Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
03043131018202020-11-01103.224.182.207Chrome
tierdomaincountregistrarname_serversorg
0tier_1puracandelatv.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1codanova.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1dudroid.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1secondnaturecd.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1eastcoastallstars.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_1vvvgrace.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_103calls.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1ptidico.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1azmovielist.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
9tier_1sstarvmovie.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2bidr.trellian.com158ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
11tier_2srchassist.com151GoDaddy.com, LLCNS01.DOMAINCONTROL.COMDomains By Proxy, LLC
12tier_20redira.com69ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
13tier_2infopicked.com39NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
14tier_2click.expmediadirect.com22NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
15tier_2link.searchemoji.global12GoDaddy.com, LLCNS03.DOMAINCONTROL.COMNone
16tier_2track.imgtrx2.com9NAMECHEAP INCPDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
17tier_2pleasetrack.com9Name.com, Inc.NS1DJS.NAME.COMDomain Protection Services, Inc.
18tier_2clk.rtpdn11.com7NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
19tier_2usa.eyvindr-eng.com7Amazon Registrar, Inc.NS-1497.AWSDNS-59.ORGWhois Privacy Service
20tier_3highclasssearch.com151GoDaddy.com, LLCNS15.DOMAINCONTROL.COMDomains By Proxy, LLC
21tier_3tco20.proasdf.com21GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
22tier_3protects.s3.us-east-2.amazonaws.com9MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
23tier_3thefatburner.info8GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
24tier_3trend-guru.com8Cloudflare, Inc.DAVE.NS.CLOUDFLARE.COMDATA REDACTED
25tier_3usaveservices.com6GoDaddy.com, LLCNS1.IMGLLCSITES.COMDomains By Proxy, LLC
26tier_3theconnectvpn.com4DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
27tier_3pes20.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
28tier_3searchfrequently.com4GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
29tier_3samsung.com3NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercount
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_1235
1103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_2158
2165.22.38.5nanCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_2151
3103.224.212.241lb-212-241.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_269
4173.192.101.2418.65.c0ad.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_243
5198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_222
6173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_214
7209.132.243.15nanWyomingMichiganAS7296 Alchemy Communications, Inc.49509United Statestier_212
823.81.176.198nanSan FranciscoCaliforniaAS7203 Leaseweb USA, Inc.94103United Statestier_29
934.198.58.156ec2-34-198-58-156.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_29
103.220.252.35ec2-3-220-252-35.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_28
11167.172.231.164nanCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_3151
12162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_325
13204.10.38.178server3.imgllcsites.comSan ClementeCaliforniaAS33322 Network Data Center Host, Inc.92673United Statestier_37
14104.27.187.165nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_34
15104.27.174.27nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_34
16104.31.81.30nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_34
17172.67.218.143nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_33
18172.67.142.207nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_33
1923.38.172.65a23-38-172-65.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33
20104.18.45.78nanNew York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_33

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website