{"report_id":"ef041ad2-f55c-4c50-830e-f1c3c178800c","version":6,"status":"done","tags":[],"date":"2025-10-21T03:28:44Z","url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.20","port":0,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"title":"Bitcoin mixing service"},"submit":{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.20","port":0,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-25T03:28:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"coinmix-service.lima-city.de","ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-21T03:28:45.193166Z","last_seen":"2025-10-21T03:28:45.193166Z","alert_count":0,"request_count":34,"received_data":743724,"sent_data":16317,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"37208a7e82faaeaa1bb3e3648743eeeb","sha1":"1ad86ba91e7795bad7d5548171412a589d69156b","sha256":"17349999aeea3ec66412eb89ace44067486f02d62e4b705dffbca6692a45207f","sha512":"f811ebd37f6a57eb1175b8a902482d72df434b2e5b9a11275cc708344b512cb72e30a4ed1b28c3646619806c25d83150dd32b85df33a48d8766fbe65f3cb6eeb","ssdeep":"1536:84TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFn:84AkTtU2p0WPSIDrstfak","tlshash":"ce9308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93063,"data":"","first_seen":"2023-03-08T23:00:47Z","last_seen":"2026-08-18T04:41:11.789562Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"547b94459b8d38567fa5601b1103881e","sha1":"b51791f5149aa19e57bd62d586f171cd8cfec356","sha256":"1b49472f59cfd07fecc1831d80cad92b27f3a697c6d497274c779645ab10f250","sha512":"2b1f09e1a8945ae2832e83ec8fa4acfe56a94853aaf4abc15ed45064740c4fd7bfbb83792908cd5b6b9712583d4b6646efa294dd824a4a718c286ed7be8aa509","ssdeep":"","tlshash":"3fc092a3804ee154f593d80423fb70a80ed4b04b83e89d4027e84a10ac6b804001c784","size":148,"data":"","first_seen":"2025-10-21T03:28:51.135187Z","last_seen":"2025-10-21T03:28:51.135187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_002.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"15495ae19ff6b569c9d00427f01036af","sha1":"e12bce6759133ca5a9229ee2872fa76745fef5b6","sha256":"22f82d77a20aa0dfbc7060f95ffc9a843efe20f16cd49c53409ba70ea1744b2c","sha512":"97fbcf07dafb63e17c34de3bd22fecb20f0cfdf57cb8335a9d079fbb8a0d3679ada3db43a2d999cc1c1d46c149f7d6ead38d8172b2a3f8af63509c6774241e1b","ssdeep":"","tlshash":"4721cb1c31e235fe42f33a29447fec0ae4674d7b86070605d56780722cbe8d825b2fa9","size":1132,"data":"","first_seen":"2025-10-21T03:28:51.080959Z","last_seen":"2025-10-21T03:28:51.080959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_007.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"250fed6d542ae4db5dad6cef28773c38","sha1":"ad5c1f27fb3afff74b62e6b5fab23ced6376a681","sha256":"5781dd25c15b9de36e423dbd18e0aaaf77822f77c8516382b7951a088193d11a","sha512":"9e9759a92b82f43e397ab16fc1e01381672c5c62bad8b9d586ca4f3734eaf4dda5ef19171eab36fffb1332fea4048c5e8718c0e4d7287b06a63be09661fe851e","ssdeep":"192:UUI6RO4i3EpEQ84KyEpEt84vQZE6EIzgu3U:7IOyiMklZKgu3U","tlshash":"5fd1ac9971c63883526825171c47121aeab1bad83740fdccfe6b27099abff3a7815924","size":6210,"data":"","first_seen":"2025-10-21T03:28:51.1153Z","last_seen":"2025-10-21T03:28:51.1153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-ui-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb3985626147aa2820f3d5611acdd9af","sha1":"2348772d71a145d52bdd0d1f7e5bcda170020f47","sha256":"33ae27a39076e3fe5293a2949a27a3d56b69b2fb70e7245342998d939515c676","sha512":"fa3989d426d005d8d6704907c5e69804ee911b4dfc64b28e707d98ad76ea3eacd85314351b92670f967f127425dafef5baf20bc9234a21341fdd91ecd190a899","ssdeep":"3072:bXuuTLv03rGEoBc3w/AE6O2WGescCXWeoGPwf17EzwmYfHoXyc:j3orGE4/AxWGescCXWjGPNz","tlshash":"3e34f84d7201363696efe2a5103f260ba237515da605805cb03dcade9e7de4432bbfb9","size":236741,"data":"","first_seen":"2025-10-21T03:28:51.133209Z","last_seen":"2025-10-21T03:28:51.133209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4649382211a42235926ba2772225f06","sha1":"27fb53f88f85c3620a962fa246cd16ed655385f4","sha256":"2540752142805873c420a4a04883677c27603193c6dc909afb57616f5de7292e","sha512":"d54df46644792914ad2c9b3f61a730826a09d41147baf30c0ab1c819813da5274f113ba5828527c977802c9952db952ecfaaf3b2af54da28a838fdc4c9b687cd","ssdeep":"","tlshash":"6aa0122af8bd290100332402543622482e1e7004a08b2030100ca2c00b2d5613241000","size":80,"data":"","first_seen":"2025-10-06T10:13:27.185329Z","last_seen":"2026-06-06T10:13:22.084211Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_004.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"823eabd974f21f388089a471c3cefb14","sha1":"36844552c549bd6620f3c1d386ca8edb2921c5ff","sha256":"8175ac5c1832be76fcec5915d4abedc473d69437ad3d2c4268d3701a5a523640","sha512":"bb41f9e4fc13e762ec2887d5a9f96f73534697291b5076fe58e127187bae8e15d300b3e08c1ecf788f3c36abca127693cf953637fc4bf96220f9afe7963cd690","ssdeep":"","tlshash":"9f6000f000c0003cf33c0c303000033f003300000f033fc0f00003c000c00000000000","size":16,"data":"","first_seen":"2025-10-21T03:28:51.061089Z","last_seen":"2025-10-21T03:28:51.061089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/select-text.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b4d523db4225cabdd7ae200b18b996c","sha1":"554472d2158c4e99ea40ca8902a473f069640a29","sha256":"657a01b717e46d72429d43c01d83e5fb8cd3ff86b42be4b8dc2e1ca6b5ccbb7c","sha512":"611afda93cc16ce5ec256880bf6726b67b994e332a93a15e7cd5b680df092ba6b4bac8fccbe92bdfbe943c4d88a5486d2ed4922901b29690c150711419698c93","ssdeep":"","tlshash":"99e09a073003237a84de20bb1de3618b686645c0c888a141472c698abdb452b5437dcb","size":375,"data":"","first_seen":"2025-10-21T03:28:51.098381Z","last_seen":"2025-10-21T03:28:51.098381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_005.