Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
04274331427102020-11-13103.224.182.207Safari
tierdomaincountregistrarname_serversorg
0tier_1erokuni.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1codanova.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1butberry.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1cocers.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1annagoesshopping.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_1barboach.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1dudroid.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_103calls.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1cheburechnaya.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
9tier_1coipons.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2bidr.trellian.com225ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
11tier_2seemlast.monster100NoneNoneNone
12tier_2verifiedclicker.com63TUCOWS, INC.1-YOU.NJALLA.NOREDACTED FOR PRIVACY
13tier_20redira.com63ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
14tier_2tr.trackingsys.tech35DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
15tier_2query.pureleads.com28New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
16tier_2get36.admedit.net27NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
17tier_2noclick.connexity.com23MarkMonitor, Inc.NS-1235.AWSDNS-26.ORGConnexity, Inc.
18tier_2rd.bizrate.com19NoneNoneNone
19tier_26102.xg4ken.com18GoDaddy.com, LLCDNS1.P02.NSONE.NETKenshoo TLD
20tier_3macpaw.com100GANDI SASNS-1492.AWSDNS-58.ORGMacPaw Family Ltd.
21tier_3antivirus-protection.me63NAMECHEAP INCNoneNone
22tier_3macys.com18Network Solutions, LLCA1-135.AKAM.NETNone
23tier_3amazon.com14MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
24tier_3tco20.proasdf.com10GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
25tier_3theconnectvpn.com8DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
26tier_3futmillionaire.com8NoneNoneNone
27tier_3samsung.com8NoneNoneNone
28tier_3update2new.thestablegreatupgrades.best6NoneNoneNone
29tier_3workingupdate.thestablegreatupgrades.work5NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercount
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_1306
1103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_2225
2134.209.199.255nanAmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_263
3103.224.212.241lb-212-241.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_263
495.211.26.199nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_251
585.17.29.187nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_249
6209.132.243.15nanWyomingMichiganAS7296 Alchemy Communications, Inc.49509United Statestier_244
734.231.10.22ec2-34-231-10-22.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_235
8137.74.180.226ip226.ip-137-74-180.euAmsterdamNorth HollandAS16276 OVH SAS1012Netherlandstier_227
9192.138.218.215noclick.connexity.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_223
10192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_219
1135.224.231.200200.231.224.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_3100
12172.86.75.234nanAmsterdamNorth HollandAS40676 Psychz Networks1017Netherlandstier_363
13195.154.40.107195-154-40-107.rev.poneytelecom.euParisÎle-de-FranceAS12876 ONLINE S.A.S.75000Francetier_316
1462.210.11.14962-210-11-149.rev.poneytelecom.euParisÎle-de-FranceAS12876 ONLINE S.A.S.75004Francetier_311
15162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_310
1623.208.216.186a23-208-216-186.deploy.static.akamaitechnologies.comEdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_310
17100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_39
1813.226.30.13server-13-226-30-13.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_38
19172.67.208.25nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35
20172.67.181.234nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website