Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
03263291136502020-10-15103.224.182.207Iphone
tierdomaincountregistrarname_serversorg
0tier_1puracandelatv.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1codanova.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1dudroid.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1secondnaturecd.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1vvvgrace.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_103calls.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1soal-psikotest.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1articlemarketingautomation.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1benstreaming.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
9tier_1a-doctor-in-the-house.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2bidr.trellian.com207ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
11tier_2changeslots.com181Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
12tier_20redira.com46ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
13tier_2us.redirectbuzz.club16Gandi SASns-2.awsdns-00.comPPCBUZZ
14tier_2recode.pw16Gandi SASNS-1611.AWSDNS-09.CO.UKNone
15tier_2clk.rtpdn11.com15NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
16tier_2link.searchemoji.global14GoDaddy.com, LLCNS03.DOMAINCONTROL.COMNone
17tier_2go.trackinz.com12NAMECHEAP INCNS-1139.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_2cletrogen-daution.com11Amazon Registrar, Inc.NS-120.AWSDNS-15.COMWhois Privacy Service
19tier_2track.tasty-natural-lifestyles.com10NAMECHEAP INCDAN.NS.CLOUDFLARE.COMWhoisGuard, Inc.
20tier_3theconnectvpn.com181DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3carsnspeed.net13GANDI SASNS-1120.AWSDNS-12.ORGPPCBUZZ
22tier_3clickwantnow.com12NAMECHEAP INCNS-1308.AWSDNS-35.ORGWhoisGuard, Inc.
23tier_3securecd-smrt.com11Amazon Registrar, Inc.NS-1447.AWSDNS-52.ORGWhois Privacy Service
24tier_3polydontiaprogramable.club4NAMECHEAP INCelsa.ns.cloudflare.comWhoisGuard, Inc.
25tier_3hollywoodunlocked.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMNone
26tier_3searches.fitnessrant.com3GoDaddy.com, LLCNS-1331.AWSDNS-38.ORGDomains By Proxy, LLC
27tier_3basovbolivars.club3NoneNoneNone
28tier_3amazon.com3MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
29tier_3spiritdreams.club3NAMECHEAP INCelsa.ns.cloudflare.comWhoisGuard, Inc.
iphostnamecityregionorgpostalcountry_nametiercount
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_1257
1103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_2207
234.207.32.33ec2-34-207-32-33.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_2181
3103.224.212.241lb-212-241.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_246
4209.132.243.15nanLos AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_224
5173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_215
634.226.252.28ec2-34-226-252-28.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_212
718.233.68.85ec2-18-233-68-85.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_211
834.199.107.160ec2-34-199-107-160.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_210
9173.239.53.16nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_28
1054.236.137.187ec2-54-236-137-187.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_27
11104.27.187.165nanAtlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_395
12104.27.186.165nanAtlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_346
13172.67.181.234nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_340
14144.202.92.101144.202.92.101.vultr.comWashingtonVirginiaAS20473 Choopa, LLC22747United Statestier_312
153.95.110.253ec2-3-95-110-253.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_38
1645.32.198.13545.32.198.135.vultr.comDallasTexasAS20473 Choopa, LLC75270United Statestier_34
17100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34
18149.28.49.220149.28.49.220.vultr.comNew York CityNew YorkAS20473 Choopa, LLC10004United Statestier_34
1935.202.193.4646.193.202.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_34
2054.145.201.109ec2-54-145-201-109.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_33

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website