{"report_id":"bc901a34-d238-413f-8883-8dbe0e5795cd","version":0,"status":"done","tags":[],"date":"2026-08-09T10:03:16Z","url":{"schema":"http","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"title":"CoinBase","dom":{"size":160378,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51511)","md5":"806f0253b40ee4e5f43b7ac49b703b7f","sha1":"4111f1ee3ea284a517504566927e51ad4f3a19ad","sha256":"c98f3777447c4e95ec1abef15eee29beac132be164c48f0360381e7c802572d3","sha512":"84b81bd3a847d21b39e16670cc6f4d3970f398ca19cc97d49a4a88d3a329f05a60abe3f18f0e5f9459e8e4853916eed9c7ed65ba49f78843bddd1c0fc26a2792","ssdeep":"1536:vxmoOZI7RqsqL88ANd8P8PcMr/MuwWzZ0uFE++6PY/Xy8ksKhY6y:mr2y","tlshash":"f5f3f7f6a3e8a1e8e40bc3f8e672a476312b34ff7f56c658719c1a94e76109c495dc80","dom_hash":"domhash506f8b2b100571bf40733461453eb5bf","first_seen":"2026-08-09T01:29:45.359978Z","last_seen":"2026-08-09T10:03:19.785725Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:03:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"amount.999coin.top","ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-08-09T01:56:14.689815Z","last_seen":"2026-08-09T01:56:14.689815Z","alert_count":100,"request_count":25,"received_data":3167737,"sent_data":11894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.999coin.top","ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-08-08T14:45:20.649268Z","last_seen":"2026-08-08T14:45:20.649268Z","alert_count":36,"request_count":12,"received_data":201998,"sent_data":6863,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-08-06T05:47:33.687564Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-10T22:14:39.498136Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-10T22:14:39.499407Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-10T22:14:39.499944Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-10T22:14:39.501162Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-10T22:14:39.500458Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-10T22:14:39.501695Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/ContainerForm-5b7b2363.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de9b8b06ef2a887475bcc263fe0130a","sha1":"7fd5571f3fe9d4a668443508db2c26bde1e16557","sha256":"d3ef71ca97100b42f10b8cb1f378cee622d80bc93a5d9a4a1045d5279b06b417","sha512":"28b1907392ea3145a53a676ea0c628d5a6b507b884d443c28aaefa819008831d8eed19b532f0191fab1bf429ac89f3db5041d349cdbef9d09bacff7fe5fa4ef6","ssdeep":"","tlshash":"d4d0a90c685192b28012098c33a625368b5e2a6733b88d82506a84624b5a4aa220ef5c","size":217,"data":"","first_seen":"2026-07-18T06:39:12.399086Z","last_seen":"2026-08-09T10:03:19.810097Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-e95427f0.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd9655aa4422c14204c18ce92a2f8b1","sha1":"956ddfb8ffccc18907b8d396c98f5a157b6013b2","sha256":"5516ec13e69373792e379c92b0bc1007e23b0b7643b2299aba7048f2873eba40","sha512":"8ea290816aa932d5586a0f5a7fce343337db0f2c5c9e47ea124189229e788d84662ed0aa1ecbb100a8b1a8a372793fe611ba6b524b752673808ceb11d9c83b57","ssdeep":"","tlshash":"c811658e7cf4cef940bd0c863a930114550f06d9565098f0f89e4e5c26bc5d25a2ff1c","size":1077,"data":"","first_seen":"2026-07-18T06:39:12.402267Z","last_seen":"2026-08-09T10:03:19.806914Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff6e6f71e6f8808b46cdcc36f8d90461","sha1":"f42977ba717412fc17be1325e0cc44f4e2780171","sha256":"d7d1c9c17dacd93d7204fbe8d6e1027d6077a57bc5c7103f84910f7719c4c6c0","sha512":"c555071473477017a26e7782bcadfcfa21dd53d26e19f043397ae9eac7e9c0aea395692332db096998740a87031d66abcc0ab914cddc400c11d601f12bc48242","ssdeep":"","tlshash":"dac08cc5a0d2ad102602645510af25e490248026748c9f128dd4d8482e620b88233eac","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-08-11T13:06:41.592816Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/phoneCode-dd4884b8.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a75170b1e0eeb35731481bb8575519ac","sha1":"dbd7730f21df29d66e02ef79b0583e248c5e9031","sha256":"3cf36d246507ccc200645e351a1bcc55d11c35d41ceaeca70b42a1f2f178a500","sha512":"d01a521d84fd41c801c3bb99af7bfc18026473590d6e0509880d3948acfcb910338118a27457fb870d13e564f6cc3e1248c694b21d965b2af9f4251988d500d3","ssdeep":"192:ws25vvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFheB7q:wk5a28wa8H5tfW","tlshash":"e4524c7b00b017a6fbf09321f100f9a663c91d862c57a5e38e7f539259a00e7b5cb65d","size":13330,"data":"","first_seen":"2026-05-01T02:21:29.301156Z","last_seen":"2026-08-09T10:03:19.844803Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-08-11T15:43:25.290769Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/useHome-15d2f1ad.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80cd1bd48313ad9d4989e99384101ec2","sha1":"6c143f941fea613e02fa81129d744f0f0496998e","sha256":"88e976121840e997540ac8a1177ccd1dac9e79b76111f3a2d8d005df278158f7","sha512":"f1738f05417512f0bb95283f87837590ba2a612361c83494b228202c39be3996b688db0546801039c986617770e0f42545015d51432b8e4ef2aa0b0f7f3b65dd","ssdeep":"","tlshash":"5371b74873a380748b7506710ae50b20a07fd71aec57e0ccf292096a867ffdab5dcd69","size":3715,"data":"","first_seen":"2026-07-18T06:39:12.430242Z","last_seen":"2026-08-09T10:03:19.805676Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"85cdff17564cdeae6cc2a7d15a194016","sha1":"fa111b15d2f2f284314d5c6f953480fe989f6a42","sha256":"b07179b3bd08374b256515ca2ec1db26ef23f35ea969dfc16e232170c2119a5d","sha512":"4f631fa87f3851821f10e989dc84c331edbfd7e4bf9455e0b7804a6c282556a8839cc7692576b6be20a18a23fb3bdbfa64cb31d223b1a3b9815f1f9a6e9a4efd","ssdeep":"","tlshash":"ddc08cc4a0c22d101612646420af35e89024802a744c5b128c94d8482e660b49233ee8","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-08-11T13:06:41.577379Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b4c1c632a9253be71d15901a67e5736","sha1":"728d2e4951da7bf399b7d54b675f17732ac938ed","sha256":"573cc7af8ef0ae6cde3588715917d46b20390d791b0786df96f3fd4bc0d7855a","sha512":"239d3e018f8d9124f200b8bdc576adcaf746396e84333be98746da9fa8985e8bc9e13fcd145a2ec9c2168641609b3cfcf6b9afe9ba17dbd772cd5464d1791687","ssdeep":"","tlshash":"7fc08cc4a0c22e102656a85020af24e8a0244066b0482b02ac94d8483e220b08237ea8","size":143,"data":"","first_seen":"2023-07-09T14:24:47Z","last_seen":"2026-08-09T10:03:19.855879Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-11T13:06:41.58276Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-E86A33-aa4547ee.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1122f136b1123bc50dfe67253e119ff","sha1":"a1846fc8db23be4e46fc128a1df411604cb3da8c","sha256":"f648979cf77656d9980704206d82dca1bef1017efeb8fa6c133151cbdf20fbc8","sha512":"4c8d95deaac35caa53a309f46ee8300afd7ebe827003633610cb7072b1abdc443b92850ebc891775acebaf9c395ec920eaa8cf79ea13559b6563607b5290b762","ssdeep":"192:T/1o7TQvk7LBNq5p/nbV2Zl9Dy2jkGcTD/jrNzmdN:T/MiwZXOCkG2D/jJzMN","tlshash":"b1025aa4aa589d7b407f2f0a116200c1640d37aba07dcf7da07dd5043ecdea9946af34","size":8402,"data":"","first_seen":"2026-07-18T06:39:12.419663Z","last_seen":"2026-08-09T10:03:19.800444Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseLogo.vue_vue_type_script_setup_true_lang-dd622dc3.