Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0203215741102020-10-28207.244.67.218Android
tierdomaincountregistrarname_serversorg
0tier_1gorefo.info1Domainarmada.com LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1trfrm.net1Goldmine Domains LLCNS1.DNSNUTS.COMNone
2tier_19novels.net1! #1 Host Japan, LLCNS1.DNSNUTS.COMNone
3tier_1aharonic.net1Gradeadomainnames.com LLCNS1.DNSNUTS.COMNone
4tier_1slicdeals.net1Bounce Pass Domains LLCNS1.DNSNUTS.COMNone
5tier_1lordntaylor.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 937761
6tier_1pick-bit.com1NamePal.com #8019, LLCNS1.DNSNUTS.COMNone
7tier_1albumkings.net1Snoqulamiedomains.com LLCNS1.DNSNUTS.COMNone
8tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
9tier_1worktelnet.com1Mvpdomainnames.com LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com88Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2get.popplunder.com48NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_2trustedpush.com44NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
13tier_2win1.trustedpush.com39NoneNoneNone
14tier_2win2.trustedpush.com31NoneNoneNone
15tier_2usd.mnason-hec.com25Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
16tier_2usa.mnason-hec.com23Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
17tier_2win3.trustedpush.com17NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_2usa.ced-max.com16Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
19tier_2robocrafthq.com14GANDI SASNS-115.AWSDNS-14.COMPPCBUZZ
20tier_3track.vcdc.com22Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_3clk.news-headlines.co15NAMECHEAP INCns-1428.awsdns-50.orgWhoisGuard, Inc.
22tier_3win3.trustedpush.com14NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
23tier_3pes20.proasdf.com11GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
24tier_3win4.trustedpush.com8NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_3win2.trustedpush.com8NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
26tier_3keepinfit.net7GANDI SASNS-1190.AWSDNS-20.ORGGlobalSource OU
27tier_3localpages.com6Network Solutions, LLCNS1.FABULOUSCDN.COMNone
28tier_3win5.trustedpush.com5NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
29tier_3win1.trustedpush.com5NameCheap, Inc.NS-1142.AWSDNS-14.ORGNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_134nan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_132nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_126nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
4185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
5185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
6185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
737.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
864.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.net
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
1034.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_248ec2-34-199-180-187.compute-1.amazonaws.com
1113.225.228.116Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_35server-13-225-228-116.jfk51.r.cloudfront.net
1252.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_238ec2-52-205-210-89.compute-1.amazonaws.com
1354.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_234ec2-54-225-132-253.compute-1.amazonaws.com
1494.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_227static.231.186.130.94.clients.your-server.de
15144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_224static.130.1.76.144.clients.your-server.de
1694.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_221static.237.185.130.94.clients.your-server.de
1713.224.214.126PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_218server-13-224-214-126.phl50.r.cloudfront.net
18144.76.0.242NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_216static.242.0.76.144.clients.your-server.de
1913.225.228.101Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_215server-13-225-228-101.jfk51.r.cloudfront.net
20100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_329pool-100-37-135-2.nycmny.fios.verizon.net
21138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_322proxy.traffic.club
22162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_311nan
2366.63.171.200Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_3666.63.171.200.static.quadranet.com
2413.224.214.29PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_36server-13-224-214-29.phl50.r.cloudfront.net
2535.174.102.54Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_35ec2-35-174-102-54.compute-1.amazonaws.com
2613.225.228.116Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_35server-13-225-228-116.jfk51.r.cloudfront.net
2752.203.50.59Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_34ec2-52-203-50-59.compute-1.amazonaws.com
2845.32.198.135DallasTexasAS20473 Choopa, LLC75270United Statestier_3445.32.198.135.vultr.com
2952.45.50.0Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_33ec2-52-45-50-0.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website