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4c2b16519c615269ed6ca025a0b8085","sha1":"9febf093165ebe80d636e0320ad031f10cc4e634","sha256":"3373517eedfdfc363db292f435c0f4423c826d8e2419bdf4c3a94b896c314715","sha512":"7a43350980976908b901c1ddb1ded6e2a05209471f898a1b013ca9a9716b98a323ea933e3af760a28f624288c462739aaaea24d0fed3a7f13de9ff05e4e0ca81","ssdeep":"","tlshash":"b031624a3700b0808fb5153125ba840d3972d9d10d9c4ceda28dd2d4aafc9a88e3be2c","size":1509,"data":"","first_seen":"2025-10-21T03:28:51.122743Z","last_seen":"2025-10-21T03:28:51.122743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_009.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc480a3162c2e2b2373f1e895a9d6f5","sha1":"2baa1a6b01db28d2b5715bf4e2d4c0703cab29d9","sha256":"e0d79e4693eb74f34349f5d60f851f2f4f157f0f842c73b7fd0986b6f5fa0eef","sha512":"96c8df8668e67f83c2ba85ac5815efd817b14b97dc158a7456c2bb1e2917b32a79f9bd4d558504117e76fc1e56cc04c97cbc69822fa4b00530ded16c6adc8846","ssdeep":"","tlshash":"7cc01208bbc132a342612435413f800670a92d3a5775c742102205714ef0a5c5d76c07","size":183,"data":"","first_seen":"2025-10-21T03:28:51.012142Z","last_seen":"2025-10-21T03:28:51.012142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_013.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"16fd7fe901bc8eaf4ea1f7425efe8239","sha1":"45100eb0b8c15e21a3d946b6aef7a3d939d2e8ee","sha256":"268052b41764040afd51dba8791199997ca7d2708ee6e16d1b7e3b19cee6e847","sha512":"64e952af8383df2dbd4eeea9aa81f189acf05e3ccd2150e6beccb5159b44be54b88e35cd9cd2dd51eb6972eb3002471a66ac4b757578a4ad31ea00d2a327c510","ssdeep":"","tlshash":"e821234632831273f1e22ee8006fae13e2c6dc7b5d084412e8d5a0747c7648e9136ec4","size":1316,"data":"","first_seen":"2025-10-21T03:28:51.102593Z","last_seen":"2025-10-21T03:28:51.102593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_011.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dda8beea1ffb42a0220cea373b4400c","sha1":"9fe33dba3aa05fae6c56018b321f59630c0499bb","sha256":"54ee7ba50de68feacdbbe12d1d840235142f83f6e22a5d737e36c42163575bb3","sha512":"d9230d4271eb293c5a1081d82725defb732ddfa730b5b35aadff44514e14d9b75095087148c3f8682fda310aab8bbf731bff1e18d4bf53bc9cd39fd4db3cc80d","ssdeep":"192:N0be5AB0TQajd92zUgnJP+OiMyhKnGHStE+axFk:z6FsIzUuphithKnqSClTk","tlshash":"5df14138772335358a7211fed4ee461598764bd687082501c3aec06c0bf8d79ae66d3e","size":7604,"data":"","first_seen":"2025-10-21T03:28:51.12889Z","last_seen":"2025-10-21T03:28:51.12889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"37208a7e82faaeaa1bb3e3648743eeeb","sha1":"1ad86ba91e7795bad7d5548171412a589d69156b","sha256":"17349999aeea3ec66412eb89ace44067486f02d62e4b705dffbca6692a45207f","sha512":"f811ebd37f6a57eb1175b8a902482d72df434b2e5b9a11275cc708344b512cb72e30a4ed1b28c3646619806c25d83150dd32b85df33a48d8766fbe65f3cb6eeb","ssdeep":"1536:84TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFn:84AkTtU2p0WPSIDrstfak","tlshash":"ce9308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93063,"data":"","first_seen":"2023-03-08T23:00:47Z","last_seen":"2026-08-18T04:41:11.789562Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bitcoin.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0948d5791b604f30f4bf4d3b76407fda","sha1":"dc10b639aa9397c96e98058552b2e58ce3614144","sha256":"555784858df2e8f79eb09434f12dc6ca912b723ab8d1361db565168665f93e01","sha512":"0736f6227b434baa8aa110b34c21e9f09cca1f07ae0b3e7050d2248006a77438a2c21faca070dd7515883f87d592b3dc80220e20a0d0e79f89281bc5dfe7c7ee","ssdeep":"384:xS1I1RbJZL6Q2RsUxkzkh+0y3NmMKgeQQb8uvDIe1ak17P3kut4ypPbD1ot:v5zB4yohtx5gfUIeJ7suCypDKt","tlshash":"c9c2c88977d9b025037e59f2090f080e7a39a82d188da59cb678d5e16df5c8d873af3c","size":26317,"data":"","first_seen":"2025-10-21T03:28:51.113256Z","last_seen":"2025-10-21T03:28:51.113256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-fix.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb8608cb3a561cf44c93113f643c487e","sha1":"75970eb247b54dc52a9c1bd2131e71ff0b77f15e","sha256":"f46a65e2bdf10c97b33e2f89ced3a9b4bc0b462cd71e709ebc3109c9822dc6aa","sha512":"c7aad92ea61726e540e1ec3defd4466ba72761976edfb48ec2220416dadae56bb865c0479bbf15062bce0d0bb0e62ba69264889cb1b9debf2f4dd8e8ec34d52d","ssdeep":"","tlshash":"5cc012bb76c69028ba5c51884a264141fa398e009818b64cd421385230e0fc44569878","size":181,"data":"","first_seen":"2025-10-21T03:28:51.096247Z","last_seen":"2025-10-21T03:28:51.096247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_010.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd4c7fc03fa7c5132697ec0e01cdd34b","sha1":"e70130ad8529fe14a49d53c2b294434f3cf2fad4","sha256":"0d6d2917d802c0bc96f3f2360646ba54e838f97359ee543b488fd97ce9344e3d","sha512":"6486695dca85c80522e5b7d3cdf13e7ce04e66be28857bea6d9ab8c6593b2c9b7c82992bef48e40037e7a9955a9a0fc20765b8cd05d633035e4edea080db1162","ssdeep":"","tlshash":"29012699b6d6b1a8b3381191046f0518a0f9fde0520d3388e0acd09337f85b8ddb3e98","size":700,"data":"","first_seen":"2025-10-21T03:28:51.040145Z","last_seen":"2025-10-21T03:28:51.040145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/sha3.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"becc72c28cbd661c5e0e61a1156f7a13","sha1":"b3690139333d61e1c6d9ee87e1d531155ad56371","sha256":"48086d079a41080d4076428233760cb5663bc35b645de1d383868207ea210f5d","sha512":"d24c4dbc9d58ed8d426bc03e5a369d726ca96b6e5a9bac3ab36e9829998b6698bbb6578046257762e01723c2173513544fa946aeeb757a7dac5650c784e69f5f","ssdeep":"192:82PA1Z1WdBpLfF9VU7NkD4MfdRgdHCBYLlh4W/D/Q/CtW3cJE6VELGGxJNhl2:8l1EFfdRgdiBYZhRbSCtW3F1l2","tlshash":"d5527500a677149663cba26dfa37554db156d4bb093b2a8cf9e8fcd84598a4cc03f34b","size":13980,"data":"","first_seen":"2025-10-21T03:28:51.076306Z","last_seen":"2025-10-21T03:28:51.076306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bootstrap.