Detect CoinHive

PluginView evaluates public page signals in these classes when identifying CoinHive. Individual fingerprint rule bodies are proprietary and are not published.

• Script sources
• JavaScript globals
• URL patterns

Illustrative indicators derived from public catalog metadata for CoinHive. A live scan may match additional proprietary rules beyond these examples.

• coinhiveauthedmine.min?.js
• coinhive.com/lib
• CoinHive
• https?://cnhv.co/

Establishes

One or more public signals on the scanned page matched a known CoinHive signature (4 rules) at the time of the scan.

Does not establish

A sitewide install of CoinHive, an active vendor contract, exclusive use, or that CoinHive is still in place today.

1. 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest CoinHive signals.
2. 2. PluginView reads only public responses (script sources, javascript globals, url patterns) and scores them against the CoinHive signature set (4 rules).
3. 3. Review the confidence score and text explanation for CoinHive on the results page.

Can PluginView detect CoinHive without logging in?

Yes. PluginView only reads publicly accessible responses when checking for CoinHive — typically script sources, javascript globals, url patterns. It does not bypass authentication or paywalls.

What category is CoinHive?

CoinHive is classified under Cryptominers in the PluginView directory.

How many fingerprint rules cover CoinHive?

This reference currently tracks 4 fingerprint rules across script sources, javascript globals, url patterns. Individual rule bodies are proprietary and are not published.

What public signals suggest a site uses CoinHive?

Illustrative public indicators for CoinHive include coinhiveauthedmine.min?.js; coinhive.com/lib; CoinHive. A live scan may match additional proprietary rules beyond these examples.