| GET 16mncg.com/favicon.ico |  204.11.56.48 | 404 Not Found | 10 B |
IP204.11.56.48:443 ASN#40034 CONFLUENCE-NETWORK-INC
CertificateIssuerZeroSSL Subject16mncg.com FingerprintD9:6C:0D:56:7E:50:CF:E6:AC:8D:E6:AA:89:B5:21:0B:73:96:6C:07 ValidityThu, 05 Jun 2025 00:00:00 GMT - Wed, 03 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash6608dd3e21ca3beabd4bdfa625a0b221 e926d0f8694a4bc4013308afaca7af51e4c9fd9f c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75
GET /favicon.ico HTTP/1.1
Host: 16mncg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://16mncg.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: openresty
Date: Sat, 07 Jun 2025 07:24:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 10
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
|
IP204.11.56.48:443 ASN#40034 CONFLUENCE-NETWORK-INC
CertificateIssuerZeroSSL Subject16mncg.com FingerprintD9:6C:0D:56:7E:50:CF:E6:AC:8D:E6:AA:89:B5:21:0B:73:96:6C:07 ValidityThu, 05 Jun 2025 00:00:00 GMT - Wed, 03 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (770), with CRLF, LF line terminators Hashbe385057fc4567c13a597b3e8e09de41 23090aa11d0b69454339089aea61476ee99e99d4 d8072f76a656f55a5f0e1dc7b36bb498e730e3049316373b114940a9ab33e913
GET / HTTP/1.1
Host: 16mncg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 07 Jun 2025 07:24:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2309
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_kML5G6lclxs5GnCy72ufKbatheinD64M52ZTyBTT3Fj2yq4avAeLvvZf1gu5zMZcpRE+odRAD2Xd53cJ3lwdYA==
|
| GET realworldsearch.com/px.js?ch=2 |  0.0.0.0 | | 0 B |
URL GET realworldsearch.com/px.js?ch=2 IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /px.js?ch=2 HTTP/1.1
Host: realworldsearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16mncg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
| GET realworldsearch.com/px.js?ch=1 | 0.0.0.0 | | 0 B |
URL GET realworldsearch.com/px.js?ch=1 IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /px.js?ch=1 HTTP/1.1
Host: realworldsearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16mncg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
| GET sedoparking.com/frmpark/16mncg.com/Skenzor6/park.js |  64.190.63.136 | 200 OK | 1.3 kB |
URL GET sedoparking.com/frmpark/16mncg.com/Skenzor6/park.js IP64.190.63.136:443
CertificateIssuerDigiCert Inc Subjectsedoparking.com Fingerprint45:61:0E:D1:43:DE:A0:DC:79:8A:43:F4:8E:17:DD:B2:3A:40:7C:23 ValidityMon, 23 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (987) Hash87676ce312f788b3e766a23a16f62abc 41936d36313749695d788690a95eeec55dff11fa 3f13d325cc1b57be77603f5cb344847d0d8fbb4df7b1776e6e8805b6b1989975
GET /frmpark/16mncg.com/Skenzor6/park.js HTTP/1.1
Host: sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16mncg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Sat, 07 Jun 2025 07:25:04 GMT
server: Parking/1.0
vary: Accept-Encoding
x-cache-miss-from: parking-5b56c79c57-brrjc
X-Firefox-Spdy: h2
|