Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0203203629002021-01-13207.244.67.215Android
tierdomaincountregistrarname_serversorg
0tier_1constructionjobsforyou.info1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1ganaweb.info1DYNADOT LLCNS1.COMMONMX.COMNone
2tier_1arxivi.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
3tier_1bbt79.com1Communigal Communication LtdNS1.COMMONMX.COMNone
4tier_1clipxplore.com1SouthNames Inc.NS1.DNSNUTS.COMThe Management Group II
5tier_1economytravel.info1GoDaddy.com, LLCNS1.COMMONMX.COMNone
6tier_1amouretsante.co1Communigal Communication Ltdns1.commonmx.comNone
7tier_1garciniacambogiasideeffects4u.com1Rally Cry Domains, LLCNS1.DNSNUTS.COMNone
8tier_1blackjacksolutions.info1Dynadot, LLCNS1.COMMONMX.COMNone
9tier_1empiresuites.ph1NoneNoneNone
10tier_2alfik-fik.com92Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
11tier_2atnpx.com60GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
12tier_2dprtb.com581API GmbHNS1.DNSIMPLE.COMREDACTED FOR PRIVACY
13tier_21496.wcitianka.com18GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
14tier_2americanlisted.com15ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
15tier_2track.vcdc.com14NoneNoneNone
16tier_2trackyourmpg.com11GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
17tier_2us.sercanto.com8OVH, SASDNS20.OVH.NETWickedin s.r.l.
18tier_261434.click.validclick.net7Safenames LtdNS1.FULLMAILBOX.COMNone
19tier_2theminiplex.com6GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
20tier_3kbb.com60CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
21tier_3a.upbeatcboulevard.xyz10Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
22tier_3track.vcdc.com8Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_3us.sercanto.com7OVH, SASDNS20.OVH.NETWickedin s.r.l.
24tier_3blog.sfgate.com7CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
25tier_3delightcmain.xyz6Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
26tier_3offerwayz.com4Internet Domain Service BS Corp.NS-1129.AWSDNS-13.ORGWhois Privacy Corp.
27tier_3neuvoo.com3MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
28tier_3findoffers.co3Key-Systems GmbHns4.monikerdns.netMoniker Privacy Services
29tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_125nannan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_123nannan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nannan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_15nannan
8185.107.56.60AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
9185.107.56.198AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_265nannan
1134.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_249ec2-34-202-98-117.compute-1.amazonaws.comnan
1234.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_244ec2-34-226-113-11.compute-1.amazonaws.comnan
13104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_230nanTrue
14198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_220nannan
15172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_215nanTrue
1635.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_215240.61.209.35.bc.googleusercontent.comnan
17104.26.11.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_215nanTrue
18104.18.24.3San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_211nanTrue
19204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_27204.44.79.214.static.quadranet.comnan
2023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_359a23-44-217-143.deploy.static.akamaitechnologies.comnan
21195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_38static.254.92.201.195.clients.your-server.denan
22151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_37nanTrue
23104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
24104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
2534.90.160.43GroningenGroningenAS15169 Google LLC9711Netherlandstier_3543.160.90.34.bc.googleusercontent.comnan
2645.76.56.82DallasTexasAS20473 Choopa, LLC75270United Statestier_3445.76.56.82.vultr.comnan
27104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
28100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.netnan
29158.69.76.164MontréalQuebecAS16276 OVH SASH3ACanadatier_33nannan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website