b3ea6e2ed058616a7973e0d7b82b7b993112c4757e9870208151cbe2c429e038","ssdeep":"768:f1Xyo8kWfMqTSmVGijfjPcFWsyLe2HZaGTPhl7MDjFvtdEaCYK6lzdwUBgLXx0XT:flnzzYGij70jmaGdl7A51lsCaLXx0XYw","tlshash":"5753025bad0d08ece0d77e805addd0a237d2b248276cd92516a940fc34d28b1ed1dade","first_seen":"2023-04-07T14:33:54Z","last_seen":"2026-08-06T00:18:21.410236Z","times_seen":2034,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/stuff/imgf/icons/favicon.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /stuff/imgf/icons/favicon.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 16515\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=6,i=?0\r\netag: \"688e4a53-4083\"\r\nexpires: Mon, 05 Jan 2026 15:33:51 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2173i0GPCMWCbv1SNQu4ELLPzr965CPpBFIkq%2BcpW01V9MkolI1HWENdGeGKRUqFA1b%2BD2hmtCmyneuEJrZMTv6yPJ3sp2acbamY0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf1ccc8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"853d23bf6eea2c0900ec33c17372700d","sha1":"31cd79d74f9726d3ec7960fe741e528035486996","sha256":"19e3e3bc81a8d41029208540745ddef39d6de9dbb2270836405c002618f4ee6c","sha512":"e34f5265af89ca22a5ad82ab5b24d79f0a2f7f25da05f826b9065633d16b6b2f6f50e42218347108ca7f205b1636070871688477774bbb39d86b7bd7c072b175","ssdeep":"384:bzbnvLfOkssiLgpVFaIL5IcVoAhonu1Zqivq0w2aI+FuACO:TvgqVFaEKc2Ah/qikLFuAB","tlshash":"a172c0a7bd185069e67a383387cd36a4b60cc8f2bd59d517118b396a2946fd30066f22","first_seen":"2025-09-02T15:06:43.312906Z","last_seen":"2026-07-25T05:29:45.784028Z","times_seen":24,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fil/jk/icons/lowfees.svg","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fil/jk/icons/lowfees.svg HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: W/\"688e4a53-2736\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBigjNfJZgLNDV%2FT0Cvrp2zRckRC%2BaK%2BKCP2O9IQoWSrnMuSMm6saN92K5zwx1TqcvDGSQ5Ly5U5e3ecQJwoxt3oyvzQMIgQxuf0v6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6ab4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10038,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab9d58dbf4386bed6e23c164d43fd4a0","sha1":"354b0afe0fe977a876c89bc7c1bad24730f33b14","sha256":"ef5b49c283741cc7926f3be566c8e630063a65fb5171b2df47cba3e849ffa38b","sha512":"b0bdee7f5b39569df0100ce961b7057b82d26e6d4ca249e91cde11c3fa4543fa924e815a29cb2b568c2c4e07f96ed7098cd598e8259aa43fc6006baa3f149bd5","ssdeep":"192:mAMiRC7NOofrrHworfvuEYAtsVoaoo8OHX4+eoU2TmoIm0DlU:mgQ7d/QozvuMFaoo8UheoU2Tmz8","tlshash":"1322dd022258e7ef9c5141bd5ab62cc1b5e9dcab9730e0c5ba7f3437d11c8e0b49c6a5","first_seen":"2025-09-02T15:06:43.358565Z","last_seen":"2026-07-20T03:10:52.513752Z","times_seen":19,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/scripts.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/scripts.js.Download HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 31423\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=3,i=?0\r\netag: \"688e4a52-7abf\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvr10oM5dTLCjTXP%2BNREtEdglkWqZPJfAQXM0edbPWNhT3BvzYLyQhQqab9QwkKWStGn4sTf1ggoaVMvBYCREvg%2FJp04Ps5QVIXRhKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6ab8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31423,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (18818)","md5":"5072a0be7ebf3396a5b7c19e6a73002f","sha1":"4298b97dff8acc46daf6de0a0727fbca635dcca1","sha256":"9145d2109930abe0c3a794359a339057da2207cacb6d843de979ba4b89a5dcdf","sha512":"d13a34be487143461a8c788c1339ddcf98f9133bd3c847da20951309a55625276f73768b8f85d289d6dec23c6041ecca62b49ae6144c75e0419b5c03f1d282cb","ssdeep":"768:CO9SmAWO9uqLB/47lo40lDN811WbGJaQLE:1gmAWO9uY0q40UBLE","tlshash":"12e24f74b0a4117b17bb67cc156a2f1b21a351aace2746023bfc8f5d4fe6e12dc2590b","first_seen":"2025-09-02T15:06:43.365318Z","last_seen":"2026-07-20T03:10:52.491696Z","times_seen":19,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/fa-regular-400.