Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
05959113202020-12-16103.224.182.207Chrome
tierdomaincountregistrarname_serversorg
0tier_1lesdiagonalesdutemps.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1happybirdscraftinghaven.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1cabins-r-us.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1kinoflux.net1Go France Domains, LLCNS1.ABOVE.COMwww.jinmi.com
4tier_1khemer.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_1ilikefurniture.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1knowledgeoverflow.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1kuma-anime.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1fqwz.com1eName Technology Co.,Ltd.NS1.ABOVE.COMNone
9tier_1elements4health.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2xml.sedodna.com10PSI-USA, Inc. dba Domain RobotNS-1222.AWSDNS-24.ORGNone
11tier_2bidr.trellian.com8ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
12tier_2api.quotes.com7Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
13tier_2track.traffic.name6NoneNoneNone
14tier_2dprtb.com5GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
15tier_21496.wcitianka.com5NoneNoneNone
16tier_2americanlisted.com3ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
17tier_2query.pureleads.com2New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
18tier_2amzn.to2NoneNoneNone
19tier_2srchassist.com2GoDaddy.com, LLCNS01.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_3suggestive.com6GoDaddy.com, LLCJEAN.NS.CLOUDFLARE.COMDomains By Proxy, LLC
21tier_3us.tideri.com3united domains AGNS.UDAG.DENone
22tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
23tier_3amazon.com2MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
24tier_3stewsearch.com2GoDaddy.com, LLCNS65.DOMAINCONTROL.COMAdsurplus SA
25tier_3turbo-pdf.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3tco20.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_3streamswiftcompletelypro.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
28tier_3google.com1MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
29tier_3streamspeedycompletelypro.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
iphostnamecityregionorgpostalcountry_nametiercountanycast
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_120nan
191.195.240.136nanMunichBavariaAS47846 SEDO GmbH80331Germanytier_210nan
2173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nan
3103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_28nan
45.79.68.236nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_27nan
5209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_27nan
634.207.32.33ec2-34-207-32-33.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_26nan
7198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_25nan
835.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
934.211.165.149ec2-34-211-165-149.us-west-2.compute.amazonaws.comPortlandOregonAS16509 Amazon.com, Inc.97293United Statestier_22nan
1067.199.248.12cname.bitly.comNew York CityNew YorkAS396982 Google LLC10010United Statestier_22True
11172.67.166.78nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36True
1235.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_33nan
1335.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
14104.131.162.119nanCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_32nan
1575.101.207.6ec2-75-101-207-6.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_32nan
1613.225.212.37server-13-225-212-37.ewr50.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
17178.128.246.195nanAmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_31nan
18162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_31nan
19142.250.80.4lga34s33-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_31nan
2013.225.61.24server-13-225-61-24.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website