Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0206213675002020-12-05207.244.67.215Iphone
tierdomaincountregistrarname_serversorg
0tier_1extrox.com1TUCOWS, INC.NS1.MILESMX.COMContact Privacy Inc. Customer 0156579598
1tier_1halloween-art.com1TUCOWS, INC.NS1.MILESMX.COMContact Privacy Inc. Customer 0156840156
2tier_1crafthd.net1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
3tier_1hamilton-health.com1Communigal Communication LtdNS1.MILESMX.COMNone
4tier_1fix-dining.com1TUCOWS, INC.NS1.MILESMX.COMContact Privacy Inc. Customer 0156840184
5tier_1grafisindie.com1! #1 Host China, LLCNS1.MILESMX.COMNone
6tier_1dolkn.com1Draftpick Domains LLCNS1.DNSNUTS.COMNone
7tier_1fruskies.com1Freefall Domains LLCNS1.MILESMX.COMNone
8tier_1alice90camgirl.com1MidWestDomains, LLCNS1.DNSNUTS.COMNone
9tier_1az-khaos.com1EUTurbo.com LLCNS1.DNSNUTS.COMNone
10tier_2euphe-gun.com64Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
11tier_2track.vcdc.com53Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2atnpx.com47GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
13tier_2ad.doubleclick.net43MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
14tier_2api.quotes.com43Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
15tier_2changeslots.com43Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
16tier_2c.clickprotects.com7GoDaddy.com, LLCNS63.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_211165151.addotnet.com7GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2rd.bizrate.com6MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
19tier_2rd.connexity.net6NoneNoneNone
20tier_3theconnectvpn.com43DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3kbb.com40CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
22tier_3track.vcdc.com17Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_3blog.sfgate.com9CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
24tier_3robogarden.io7GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
25tier_3enjoyance.com4NAMECHEAP INCNS-1527.AWSDNS-62.ORGWhoisGuard, Inc.
26tier_3restasis.com3MarkMonitor, Inc.HA1.MARKMONITOR.ZONEAllergan, Inc.
27tier_3blog.mysanantonio.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
28tier_3blog.chron.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
29tier_3music.apple.com3CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_123nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_118nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
4162.210.196.173WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nan
5199.115.116.162WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_19nan
6162.210.196.171WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nan
7162.210.196.172WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nan
8185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
105.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_243nan
1134.207.32.33Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_243ec2-34-207-32-33.compute-1.amazonaws.com
12172.217.11.6WestburyNew YorkAS15169 Google LLC11590United Statestier_239lga25s60-in-f6.1e100.net
1352.73.170.217Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_226ec2-52-73-170-217.compute-1.amazonaws.com
14209.132.243.15Grand RapidsMichiganAS7296 Alchemy Communications, Inc.49502United Statestier_225nan
15104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_223nan
1694.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_216static.231.186.130.94.clients.your-server.de
17204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_216204.44.79.214.static.quadranet.com
1834.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_215ec2-34-226-113-11.compute-1.amazonaws.com
1934.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_215ec2-34-202-98-117.compute-1.amazonaws.com
2023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_340a23-44-217-143.deploy.static.akamaitechnologies.com
21104.27.186.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_319nan
22138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_317proxy.traffic.club
23151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_315nan
24104.27.187.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_313nan
25172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_311nan
26104.27.155.200San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nan
27100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.net
28138.68.8.221Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_34nan
2923.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-39-32-237.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website