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2b37606c5bf228411b0a8f49f45441b","sha1":"04bc9a4d38a13b06fa2117b1fb04f6dd6ed54fa5","sha256":"efa18d8512c33c8eb24de7497d9a8f1844ac2c81956d208fd5a7212e7604eb5a","sha512":"56eeeb8886993eb71c5fc68e144643668164d38871bbcea334423daa857f84a847f660a8e175d181510cae5c3034435a4b5b6db4e9901db611c7eb755866007e","ssdeep":"","tlshash":"7ff0c90f5c2a91ff80a658982b47204212085efec72099d4f3e52275664286ab01eb78","size":522,"data":"","first_seen":"2026-07-18T06:39:12.414655Z","last_seen":"2026-08-09T10:03:19.804961Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-c6e297-5638315b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","size":955,"data":"","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-3cd5d72e.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971ef9e61539352b0b6eccc81d03ab6d","sha1":"3723c36ce2b08ffec151965cd737edc3d57d94a6","sha256":"647c88092c08699941eb455e4e0f4597dead8381322f2f0079f29ce5700ba2cf","sha512":"8dd20463ab75576804d2ac8296528aec6bba4bd1e1b0beff29070775e8c96af39fad9657278f0d3c9078126e7d327eb3303d4ffa5ec6120a14ef73cbaa861176","ssdeep":"12288:l4idSlolg/gjc0JwzQ0yEUnpVo2/PrDIMWJRIDx:lVlAV0J08LPxF","tlshash":"bc65d1282a6bf354e518c0dbfa3b3c84c59de18aa00764d15f754bb31ba1752ebacd13","size":1433006,"data":"","first_seen":"2026-07-18T06:39:12.46203Z","last_seen":"2026-08-09T10:03:19.857842Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-11T13:06:41.582142Z","times_seen":2563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-11T07:33:55.819998Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-94c8cea0.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5741b181244abf2cc20032ae1958908c","sha1":"65f8287ef6d41d47df316c280fd56c97232954d7","sha256":"d883a5a99f4ed6a2dc44a0b6f38b8c1d9be596ceb8cb3f5457f389eb6d1a418a","sha512":"a23b230a22acb7ab28ce0fca503089bc4dc60d2c80441cf54129065965ed0563896074a8e7a1d810ae61ac95f2506b031cea26d103e4468689633da34aac2ac3","ssdeep":"","tlshash":"ddf020096c02c1bc2c8206491a8521109208367fe32460e8a69f2128679f0b9783932c","size":556,"data":"","first_seen":"2026-07-18T06:39:12.392822Z","last_seen":"2026-08-09T10:03:19.806291Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseInput.vue_vue_type_style_index_0_lang-4ed6c99b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e74e0d9f830a586643874909ccc8ed4","sha1":"07d319bd2192818257fd0c923dd1144a6d64dd43","sha256":"2f993cdeccbc25fefaaf4c4f31608ffff4843052b00dd338498e77e873896c57","sha512":"ae761725eaae2ecdb8ba98d1d735ca1b41ff55136d97bc87d86f82a29abea67bc002339ba4a264ef81c862ae573cfd0107e16bfd09dfde8d2ee5948afac5a315","ssdeep":"","tlshash":"7c415508dc6aaff2c6b3d6a9d2ef4c20f009276bc650456150b9151d2b8ddf0573fb18","size":2396,"data":"","first_seen":"2026-07-18T06:39:12.411544Z","last_seen":"2026-08-09T10:03:19.831467Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseUserTab.vue_vue_type_style_index_0_lang-02f2135a.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4a2573a8d36a06769b1a6bcd614435","sha1":"d705ee75623e0a49d545de74190ab8f8186a9580","sha256":"ccfeba6a0717978410081752c9818a96ebb530fc93e56d175522bf65a6f922b2","sha512":"89cfb0f1b8fb9553e051b5025b25470198ddb6e39b96da38da34f4d0739082a21f9effdd9ea2d80cb316540b6ad73e6e4efa53d57eda0edfdbea82c046d7013a","ssdeep":"","tlshash":"6401c5dc58e5cbfa849306543e6a1050d0958f95db298d4570ac1a23278b8b1b6de77c","size":724,"data":"","first_seen":"2026-07-18T06:39:12.425211Z","last_seen":"2026-08-09T10:03:19.829555Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/#/login","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d860e04454fa825ccf8d7c91a80c48e","sha1":"46d75823757172181cb408537bc34a4891e2501e","sha256":"b5d8a0b035a8145892c8a5fdfa42287e4252f75c4c5163c6502f20bcecc730c3","sha512":"f83783a980875c43bb289e9ee627c58f1bceb58cbc46a588b45b78f25ddaa518bccf4bff4cedb6edf343319781ff807c2002274538b5641565d380b9daabc8f6","ssdeep":"","tlshash":"e5c08cc4a0d66d005f02a41021ef24e890248026b4481b028d94d8882e220b09233e9c","size":139,"data":"","first_seen":"2023-06-05T21:34:11Z","last_seen":"2026-08-09T10:03:19.86065Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-a2444885.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42df5c5e69bfd1bc6f47a7b317de4ad","sha1":"669712f4f6e4b481ff4adf34b78a0a12acb1a84e","sha256":"ddf804e8b8a6c6ab9355fbe839b0e5622bf785a8b25c08ae185fe1bf0a274a7a","sha512":"d59d78b1cb5863aba27da88212c147b2348c749accd23e3094b03ba152c14a4e42243bf5ce9bfeb1836be9c6846664f9e03e4633a60e67853ba33440f284e9c9","ssdeep":"","tlshash":"1641726d78cc5035cbbbd888846a4913f62f8b1d022889f1d0ab5d9d2e2e10cf177e31","size":1958,"data":"","first_seen":"2026-07-18T06:39:12.422388Z","last_seen":"2026-08-09T10:03:19.827216Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-eeaa2748.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a1a3d37fddc0c5ae042dd752613fb4d","sha1":"fa397b6e9a01418217511c0defb402c857227985","sha256":"dcb24098d20a8d87f53361a11ccca9f6d80087340b44fa2e3bf6042a521f6ade","sha512":"fe0c5093118040866fdd1e5ef49c66543abd1bc6e292ab04774da05aedc5ff32ec6c7047af25d2da3ba7b9a7318cf839d6c5356bcd022c2cdfc8ede44f09204e","ssdeep":"6144:N+VzQpxNXEvkvvpUm3m0vAvhsqayI/y1PiJjsnJ3wfNOEur7lp4tKm7KB:wD","tlshash":"82346f4c9075cfb9e4b76604749a4810b25e2fefc1018b26a2fc0e266fd9cf85bb5359","size":249021,"data":"","first_seen":"2026-07-18T06:39:12.449696Z","last_seen":"2026-08-09T10:03:19.824602Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/NavBar.vue_vue_type_style_index_0_lang-621d0c9b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96dce5667fcdb7ef364997b344539584","sha1":"75c23e365d6994edcedd8db0b26420364d19782d","sha256":"96a4c9805de6abac619c67179d28c6dfef9845b065558f8132af6970baa95fff","sha512":"e463933c64903ac0b4b60d5d39da8436c4c9ad0eed72d80bb6178684aba73a17c8c940ce20411823e2bca95656ec54b8ed5950d492cc0d9e5f03cf85889fb2e0","ssdeep":"768:8MBsrAeSe2iIePeu2Xe7e8euJoWvf5aVNH1qr:iAeSe2iIePeuoe7e8euJoGR4NH+","tlshash":"01c22f40e522877cc6b6032c8d4a6855b24c6f8ed249f596f1fd282b73d9cf97108bac","size":26046,"data":"","first_seen":"2026-07-18T06:39:12.451186Z","last_seen":"2026-08-09T10:03:19.835609Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj22 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"false","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":198548},{"level":"log","text":"/user/app_info?d=17862697685440","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":200398},{"level":"log","text":"/public/get_lang_json?d=17862697690971","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":200398},{"level":"log","text":"/public/index_info?d=17862697691061","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":200398},{"level":"log","text":"/public/index_info?d=17862697698901","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":200398},{"level":"log","text":"true","filename":"https://amount.999coin.top/assets/index-3cd5d72e.js","line_number":75,"column_number":198548},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj52 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj53 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]] kind:ArrayLike length:2] sealed:false