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/vendor.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14844\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-39fc\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XP%2BNnrgFg3UUeDmPjaut3uueBnbBU3Od%2BSYbjHGpg4RnRONpo6p7wMN3OStvkQB3w69mBvXp41V0AiTCu38s86d%2BgDHVHmrSNi%2Bk2k8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0795c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14844, version 1.0","md5":"bdadb6ce95c5a2e7b673940721450d3c","sha1":"f1e8cb035436d638da83d4696248cec831dcbe7a","sha256":"92ba7bfaa43a35c94353e96860d99376313ee9b5fce6124d4e64067280f9a841","sha512":"0c82d4a18b7c656f0be0414f61c370ca26a29542ca66b2f7c1c042320d76cc03caf77d1bf94896b952f34405ad87eb96ee47db345756d86873105dd45bad16c4","ssdeep":"384:nZx+6wXrvsAqKgby8IcALSXqo9OIu+7GTd/weO:/+vsDXuR3LSXq1Iu3/nO","tlshash":"9262cf7ff86e19401a6928f21a7388edc63129584270ee4c5d8df2974c69e5e220f3b9","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-08-07T09:39:35.472906Z","times_seen":2008,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Regular.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65916\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-1017c\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcOI9AFgd7ar74vKSnGR87sDsM%2B05SaqQh5PQoj1ezPpZD%2FPVGrhm%2BwKN10IawFi0Y4D5bzOc3BxVimQ8tHKcnKo0sTh8EnVfo2YnlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf55f32120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65916,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65916, version 1.0","md5":"9feb0110b6dff9ee2b9ebd17f7a1aee6","sha1":"90bbe308a02d7cda492e3beb1a6091809b8f35c8","sha256":"8cef08634dc57d6519717c5a99a9e502bdc96586fe64770520a4820b0b089920","sha512":"e5b4c7643a1e2f3c134d2a0a4e08922d01eedb5cf7f463e885d58167f438cb1745d16aca2e455733f59ac5b63d85d4a34efb37d86281fb51273569a3e35d7085","ssdeep":"1536:nAwBjS40rROWAAffkRf+aFDExB8+m+bHvYc3uezUAAxmn:AQh0ymaFDypmcHvhumUAA0n","tlshash":"0f5302d162117d6596ed003a427b7696d800df22f3baf2698c7fb9d3e2689c603c25a0","first_seen":"2023-04-07T21:58:55Z","last_seen":"2026-08-06T16:17:38.739262Z","times_seen":5437,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z2ZYPW200R\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-Z2ZYPW200R\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\nexpires: Sun, 04 Jan 2026 15:33:51 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137722\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"c71fc2bffd05ee0fa901c3a9a923f478","sha1":"4c77b0fc04db69d8e41ee34e49b18a1a88b6019f","sha256":"3d81a562544365125dd6085e83df12744a20b15ec95e0e1137138966a73333b0","sha512":"2c690f5485db34ba033d250f6a96e91a80214613d63497ca85d138d403bca12f224b9a88a10d34a1c2fa2f603d4bb5a8bdfc55b3307d2a5c1f5e604aa576734b","ssdeep":"6144:AIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:xCpbu7/1mbrnsVWbMpB","tlshash":"059419ce73c674669396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7c","first_seen":"2026-01-04T15:34:21.317288Z","last_seen":"2026-01-04T15:34:21.317288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:33:50.