Censys expands queries to provide additional functionality. For example, the query a:zmap.io
executes a DNS lookup and expands to ip:141.212.120.90.
Your query was changed from:
((("CoinHive.Anonymous") AND (MikroTik)) AND location.country_code: US) AND autonomous_system.description.raw: "COGENT-174 - Cogent Communications"
to
((("CoinHive.Anonymous") AND (MikroTik)) AND location.country_code: US) AND autonomous_system.description.raw: "COGENT-174 - Cogent Communications"
If this isn't what you intended, you can run your raw query without expansion.