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e25e8e29ef0ea358e9778082ffd97d8","sha1":"75a42212affc118fef849aba4b9326a7da2acda1","sha256":"54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7","sha512":"2d9d83c70a43f7dc4e574160bd3498862bbaa02f535ff8fc2cf44878e57248c4fa5a03b7b38dfa85825a7faceda8964a7042ef1815993e1a2eee556ae7524760","ssdeep":"768:h2v6X8Yks6Zzy4PoytwbqX3/D8agMRXfcAfwI0OCtgez:hN8jvf7CCK","tlshash":"edc26306b2313161079bf2f5115b020b723a7a7ee906907c38b9dae63db9c597127f39","size":27726,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-19T03:32:34.984649Z","times_seen":2758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_008.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"df300428800932284112e45837f7a0fe","sha1":"2980af4efcb30208c90b886ce6d4fb8ebb06f52a","sha256":"afca45a937d513e8555250ac319d3531928b3875f285a2016dfa608aa3696d9f","sha512":"05f29536f15ea4a7ce3ea1502d1c3639cf36626b817b1b91d4469ad14626d2ef788fca782eab6cb6ee811eb58cfcbb1584252d0c05efa9a928c76a466eb928c1","ssdeep":"","tlshash":"4ae0ab54b2ca2908d743027c2d6f064fa4b02b877e469b38e905e83135e4b8fd8bbc35","size":435,"data":"","first_seen":"2025-10-21T03:28:51.031547Z","last_seen":"2025-10-21T03:28:51.031547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f535d645348ad6ddad8b1d5c3b64b8b1","sha1":"8f1b8f30eba1106bb18a629dd095257cc8659243","sha256":"ade2ae387c8d2b77408f425e4728ad0698c71c015bb17a6d7fbc4ecab2899c7f","sha512":"30fadf168a644d9f455a2cf7ff28ab0f0bb4846321120435a4afe658e4f5ad106b03607c4ecf0b5c1415678735ecb67f468f882ff22acb448fd24bd148e7cefd","ssdeep":"","tlshash":"d2d05ec572c7f038a3356265047f4a0aa0b98ec0626c3a49c0bcd5d237fc4b8ee7a818","size":258,"data":"","first_seen":"2025-10-21T03:28:51.124752Z","last_seen":"2025-10-21T03:28:51.124752Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_012.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d25ee994bcca985169862d5cffe732c0","sha1":"57befa88b2105ddc510a5c69cddcf60e54a98e44","sha256":"7562937dfa45fb9ff4c92a9b6b64807fd263f846c457b21cbbfd20b2f0f17169","sha512":"d43706db10a197df760e46c32e8ac4e2401412fd677dd38a11288c095fd739a6b5b3e820bd54241403ae25aa6d94dce33c97e1f2b5582fcae4ecbfbf90fe2728","ssdeep":"","tlshash":"5021cd837a05a970d95ab12b002ec24c653629d6e482416c79e280f94ef7c008e33b2f","size":1377,"data":"","first_seen":"2025-10-21T03:28:51.126885Z","last_seen":"2025-10-21T03:28:51.126885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_006.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4d0b5d2979007dc0e98fc7b2891a7b3","sha1":"5038dc3aadc7d9ef5dce499efa8d6a755a5e9d6d","sha256":"225cd469e632cdd28c096af5720fec061d57ce57011f6ebb0ee157de26e3482d","sha512":"64972dc913e5a747a6ae847da52808d4e8bcd52132fad3228c4e8dd59d3d0219993d3b0fe0bf22216dd8615918b712cc2772c97423a1dc648b0e41fdb43df9d9","ssdeep":"","tlshash":"c2413069bf8320026b7523e8e45f5d4d353ca6caa30cd5084d15c7b19eb831abda9d37","size":2051,"data":"","first_seen":"2025-10-21T03:28:51.10007Z","last_seen":"2025-10-21T03:28:51.10007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_003.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"15d1c67dfeef5a960a2a07274607d401","sha1":"ef5afc45fedce68256225d0a6b063e16d696724a","sha256":"a6f0d815684c3234669d89de7507fc3f261e0f3d567e05a11fb50b657b87617d","sha512":"5f6f49a60d14225408e33b388601ec8ea15c2b8958e4fb7efded9cf8872a075f37cb8ff43c90eeab135c92ce8f9646c24f971d47234fbce4b85f1c8dfe2102e8","ssdeep":"","tlshash":"13417fc2f77e271a9075745d480f8edbdfb167934814e5c4e1f40bc9aae1718212af49","size":2056,"data":"","first_seen":"2025-10-21T03:28:51.048837Z","last_seen":"2025-10-21T03:28:51.048837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/qrcode.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-19T21:40:53.855913Z","times_seen":66574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_009.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_009.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 148\r\nx-lima-id: atnjDVGZXoE1VvJo6Z\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"b7-5f24bbec3b17c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"ccc480a3162c2e2b2373f1e895a9d6f5","sha1":"2baa1a6b01db28d2b5715bf4e2d4c0703cab29d9","sha256":"e0d79e4693eb74f34349f5d60f851f2f4f157f0f842c73b7fd0986b6f5fa0eef","sha512":"96c8df8668e67f83c2ba85ac5815efd817b14b97dc158a7456c2bb1e2917b32a79f9bd4d558504117e76fc1e56cc04c97cbc69822fa4b00530ded16c6adc8846","ssdeep":"","tlshash":"7cc01208bbc132a342612435413f800670a92d3a5775c742102205714ef0a5c5d76c07","first_seen":"2025-10-21T03:28:51.012142Z","last_seen":"2025-10-21T03:28:51.012142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bootstrap.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/bootstrap.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7252\r\nx-lima-id: atNw4vtbJalilwtGXW\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"6c4e-5f24bbec612dc-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27726,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27605)","md5":"9e25e8e29ef0ea358e9778082ffd97d8","sha1":"75a42212affc118fef849aba4b9326a7da2acda1","sha256":"54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7","sha512":"2d9d83c70a43f7dc4e574160bd3498862bbaa02f535ff8fc2cf44878e57248c4fa5a03b7b38dfa85825a7faceda8964a7042ef1815993e1a2eee556ae7524760","ssdeep":"768:h2v6X8Yks6Zzy4PoytwbqX3/D8agMRXfcAfwI0OCtgez:hN8jvf7CCK","tlshash":"edc26306b2313161079bf2f5115b020b723a7a7ee906907c38b9dae63db9c597127f39","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-19T03:32:34.984649Z","times_seen":2758,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/jquery-1.