Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
08378170002021-01-08103.224.182.207Chrome
tierdomaincountregistrarname_serversorg
0tier_1boytoyfashion.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1animewapers.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
2tier_15qbaby.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1bracegirlz.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1blacherreport.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_133bux.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_14-hacks.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_13dbad.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1brestbuy.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
9tier_13rbsc.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_2bidr.trellian.com13ABOVE.COM PTY LTD.NS1.TRELLIAN.COMREDACTED FOR PRIVACY
11tier_2track.traffic.name12NoneNoneNone
12tier_2xml.sedodna.com10PSI-USA, Inc. dba Domain RobotNS-1222.AWSDNS-24.ORGNone
13tier_20redirb.com6ABOVE.COM PTY LTD.NS1.ABOVE.COMREDACTED FOR PRIVACY
14tier_2link.searchemoji.global5GoDaddy.com, LLCNS03.DOMAINCONTROL.COMNone
15tier_2t.vivint.com5GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
16tier_2api.quotes.com4Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
17tier_21496.wcitianka.com4GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
18tier_2americanlisted.com4ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
19tier_2alfik-fik.com3Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
20tier_3suggestive.com12GoDaddy.com, LLCJEAN.NS.CLOUDFLARE.COMDomains By Proxy, LLC
21tier_3vivint.com5GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
22tier_3us.tideri.com4united domains AGNS.UDAG.DENone
23tier_3bing.com2MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
24tier_3flashpvideo.com2NAMECHEAP INCNS-1045.AWSDNS-02.ORGWhoisGuard, Inc.
25tier_3bodybuilding.com2NoneNoneNone
26tier_3searchfrequently.com1GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
27tier_3amazon.com1NoneNoneNone
28tier_3blog.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
29tier_3apps.apple.com1CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
iphostnamecityregionorgpostalcountry_nametiercountanycast
0103.224.182.207lb-182-207.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_132nan
1103.224.182.206bidr.trellian.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_213nan
234.207.32.33ec2-34-207-32-33.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_212nan
391.195.240.136nanMunichBavariaAS47846 SEDO GmbH80331Germanytier_210nan
4173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nan
5103.224.212.247lb-212-247.above.comCaulfield SouthVictoriaAS133618 Trellian Pty. Limited3193Australiatier_26nan
65.79.68.236nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_24nan
7198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_24nan
835.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_24nan
934.226.113.11ec2-34-226-113-11.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_23nan
10199.59.242.153nanTampaFloridaAS395082 Bodis, LLC33609United Statestier_23nan
11104.18.52.225nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36True
12172.67.166.78nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36True
1335.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_34nan
14104.18.10.116nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33True
15204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32True
1623.208.51.206a23-208-51-206.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_32nan
17104.18.11.116nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
18172.67.138.156nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
1923.33.97.165a23-33-97-165.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31nan
20151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31True

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website