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEqiJ09nJjk91SZXx3uBoZNr0yIBj%2FgA%2FL3uyqwaDVKsh9%2BV18q%2F1t6cCkuekkIywrVHbUWOlJ85KoTyzBIw4va2hAtTJz%2B6J9vB\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b8bcbebfa6e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104738,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (836), with CRLF line terminators","md5":"389d93f9f030127a7e5184c3f3f68965","sha1":"1cb2be46676fcc73924dcce953a2683149336c25","sha256":"5c75e865cf34544f7f10cf84649973bf1a5b2275b58ab8f56d82659f19e3cc9a","sha512":"b73d4f45235c140a085faa63691ccbe1aa75242222afca7a38f98110a729361f3466e34b4773c95683c917e778392e891372b2e41ed1992ed1a2061e7927baf8","ssdeep":"1536:uZA5Ein/aypUPJQj0mwDbh/EgesaHskOWgFpXJ1sqevvc/ChJ1aYxiS:LrvrgGw1zep1au","tlshash":"e3a3b572e6c06573027382e025b547a9fe20936bc319895b71bd47af0ff6da88d5364c","first_seen":"2026-01-04T15:34:21.318326Z","last_seen":"2026-01-04T15:34:21.318326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":39,"dns":26,"connect":1,"send":0,"wait":144,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/style-azalea.css","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/style-azalea.css HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=2,i=?0\r\netag: W/\"688e4a52-397a3\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VAhVvy%2Fhv8M3ljsTrXoLFCO%2FDNE4TopD4F3h5iqeJt7xc46NTcgUVENL8%2BkW6JCNCZj73%2B44xkBymSZwfLOB4PT3DtTTS%2FA4by5N%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a80120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65441)","md5":"ad4160fd63434541fbdf70d9ea7ba194","sha1":"38e2defd8020a003881103e0685bf49ad8517a91","sha256":"7e5f2b32b7f6fb77c63766d781fb490c8a488cc29dc7c60dd6bc6fd24a3d3e8e","sha512":"7fcd5e89f8db3b28e7647a46058e03af35de5f99b6c30d1eb1fccd58d60d63d1382079344b311e78a6cac8181b5515dafc5825a92dc100c9fb4370d59db47f8b","ssdeep":"1536:quNqpbO2n2UXHW1iJh5hJR5tj9MTRseHsGk0HLDzey6DNZqRPyRcC4Tgpel3J0lJ:TNq02n2UfjybuyHRKRxUI","tlshash":"9334e851f659205db127c567e5d1ebec7339a603e3230bbdf2ab3676c6852da0233608","first_seen":"2025-09-10T14:47:11.127156Z","last_seen":"2026-04-04T15:22:23.188791Z","times_seen":14,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/jquery.min.js","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/jquery.min.js HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=3,i=?0\r\netag: W/\"688e4a52-14725\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjcXUSeffGcSOI5sYkpAfwRkkK2aQpYYRrCm4s0IXqZUscB5bEbj0NmKSUI7Pjwz7KBE1QDX6xJ%2FsPbEqaLupgOhWkU4pJfFEaL0Bfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6abf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83749,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"425cfeec066ded5ddcc4e4bb7982a133","sha1":"bc86fb701bcf7bc89dcaff4815e0abbae9b07483","sha256":"3ea2372437fc6f22b3b602f59f15dc259d9708bec6ef8d1d141a11d03853c9bd","sha512":"897556cf790d212d3dbd1d7e86d0a58c6b5e94be84a9f5ab42cbbc24049c2ba1dcd10e98b9852992e12cbb084f9ad1583e98ca8f716b9ab6b8ae318c716f205c","ssdeep":"1536:BJkievZhtV47++bN0rkOvueif6WuNnzBjCaEL7PAOBZe1mIBaIr53z:e/iYNgrPA6e4w3z","tlshash":"01831bdd72c6b06257a7307a40bf610bf2361899280d8850f175e8e9bc75a4e827bf7d","first_seen":"2025-09-02T15:06:43.353757Z","last_seen":"2026-07-20T03:10:52.498047Z","times_seen":19,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-156835383-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=UA-156835383-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\nexpires: Sun, 04 Jan 2026 15:33:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 103401\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291562,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3350)","md5":"ef86104d5a562aa9787d762cdb35bfbd","sha1":"455d092d14af9e0d08e842b6a0574e87fd352b80","sha256":"4410eb0f24d204eb261b72f376013c8a091b03e24c272b8daf06dbdddb29f9fa","sha512":"4b1e914fa1a1d5f7b37c51d421e6147d62173f5b0a34b7429672fa210e2dbeacc4a8ac3f4f25e5d367213718f713461d76df97732033a64595344de80b06d5f0","ssdeep":"6144:tIeJW2bulKYv9VGDmHYmyBFzfnsFTWO4Waa5N:OEbu7lEDnsRWOtaa","tlshash":"6a5408c8b3da742683a36478503f104bb23b79d1f84cd894e186d8d52e74aaa4277f7d","first_seen":"2026-01-04T15:34:21.321511Z","last_seen":"2026-01-04T15:34:21.321511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":75,"dns":0,"connect":9,"send":0,"wait":28,"receive":25,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Medium.