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 32836\r\nx-lima-id: atCeOfkheltYORVSPN\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"16b87-5f24bbec8743d-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32056)","md5":"37208a7e82faaeaa1bb3e3648743eeeb","sha1":"1ad86ba91e7795bad7d5548171412a589d69156b","sha256":"17349999aeea3ec66412eb89ace44067486f02d62e4b705dffbca6692a45207f","sha512":"f811ebd37f6a57eb1175b8a902482d72df434b2e5b9a11275cc708344b512cb72e30a4ed1b28c3646619806c25d83150dd32b85df33a48d8766fbe65f3cb6eeb","ssdeep":"1536:84TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFn:84AkTtU2p0WPSIDrstfak","tlshash":"ce9308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-08T23:00:47Z","last_seen":"2026-08-18T04:41:11.789562Z","times_seen":137,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/ether.png","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/ether.png HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2279\r\nx-lima-id: atjZ3C2CKk2qyRSJAs\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"8e7-5f24bbec6ce5d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"59ed0db0baad5f2dbdcabcec256a8891","sha1":"ad571c8695ee14775b41fb2da74679a4ae4cf4ae","sha256":"7eee420f24dcda2523519cfaefef4d3fab7b15e6fa491791117f4a3cc9fb3797","sha512":"f5b1f01e15728eca83f23a17bd66263595158ad17c840cfd92c09634c24db46641dab2ce0b89913763044da8f933bc81892eb410e1c0427d457cb6eeda9c9b0d","ssdeep":"","tlshash":"c84119e3f5af25a65493d3958793ccdf4809fcae21a21a223794bc6c0238c5415dbaa6","first_seen":"2025-10-21T03:28:51.025168Z","last_seen":"2026-05-04T04:04:57.348793Z","times_seen":46,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_008.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_008.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 293\r\nx-lima-id: atvq9gphyCvrTNKPM6\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"1b3-5f24bbec353bb-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (435), with no line terminators","md5":"df300428800932284112e45837f7a0fe","sha1":"2980af4efcb30208c90b886ce6d4fb8ebb06f52a","sha256":"afca45a937d513e8555250ac319d3531928b3875f285a2016dfa608aa3696d9f","sha512":"05f29536f15ea4a7ce3ea1502d1c3639cf36626b817b1b91d4469ad14626d2ef788fca782eab6cb6ee811eb58cfcbb1584252d0c05efa9a928c76a466eb928c1","ssdeep":"","tlshash":"4ae0ab54b2ca2908d743027c2d6f064fa4b02b877e469b38e905e83135e4b8fd8bbc35","first_seen":"2025-10-21T03:28:51.031547Z","last_seen":"2025-10-21T03:28:51.031547Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_010.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_010.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 340\r\nx-lima-id: atkpeysKvhj0Jm8Kw0\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"2bc-5f24bbec40f3c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"cd4c7fc03fa7c5132697ec0e01cdd34b","sha1":"e70130ad8529fe14a49d53c2b294434f3cf2fad4","sha256":"0d6d2917d802c0bc96f3f2360646ba54e838f97359ee543b488fd97ce9344e3d","sha512":"6486695dca85c80522e5b7d3cdf13e7ce04e66be28857bea6d9ab8c6593b2c9b7c82992bef48e40037e7a9955a9a0fc20765b8cd05d633035e4edea080db1162","ssdeep":"","tlshash":"29012699b6d6b1a8b3381191046f0518a0f9fde0520d3388e0acd09337f85b8ddb3e98","first_seen":"2025-10-21T03:28:51.040145Z","last_seen":"2025-10-21T03:28:51.040145Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/jquery-1.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 32836\r\nx-lima-id: atb5zJdDgcS5Hm7Ur4\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"16b87-5f24bbec8743d-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":93063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32056)","md5":"37208a7e82faaeaa1bb3e3648743eeeb","sha1":"1ad86ba91e7795bad7d5548171412a589d69156b","sha256":"17349999aeea3ec66412eb89ace44067486f02d62e4b705dffbca6692a45207f","sha512":"f811ebd37f6a57eb1175b8a902482d72df434b2e5b9a11275cc708344b512cb72e30a4ed1b28c3646619806c25d83150dd32b85df33a48d8766fbe65f3cb6eeb","ssdeep":"1536:84TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFn:84AkTtU2p0WPSIDrstfak","tlshash":"ce9308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-08T23:00:47Z","last_seen":"2026-08-18T04:41:11.789562Z","times_seen":137,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_003.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_003.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 637\r\nx-lima-id: ati23i8Q0oqvv3WPZ5\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"808-5f24bbec1addb-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"15d1c67dfeef5a960a2a07274607d401","sha1":"ef5afc45fedce68256225d0a6b063e16d696724a","sha256":"a6f0d815684c3234669d89de7507fc3f261e0f3d567e05a11fb50b657b87617d","sha512":"5f6f49a60d14225408e33b388601ec8ea15c2b8958e4fb7efded9cf8872a075f37cb8ff43c90eeab135c92ce8f9646c24f971d47234fbce4b85f1c8dfe2102e8","ssdeep":"","tlshash":"13417fc2f77e271a9075745d480f8edbdfb167934814e5c4e1f40bc9aae1718212af49","first_seen":"2025-10-21T03:28:51.048837Z","last_seen":"2025-10-21T03:28:51.048837Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/fonts.css","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/fonts.css HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 187\r\nx-lima-id: atUqEAWF3DoOcDett3\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"204-5f24bbec7997d-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (516), with no line terminators","md5":"4765ed85d70e8bb1170f177f0d6f9e4d","sha1":"149a26bb76e77d2d9b3f6079190143f28feb9e9a","sha256":"40d697736aa0ef9ec8a1e2be79ac8e513ab0424f356a570d3b313d61086805a5","sha512":"30a7f08b264d8e370fbc78fafef665b735c29f5ca7dbd0fd48e443e7c7645dafaa9cc077bbecac8dd4f954420ae598aad49e36ecd22d30cb2ece1b0ae24cba85","ssdeep":"","tlshash":"99f096461697753f45578e4335df21315d261927302d0693831cac560ceb17e7178776","first_seen":"2025-10-21T03:28:51.054041Z","last_seen":"2025-10-21T03:28:51.054041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_004.