type:object]","filename":"https://amount.999coin.top/assets/login-eeaa2748.js","line_number":1,"column_number":2670}]},"http":[{"url":{"schema":"https","addr":"amount.999coin.top/","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:02:47.539Z","timestamp":1786269767539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXcnqPmDozX%2Fwgr7JT6%2Fm%2Bp27PgW%2Bpawzpgy8Fs9l3O4oSoz9OVaR%2FRVJ9JNcfbUS4Rw9k46k95ExN7P2sSF%2F1LO8no9gukW5CZZrAxWrVHUAOsdHqKto56Elyfq%2FA63gP6IOhQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a285ed5f3e853181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":38970,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"ae0cb30997d4305a1313e5c9c9a0bef9","sha1":"831da655117dad3467bf587a5bd102377e63b05d","sha256":"2541522b026e3e0c1d9e9fd088b8287de3045c874b1d09ad7ee511524d46e12d","sha512":"8cd04ad33b14f58d049b06addecb28b3ba9c3abdea4b9a7eccb88f65bb05db49eca900c1bf124564cc234de9d7af8692f1e4b68865eed1ca2cad5eaf0eb566af","ssdeep":"1536:imoOZI7RqsqLMJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:vmuq","tlshash":"f3e309f6a3e8a1e8e80bd3b8e676a476352b30ff3f45c648719c5a64fb2105d854dd80","first_seen":"2026-07-18T06:39:12.389017Z","last_seen":"2026-08-09T10:03:19.789723Z","times_seen":9,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":308,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-3cd5d72e.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.313Z","timestamp":1786269768313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-3cd5d72e.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-15ddae\"\r\nexpires: Sun, 09 Aug 2026 13:55:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29225\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GItFqgQqExfUO71VAflQnkxa0p8TH0TexqV3qyw2wYuMch3Xz0D8SEAlUO8OIN07Uypu1Q%2BXyezc31VR70zVPTNglpdLayWR5GmhPWFPAUhnhh0GNDn1ATd9DcaAi8kR9MGRppQ%3D\"}]}\r\ncf-ray: a285ed63fef73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1433006,"size_decoded":265505,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18621)","md5":"1e1b8fdaa6bd85f24607963b54fed175","sha1":"6ebc14d6a4c0c908a2e8d66a349e5061e565fefc","sha256":"64004efc42ce9913edc5df1f0ffaa104d41a9b0924cad6c51529b0c90652f641","sha512":"4e8b2e12a6fe815e2bd0f32919501b54f92b593a4536789800a2a1e905086ec37a89394e0ab22821ddca75dd47a546ea0298d804a93b17e86a9de2fe262e47c9","ssdeep":"6144:l2dCshsdglU3Uolg/gjc0JwfTlXWTiR27F0y36Oe9/IZnpyMo2Y:l4idSlolg/gjc0JwzQ0yEUnpVo2Y","tlshash":"602539282a6bf344a419c0dbfa373c84c59de18aa40b64d15f7547b31bb2753eaacd13","first_seen":"2026-07-18T06:39:12.434154Z","last_seen":"2026-08-09T10:03:19.791415Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/get_lang_json?d=1786269769097\u0026lang=en","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.104Z","timestamp":1786269769104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1786269769097\u0026lang=en HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://amount.999coin.top/\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5LGJqTIbFIYibTSqiLd%2BCgvcRAztKLTTqVW8SU635VDOPdVgbkv9UXmhQG2SFKFXMKdL9mH9So0nDay1P0TtQVgeAaX6Bkix4WlkBFP2j1Plmtf3TY5fmKtmQc31P1tsuA%3D\"}]}\r\ncf-ray: a285ed68ea3023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":786,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T14:57:31.343348Z","times_seen":17838439,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/upload/img/6a592d550395.webp","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.437Z","timestamp":1786269769437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /upload/img/6a592d550395.webp HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 19:13:25 GMT\r\npriority: u=6,i=?0\r\netag: \"6a592d55-2314\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 214\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9Szuy5d4acY8Mq48ZrnetEDDHJem94coOnQ7HZm6DpS6h%2B6KufzWG3Zpd5s%2FeeB7CGPL7ful4%2FT9R3UrI6KKqBQPPOoKAduNIPfMV2f8coqzyPKsJEtqtecNl7qaQUwpaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285ed6affef3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8980,"size_decoded":9726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x204, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b581f56a357ea5a3376e9e4ce9660ece","sha1":"c687d60dfe8262eea599269c4c405edc2ffcb4df","sha256":"644addbc9e7632db5d8f874a1d57402e656f1c1d03db9738905508ffbe12c8f2","sha512":"283812bbd5ab225093f551497c77769822d15409900c5040fe2b5481846144948910545a0f46a28b2c06b5a18c31b19f56035016efa13db0d0d9d0a54280a809","ssdeep":"192:63LWuLjJPZIh8tCj6vbiUTMSF77pKhFH+WRvyoll6vlQjXZjBRc:6KQjdSOtCjaB77pKS8vp/NNjc","tlshash":"f002af4debd9a24765e441638c37d9228780c0337f1016391e9d2fea6e5017ee308aba","first_seen":"2026-07-18T06:39:12.432125Z","last_seen":"2026-08-09T10:03:19.794259Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/ContainerForm-4e418d51.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.920Z","timestamp":1786269769920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/ContainerForm-4e418d51.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\npriority: u=2,i=?0\r\netag: \"68d3ac6b-2b\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsA%2FtOYb6A5GtfrlZ3cQopZKc812LR32PRrYSZEBgXqgAhnKh08bZngfeZZ1vkozn5FJFTwkVDt4GNVmzPMeLhuJY7cvCx980Q2qlE05IXIaSK56xZaOrZ2EvWhtm0UekViG%2F9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285ed6df8613181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":782,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-08-11T13:06:41.474638Z","times_seen":229,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseMainBtn-cf1599ad.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.924Z","timestamp":1786269769924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3ac6b-da\"\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LBSdZuLqxmgtOvJvR7tbL6OOjGJLCiTowp9oDnNWCYlYFutenchiY9F9Am5yoNvNeO6qzA8knHLFOcET325nvnz6MvoOMa5Eqp794q0a0b7FkLTwrFhJW1xeGIXPyJGk5opQJo%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e08633181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":864,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-08-09T10:03:19.797916Z","times_seen":311,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-9e27b9a5.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.929Z","timestamp":1786269769929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-9e27b9a5.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ac6b-8b1\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0cZ6GrIhp01Yy%2FCLYGxbOogGYQzZcEWB8nQNe1S8Z6rNIHtQ22l11ZFl7zdnW84MvgHnqtdTlnO7rFGQLOHO%2FyRci2jPyQvGZW%2FdxB3%2FPHhdBFKfSPTn10z7JCOAcYJXDqsKhg%3D\"}]}\r\ncf-ray: a285ed6e08673181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2225,"size_decoded":1395,"mime_type":"text/css","magic":"ASCII text, with very long lines (2224)","md5":"291bcc8d7a5ff72598f2133c707795f4","sha1":"e802d64cec514c1bba71d5924634ff5f446ec12c","sha256":"9e27b9a5b1a029c7571fb301b2c6f1b38c813f064b1b739515f31fb95bf40768","sha512":"4267b9006927c13708bc59cbb549b5820c15563b4ec9320180fb2949c7a1a1e88c237beb580e60c9e8759cb8182f22c0bf526e9b3d680d2270e7cfc95c95e6d1","ssdeep":"","tlshash":"f041f367daa045faae33a5990f5588c9b13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-06T14:23:01.801794Z","last_seen":"2026-08-09T10:03:19.799323Z","times_seen":154,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-E86A33-aa4547ee.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.909Z","timestamp":1786269769909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/login-E86A33-aa4547ee.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-20d2\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7cekqUMiTMtRrLOu0WTmg7TpcpeofEm5mpTOVw2OEJoTobbUjgkS1fh9KzWOvMLwI%2BtQoOy7tXBZJprMuOiVH%2FKtH6boj7m%2Bfid4hhUu9FrdGG8aEpNn3hbazgy5BOWY43Tcsc%3D\"}]}\r\ncf-ray: a285ed6de85a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8402,"size_decoded":6372,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8401)","md5":"b1122f136b1123bc50dfe67253e119ff","sha1":"a1846fc8db23be4e46fc128a1df411604cb3da8c","sha256":"f648979cf77656d9980704206d82dca1bef1017efeb8fa6c133151cbdf20fbc8","sha512":"4c8d95deaac35caa53a309f46ee8300afd7ebe827003633610cb7072b1abdc443b92850ebc891775acebaf9c395ec920eaa8cf79ea13559b6563607b5290b762","ssdeep":"192:T/1o7TQvk7LBNq5p/nbV2Zl9Dy2jkGcTD/jrNzmdN:T/MiwZXOCkG2D/jJzMN","tlshash":"b1025aa4aa589d7b407f2f0a116200c1640d37aba07dcf7da07dd5043ecdea9946af34","first_seen":"2026-07-18T06:39:12.419663Z","last_seen":"2026-08-09T10:03:19.800444Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseUserTab-c449726b.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.937Z","timestamp":1786269769937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3ac6b-67\"\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEVonRTFJQkR50LiOY4m2aDEzYUvQ3Afelr4QKsfz%2FeqDeun6W7c4OAVSZc4AkJheCr%2Bg7syBnTK5hQgy%2F0KoE4kNxrzCUTfsCUadgoO3uAF0cY1xYkPd%2B4%2BG%2BKMR8ZMeI8J%2F%2Bs%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e186f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":817,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-08-09T10:03:19.801288Z","times_seen":308,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-c6e297-5638315b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.946Z","timestamp":1786269769946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/login-c6e297-5638315b.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"68d3ac6b-3bb\"\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyvOLeaZS4GWlHyaC6j3fIxz6kpKeK9b989LRHFZ1%2BZuG%2FsWJ0uYDWJ2Ap1IkgSfrv7BcLJ%2BzHrMVnZhUBQ%2BQ04%2Bqrz3uKCQH%2FT3QAJzIvkmGR4NTLj31Ij1REYFsSBwIccjDss%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e28753181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":1180,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (954)","md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.311Z","timestamp":1786269768311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Thu, 13 Aug 2026 10:02:48 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-08-11T15:43:25.290769Z","times_seen":596,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":43,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/get_lang_json?d=1786269769097\u0026lang=en","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.102Z","timestamp":1786269769102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1786269769097\u0026lang=en HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-ctime: 1786269769097\r\nst-ttgn: 55ca50bad305caab1c6fbe5c14adcf2c\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbrHnABZ33n1U0Su0AuIQQ45AUQeny9mareSfdlaKOFYPaBl%2BSXaOMSw9y6ezwukW%2Bgq8EFZ%2B77U5%2BRPZTtmIoT9jevEnEp%2FoVZlRC3IfN8Ds83aEGitqXsOBsmE7vzKUMo%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a285ed69efd53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26754,"size_decoded":10566,"mime_type":"application/json","magic":"JSON text data","md5":"c92bb7eebf7ac946662bd434618c0c08","sha1":"46753c586e98e6350a6faf6f717fd0631bd3c771","sha256":"4a79ab648fceedc5cf3c7629fb464bef4fbf4d460f737346af1d7b0753b2a5f2","sha512":"884fdce8b855098e0583c9c72945fbbdfbec4c7c0680cec2e897e0f5f97aaba1f59b25d1898a586fb1b52ed12f697c8e8bbb7dfb98f69877bd48fab7eca6860a","ssdeep":"384:/PvNQBAT0and6WglUdz6/4BlCqcP82a6N+UdUE/2KyKBqfGSu/6LX7CA7xlgO:XlQST0aYWg0cP5fuE/2KmzFf7EO","tlshash":"d7c2c84f760a0eb3afd35bc178ab6d1765f451c31680084d8cdeca2c12ede99b22f599","first_seen":"2026-07-18T06:39:12.447634Z","last_seen":"2026-08-09T10:03:19.803561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-d56192c0.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.930Z","timestamp":1786269769930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-d56192c0.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3ac6b-3d\"\r\nlast-modified: Wed, 24 Sep 2025 08:31:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUzxC6Y%2Bo3%2BV5AS13qLZsNu0bWhSlzC3G3O6MahaFSv7JMs2D7wSbvZtD05rcaiqW1w7gJYmcUiWOYjQqIwC8rhlSmcjdtpiOxeQ3XWoblJnR3S1s0%2BZmR5KzD4HzWHtHbCr8h0%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e08683181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":795,"mime_type":"text/css","magic":"ASCII text","md5":"186fb1b7bcf7b4484422f657a2d0a66a","sha1":"bac6f21e45e86ce5fc7ae63485ff8f0ae004176d","sha256":"d56192c060bf7a99d3f3b4c0423b887037f7f99353920242b8cd8ef520a8fb62","sha512":"b552c8d0495770108a31d5ac0dfeedce31e5b9b6f0cee914031774bed544000fccbc690024c355019e86c314e59667b3c32635ceb95fa4e1c7372cd280a523a9","ssdeep":"","tlshash":"60a0026249545e641a9240820d8407578434c1044a136e6dd4b99d1a2cce4810e534dc","first_seen":"2024-06-07T16:46:44Z","last_seen":"2026-08-09T10:03:19.804272Z","times_seen":189,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseLogo.vue_vue_type_script_setup_true_lang-dd622dc3.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.938Z","timestamp":1786269769938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-dd622dc3.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a591ea3-20a\"\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXv%2F1PO15k%2Fp3kBPBhufLs%2Bh49mhPSLGHaLa3a8HcFu2b5jBZoMctOgC3mb5t7KZNbQx3lmPkP9lZvoIR3xjN9KjlHK7eHHnm%2BBICVB6EAuFgymapQec3F4dUmZ%2F3%2BG2Yb1gQ7c%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e18703181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1108,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"e2b37606c5bf228411b0a8f49f45441b","sha1":"04bc9a4d38a13b06fa2117b1fb04f6dd6ed54fa5","sha256":"efa18d8512c33c8eb24de7497d9a8f1844ac2c81956d208fd5a7212e7604eb5a","sha512":"56eeeb8886993eb71c5fc68e144643668164d38871bbcea334423daa857f84a847f660a8e175d181510cae5c3034435a4b5b6db4e9901db611c7eb755866007e","ssdeep":"","tlshash":"7ff0c90f5c2a91ff80a658982b47204212085efec72099d4f3e52275664286ab01eb78","first_seen":"2026-07-18T06:39:12.414655Z","last_seen":"2026-08-09T10:03:19.804961Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/useHome-15d2f1ad.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.947Z","timestamp":1786269769947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/useHome-15d2f1ad.