Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0154153495002020-11-07207.244.67.215Iphone
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
1tier_1mysocaledlife.com1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
2tier_1woolstonrovers.com1SNAPNAMES 17, LLCNS1.DNSNUTS.COMNone
3tier_1kamibbs.biz1UdomainName.com LLCns2.dnsnuts.comNone
4tier_1twiceblessedcomic.com1Belmontdomains.com LLCNS1.DNSNUTS.COMNone
5tier_1littlewolfrun.net1Atomicdomainnames.com LLCNS1.DNSNUTS.COMNone
6tier_1erojii.net1Dropcatch Landing Spot LLCNS1.DNSNUTS.COMNone
7tier_1alice90camgirl.com1MidWestDomains, LLCNS1.DNSNUTS.COMNone
8tier_12019calendarprintablewithholidays.com1NamesAlaCarte.com LLCNS1.DNSNUTS.COMNone
9tier_1girlsuhd.com1Names On The Drop LLCNS1.DNSNUTS.COMNone
10tier_2atnpx.com62GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
11tier_2track.vcdc.com60Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2usa.ced-max.com34Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
13tier_2usd.ced-max.com34Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
14tier_2r.ealeo.com14DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
15tier_2rd.bizrate.com14MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
16tier_2rd.connexity.net11NoneNoneNone
17tier_2click.expmediadirect.com7NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
18tier_2go.trackinz.com5NAMECHEAP INCNS-1139.AWSDNS-14.ORGWhoisGuard, Inc.
19tier_2dprtb.com4GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
20tier_3kbb.com49CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
21tier_3track.vcdc.com19Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
22tier_3robogarden.io13GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
23tier_3wayfair.com8MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
24tier_3samsclub.com6CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
25tier_3checkthistime.com5NAMECHEAP INCNS-1262.AWSDNS-29.ORGWhoisGuard, Inc.
26tier_3blog.sfgate.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
27tier_3r.ealeo.com2DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
28tier_3allbestsecureus.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
29tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_130nan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_123nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nan
4185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
564.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.net
6185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
764.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
837.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
1052.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_238ec2-52-205-210-89.compute-1.amazonaws.com
1154.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_230ec2-54-225-132-253.compute-1.amazonaws.com
12104.26.11.53WashingtonWashington, D.C.AS13335 Cloudflare, Inc.20045United Statestier_223nan
13172.67.74.77New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_222nan
1494.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_217static.231.186.130.94.clients.your-server.de
15104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_217nan
16144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_215static.130.1.76.144.clients.your-server.de
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_215static.237.185.130.94.clients.your-server.de
1866.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3266-165-243-151.static.hvvc.us
19192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_214rd.bizrate.com
2023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_349a23-44-217-143.deploy.static.akamaitechnologies.com
21138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_318proxy.traffic.club
22104.27.154.200WashingtonWashington, D.C.AS13335 Cloudflare, Inc.20045United Statestier_311nan
2323.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_38a23-39-32-237.deploy.static.akamaitechnologies.com
24184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_36a184-87-74-45.deploy.static.akamaitechnologies.com
25138.68.8.221Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_35nan
26151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_33nan
2766.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3266-165-243-151.static.hvvc.us
28172.67.172.143New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_32nan
2954.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_32ns568503.ip-54-39-130.net

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website