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_004.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16\r\nx-lima-id: ati5QZcIHhHqPxlCqd\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"10-5f24bbec1fbfb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"823eabd974f21f388089a471c3cefb14","sha1":"36844552c549bd6620f3c1d386ca8edb2921c5ff","sha256":"8175ac5c1832be76fcec5915d4abedc473d69437ad3d2c4268d3701a5a523640","sha512":"bb41f9e4fc13e762ec2887d5a9f96f73534697291b5076fe58e127187bae8e15d300b3e08c1ecf788f3c36abca127693cf953637fc4bf96220f9afe7963cd690","ssdeep":"","tlshash":"9f6000f000c0003cf33c0c303000033f003300000f033fc0f00003c000c00000000000","first_seen":"2025-10-21T03:28:51.061089Z","last_seen":"2025-10-21T03:28:51.061089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/qrcode.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/qrcode.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7007\r\nx-lima-id: atUOTZ2WhohIm2rfde\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:01 GMT\r\netag: \"4dd7-5f24bbecb335e-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-19T21:40:53.855913Z","times_seen":66574,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/mix.png","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /mix.png HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3030\r\nx-lima-id: atGRPvmB2gzCtgTX41\r\nlast-modified: Sun, 15 Jan 2023 11:27:01 GMT\r\netag: \"bd6-5f24bbed9ba23\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"9bc39b847822f9510d4175acb6f0f6ef","sha1":"778561de87d40ae039dfea05482c5e17c92e84dc","sha256":"b86868dd35c3236decfeaad1ca022ae0be266fac1c44d91eae30781a24927958","sha512":"072770aeedfdd19a56ac95927845fa21f06c527cbb6c242a27e1228e646fa6f2b20e85da364724d4fae20791d0e4afd48b7dea15b8cb95aaa72061b454ba935f","ssdeep":"","tlshash":"c7515d9eb07bddb5c124133c1f46ec69c4bd9ad6261c91b4c4407c1de200167387a7dd","first_seen":"2025-10-21T03:28:51.069157Z","last_seen":"2025-10-21T03:28:51.069157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bitcoincash.png","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/bitcoincash.png HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1060\r\nx-lima-id: attnzxhcHqwJwxZAmV\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"424-5f24bbebfd91a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"37d5d429ee539ad9aa89ca3c3581214d","sha1":"0c086592717711c16cd2a7af1c51e9d1f98fabd2","sha256":"3a3f9845aead9edf2c6a7deab337f5ba44be9de2498ef67d480d3dee7f4805ff","sha512":"58bcd08106eecb700b7c96d6f1c36d8ccaba995542ce2a1b07f537f294ca93bfcb2c12aea3832ab675ae06f1bc242ccc9db53750828d0b4ad01b7945ea9226f4","ssdeep":"","tlshash":"fb11755140175dbcce268fa843f73192ad376fd846325b2939be19be4889668f361360","first_seen":"2025-10-21T03:28:51.073257Z","last_seen":"2025-10-21T03:28:51.073257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/sha3.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/sha3.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3985\r\nx-lima-id: atQ6UOrY1ccE6QsiVS\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:01 GMT\r\netag: \"369c-5f24bbecc3cfe-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3947)","md5":"becc72c28cbd661c5e0e61a1156f7a13","sha1":"b3690139333d61e1c6d9ee87e1d531155ad56371","sha256":"48086d079a41080d4076428233760cb5663bc35b645de1d383868207ea210f5d","sha512":"d24c4dbc9d58ed8d426bc03e5a369d726ca96b6e5a9bac3ab36e9829998b6698bbb6578046257762e01723c2173513544fa946aeeb757a7dac5650c784e69f5f","ssdeep":"192:82PA1Z1WdBpLfF9VU7NkD4MfdRgdHCBYLlh4W/D/Q/CtW3cJE6VELGGxJNhl2:8l1EFfdRgdiBYZhRbSCtW3F1l2","tlshash":"d5527500a677149663cba26dfa37554db156d4bb093b2a8cf9e8fcd84598a4cc03f34b","first_seen":"2025-10-21T03:28:51.076306Z","last_seen":"2025-10-21T03:28:51.076306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_002.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_002.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 534\r\nx-lima-id: atMFesYmjrodPE04Co\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"46c-5f24bbec1501b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1132), with no line terminators","md5":"15495ae19ff6b569c9d00427f01036af","sha1":"e12bce6759133ca5a9229ee2872fa76745fef5b6","sha256":"22f82d77a20aa0dfbc7060f95ffc9a843efe20f16cd49c53409ba70ea1744b2c","sha512":"97fbcf07dafb63e17c34de3bd22fecb20f0cfdf57cb8335a9d079fbb8a0d3679ada3db43a2d999cc1c1d46c149f7d6ead38d8172b2a3f8af63509c6774241e1b","ssdeep":"","tlshash":"4721cb1c31e235fe42f33a29447fec0ae4674d7b86070605d56780722cbe8d825b2fa9","first_seen":"2025-10-21T03:28:51.080959Z","last_seen":"2025-10-21T03:28:51.080959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/litecoin.png","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/litecoin.png HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1218\r\nx-lima-id: atXi5DgGk1I0ycGYaN\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"4c2-5f24bbeca48fe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"b5ea288560286db819781fdb692e4de4","sha1":"137dcdd1f3970c1d1accac77f59c890284e120b8","sha256":"a2434a73c315fb053d1c040196f1c3fce3fd30404d032eef852d4663250f31e8","sha512":"bf3110c9f89f7492056969355433974f4378f0d957bd8a6e577dd70646b5789831d3c5ff9f9337e22a2f6555898239b9bb52a4d43e3ba1d4e97cec8fb53ed3bf","ssdeep":"","tlshash":"1821aad382021c24e253512aff91583cdd2afd59517b21073f4324d5b78146fed82ac1","first_seen":"2025-10-21T03:28:51.085402Z","last_seen":"2025-10-21T03:28:51.085402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-ui-1.css","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/jquery-ui-1.css HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 4713\r\nx-lima-id: attWK8ClB5SWfYrreX\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"65bb-5f24bbec92fbd-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":26043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26043), with no line terminators","md5":"f215a38e2b928832cd4ecae7764bea95","sha1":"bffabf12cfd5fb7756907718d5b6e03ebc5be1ca","sha256":"75a7da7610c2512c81d00b91733638bd7ece4fe0e70ddbbb5a029d94c5a6a916","sha512":"be4e440a66a8121c0300a74f588ceb4014015ac2da65192832c7553278ba584a02f476600e3d38bb744304eb61d6cf043bec898bcb9b2dd118788fddcf26fa78","ssdeep":"384:PovLzBnz3JjK6Rn7kkQaW8zF2mHFRt+5eeQgoKNcs:PovLzBnz3JjrAkQaW8zF2mheQOF","tlshash":"2dc21230a482281dff23db22a0a11ff5533a8042dd665fbdf05a35595feb8e4857b872","first_seen":"2025-10-21T03:28:51.088636Z","last_seen":"2025-10-21T03:28:51.088636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/helpful.css","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/helpful.css HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 280\r\nx-lima-id: atdR9CDu6DXmDwaDM6\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"2ba-5f24bbec7e79d-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (698), with no line terminators","md5":"9ae6412e849094b00a581b909143f41c","sha1":"9a426bd2a71e6cd849e878e988185fa8a94578dd","sha256":"317aa8c7736524a1da4fadd671782f719edc49cc325311a531bc9d37030208ee","sha512":"940347c60219e9c54604e74f20a0461be1ecc97890f8bcae002e8b8940cd8a92f424ff248516fdbc5b45dad0e5ed9b32c60c0c138b7907ffe8a75af6b5247c00","ssdeep":"","tlshash":"ee01869241d2049ce227ab2b8ad0a72971135c23400be7d76cbbf021ec4f6e10b049ba","first_seen":"2025-10-21T03:28:51.09164Z","last_seen":"2025-10-21T03:28:51.09164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-fix.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/jquery-fix.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 137\r\nx-lima-id: ats6fUNFyzeegjLwv4\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"b5-5f24bbec8c25d-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cb8608cb3a561cf44c93113f643c487e","sha1":"75970eb247b54dc52a9c1bd2131e71ff0b77f15e","sha256":"f46a65e2bdf10c97b33e2f89ced3a9b4bc0b462cd71e709ebc3109c9822dc6aa","sha512":"c7aad92ea61726e540e1ec3defd4466ba72761976edfb48ec2220416dadae56bb865c0479bbf15062bce0d0bb0e62ba69264889cb1b9debf2f4dd8e8ec34d52d","ssdeep":"","tlshash":"5cc012bb76c69028ba5c51884a264141fa398e009818b64cd421385230e0fc44569878","first_seen":"2025-10-21T03:28:51.096247Z","last_seen":"2025-10-21T03:28:51.096247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/select-text.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/select-text.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 206\r\nx-lima-id: attVFSoMEKz6st5ytK\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:01 GMT\r\netag: \"177-5f24bbecbdf3e-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (375), with no line terminators","md5":"5b4d523db4225cabdd7ae200b18b996c","sha1":"554472d2158c4e99ea40ca8902a473f069640a29","sha256":"657a01b717e46d72429d43c01d83e5fb8cd3ff86b42be4b8dc2e1ca6b5ccbb7c","sha512":"611afda93cc16ce5ec256880bf6726b67b994e332a93a15e7cd5b680df092ba6b4bac8fccbe92bdfbe943c4d88a5486d2ed4922901b29690c150711419698c93","ssdeep":"","tlshash":"99e09a073003237a84de20bb1de3618b686645c0c888a141472c698abdb452b5437dcb","first_seen":"2025-10-21T03:28:51.098381Z","last_seen":"2025-10-21T03:28:51.098381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_006.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_006.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 899\r\nx-lima-id: at1USqNx7r3AT9DCme\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"803-5f24bbec2a7db-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (499)","md5":"d4d0b5d2979007dc0e98fc7b2891a7b3","sha1":"5038dc3aadc7d9ef5dce499efa8d6a755a5e9d6d","sha256":"225cd469e632cdd28c096af5720fec061d57ce57011f6ebb0ee157de26e3482d","sha512":"64972dc913e5a747a6ae847da52808d4e8bcd52132fad3228c4e8dd59d3d0219993d3b0fe0bf22216dd8615918b712cc2772c97423a1dc648b0e41fdb43df9d9","ssdeep":"","tlshash":"c2413069bf8320026b7523e8e45f5d4d353ca6caa30cd5084d15c7b19eb831abda9d37","first_seen":"2025-10-21T03:28:51.10007Z","last_seen":"2025-10-21T03:28:51.10007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_013.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_013.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 586\r\nx-lima-id: atNWDUMiQ77Rmx5I9f\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"524-5f24bbec5093c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1316), with no line terminators","md5":"16fd7fe901bc8eaf4ea1f7425efe8239","sha1":"45100eb0b8c15e21a3d946b6aef7a3d939d2e8ee","sha256":"268052b41764040afd51dba8791199997ca7d2708ee6e16d1b7e3b19cee6e847","sha512":"64e952af8383df2dbd4eeea9aa81f189acf05e3ccd2150e6beccb5159b44be54b88e35cd9cd2dd51eb6972eb3002471a66ac4b757578a4ad31ea00d2a327c510","ssdeep":"","tlshash":"e821234632831273f1e22ee8006fae13e2c6dc7b5d084412e8d5a0747c7648e9136ec4","first_seen":"2025-10-21T03:28:51.102593Z","last_seen":"2025-10-21T03:28:51.102593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bootstrap.css","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/bootstrap.css HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 20715\r\nx-lima-id: atIC8hXhkYjjCRtYYy\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"1f5d4-5f24bbec5a57c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65230)","md5":"3819b64a914ef2f6ab190e24343a30c2","sha1":"729b0d221481813a1ecb19a041eb03f54eee690b","sha256":"5b99aa61624ac803cdec54021b58504586327f59db077b740a386c21662c7d9c","sha512":"b700d729d088c8e1e8e55a6744657db6ecf57edb09d23cfa786f107d2d15b5b46c21daa0c9f1fd5a81528a4437f2bbb30044c4c8adc08325f78776e854b1212e","ssdeep":"768:pMzkGxw/f/Hm3o8DnJgI6GHNSLLMl/GGlXMbZbVdGvP9P08Ef/VZAqQkQzaNX:pM5w/nKSI6GHNSLLZG1AdjBf/V3QsX","tlshash":"59c3c660f11031ea7323c55a71d0fe8a3258e193e5664eb7f22f65e88f855ca1273f1a","first_seen":"2025-10-21T03:28:51.104384Z","last_seen":"2026-07-23T04:09:00.804498Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-21T03:28:22.