Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
096104320002020-11-08207.244.67.215Safari
tierdomaincountregistrarname_serversorg
0tier_1shearton.com1Media Elite Holdings LimitedNS1.DNSNUTS.COMFundacion Privacy Services LTD
1tier_1orangegfs.com1Sicherregister, LLCNS1.DNSNUTS.COMNone
2tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
3tier_1nexstage-solution.com1The Domains LLCNS1.DNSNUTS.COMNone
4tier_1wifisouthwest.com1Media Elite Holdings LimitedNS1.DNSNUTS.COMFundacion Privacy Services LTD
5tier_1maxlander.net1SNAPNAMES 76, LLCNS1.DNSNUTS.COMNone
6tier_1accessusbank.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 733920
7tier_1turkcellsuperonline-digitalteknoloji.com1NamePal.com #8007, LLCNS1.DNSNUTS.COMNone
8tier_1forcedrapepornsex.com1SNAPNAMES 18, LLCNS1.DNSNUTS.COMNone
9tier_1walmart-email.com1Best Drop Names LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com35GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_21496.wcitianka.com34GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com30ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2click.appcast.io28101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_2rd.nebulajobs.com19GoDaddy.com, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
15tier_2nextcareernow.com13GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
16tier_2click.appcast.io_LOOP_19NoneNoneNone
17tier_2p.nexxt.com7Network Solutions, LLCNS21.WORLDNIC.COMNone
18tier_2track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
19tier_2rd.kinyesi.com5GoDaddy.com, LLCNS-1503.AWSDNS-59.ORGDomains By Proxy, LLC
20tier_3nextcareernow.com9GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
21tier_3amazon.force.com7MarkMonitor, Inc.PCH1.SALESFORCE-DNS.COMSalesforce.com, Inc.
22tier_3clickajobs.com4Google LLCANNA.NS.CLOUDFLARE.COMWhat Digital Ltd
23tier_3americanlisted.com4ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
24tier_3toovolution.club3NoneNoneNone
25tier_3us.allthetopbananas.com3NoneNoneNone
26tier_3hbomax.com2MarkMonitor, Inc.NS-1007.AWSDNS-61.NETHome Box Office, Inc.
27tier_3click.appcast.io2101Domain GRS LtdNS-85.AWSDNS-10.COMNone
28tier_3kbb.com2CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
29tier_3p.nexxt.com1Network Solutions, LLCNS21.WORLDNIC.COMNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_15nan
4185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
5185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
664.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
764.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
837.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
9209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_238nan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_234nan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.com
1234.225.4.3Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_214ec2-34-225-4-3.compute-1.amazonaws.com
1354.163.21.106Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_31ec2-54-163-21-106.compute-1.amazonaws.com
14216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_39any-in-2015.1e100.net
1534.234.179.35Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_29ec2-34-234-179-35.compute-1.amazonaws.com
16100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_29pool-100-37-135-2.nycmny.fios.verizon.net
173.86.134.189Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_27ec2-3-86-134-189.compute-1.amazonaws.com
1868.168.84.60King of PrussiaPennsylvaniaAS17378 TierPoint, LLC19406United Statestier_2760.84.168.68.static.dbsintl.net
19216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_39any-in-2015.1e100.net
20172.67.139.150San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nan
2135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.com
2213.110.68.94WashingtonWashington, D.C.AS14340 Salesforce.com, Inc.20045United Statestier_33dcl5-ncg1-c6-iad5.na137-ia5.force.com
2323.38.170.105NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_32a23-38-170-105.deploy.static.akamaitechnologies.com
2413.110.66.94WashingtonWashington, D.C.AS14340 Salesforce.com, Inc.20045United Statestier_32dcl3-ncg1-c6-iad5.na137-ia5.force.com
2523.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-44-217-143.deploy.static.akamaitechnologies.com
26172.67.75.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nan
2799.84.222.29WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_31server-99-84-222-29.iad79.r.cloudfront.net
2854.163.21.106Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_31ec2-54-163-21-106.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website