Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0575799202020-12-01103.224.182.207Iphone
tierdomaincountregistrarname_serversorg
0tier_1dudroid.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1digigag.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1dragonballclub.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1happybirdscraftinghaven.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1dsamsung.com1TLD Registrar Solutions Ltd.NS1.ABOVE.COMWhois Privacy Corp.
5tier_1cabins-r-us.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1khemer.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1ilikefurniture.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1fqwz.com1eName Technology Co.,Ltd.NS1.ABOVE.COMNone
9tier_1drumselect.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2changeslots.com10Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
11tier_2xml.sedodna.com9PSI-USA, Inc. dba Domain RobotNS-1222.AWSDNS-24.ORGNone
12tier_2124.wcitianka.com6GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
13tier_2bidr.trellian.com5ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
14tier_20redira.com3ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
15tier_2rd.bizrate.com3MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
16tier_2r.ealeo.com2DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
17tier_2rd.connexity.net2NoneNoneNone
18tier_2ww1.happybirdscraftinghaven.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
19tier_2forwrdnow.com1NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
20tier_3theconnectvpn.com10DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3wayfair.com2MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
22tier_3rakuten.com1NoneNoneNone
23tier_3amazon.com1NoneNoneNone
24tier_3storystudio.hearstnp.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
25tier_3ios-protect-defence.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3blog.chron.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
27tier_3shopdisney.com_LOOP_11NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercount
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_118
134.207.32.33ec2-34-207-32-33.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210
291.195.240.136nanMunichBavariaAS47846 SEDO GmbH80331Germanytier_29
3173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_29
4198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_26
5103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_25
6103.224.212.241lb-212-241.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_23
7192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_23
866.165.243.15166-165-243-151.static.hvvc.usTampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_22
9204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_22
10192.138.218.139rd.connexity.netSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_22
11104.27.187.165nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35
12172.67.181.234nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34
1323.39.32.237a23-39-32-237.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32
14104.27.186.165nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31
15104.90.69.198a104-90-69-198.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31
1613.225.61.24server-13-225-61-24.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31
1798.129.228.57nanBrookhavenMississippiAS33070 Rackspace Hosting39601United Statestier_31
1864.225.2.103nanCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_31
19151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31
20100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website