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-e83\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0rdE%2BbpZ4WJAouR5fUCR75ItRY4syk%2FSuDTbjS4U0TgzpLhV5vc8bRJyIytUEcGGwUSjUP0luwhHYbbbOyIzf1GhbXQQKAInA%2F1de5LN%2FYL9rn9XGHOagOcJJJ3wsKmgyVpV%2BQ%3D\"}]}\r\ncf-ray: a285ed6e28763181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3715,"size_decoded":2349,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3714)","md5":"80cd1bd48313ad9d4989e99384101ec2","sha1":"6c143f941fea613e02fa81129d744f0f0496998e","sha256":"88e976121840e997540ac8a1177ccd1dac9e79b76111f3a2d8d005df278158f7","sha512":"f1738f05417512f0bb95283f87837590ba2a612361c83494b228202c39be3996b688db0546801039c986617770e0f42545015d51432b8e4ef2aa0b0f7f3b65dd","ssdeep":"","tlshash":"5371b74873a380748b7506710ae50b20a07fd71aec57e0ccf292096a867ffdab5dcd69","first_seen":"2026-07-18T06:39:12.430242Z","last_seen":"2026-08-09T10:03:19.805676Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-94c8cea0.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.922Z","timestamp":1786269769922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-94c8cea0.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a591ea3-22c\"\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJEqgEAhr6jO9ZF2%2F9nKZdpRPbDtWf%2BQE67QhMkT0e%2Bgwu5kW0ibL8tm0NScpe0%2BNXyqu2249IL4Z5Z1Hzg8Afso6VzQjiCZkUSxL3W3yfP8oQ1PWtKAWtVffMJY69%2FBuY35FsA%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6df8623181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":1109,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"5741b181244abf2cc20032ae1958908c","sha1":"65f8287ef6d41d47df316c280fd56c97232954d7","sha256":"d883a5a99f4ed6a2dc44a0b6f38b8c1d9be596ceb8cb3f5457f389eb6d1a418a","sha512":"a23b230a22acb7ab28ce0fca503089bc4dc60d2c80441cf54129065965ed0563896074a8e7a1d810ae61ac95f2506b031cea26d103e4468689633da34aac2ac3","ssdeep":"","tlshash":"ddf020096c02c1bc2c8206491a8521109208367fe32460e8a69f2128679f0b9783932c","first_seen":"2026-07-18T06:39:12.392822Z","last_seen":"2026-08-09T10:03:19.806291Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-e95427f0.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.926Z","timestamp":1786269769926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-e95427f0.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-435\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8cFByGKrymbn0VDpOLY1lkbR%2FyZOekNS0k4OxLXsKNWffNYqks5YMC03C9rOu3ICHthgYtJByu0D0nMCbHJV7rPf5nbceRYSPP0cH%2BE3Oxl9jOozeyPIgVkFytm2bDZVuj%2BkJA%3D\"}]}\r\ncf-ray: a285ed6e08643181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":1365,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1076)","md5":"9dd9655aa4422c14204c18ce92a2f8b1","sha1":"956ddfb8ffccc18907b8d396c98f5a157b6013b2","sha256":"5516ec13e69373792e379c92b0bc1007e23b0b7643b2299aba7048f2873eba40","sha512":"8ea290816aa932d5586a0f5a7fce343337db0f2c5c9e47ea124189229e788d84662ed0aa1ecbb100a8b1a8a372793fe611ba6b524b752673808ceb11d9c83b57","ssdeep":"","tlshash":"c811658e7cf4cef940bd0c863a930114550f06d9565098f0f89e4e5c26bc5d25a2ff1c","first_seen":"2026-07-18T06:39:12.402267Z","last_seen":"2026-08-09T10:03:19.806914Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-1d6f02b8.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.315Z","timestamp":1786269768315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-1d6f02b8.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-12ae33\"\r\nexpires: Sun, 09 Aug 2026 13:55:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29225\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbBzrqhZTc%2F0iOrbS1ljWadSwfttvylXA1rYMDyH1MaTMyWznia2MCc8IOso9MfM7mWZJLwQztZQk94CCUW5NALFzsxefZGSu2rPvEbwF%2BzEUEar6qtfQoPXQKmqWcMJBNvUilQ%3D\"}]}\r\ncf-ray: a285ed63fef83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224243,"size_decoded":286112,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"516544a172631c153c8b51e5c4251a22","sha1":"a0aa18e44f1b93bbb8088969cbaf89dd14f664b4","sha256":"4c53fd9969d612835123469f6003014013a407fe611474f0cb69ce013b70147f","sha512":"e04ea2c2bb37e8eb98d03dbc63c1584d2d623c4bda07183b9c06bcf0d587880bff19b83b35bc7dc3fc0b28d16b3b8e4e88bd6ac290f64763aa5c23f5a4b1dc8e","ssdeep":"12288:Pn1/QnTxaBFyuwaeg3xuRNDuD55TSS12FhKR7hHucIQsqzNr:Pn1CTx4yqxsuD55TSS12FhKR7hHucIq","tlshash":"50255c786b8445bdfd0bcf7a4328958c691ef0a2ef424a84561afa3043d73b77613678","first_seen":"2026-07-18T06:39:12.405346Z","last_seen":"2026-08-09T10:03:19.80753Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/index_info?d=1786269769106","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.109Z","timestamp":1786269769109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /api/public/index_info?d=1786269769106 HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-ctime: 1786269769106\r\nst-ttgn: 3a1ba4e565b539b77f4bd4c0c7f9b6a6\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25MOrLzIQI7Ff4HhTsPcTx3mZ0i7dNBA%2BN65J6urHc3iBV4gguGTDRdCjItOsYQ%2FXpJcHDz8Y06egn%2B0sI%2BMZV2xyTPPnWZjD8rbFyYu7hKDr4wZtXAvSBMdpu3%2ByGE9ec0%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6adfea3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59002,"size_decoded":4566,"mime_type":"application/json","magic":"JSON text data","md5":"d3aeadfaa35c4bf09558592be36599eb","sha1":"503b42691907ff33a9e9cb0e947ecd02a1cd0f0e","sha256":"eb158f28cf05490aeb1c5da652a36b99ec1460e24aad066356eaacfd69d57b86","sha512":"540d4d1f9f6c95cb23f7b7a92c981e16fe138397aafa2df9e9a1150a36e1fa557ae3c43e207351ad3c78f2b2e6113b7ab583cc5c1fd6d54294b558ee34e11efb","ssdeep":"1536:fBRAvzRAuyRAVMRAeBQRAyORAIgRAGBYRAd6RA3WRAf0RAmV:Z0z2ldQO6kpFd9","tlshash":"d143753defaa41504f81fb90398e3bf6faadb0316b5457cd5ab50b94215841f4abe083","first_seen":"2026-08-09T10:03:19.808173Z","last_seen":"2026-08-09T10:03:19.808173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/ContainerForm-5b7b2363.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.917Z","timestamp":1786269769917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/ContainerForm-5b7b2363.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a591ea3-d9\"\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bkG38U3GxpygAa7oxLIDJUhAhSP6R%2BJ%2F0nf%2BoVcyK5Hli4mpRd6dmWK0hg%2BIKMI4gH%2FnanrKu2U34A%2F1nnd%2BXO%2FJ8KY4LOe4LxzWonCX6Zwep8EABnT21T%2BFZHzM7M8fbMShZ4I%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6df85e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":931,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"1de9b8b06ef2a887475bcc263fe0130a","sha1":"7fd5571f3fe9d4a668443508db2c26bde1e16557","sha256":"d3ef71ca97100b42f10b8cb1f378cee622d80bc93a5d9a4a1045d5279b06b417","sha512":"28b1907392ea3145a53a676ea0c628d5a6b507b884d443c28aaefa819008831d8eed19b532f0191fab1bf429ac89f3db5041d349cdbef9d09bacff7fe5fa4ef6","ssdeep":"","tlshash":"d4d0a90c685192b28012098c33a625368b5e2a6733b88d82506a84624b5a4aa220ef5c","first_seen":"2026-07-18T06:39:12.399086Z","last_seen":"2026-08-09T10:03:19.810097Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/NavBar-2d6858b0.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.944Z","timestamp":1786269769944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/NavBar-2d6858b0.