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/html\r\nx-lima-id: at142DVjoXHMGX0k0e\r\nset-cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":10875,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (389)","md5":"6884063d4316bb580acc702a44c9679d","sha1":"b3659338778ae001bdc0e16bf68b0bba22aabd61","sha256":"79d6affaf3b0f272d97fdc1b8c540baeefec9225a6096485955a51dc7e50cf1a","sha512":"5b38e6f7a28ca1a8c50550cf2940e8154aa5b33bccde1fde6119323899660e3b54e4eb82555c19b89b2799dc274389d8ad673435a7a3d3981b8b4f27302e244c","ssdeep":"192:rZrTJ31HEWqHccicErzZMt/XGkrysTeueRwswLB3pH/GYyxlC4iATXZFUj:9TJWEj3ZkXGk3eueRwswLB3pH/GYyxlK","tlshash":"9f228627fd2b6037062398c0b2b5bb1960d6d55bdbd2e862b4fd83e99fc0dd85c09608","first_seen":"2025-10-21T03:28:51.111258Z","last_seen":"2025-10-21T03:28:51.111258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":50,"dns":5,"connect":19,"send":0,"wait":47,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bitcoin.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/bitcoin.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8665\r\nx-lima-id: atTWIABA1zq7jz5MAR\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"66cd-5f24bbebf1d9a-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3510)","md5":"0948d5791b604f30f4bf4d3b76407fda","sha1":"dc10b639aa9397c96e98058552b2e58ce3614144","sha256":"555784858df2e8f79eb09434f12dc6ca912b723ab8d1361db565168665f93e01","sha512":"0736f6227b434baa8aa110b34c21e9f09cca1f07ae0b3e7050d2248006a77438a2c21faca070dd7515883f87d592b3dc80220e20a0d0e79f89281bc5dfe7c7ee","ssdeep":"384:xS1I1RbJZL6Q2RsUxkzkh+0y3NmMKgeQQb8uvDIe1ak17P3kut4ypPbD1ot:v5zB4yohtx5gfUIeJ7suCypDKt","tlshash":"c9c2c88977d9b025037e59f2090f080e7a39a82d188da59cb678d5e16df5c8d873af3c","first_seen":"2025-10-21T03:28:51.113256Z","last_seen":"2025-10-21T03:28:51.113256Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_007.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_007.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1126\r\nx-lima-id: ats0WfzB2HtOv354ov\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"1842-5f24bbec3059b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (402)","md5":"250fed6d542ae4db5dad6cef28773c38","sha1":"ad5c1f27fb3afff74b62e6b5fab23ced6376a681","sha256":"5781dd25c15b9de36e423dbd18e0aaaf77822f77c8516382b7951a088193d11a","sha512":"9e9759a92b82f43e397ab16fc1e01381672c5c62bad8b9d586ca4f3734eaf4dda5ef19171eab36fffb1332fea4048c5e8718c0e4d7287b06a63be09661fe851e","ssdeep":"192:UUI6RO4i3EpEQ84KyEpEt84vQZE6EIzgu3U:7IOyiMklZKgu3U","tlshash":"5fd1ac9971c63883526825171c47121aeab1bad83740fdccfe6b27099abff3a7815924","first_seen":"2025-10-21T03:28:51.1153Z","last_seen":"2025-10-21T03:28:51.1153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/fonts/OpenSans-300.woff","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /fonts/OpenSans-300.woff HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/index-Dateien/fonts.css\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-lima-id: at8mGd1wGmAeGqCV73\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"79d80d6379c1eddcc8cbbcbd2209f6e6","sha1":"72d4d8b81dc2e38f7f4de361d6346fa5b30e1c6c","sha256":"38a2bcbe1ad944b68429db92571365da518d29afeaf61e036a94928d7470d4dd","sha512":"61b1142f6ca7d0089da53803115cbfa9e472effe20446cd9b5fca29d0547f2ec04c86d9bacec2f81bb20f22c68282be71e4794611b2e9897723c02b4e0e4b95d","ssdeep":"","tlshash":"74d02b9e905373a7081224903dc665c2268812e6b4aa81a92ec5e887669c53dcc99289","first_seen":"2025-10-21T03:28:51.118006Z","last_seen":"2025-10-21T03:28:51.118006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/bitcoin.png","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/bitcoin.png HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1264\r\nx-lima-id: at3Th9qfDFVmTe2YSt\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"4f0-5f24bbebf8afa\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"faa9b7ecbab14a6b7fca42ddf5a3ac19","sha1":"8e524c547a3cfbaac161565a7e1a132b19ed7e8d","sha256":"fa5af7054ab3e789fe97bbaee231c983acf260e65dcf7d95ae84af60865faead","sha512":"50e0371c1d740349f64351c66acd071c5ec7b68158f72098a37cb13bfe2c318e3f3d70df6b02ea06d7c60584ce994060f1c7b7e72616e6f3b35f63f68486228b","ssdeep":"","tlshash":"6821b73596f2800cd9ed60f7a9c86d52aa582481b5ba05ee2b0330ca09f7c5c501df81","first_seen":"2025-10-21T03:28:51.120397Z","last_seen":"2025-10-21T03:28:51.120397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_005.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_005.