Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0151423002021-04-15185.53.177.73Chrome
tierdomaincountregistrarname_serversorg
0tier_11link.in1TLD Registrar Solutions Ltd.ns1.parkingcrew.netNone
1tier_11a-hundehuette.de1NoneNoneNone
2tier_1abi2015.de1NoneNoneNone
3tier_118.de1NoneNoneNone
4tier_118tube.de1NoneNoneNone
5tier_2katie.v4.omgtnc.com5PSI-USA, Inc. dba Domain RobotNS-1133.AWSDNS-13.ORGNone
6tier_2recode.pw2GANDI SASNS-1611.AWSDNS-09.CO.UKPPCBUZZ
7tier_2us.redirectbuzz.club2Gandi SASns-2.awsdns-00.comPPCBUZZ
8tier_2technoblogs.net1GANDI SASNS-1196.AWSDNS-21.ORGPPCBUZZ
9tier_2paid.outbrain.com1Network Solutions, LLCDNS1.P07.NSONE.NETNone
10tier_2dailyboard.org1GANDI SASNS-1297.AWSDNS-34.ORGPPCBUZZ
11tier_2clk.news-headlines.co1NAMECHEAP INCns-1428.awsdns-50.orgPrivacy service provided by Withheld for Privacy ehf
12tier_3ram21.proasdf.com3GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
13tier_3healthgrades.com1Amazon Registrar, Inc.NS-1102.AWSDNS-09.ORGWhois Privacy Service
14tier_3rdr.ad-score.com1GoDaddy.com, LLCNS53.DOMAINCONTROL.COMProtected Media
ipcityregionorgpostalcountry_nametiercounthostname
0104.247.81.73WyandotteMichiganAS206834 Team Internet AG48192United Statestier_15nan
152.45.77.217AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-52-45-77-217.compute-1.amazonaws.com
266.232.112.83TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2266-232-112-83.static.hvvc.us
366.232.112.70TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2266-232-112-70.static.hvvc.us
466.232.112.77TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2166-232-112-77.static.hvvc.us
5199.232.66.132WashingtonWashington, D.C.AS54113 Fastly20045United Statestier_21nan
63.220.46.255AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-3-220-46-255.compute-1.amazonaws.com
766.232.112.79TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2166-232-112-79.static.hvvc.us
8143.204.148.68NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_21server-143-204-148-68.ewr52.r.cloudfront.net
952.22.6.66AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-22-6-66.compute-1.amazonaws.com
10162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_33nan
11143.204.148.32NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-143-204-148-32.ewr52.r.cloudfront.net
12130.211.115.4Council BluffsIowaAS15169 Google LLC51502United Statestier_314.115.211.130.bc.googleusercontent.com

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website