Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
07472183202021-01-04103.224.182.207Chrome
tierdomaincountregistrarname_serversorg
0tier_1followpics.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1flurred.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_1funnypictureoftheday.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1happybirdscraftinghaven.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1filmbagusbaru.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_1cabins-r-us.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1breband.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1fomcast.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1fqwz.com1eName Technology Co.,Ltd.NS1.ABOVE.COMNone
9tier_1elements4health.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2xml.sedodna.com12PSI-USA, Inc. dba Domain RobotNS-1222.AWSDNS-24.ORGNone
11tier_20redirb.com11ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
12tier_2link.searchemoji.global11GoDaddy.com, LLCNS03.DOMAINCONTROL.COMNone
13tier_2t.vivint.com11GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
14tier_2bidr.trellian.com9ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
15tier_2alfik-fik.com7Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
16tier_2api.searchlinker.com6GoDaddy.com, LLCNS-1158.AWSDNS-16.ORGDomains By Proxy, LLC
17tier_2bestresults.xyz6NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
18tier_2searchitdown.com6GoDaddy.com, LLCDNS1.P09.NSONE.NETClientConnect LTD
19tier_2track.traffic.name5NoneNoneNone
20tier_3vivint.com11GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
21tier_3bing.com6MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
22tier_3suggestive.com5GoDaddy.com, LLCJEAN.NS.CLOUDFLARE.COMDomains By Proxy, LLC
23tier_3us.tideri.com3united domains AGNS.UDAG.DENone
24tier_3americanlisted.com1ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
25tier_3apps.apple.com1CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
26tier_3giftexpress.com1ENOM, INC.KIA.NS.CLOUDFLARE.COMWhois Privacy Protection Service, Inc.
27tier_3macpaw.com1GANDI SASNS-1492.AWSDNS-58.ORGMacPaw Family Ltd.
28tier_3comicyears.com1GoDaddy.com, LLCPDNS01.DOMAINCONTROL.COMDomains By Proxy, LLC
29tier_3flashpvideo.com1NAMECHEAP INCNS-1045.AWSDNS-02.ORGWhoisGuard, Inc.
iphostnamecityregionorgpostalcountry_nametiercountanycast
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_132nan
191.195.240.136nanMunichBavariaAS47846 SEDO GmbH80331Germanytier_212nan
2173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_212nan
3103.224.212.247lb-212-247.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_211nan
4103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_29nan
534.207.32.33ec2-34-207-32-33.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_25nan
652.89.15.190ec2-52-89-15-190.us-west-2.compute.amazonaws.comPortlandOregonAS16509 Amazon.com, Inc.97293United Statestier_24nan
713.225.229.110server-13-225-229-110.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_24nan
834.202.98.117ec2-34-202-98-117.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_24nan
913.225.229.6server-13-225-229-6.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_24nan
1044.225.77.57ec2-44-225-77-57.us-west-2.compute.amazonaws.comPortlandOregonAS16509 Amazon.com, Inc.97293United Statestier_24nan
11104.18.10.116nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39True
12204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_36True
13172.67.166.78nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33True
1435.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_33nan
15104.18.53.225nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
16104.18.11.116nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
1735.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_31nan
1823.39.32.27a23-39-32-27.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31nan
19172.67.68.183nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
2035.224.231.200200.231.224.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_31nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website