Report - fuck-teens.ga/

Report Overview

Visited public
2023-11-14 05:22:00
Tags
URL
fuck-teens.ga/
Finishing URL
iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue
IP / ASN
103.224.182.210
#133618 Trellian Pty. Limited
Title
iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fuck-teens.ga	unknown	unknown	2022-12-20 08:00:11	2023-10-23 21:35:10	470 B	331 B	103.224.182.210
ww25.fuck-teens.ga	unknown	unknown	No data	No data	2.0 kB	36 kB	199.59.243.225
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-11-13 12:20:54	415 B	56 kB	142.250.74.132
iyfbodn.com	147548	2020-09-22	2021-06-29 20:15:40	2023-11-13 23:26:48	1.7 kB	1.2 kB	208.91.196.46

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-14 05:21:43	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .ga Domain
2023-11-14 05:21:43	low	Client IP	103.224.182.210	ET INFO Suspicious Domain (*.ga) in TLS SNI
2023-11-14 05:21:44	medium	Client IP	199.59.243.225	ET INFO HTTP Request to a *.ga domain
2023-11-14 05:21:45	medium	Client IP	199.59.243.225	ET INFO HTTP Request to a *.ga domain
2023-11-14 05:21:45	medium	Client IP	199.59.243.225	ET INFO HTTP POST Request to Suspicious *.ga Domain
2023-11-14 05:21:45	medium	Client IP	199.59.243.225	ET INFO HTTP Request to a *.ga domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

fuck-teens.ga/

103.224.182.210

2 B

URL
fuck-teens.ga/
IP
103.224.182.210:0
ASN
#133618 Trellian Pty. Limited

File type
ASCII text
Size
2 B (2 bytes)
Hash
e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070

HTTP Headers

GET / HTTP/1.1
Host: fuck-teens.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Tue, 14 Nov 2023 05:21:44 GMT
server: Apache
set-cookie: __tad=1699939304.8750620; expires=Fri, 11-Nov-2033 05:21:44 GMT; Max-Age=315360000
location: http://ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5

199.59.243.225

1.1 kB

URL
ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (442)
Size
1.1 kB (1145 bytes)
Hash
b95eef13bfc32462c07bc14ba52dc578
4e14b80beefd28bee657ae254ca01214dfbfdc91
a2869c7acaeff514bb68ee0010892077b76b8651fa4a6f927b4fde36ed1a6214

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.ga domain

HTTP Headers

GET /?subid1=20231114-1621-4479-970f-cbfaa1cacdd5 HTTP/1.1
Host: ww25.fuck-teens.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Tue, 14 Nov 2023 05:21:44 GMT
content-type: text/html; charset=utf-8
content-length: 1145
x-request-id: eefd2b03-2ac8-48f6-aae7-1cf84ca9f613
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_gqzCNhM1kjBBFtFBk/lbQoSChkOdrQNrXhSnZH2IVSmyd4tpMiWcexrR8D1LT/JxqDbIpC54T9B1B9e06KEfFA==
set-cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613; expires=Tue, 14 Nov 2023 05:36:44 GMT; path=/

ww25.fuck-teens.ga/bTerayndd.js

199.59.243.225

32 kB

URL
ww25.fuck-teens.ga/bTerayndd.js
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (31968)
Size
32 kB (31971 bytes)
Hash
611225f5570dc798ae68411c9709e625
238a5b853b04c88de5d937eccb062570e2d97432
1e5dad69bb61e210766d45af00d8c93b9329ee45fcd4c3b6c08d3515c97929b7

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.ga domain

HTTP Headers

GET /bTerayndd.js HTTP/1.1
Host: ww25.fuck-teens.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
Cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Tue, 14 Nov 2023 05:21:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 31971
x-request-id: ad042ef1-8c51-4ba8-9147-b272c1ceec2f
set-cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613; expires=Tue, 14 Nov 2023 05:36:45 GMT

ww25.fuck-teens.ga/_fd?subid1=20231114-1621-4479-970f-cbfaa1cacdd5

199.59.243.225

465 B

URL
ww25.fuck-teens.ga/_fd?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (617), with no line terminators
Size
465 B (465 bytes)
Hash
94df6c59a78084f90cfdbda58734ce04
d900dc22ae94f29d0ab6e126b9e38ca4a5d497bf
a5d4f5f82fca4494e2e770e73331b017cf2f4eab9b6d5d2d4c05049d3e2d92a1

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP POST Request to Suspicious *.ga Domain
suricata	medium	ET INFO HTTP Request to a *.ga domain

