Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0168168595002021-01-01207.244.67.215Chrome
tierdomaincountregistrarname_serversorg
0tier_1mypirateproxy.com1Chipshot Domains LLCNS1.DNSNUTS.COMNone
1tier_1skachatenglish.com1Deep Water Domains LLCNS1.DNSNUTS.COMNone
2tier_1smutfix.com1Lucky Elephant Domains, LLCNS1.DNSNUTS.COMNone
3tier_1mltaqa.net1Names On The Drop LLCNS1.DNSNUTS.COMNone
4tier_1brickerenterprise.com1NamePal.com #8011, LLCNS1.DNSNUTS.COMNone
5tier_1rixdot.com1Adriatic Domains LLCNS1.DNSNUTS.COMNone
6tier_1codeyouneed.com1Deep Sea Domains LLCNS1.DNSNUTS.COMNone
7tier_1nl-fiction.com1WillametteNames.com LLCNS1.DNSNUTS.COMNone
8tier_1mospeen.com1Allworldnames.com LLCNS1.DNSNUTS.COMNone
9tier_110dle.com1Free Drop Zone LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com50GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
11tier_2track.vcdc.com38Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_21496.wcitianka.com37GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
13tier_2americanlisted.com37ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2alfik-fik.com28Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
15tier_2api.searchlinker.com25GoDaddy.com, LLCNS-1158.AWSDNS-16.ORGDomains By Proxy, LLC
16tier_2bestresults.xyz24NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
17tier_2searchitdown.com24GoDaddy.com, LLCDNS1.P09.NSONE.NETClientConnect LTD
18tier_2bradamante-per.com23Amazon Registrar, Inc.NS-1026.AWSDNS-00.ORGWhois Privacy Service
19tier_2click.appcast.io16101Domain GRS LtdNS-85.AWSDNS-10.COMNone
20tier_3bing.com24MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
21tier_3flashpvideo.com23NAMECHEAP INCNS-1045.AWSDNS-02.ORGWhoisGuard, Inc.
22tier_3us.tideri.com21united domains AGNS.UDAG.DENone
23tier_3track.vcdc.com17Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
24tier_3signup.myjobscorner.com4GoDaddy.com, LLCALDO.NS.CLOUDFLARE.COMDomains By Proxy, LLC
25tier_3getstarjobs.getitcorporate.com3NoneNoneNone
26tier_3alfik-fik.com2Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
27tier_3careerbliss.com2GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
28tier_3kbb.com2CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
29tier_3shipt.com_LOOP_11NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_132nannan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_127nannan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_118nannan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nannan
437.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
5185.107.56.60AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
663.143.32.94DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1294-32-143-63.static.reverse.lstn.netnan
737.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
863.143.32.84DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1284-32-143-63.static.reverse.lstn.netnan
963.143.32.88DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1188-32-143-63.static.reverse.lstn.netnan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_253nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_237nannan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_237240.61.209.35.bc.googleusercontent.comnan
1334.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_228ec2-34-226-113-11.compute-1.amazonaws.comnan
1434.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_32ec2-34-202-98-117.compute-1.amazonaws.comnan
15100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_218pool-100-37-135-2.nycmny.fios.verizon.netnan
1635.190.64.22Kansas CityMissouriAS15169 Google LLC64121United Statestier_21622.64.190.35.bc.googleusercontent.comTrue
173.213.168.177Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_214ec2-3-213-168-177.compute-1.amazonaws.comnan
1894.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_211static.237.185.130.94.clients.your-server.denan
1918.213.221.179Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-18-213-221-179.compute-1.amazonaws.comnan
20204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_324a-0001.a-msedge.netTrue
2135.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_321123.171.246.35.bc.googleusercontent.comnan
22195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_314static.254.92.201.195.clients.your-server.denan
23143.204.147.30NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_37server-143-204-147-30.ewr52.r.cloudfront.netnan
24143.204.147.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-143-204-147-17.ewr52.r.cloudfront.netnan
25143.204.147.83NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-143-204-147-83.ewr52.r.cloudfront.netnan
26143.204.147.20NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-143-204-147-20.ewr52.r.cloudfront.netnan
27151.101.1.195San FranciscoCaliforniaAS54113 Fastly94107United Statestier_33nanTrue
2835.241.55.51Kansas CityMissouriAS15169 Google LLC64121United Statestier_3351.55.241.35.bc.googleusercontent.comTrue
2934.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_32ec2-34-202-98-117.compute-1.amazonaws.comnan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website