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Medium.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 66792\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-104e8\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3dm86sEHDBcdgouvOhbwoOssQsqHfiI8GOf6hi2vi1j%2FK5Nm9vjFCqKGx4eaPCKRkOkbyX0%2Fi%2FozHEDIZQgyBZbeygn4SvAM0Ochjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf55f37120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66792, version 1.0","md5":"50d01d3e6c994995bcaf829e63d53d1a","sha1":"c78884cb32e7b020971ffae746fe21d90502bcae","sha256":"998b049e731114e2fa35d65f23fc6e6e153249a4ef328912e3c7c49546e2d207","sha512":"9b8b97f7778e8a740de8be26d889fa93bf5984dc1e1dbc61bbe699f143186807da985e76f5352b9b13cd92b5c88aeeb344078e13f9e4b811ecc12f6ad5665c6f","ssdeep":"1536:Gx386A9UYEHdhGr1WuXc/ce3NV5rFE/2xEpmpFq8NVjd0yiPFsiQCqCaYl2G:GZ86qg4N947E2xIGZVpTEsOq/oz","tlshash":"2563023cf5c929a4c6d3215efe11f625b4d80af581518f0cdda90b096f7eec58b99413","first_seen":"2023-04-07T14:33:54Z","last_seen":"2026-08-06T00:18:21.285332Z","times_seen":3608,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/stuff/cd/icons/logo-s2-white.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /stuff/cd/icons/logo-s2-white.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 5003\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-138b\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Mflt0h6uKdGUZLdXjtZ1E4QTzM0Bbx8pSGjc28KdggbaaEOpzY53Qup95PGO%2FPY7KKGoBRnNyBiqMdeyDB4kTPrYHCUxRv6uj93NhM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a8d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 54, 8-bit/color RGBA, non-interlaced","md5":"fcf1c91a41dcc340eb4f77558b5861c2","sha1":"162cdb9ce852b0d8d93b160a33334d1ecaae5686","sha256":"9b332aaaeac993e2fc2b61583cb667530962ec77d96aa00ad6b854c1ab51b8f3","sha512":"5ca8ff596ba8e65f4181cc637e12ebd4649a67b2b292a70c4db9c82e09ed7f22a4069d129912a81a2d0a6e68651b6268c2491c6b33b4324cf693389c90e06dbf","ssdeep":"96:0qDin4Q/NjCXbQCm0ciqQPJ0jWT5rbYnIE94ZEaBTJOIWnVKD3UYL4DCICrqfi:bDi4QtiLJ46pcIVZEu9OIWnEOv+","tlshash":"7da17e98a14ec964a7bfaf6636c0142097d421507e2e4a87b9355cbe1cf1115deba8c3","first_seen":"2025-08-29T02:35:59.244Z","last_seen":"2026-07-20T03:10:52.50691Z","times_seen":20,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/coinomize/asset/mix-mymonero.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /coinomize/asset/mix-mymonero.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 61306\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-ef7a\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76GNSH5dD2umcYIt6t2A6rGJdOJy0w2IQ8%2FLVY4MbdS7IBgSGlpquYNHUqN%2FHVTIsKTVElSDObF2%2BTJCsearjXvoeJ8OtuNc2YvAISU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6aa2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"43ca17e33cd82375238aa4ff83c01b2b","sha1":"d7e51d2bcc986e3aace3c703d0a1127945785b64","sha256":"6e35a7f845c206f822a69fdf24e302942675f0de44a4b485ad5ef7b12710e288","sha512":"a1a46e846e528d153751a83b9556d39a2fc5c1bb992a00e5bb3409e93b08e7c329ea3742778309e85f2010a000d27ab3c19efac56069971254e168a80e339996","ssdeep":"1536:T8UBUwTPpX+3QblICvMxU3B4cvicrXR/C2fV1OmuXLSXQIjbT:T8UBDpuClFkyx4gicrX32hID","tlshash":"285302b398ee6610701397e7cd0ea5bb40942f9e118b17938e5435cfbc16a27fb0452b","first_seen":"2025-08-29T02:35:59.257861Z","last_seen":"2026-07-20T03:10:52.488854Z","times_seen":21,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fil/jk/icons/instantmix.svg","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fil/jk/icons/instantmix.svg HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: W/\"688e4a53-424e\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60kca4TZys6C6Opl8y733fv%2FJvD1wJ6LGMqLVSAObCIm%2BU6%2Bby8SSOiI6BpU%2Fn6Kfvl%2BusWX3j2kbZoH3siUMovY3jNy58ISkHPe0jw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6aa6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16974,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c29babb879268b7410e41b68a468d13a","sha1":"dffc266846280b0878660000431880366322f148","sha256":"d8082ab643a654356fbf5ec51c7957cdb9913aeda77f7b07bdc6a34549202e4a","sha512":"91576b1b6581a0f4c787ab09e537f266effeb0382dfb014a2d7c9e7456b746a8d09fde5b061c83d91380a0bb5f15b222556d51c96f466a371c7b6f43e1b29eb8","ssdeep":"384:mCZIAaW0j5jtrD8y+Z2minVPVVP717U7fowlNgb:NZ7MP9+Zk","tlshash":"8d72fe170305abfadeea45685da6089434e5e8ebd070e2d0f77b381fc50d8e4a5acb35","first_seen":"2025-09-02T15:06:43.360612Z","last_seen":"2026-07-20T03:10:52.493604Z","times_seen":19,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/charts.js.Download","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/charts.js.Download HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15698\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=3,i=?0\r\netag: \"688e4a52-3d52\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20uxsQo2iDv7SF1qfqxkj2ZKHkigNe%2BWpVpQdOdcZA%2FEF0%2FaO9g0Wsi3N1GSulNKC34415Z2eLagHkncsVUVmv1EfLkEkGk6jeJ2gyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6abe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15698,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"6cd849aeb9b9bab3846ee69c16918f2f","sha1":"714a050c94a3771b97ebf5c84f907698d2b63a84","sha256":"165b08b23cc1bf0046ab4bce3c190e84ee772479fd75d301896286c19d616df4","sha512":"27c5a33b2368a8db5a533cf55fea06a402af169dbd0d1455fab308dc87ea7eea5a0a1ee69c5d52d4e3ea457293e6d4cd9dc511d22e6c393248d956d6ea09ca9c","ssdeep":"192:RIu6HStE1i4yCu6HStE1HiWyu8i21Vyi2gyAz/MaLhY//CzaLa4/JrDtraq:RCaEarLStCSrDz","tlshash":"1462fe1af0b395225563706d07af4a209371b883990def28bd1c8b705fac52ea6f5792","first_seen":"2024-12-21T17:08:03.728976Z","last_seen":"2026-07-20T03:10:52.485594Z","times_seen":20,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/images/dot-c-azalea.png","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /images/dot-c-azalea.png HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1271\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-4f7\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhKyyroxQaY%2F5wRv2NRdPrbaCs2hgGGE1Y7i%2BblpoOv6yE2%2By0LI2pOmdwuNId7r0WVM9KD0K8R6NxvIReBHNOeHRHvsoXXNJxLDtTE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0386a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 928, 2-bit colormap, non-interlaced","md5":"1f53873f1aa7078fc759bee722dd3226","sha1":"2315ecffb5bbf2ddba3ec12159d20b06974d361e","sha256":"9c8ec5739a4be75dfcac86cb86bd613d3807fe8b3907674dd135cb45e2753b87","sha512":"52e96cfb2dffd5fb4a5d4e04d13be7342ad7d9ad6b16f03724143b72ddf1edefc9bd926da0bbfb367ded997a1c54cdeb50f9a769ff1a88599c114e8f977f3997","ssdeep":"","tlshash":"ca210ad752c9516ec7958870c8794d94b646a2f93ea1ee4600c7120629132eb5103387","first_seen":"2023-05-31T20:52:30Z","last_seen":"2026-07-20T03:10:52.509473Z","times_seen":25,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/fa-solid-900.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/vendor.bundle.