HTTP Headers

POST /_fd?subid1=20231114-1621-4479-970f-cbfaa1cacdd5 HTTP/1.1
Host: ww25.fuck-teens.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
Content-Type: application/json
Origin: http://ww25.fuck-teens.ga
DNT: 1
Connection: keep-alive
Cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
server: openresty
date: Tue, 14 Nov 2023 05:21:45 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 465
x-version: 2.110.3
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613; expires=Tue, 14 Nov 2023 05:36:45 GMT; Max-Age=900; path=/; httponly

www.google.com/adsense/domains/caf.js

142.250.74.132

55 kB

URL
www.google.com/adsense/domains/caf.js
IP
142.250.74.132:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression\012- data
Size
55 kB (54830 bytes)
Hash
625e0e4b68dbd094e697a38e34107ad3
1d574528c67b3317a64ada503c24ffc352ebdd42
c027a7bf72ec51e006bbd79c5004c6ef0e05752c57cc70acbea825246befbcc2

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.fuck-teens.ga/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 14 Nov 2023 05:21:45 GMT
expires: Tue, 14 Nov 2023 05:21:45 GMT
cache-control: private, max-age=3600
etag: "13859965838328933494"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww25.fuck-teens.ga/_zc

199.59.243.225

177 B

URL
ww25.fuck-teens.ga/_zc
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
177 B (177 bytes)
Hash
6b0ce23560617a81edb94563b24433a5
5ac72c9b324648e27f25ef87854de630d0593fd5
f734905537a70013cd1a7f9b109502d98ed5f3c698b8985396ee80049c39c481

HTTP Headers

POST /_zc HTTP/1.1
Host: ww25.fuck-teens.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.fuck-teens.ga/?subid1=20231114-1621-4479-970f-cbfaa1cacdd5
Content-Type: application/json
Content-Length: 1849
Origin: http://ww25.fuck-teens.ga
DNT: 1
Connection: keep-alive
Cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty
date: Tue, 14 Nov 2023 05:21:45 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 177
x-version: 2.110.3
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613; expires=Tue, 14 Nov 2023 05:36:46 GMT; Max-Age=900; path=/; httponly

iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue

208.91.196.46

403 Forbidden

300 B

URL User Request GET HTTP/1.1
iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue
IP
208.91.196.46:80
ASN
#40034 CONFLUENCE-NETWORK-INC

File type
HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
300 B (300 bytes)
Hash
9ebd01a009a016e835e203ba417790a8
b88a172e48f1af3567befbc4cfa682387999cbed
a67512adf374d59acf739db651d58adbfa3e03e0c2563aa0de49f9ffa982966e

HTTP Headers

GET /?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue HTTP/1.1
Host: iyfbodn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww25.fuck-teens.ga/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 14 Nov 2023 05:21:46 GMT
Server: Apache
Content-Length: 300
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue

208.91.196.46

403 Forbidden

300 B

URL User Request GET HTTP/1.1
iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue
IP
208.91.196.46:80
ASN
#40034 CONFLUENCE-NETWORK-INC

File type
HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
300 B (300 bytes)
Hash
a01743f35ce094c8c41d7f79eb25ec05
8e5320649d5e4a35f4dfad1e69ae163210814c2a
d71ca39b2e7392db4dbcb0cbc2c898185a8363be3add7b3582505b187d947737

HTTP Headers

GET /?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue HTTP/1.1
Host: iyfbodn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.fuck-teens.ga/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 14 Nov 2023 05:21:46 GMT
Server: Apache
Content-Length: 300
Keep-Alive: timeout=5, max=121
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

iyfbodn.com/favicon.ico

208.91.196.46

404 Not Found

10 B

URL GET HTTP/1.1
iyfbodn.com/favicon.ico
IP
208.91.196.46:80
ASN
#40034 CONFLUENCE-NETWORK-INC

Requested by
http://iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue

File type
ASCII text, with no line terminators
Size
10 B (10 bytes)
Hash
6608dd3e21ca3beabd4bdfa625a0b221
e926d0f8694a4bc4013308afaca7af51e4c9fd9f
c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: iyfbodn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iyfbodn.com/?dn=fuck-teens.ga&pid=9POT3387I&pbsubid=eefd2b03-2ac8-48f6-aae7-1cf84ca9f613&noads=http%3A%2F%2Fiyfbodn.com%2F%3Fdn%3Dfuck-teens.ga%26skipskenzo%3Dtrue
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 14 Nov 2023 05:21:47 GMT
Server: Apache
Content-Length: 10
Keep-Alive: timeout=5, max=119
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash