Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02983041020202020-11-07103.224.182.207Safari
tierdomaincountregistrarname_serversorg
0tier_1codanova.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1soal-psikotest.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1ddiziizle.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1benstreaming.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1googledocs.co.uk1Internet Domain Services BS Corp t/a Internet.bs [Tag = IDS-BS]nNone
5tier_1free-porn-apps.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1azmovielist.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1sstarvmovie.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1123gmail.com1TLD Registrar Solutions Ltd.NS1.ABOVE.COMWhois Privacy Corp.
9tier_1facebook-sex.com1Internet Domain Service BS Corp.NS1.ABOVE.COMWhois Privacy Corp.
10tier_2bidr.trellian.com110ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
11tier_2tr.trackingsys.tech87DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
12tier_2get36.admedit.net85NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
13tier_20redira.com54ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
14tier_2link.searchemoji.global26GoDaddy.com, LLCNS03.DOMAINCONTROL.COMNone
15tier_2xml.additionalmedia.com251&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
16tier_2xml.additionalmedia.com_LOOP_124NoneNoneNone
17tier_2results.certifyads.com221&1 IONOS SENS1024.UI-DNS.DE1&1 Internet Limited
18tier_2getbitly.com22GoDaddy.com, LLCANNA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
19tier_2viralsparks.io20CloudFlare, Inc.ANNA.NS.CLOUDFLARE.COMNone
20tier_3sports.yahoo.com20MarkMonitor, Inc.NS1.YAHOO.COMOath Inc.
21tier_3ready4maintain.findyourultimateplayersfirst.best12NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
22tier_3installworking.findyourultimateplayersfirst.best10NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
23tier_3theconnectvpn.com10DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
24tier_3tco20.proasdf.com10GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
25tier_3pcchecker.stablealwayssafeupgrades.best9NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3nowgetsoft.findperfectplaces4download.work8NoneNoneNone
27tier_3soft4update.findperfectplaces4download.work7NoneNoneNone
28tier_3updatesoftware.findperfectplaces4download.work7NoneNoneNone
29tier_3checksoft.findyourultimateplayersfirst.best6NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
iphostnamecityregionorgpostalcountry_nametiercount
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_1175
1103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_2110
234.231.10.22ec2-34-231-10-22.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_287
3137.74.180.226ip226.ip-137-74-180.euAmsterdamNorth HollandAS16276 OVH SAS1012Netherlandstier_285
4103.224.212.241lb-212-241.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_254
5173.239.53.16nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_249
6209.132.243.15nanWyomingMichiganAS7296 Alchemy Communications, Inc.49509United Statestier_228
7100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36
8104.27.168.186nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_216
999.84.126.65server-99-84-126-65.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_213
10104.27.144.230nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_213
1162.210.11.14962-210-11-149.rev.poneytelecom.euAl BuraymīAl BuraimiAS12876 ONLINE S.A.S.nanOmantier_349
12195.154.40.107195-154-40-107.rev.poneytelecom.euParisÎle-de-FranceAS12876 ONLINE S.A.S.75000Francetier_336
1369.147.92.12e2.ycpi.vip.dca.yahoo.comRestonVirginiaAS14777 Oath Holdings Inc.20190United Statestier_313
14162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_310
1569.147.92.11e1.ycpi.vip.dca.yahoo.comRestonVirginiaAS14777 Oath Holdings Inc.20190United Statestier_37
16100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36
17172.67.181.234nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36
1823.38.172.65a23-38-172-65.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33
19104.27.187.165nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33
2023.41.189.63a23-41-189-63.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website