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 737\r\nx-lima-id: at5XXzUGhJZwS76emV\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"5e5-5f24bbec259bb-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (429)","md5":"c4c2b16519c615269ed6ca025a0b8085","sha1":"9febf093165ebe80d636e0320ad031f10cc4e634","sha256":"3373517eedfdfc363db292f435c0f4423c826d8e2419bdf4c3a94b896c314715","sha512":"7a43350980976908b901c1ddb1ded6e2a05209471f898a1b013ca9a9716b98a323ea933e3af760a28f624288c462739aaaea24d0fed3a7f13de9ff05e4e0ca81","ssdeep":"","tlshash":"b031624a3700b0808fb5153125ba840d3972d9d10d9c4ceda28dd2d4aafc9a88e3be2c","first_seen":"2025-10-21T03:28:51.122743Z","last_seen":"2025-10-21T03:28:51.122743Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 185\r\nx-lima-id: atfUti7tFRXv0wRcKi\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"102-5f24bbec101fb-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f535d645348ad6ddad8b1d5c3b64b8b1","sha1":"8f1b8f30eba1106bb18a629dd095257cc8659243","sha256":"ade2ae387c8d2b77408f425e4728ad0698c71c015bb17a6d7fbc4ecab2899c7f","sha512":"30fadf168a644d9f455a2cf7ff28ab0f0bb4846321120435a4afe658e4f5ad106b03607c4ecf0b5c1415678735ecb67f468f882ff22acb448fd24bd148e7cefd","ssdeep":"","tlshash":"d2d05ec572c7f038a3356265047f4a0aa0b98ec0626c3a49c0bcd5d237fc4b8ee7a818","first_seen":"2025-10-21T03:28:51.124752Z","last_seen":"2025-10-21T03:28:51.124752Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_012.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_012.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 573\r\nx-lima-id: atV9rZCtGvMWC679YI\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"561-5f24bbec4bb1c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1377,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1377), with no line terminators","md5":"d25ee994bcca985169862d5cffe732c0","sha1":"57befa88b2105ddc510a5c69cddcf60e54a98e44","sha256":"7562937dfa45fb9ff4c92a9b6b64807fd263f846c457b21cbbfd20b2f0f17169","sha512":"d43706db10a197df760e46c32e8ac4e2401412fd677dd38a11288c095fd739a6b5b3e820bd54241403ae25aa6d94dce33c97e1f2b5582fcae4ecbfbf90fe2728","ssdeep":"","tlshash":"5021cd837a05a970d95ab12b002ec24c653629d6e482416c79e280f94ef7c008e33b2f","first_seen":"2025-10-21T03:28:51.126885Z","last_seen":"2025-10-21T03:28:51.126885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/BMX_011.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/BMX_011.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2226\r\nx-lima-id: atC1Xv3C5VSZGLyypN\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"1db4-5f24bbec45d5c-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":7604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1177)","md5":"3dda8beea1ffb42a0220cea373b4400c","sha1":"9fe33dba3aa05fae6c56018b321f59630c0499bb","sha256":"54ee7ba50de68feacdbbe12d1d840235142f83f6e22a5d737e36c42163575bb3","sha512":"d9230d4271eb293c5a1081d82725defb732ddfa730b5b35aadff44514e14d9b75095087148c3f8682fda310aab8bbf731bff1e18d4bf53bc9cd39fd4db3cc80d","ssdeep":"192:N0be5AB0TQajd92zUgnJP+OiMyhKnGHStE+axFk:z6FsIzUuphithKnqSClTk","tlshash":"5df14138772335358a7211fed4ee461598764bd687082501c3aec06c0bf8d79ae66d3e","first_seen":"2025-10-21T03:28:51.12889Z","last_seen":"2025-10-21T03:28:51.12889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/style.css","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/style.css HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 2711\r\nx-lima-id: atKF2jBrFyacRbrShm\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:01 GMT\r\netag: \"2ee6-5f24bbecc8b1e-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 20 Nov 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12006,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10952)","md5":"47effbad9b109059a39e707f12051842","sha1":"3d122acfe921b3e007aed4efe7d95d2fb6e9a7a4","sha256":"4e7704b1b4fbf11b76974336c8f44b95434528fbb967769f5e2244ae3700d4bf","sha512":"c12e0c19db2a9fc17c5893d37a000a25cf1e869ac3d8802a334ee3519516d42d999472b136a95a9ab60d242d545c0c9525fa92320925e55b82708280800603c3","ssdeep":"192:v9+nmYm2/ifhMoLid5t08Lz6s9Ln/qVVFs1x1ig1cqxsPxc:V/YmFGZhdblxKxc","tlshash":"a542672514001105b67fdd21f1807e7d3c56c657e22b67eb92a66e2fcbc62de16b230e","first_seen":"2025-10-21T03:28:51.131435Z","last_seen":"2025-10-21T03:28:51.131435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmix-service.lima-city.de/index-Dateien/jquery-ui-1.js","fqdn":"coinmix-service.lima-city.de","domain":"coinmix-service.lima-city.de","tld":"lima-city.de"},"ip":{"addr":"91.216.248.21","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinmix-service.lima-city.de/","date":"2025-10-21T03:28:22.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 01:04:39 GMT","end":"Fri, 09 Jan 2026 01:04:38 GMT"},"fingerprint":{"sha1":"D7:B3:E6:E0:97:DF:13:B1:66:F1:D9:42:13:4D:F8:BE:3E:D9:26:66","sha256":"68:75:37:33:59:3F:EF:4B:6E:A3:71:7D:76:C9:05:99:27:39:2B:82:60:EC:E1:10:C9:FD:D8:B7:22:95:E3:A9"}}},"request":{"raw":"GET /index-Dateien/jquery-ui-1.js HTTP/1.1\r\nHost: coinmix-service.lima-city.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinmix-service.lima-city.de/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 21 Oct 2025 03:28:22 GMT\r\ncontent-type: application/javascript\r\nx-lima-id: atDO33OuccuDkYvB6t\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Sun, 15 Jan 2023 11:27:00 GMT\r\netag: \"39cc5-5f24bbec9db9e-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Tue, 28 Oct 2025 03:28:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":236741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64561)","md5":"bb3985626147aa2820f3d5611acdd9af","sha1":"2348772d71a145d52bdd0d1f7e5bcda170020f47","sha256":"33ae27a39076e3fe5293a2949a27a3d56b69b2fb70e7245342998d939515c676","sha512":"fa3989d426d005d8d6704907c5e69804ee911b4dfc64b28e707d98ad76ea3eacd85314351b92670f967f127425dafef5baf20bc9234a21341fdd91ecd190a899","ssdeep":"3072:bXuuTLv03rGEoBc3w/AE6O2WGescCXWeoGPwf17EzwmYfHoXyc:j3orGE4/AxWGescCXWjGPNz","tlshash":"3e34f84d7201363696efe2a5103f260ba237515da605805cb03dcade9e7de4432bbfb9","first_seen":"2025-10-21T03:28:51.133209Z","last_seen":"2025-10-21T03:28:51.133209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}