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73852\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-1207c\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zcdQWHe3GrVuglCxuwpqzfKXBfRp8ljR%2FMXh05vii9W2Gc93fW1oY4exiVCjUgrAOks9Ixg0I9q3hTgBGA7xYPdIxNbKDna9BtnJZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf0692d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73852, version 1.0","md5":"fb493903265cad425ccdf8e04fc2de61","sha1":"fef2f08d60e907750df0bc41ce64a7139642ddf0","sha256":"7798165ee5a3c6809310d8261dcbe7c8d0c12d795b7b09a71af3eb86ec8f33f2","sha512":"321c63dc142426eee5e8c048e1d5a3e29fa1407f660f927889029e3a1db4e8b5d085ab7b757e5b9ee711646ff4adffc7730cd0cea16ed2d95e4be125a9d9b081","ssdeep":"1536:SuS+6SpmWvQxPsoy7ducmwmoyDU8ashRtSxxKEX/0KD:Zxc6asogducmG/OhRAr1P0KD","tlshash":"537302172360deb0fe84a66aed78df89911a5f07635ac039c4e3f4b598c401efae45e4","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-08-07T14:45:08.06359Z","times_seen":8077,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fonts/Roboto-Bold.woff2","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:51.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/arset/style-azalea.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65972\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: \"688e4a53-101b4\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3ckj%2Basu%2FTQTSZQ9%2Fdry0DexRCu6pwKZBXcZMMsvobW8aURJDG7YHpG0gtR0atBJEna9R0JvN8evok%2Fne%2FC9MqNiQf4L%2BtaBJcF%2B%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbf57f97120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65972, version 1.0","md5":"f3a02e2578bee50e620e515912278bc9","sha1":"168e9a9e4690ec3437a6a3087dd2f76fadc47888","sha256":"4d7dd6e02d849e181e51db84d9d230d369b8ce7412dbcee9d7d1d19ad8a16741","sha512":"005bafa483125a3ef78548818143102ff56d0be9e17bd9a386fec7ff3d6719f3b3ea6e2ed058616a7973e0d7b82b7b993112c4757e9870208151cbe2c429e038","ssdeep":"768:f1Xyo8kWfMqTSmVGijfjPcFWsyLe2HZaGTPhl7MDjFvtdEaCYK6lzdwUBgLXx0XT:flnzzYGij70jmaGdl7A51lsCaLXx0XYw","tlshash":"5753025bad0d08ece0d77e805addd0a237d2b248276cd92516a940fc34d28b1ed1dade","first_seen":"2023-04-07T14:33:54Z","last_seen":"2026-08-06T00:18:21.410236Z","times_seen":2034,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/vendor.bundle.css","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/vendor.bundle.css HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=2,i=?0\r\netag: W/\"688e4a52-39c20\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XucR5BEEfpG4jM37Pi89vlt0TKNpJSbVFgLEiTmwKI18u5g7ZJZewVJBHZIogXQP%2F%2FbUNS1bwxDfGRUpC6EeM7FvxVHbG0wdXPO3QsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a7c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236576,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65256)","md5":"71a30789bcdd4413b697c628df8c9f32","sha1":"0f051f13db60fb5bc799730d613eba2bb203cc08","sha256":"2f89e141800dd8dbde22e6183275afad2187db876edb532a514868790c7871d5","sha512":"ba9a29e0fc35f23d330b87c56e104482040f008c27c68f70274c31c76811b9f4559d535825873833e0ce0a4184b0d05b62494105317b0a616e057cdb5ae149ee","ssdeep":"6144:LIJIuoMUd0c63muCfQNk6hNO60zPlMavAgr:m+PlMavn","tlshash":"613442e5f59810d9b332c11feb80b7bc257af624d6514daaf01b6f2c8ec52860592f2d","first_seen":"2025-09-10T14:47:11.108169Z","last_seen":"2026-04-04T15:22:23.184895Z","times_seen":14,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/theme.css","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/theme.css HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=2,i=?0\r\netag: W/\"688e4a52-74\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMOa6oMWldQKuUufelAtwsUgDDUC85oyF7Gi%2FnOYGnOndtc1%2FwpOdtqqmkpdL4VFzH3ezhddeWBl7aYcnkkRiGt04qzZ3Ly%2F3REN6Gc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a82120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"70d7669d1b4bcc9f45ca3c6f8e22fa3b","sha1":"bea7f7a3d519d1a8ed791af4d6460deee52db2ec","sha256":"c8bb5887ce7f5039ecb16438124377b0ea160f736fafa3b851c4e0aab63d144a","sha512":"53954b86942b53ab6343c0b941b3aa12bb4b95ab02382d909c34eab037aa90cf47652e759401c8c816d58cb9892413593afad315dcb0005184f6bcc91d811c1b","ssdeep":"","tlshash":"c8b012fb62a6e930255855d8b1242816feb05f9d124c4744a08117c893348f742bcf3d","first_seen":"2025-09-02T15:06:43.370684Z","last_seen":"2026-07-20T03:10:52.50574Z","times_seen":19,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/arset/main.css","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /arset/main.css HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:42 GMT\r\npriority: u=2,i=?0\r\netag: W/\"688e4a52-5e9b\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ki6w2RW8EfbmErRUQdBY7a911TRm0xNGSNKq2zYpha3pwAB41miEJfueBgJQlIQM4XvUeBZ1zcAdkwDe0QGGa%2B%2FC%2B5hwCRE%2Fx7O9Wow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee5a8a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1a0346a1cb7823066845e1ca3a9fdc9c","sha1":"04304845e09490bf1042553eab619ff77ce42f1f","sha256":"92a550c9771715d9e26686ff37ce00605bd1ee84dd5d3a9b91661a2e0d5587ba","sha512":"3d585514caaf616f87f0d0453a4a6edb1108ca72c408d1f959b0dd74d816549f917478e6238a73d4408f0cab8a1bd29ceaf8fe9b4b0ae6e8f4a5e830dac7e23c","ssdeep":"384:FLlFbF2FCXzZFTkFScFvFEy/Fp78F2FFxCkF7jODc0ikFvbs4mbFkFeFCPFsFjF/:FRFbF2FCXzZFIFDFvFEy/Fp78F2FFxlh","tlshash":"c1b2c097a9e31c49740b54685bff976433ae1483a34fcaa53e90729cdf4c3d21673a88","first_seen":"2025-09-10T14:47:11.130908Z","last_seen":"2026-04-04T15:22:23.196088Z","times_seen":14,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.vip/fil/jk/icons/anonymous-mixer.svg","fqdn":"coinomize.vip","domain":"coinomize.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinomize.vip/","date":"2026-01-04T15:33:50.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 13:05:34 GMT","end":"Sun, 22 Feb 2026 14:03:16 GMT"},"fingerprint":{"sha1":"C9:9C:5F:AF:96:EA:39:BF:AA:A6:E0:EF:A9:52:72:7A:34:9E:EF:40","sha256":"02:A4:AB:EC:14:2F:89:FD:C4:C9:05:2A:54:C2:57:3F:68:0E:6A:39:57:2F:BF:D4:DA:F2:D8:83:33:FB:A6:C4"}}},"request":{"raw":"GET /fil/jk/icons/anonymous-mixer.svg HTTP/1.1\r\nHost: coinomize.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinomize.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:33:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Aug 2025 17:26:43 GMT\r\npriority: u=4,i=?0\r\netag: W/\"688e4a53-1809\"\r\nexpires: Mon, 05 Jan 2026 15:33:50 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbeFf05CpDwZ6mLIYwHYgrkbEEqYWlgoLVsdoUVBzIye3BavCmryElzJSPilpfEMlyv9pO%2B8vRlsBZ3Puh0R4K6E%2FXEWqW28iKlaKJw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8bcbee6aab120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"611b094c73b1082121e706dcaa2f739d","sha1":"e19c41b14017377557df30c0eae290ec481151f4","sha256":"f2a307178269f681d09bb54aa4e42b17d82f97d28faaf758a4b8b7ea95d26bec","sha512":"5afc370ff7b02deef74b31206648b8edd31bcb76e38dbf1a82e622fdfb99629cbe61cfa9cc5a8ef11707ec0bb7d44ef4669c4912f55019198c071e87e01ce472","ssdeep":"96:3kfARB3CUNx+6YKlKUb7GfXrrM+IDR6OsEyvwWdeos3frr:mARRCUNchfrrdIorfvwEeosvn","tlshash":"84c1000233ace7ee8d5041ea56f228c1b5eadc779730a1c5fa6f3437d11c4e0e598a65","first_seen":"2025-09-02T15:06:43.364102Z","last_seen":"2026-07-20T03:10:52.508478Z","times_seen":19,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"coinomize.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}