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-6349\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkyY2ITr0so9ZlbKteNhgQb0FYpVYqJweM7Gp0AmVp4Afm3zL%2B1plUw3YOrJMpQZpVh8u0jd0PCfBm4S1Z1TlkznO3k5IFUboeY3ZRSyD3UVovQcckhJ%2FN3y8ytCQ8eGA3AjHzA%3D\"}]}\r\ncf-ray: a285ed6e28743181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25417,"size_decoded":8080,"mime_type":"text/css","magic":"ASCII text, with very long lines (25416)","md5":"8be08a167e6c92d6309ce0f16656d8e6","sha1":"60c8604140c66ab77445596fb4f0247f2836a3ee","sha256":"2d6858b0cb6bbd20fb5b050dd5e2b6a2c36570d210721499594dbb740e0a55dc","sha512":"bd355eca0f83795156ca2efb751e6e4a27f0b21a4017ceb35b4257958f786f2c537bab47dbe4d0acc1927bde579c51a3a13ab9a4bc1fc4eaa5c21398bb64009b","ssdeep":"384:xqQus67n1lvW04hbGC2WNuf1BVyGQ8ApopxgS3JS97:xxu171VN0bV2WNuf1yGZlLy7","tlshash":"5ab274e803a4f33cff1fa41656ed8a892e149209c237f9599e027336d1df2971679d88","first_seen":"2026-07-18T06:39:12.437599Z","last_seen":"2026-08-09T10:03:19.818769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/upload/img/6a592d550395.webp","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:50.031Z","timestamp":1786269770031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /upload/img/6a592d550395.webp HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 19:13:25 GMT\r\npriority: u=5,i\r\netag: \"6a592d55-2314\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 214\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JH%2FDs7mFo%2FJAl67hPdMJjHCdbCoHWyaGRi4il%2FHjMw84wjegPtSpV1d2tjajMk56%2FxmgtWD1pc4OTnj5hK6SBCQS8o0IfIdz4qaugDTaXmXxTqqNcNf01EOlZO3WPqT%2F5s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285ed6ea89f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8980,"size_decoded":9727,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x204, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b581f56a357ea5a3376e9e4ce9660ece","sha1":"c687d60dfe8262eea599269c4c405edc2ffcb4df","sha256":"644addbc9e7632db5d8f874a1d57402e656f1c1d03db9738905508ffbe12c8f2","sha512":"283812bbd5ab225093f551497c77769822d15409900c5040fe2b5481846144948910545a0f46a28b2c06b5a18c31b19f56035016efa13db0d0d9d0a54280a809","ssdeep":"192:63LWuLjJPZIh8tCj6vbiUTMSF77pKhFH+WRvyoll6vlQjXZjBRc:6KQjdSOtCjaB77pKS8vp/NNjc","tlshash":"f002af4debd9a24765e441638c37d9228780c0337f1016391e9d2fea6e5017ee308aba","first_seen":"2026-07-18T06:39:12.432125Z","last_seen":"2026-08-09T10:03:19.794259Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/user/app_info?d=1786269768544","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.553Z","timestamp":1786269768553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /api/user/app_info?d=1786269768544 HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-ctime: 1786269768545\r\nst-ttgn: 63b352c45d09c0d35b03c4c8933e548a\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrRXFAxIJYKv1F9i3ncqZpoJ3Ioxkrt6VnKa0bG5nQNOc8E7%2Brzyr7Q9aBFxOmhGs0eeQ5m9MnrrRswuQ%2BwukhORuI81Pwq5Ah5RtjjYVe6Yl84wE0syR8zrzLCxHFTkxCY%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a285ed679f7e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10794,"size_decoded":2963,"mime_type":"application/json","magic":"JSON text data","md5":"84a3404e0ceb73b57f11e957fe37f2c1","sha1":"eac1ac89cfc4dda0c66924662a5b27260dcd632c","sha256":"2a8aa47bfa66754f75be671acc8ef1b8dd4b72d4b4a07c91487aa9a90354ca00","sha512":"7151709abba8968b8c713e0ca5e01474ba46bed9a01bcbe0687cbbf9f190649399723b6f1fa90a2f1c9e00407640f89392757630def243aef5ae844752acf96b","ssdeep":"192:IlS2PV3yiLtUsP0YcCaHIN/kI8DyrZZiehKraWrc2r5nrmrrJc6ONT:cUO/k78ZweCzVtmB6","tlshash":"5222f05521aadc7bdad6bccd3fc6740588ed3c96fdcc8b9b5f2ddca201d81a6011a112","first_seen":"2026-08-09T10:03:19.819862Z","last_seen":"2026-08-09T10:03:19.819862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/favicon.ico","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.668Z","timestamp":1786269768668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STBGrKO2s5CNu6eSxDmz4p2Kl77ekYBZF38mj3fbZFLHFjcGa9m9uf%2BcaBFSQJYP2JT816WpXJa4j9bdv163eJecMYsrMceQkWR3YxLIuO2qRVMYZBL1LOnxsZz0SDv2rMC4UL0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a285ed662f433181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":704,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-11T15:01:45.045698Z","times_seen":318496,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-eeaa2748.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.907Z","timestamp":1786269769907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/login-eeaa2748.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-3ccbd\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Er0pdlNgsLMvUt%2B%2BbfbUGEC9rEHqtvbuWqFXt1EkHM0G4sP5LYX9h5s5yYM8pF8kUh%2FLGiBbrDn9LHlAoA0QN92gOlmBqZLAW6bM36zpPc7DBNo6elMzQsLN6%2B1Ak3xlI8SSaFM%3D\"}]}\r\ncf-ray: a285ed6de8593181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249021,"size_decoded":37730,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a1a3d37fddc0c5ae042dd752613fb4d","sha1":"fa397b6e9a01418217511c0defb402c857227985","sha256":"dcb24098d20a8d87f53361a11ccca9f6d80087340b44fa2e3bf6042a521f6ade","sha512":"fe0c5093118040866fdd1e5ef49c66543abd1bc6e292ab04774da05aedc5ff32ec6c7047af25d2da3ba7b9a7318cf839d6c5356bcd022c2cdfc8ede44f09204e","ssdeep":"6144:N+VzQpxNXEvkvvpUm3m0vAvhsqayI/y1PiJjsnJ3wfNOEur7lp4tKm7KB:wD","tlshash":"82346f4c9075cfb9e4b76604749a4810b25e2fefc1018b26a2fc0e266fd9cf85bb5359","first_seen":"2026-07-18T06:39:12.449696Z","last_seen":"2026-08-09T10:03:19.824602Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/index-a2444885.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.928Z","timestamp":1786269769928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/index-a2444885.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-7a6\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhPf4kFvtmtY%2Bd7GNdUa84L44AKVowsJqXpYSkz%2BDiXOtCanutnwwG%2FVCojmqh%2F9FRtPsX6ybg%2F24mHNcil2pNo%2Br40ML6a7XDLp9sk4pnsb08QJDyjafYWUpkkKTYltxUqLraA%3D\"}]}\r\ncf-ray: a285ed6e08663181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":1716,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1957)","md5":"b42df5c5e69bfd1bc6f47a7b317de4ad","sha1":"669712f4f6e4b481ff4adf34b78a0a12acb1a84e","sha256":"ddf804e8b8a6c6ab9355fbe839b0e5622bf785a8b25c08ae185fe1bf0a274a7a","sha512":"d59d78b1cb5863aba27da88212c147b2348c749accd23e3094b03ba152c14a4e42243bf5ce9bfeb1836be9c6846664f9e03e4633a60e67853ba33440f284e9c9","ssdeep":"","tlshash":"1641726d78cc5035cbbbd888846a4913f62f8b1d022889f1d0ab5d9d2e2e10cf177e31","first_seen":"2026-07-18T06:39:12.422388Z","last_seen":"2026-08-09T10:03:19.827216Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseUserTab.vue_vue_type_style_index_0_lang-02f2135a.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.935Z","timestamp":1786269769935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-02f2135a.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a591ea3-2d4\"\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8deyuWgUL9NiIwhQUpulOBshkqeA2OHujfToY2zHZrBc64uejJFEZx09yqVxv1gCRKAOUWfBWA4hb5sBh1GJSpXh4NdDP1odS%2FVvzma95JVZ%2BEmI5oONnDpyqS4LByggPWjL%2FD0%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e186e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":1203,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"7f4a2573a8d36a06769b1a6bcd614435","sha1":"d705ee75623e0a49d545de74190ab8f8186a9580","sha256":"ccfeba6a0717978410081752c9818a96ebb530fc93e56d175522bf65a6f922b2","sha512":"89cfb0f1b8fb9553e051b5025b25470198ddb6e39b96da38da34f4d0739082a21f9effdd9ea2d80cb316540b6ad73e6e4efa53d57eda0edfdbea82c046d7013a","ssdeep":"","tlshash":"6401c5dc58e5cbfa849306543e6a1050d0958f95db298d4570ac1a23278b8b1b6de77c","first_seen":"2026-07-18T06:39:12.425211Z","last_seen":"2026-08-09T10:03:19.829555Z","times_seen":9,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseInput.vue_vue_type_style_index_0_lang-4ed6c99b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.932Z","timestamp":1786269769932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-4ed6c99b.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-95c\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CnjojtxNAy%2BxQAaMqJLLfFoOi9fHTN1K7CdHPk2aE1JM6i4Pyf5DuMQy6P%2FQ1%2FfzQXd9JJyjfhv5oI%2FQa8D253xp3FYW68x3EQVtlidjjM%2BDOVd4prHBngEQ7k8EhOkiOax3yI%3D\"}]}\r\ncf-ray: a285ed6e08693181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":1736,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2395)","md5":"5e74e0d9f830a586643874909ccc8ed4","sha1":"07d319bd2192818257fd0c923dd1144a6d64dd43","sha256":"2f993cdeccbc25fefaaf4c4f31608ffff4843052b00dd338498e77e873896c57","sha512":"ae761725eaae2ecdb8ba98d1d735ca1b41ff55136d97bc87d86f82a29abea67bc002339ba4a264ef81c862ae573cfd0107e16bfd09dfde8d2ee5948afac5a315","ssdeep":"","tlshash":"7c415508dc6aaff2c6b3d6a9d2ef4c20f009276bc650456150b9151d2b8ddf0573fb18","first_seen":"2026-07-18T06:39:12.411544Z","last_seen":"2026-08-09T10:03:19.831467Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/NavBar.vue_vue_type_style_index_0_lang-621d0c9b.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.941Z","timestamp":1786269769941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-621d0c9b.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 18:10:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a591ea3-65be\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6j5CFjr0xfS3zkvXNKNRP955heam4wG7P267cig22%2BsQ5rRNnq9bdZCAChB5BcHLUUM4MMek9Gavl7zwkEJ0pczpt6hSQOrp8R0sIUWgOmLh%2FGtDqfglqSJy0N60ABFyCj5658%3D\"}]}\r\ncf-ray: a285ed6e18713181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26046,"size_decoded":5350,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26045)","md5":"96dce5667fcdb7ef364997b344539584","sha1":"75c23e365d6994edcedd8db0b26420364d19782d","sha256":"96a4c9805de6abac619c67179d28c6dfef9845b065558f8132af6970baa95fff","sha512":"e463933c64903ac0b4b60d5d39da8436c4c9ad0eed72d80bb6178684aba73a17c8c940ce20411823e2bca95656ec54b8ed5950d492cc0d9e5f03cf85889fb2e0","ssdeep":"768:8MBsrAeSe2iIePeu2Xe7e8euJoWvf5aVNH1qr:iAeSe2iIePeuoe7e8euJoGR4NH+","tlshash":"01c22f40e522877cc6b6032c8d4a6855b24c6f8ed249f596f1fd282b73d9cf97108bac","first_seen":"2026-07-18T06:39:12.451186Z","last_seen":"2026-08-09T10:03:19.835609Z","times_seen":9,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/login-dc237c83.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.949Z","timestamp":1786269769949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/login-dc237c83.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\netag: W/\"69ea0b22-163\"\r\nlast-modified: Thu, 23 Apr 2026 12:05:54 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRKwtYyIMoXOXm6p3SFzeAWnEIkTc4bJwmR5FkJYqhVIdgUmkfrnQdxf9d0MCLDDtxA1vdUsMKRp72ZpgczPw0il1LcarOCCdk16e1PP5pQtoWl2e%2BrZ4lvF5tLu9ic3haWO6ao%3D\"}]}\r\nage: 29224\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6e28773181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":988,"mime_type":"text/css","magic":"ASCII text, with very long lines (354)","md5":"937c848e43638a27547de9ffe6c622e2","sha1":"df2edd2a6398f19d75b0054b3935ebb9fc1b283a","sha256":"dc237c832e8c66e605c94a5670c9e6bfe19949b4d9c75aa38b9698f9896c5dbf","sha512":"0ab7f111c73b0e68b672c461d9525bdc57e4f99623b342c2ea1fa0dc1d179bbfb5fb4bb601fbf6444fd06ac6389590074ca57db9320733e55ac64280cede6a4b","ssdeep":"","tlshash":"d8e0c0748058707ef575d321e69189865098f16ec3111d1e4e517a3f9cc5c0724701d4","first_seen":"2026-05-01T02:21:29.323085Z","last_seen":"2026-08-09T10:03:19.838323Z","times_seen":33,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/user/app_info?d=1786269768544","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:48.555Z","timestamp":1786269768555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1786269768544 HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://amount.999coin.top/\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiT1vrjmre8v9vYpV%2Fa8IEVYfIOmPz%2FNOPi2ebYQsk426pCoI%2BH2WA8c9MSMoEZH2ks5SBAOUlFcIfBsWb%2FljRD36n6wssualKkRRKoE45kVHmvUb1xkcG8S1I%2BeCUK12yg%3D\"}]}\r\ncf-ray: a285ed6589bb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":796,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T14:57:31.343348Z","times_seen":17838439,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/index_info?d=1786269769890\u0026language_type=en","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.893Z","timestamp":1786269769893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /api/public/index_info?d=1786269769890\u0026language_type=en HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nst-ctime: 1786269769890\r\nst-ttgn: a3e0c46fb174e0f88b424d4b4e6cd742\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFOm8cnm7KukfPtLQZxatwn%2FEQBnT8XxRxqwLPetccj7fe9qx1f30oKwd%2Fc9%2FXYL3SdMzkFuW%2Bl3kCIUTBF%2BE009I%2BUPfjtN0N0F7f1qAAcKGjs5rlRcDA7o3Wzu%2FkXFQLQ%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a285ed6ed8a93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59002,"size_decoded":4463,"mime_type":"application/json","magic":"JSON text data","md5":"d3aeadfaa35c4bf09558592be36599eb","sha1":"503b42691907ff33a9e9cb0e947ecd02a1cd0f0e","sha256":"eb158f28cf05490aeb1c5da652a36b99ec1460e24aad066356eaacfd69d57b86","sha512":"540d4d1f9f6c95cb23f7b7a92c981e16fe138397aafa2df9e9a1150a36e1fa557ae3c43e207351ad3c78f2b2e6113b7ab583cc5c1fd6d54294b558ee34e11efb","ssdeep":"1536:fBRAvzRAuyRAVMRAeBQRAyORAIgRAGBYRAd6RA3WRAf0RAmV:Z0z2ldQO6kpFd9","tlshash":"d143753defaa41504f81fb90398e3bf6faadb0316b5457cd5ab50b94215841f4abe083","first_seen":"2026-08-09T10:03:19.808173Z","last_seen":"2026-08-09T10:03:19.808173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/index_info?d=1786269769890\u0026language_type=en","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.895Z","timestamp":1786269769895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1786269769890\u0026language_type=en HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://amount.999coin.top/\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:50 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2%2FL0fuVAZPFyc7LkuN%2FDtxbM6cMHmopTqIXQXLy6Z6Pbgsvp1mYQCK1FvPW8SbswQtAcXiSG%2BG16lJmAmiAjVkySQ%2BWkgZ3KQ0AfpnaR%2B2ZD2hHxkGN03cMnuiMI78Nhh8%3D\"}]}\r\ncf-ray: a285ed6ddaba23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T14:57:31.343348Z","times_seen":17838439,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/upload/img/69eb2ebbcefd.webp","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.099Z","timestamp":1786269769099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /upload/img/69eb2ebbcefd.webp HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 24 Apr 2026 08:50:03 GMT\r\npriority: u=5,i\r\netag: \"69eb2ebb-266a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 214\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4naXEjjD%2BrjyTdiAJwOB1EURIvs8VayCQZcmuat0IYPcgubdoZOG5tyQEUu9buGv%2Ft6L73X4ttB6XtsbaQLNwzSuLaYICnz5D7Ism7%2BJKlJkSoVnfEtSxUl3jh%2FYumcso4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285ed68dfae3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9834,"size_decoded":10579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 165x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"586422b67b96db170fd45a668ffe4b2a","sha1":"277aad20e3ddf6bcbf9b63be721c8352fda8057d","sha256":"c5ec6eaebf3f1e3d7233da4ab4a2e2ce7900b8eca47bf6e23b9584b99f261749","sha512":"214aae5316db66d2d894a10c3404cedc4af29ebd8fc771b9c8716e8c395af8dec552ff952c370683de9ab8d9e118762bb7d8c70e329b94eb484d2d61c05ef635","ssdeep":"192:ImdpzwGt3JilUl+rVhRHqJ9EN0DOPDuqX/8d3sya7wJNw6sNQEX:1NwGRJil/R7HqT3srKGNT","tlshash":"e512afc564148bb1a8e964dc3ad4ab57857b80f07b6f288400e42f83d61ca6e93d6d86","first_seen":"2026-07-18T06:39:12.385098Z","last_seen":"2026-08-09T10:03:19.840634Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/api/public/index_info?d=1786269769106","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.110Z","timestamp":1786269769110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1786269769106 HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://amount.999coin.top/\r\nOrigin: https://amount.999coin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amount.999coin.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLp9JmsXxw%2BhrQ%2FKbiXRfUvq9fUL9mC2Aj0wASU5v43b%2BOJlzfHMD6DLosvpqfCXhabx4%2B5%2FvbyzHpej1d9GnasXbH7RD4gcF%2F9Jf9fZnmre5%2FMLvOLRp%2B9xKoJjk37h994%3D\"}]}\r\ncf-ray: a285ed68ea3523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":800,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T14:57:31.343348Z","times_seen":17838439,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.999coin.top/upload/img/6a591f6c0ccb.webp","fqdn":"api.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.435Z","timestamp":1786269769435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /upload/img/6a591f6c0ccb.webp HTTP/1.1\r\nHost: api.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 18:14:04 GMT\r\npriority: u=6,i=?0\r\netag: \"6a591f6c-245c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 214\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mM3iIqOR7CYqu8S8s8ikCtdCO0mogTAGrWqwk3U1hP5HykEgRXp3d%2FzX6vSAqQzCAcmtATVHgIUziYg9OMhkEHIG3FCBtPg0g9eIbyxicj%2BQ4dR037628x%2F2XajIWAS%2B7L4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285ed6affed3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9308,"size_decoded":10056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x204, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e537ab665c4773d426d43bc09761409","sha1":"e7090fc159d12e59941b6d52ac5f99dc9474bcde","sha256":"9a564cd6b3ece62f96a69f2dfc2578bc2d06cb8fcb4b44d6e71451432fd1f02d","sha512":"3006a949db3b6943029ff62782c9e3cd6e0c92f17ec3072cb70bc944c234d290127255ad9935b035d0c20ce3a09398bad4583d5df2f0bdc9d2dd6f170f32e30b","ssdeep":"192:QrOZZ6kq4CzS3ewTVjjCPvd1az1fDy0zzADKBOKGBUZhyKOljc41ZOb:LZYkL+SOwhgd1az1fDtHOKUUZhpKjc4a","tlshash":"6712a0ad5dbfcefdaa02d75f6c135540641819746d265d3db23d8983a20c18015ad738","first_seen":"2026-07-18T06:39:12.417062Z","last_seen":"2026-08-09T10:03:19.842823Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"api.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/phoneCode-dd4884b8.js","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.913Z","timestamp":1786269769913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/phoneCode-dd4884b8.js HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Apr 2026 12:05:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69ea0b22-345e\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHXhDca9ClkmzGpWoPC%2B6M1Mh5CEb0%2B55NlMOzFj870kSvckPP5vnqR39PSVFP5unwy0iKS6wn9T3mBqdG%2BiSSy7GvVi3XTOFNj689vmxeSMXaTfPjkA3xJ3ITX6IExlxZXxWaM%3D\"}]}\r\ncf-ray: a285ed6df85c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13406,"size_decoded":4175,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12040)","md5":"a75170b1e0eeb35731481bb8575519ac","sha1":"dbd7730f21df29d66e02ef79b0583e248c5e9031","sha256":"3cf36d246507ccc200645e351a1bcc55d11c35d41ceaeca70b42a1f2f178a500","sha512":"d01a521d84fd41c801c3bb99af7bfc18026473590d6e0509880d3948acfcb910338118a27457fb870d13e564f6cc3e1248c694b21d965b2af9f4251988d500d3","ssdeep":"192:ws25vvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFheB7q:wk5a28wa8H5tfW","tlshash":"e4524c7b00b017a6fbf09321f100f9a663c91d862c57a5e38e7f539259a00e7b5cb65d","first_seen":"2026-05-01T02:21:29.301156Z","last_seen":"2026-08-09T10:03:19.844803Z","times_seen":78,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amount.999coin.top/assets/BaseInput-6cb66fbc.css","fqdn":"amount.999coin.top","domain":"999coin.top","tld":"top"},"ip":{"addr":"104.21.57.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amount.999coin.top/","date":"2026-08-09T10:02:49.934Z","timestamp":1786269769934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"999coin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:31:05 GMT","end":"Tue, 20 Oct 2026 09:27:27 GMT"},"fingerprint":{"sha1":"B9:BA:09:E8:9B:24:37:01:E3:FB:76:0A:59:9E:3F:AB:31:90:07:39","sha256":"16:BF:A5:3E:E8:B3:62:F5:5F:F2:48:1A:80:FB:FE:1C:80:4D:F5:E3:3E:61:75:F5:BC:73:1F:AE:21:30:BF:4C"}}},"request":{"raw":"GET /assets/BaseInput-6cb66fbc.css HTTP/1.1\r\nHost: amount.999coin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amount.999coin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 14 Dec 2025 03:52:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693e3470-597\"\r\nexpires: Sun, 09 Aug 2026 13:55:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 29224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbh666Ve4vicOYzYtyXzodJ9sm0dVPaJSqE22SWEMAzRy418%2BUVDDx0AVK38tCqsyUC%2F4U5viDEDSAnZHJPkG6kI%2BU%2BYRGc5KXxr4wPAk1g1%2B8yokOtV%2FspIL1VAam53wgum%2BDU%3D\"}]}\r\ncf-ray: a285ed6e186a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":1250,"mime_type":"text/css","magic":"ASCII text, with very long lines (1430)","md5":"b3d037c37356ce62fe0bfb73ca394c95","sha1":"d77a30c52c8b7b275f944bff952376f2ea4d54b0","sha256":"6cb66fbcdf648305a59b5c33637cf0e9969cbbe498dc8fc3627d89019e64317f","sha512":"32c4d7e029372cebef4d89d0e3d119302fe562441306d600e84fee35b1672371ed5765778f7b6fcffe8d3669d9b9e5a7bcf2086967fd269fc855f4a6fff1353e","ssdeep":"","tlshash":"39217d080d60df1b2caa6ef3e5c8da872c0854b34fb39d05d140602687958b53f3fe68","first_seen":"2026-01-03T15:18:18.18816Z","last_seen":"2026-08-09T10:03:19.846391Z","times_seen":97,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"amount.999coin.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"amount.999coin.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
