Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0200210825202020-10-31207.244.67.218Android
tierdomaincountregistrarname_serversorg
0tier_1mp3trackz.com1NamePal.com #8010, LLCNS1.DNSNUTS.COMNone
1tier_1brasilonline.tv1Sterling Domains LLCNS1.DNSNUTS.COMNone
2tier_19ref.com1Lionshare Domains, LLCNS1.DNSNUTS.COMNone
3tier_1hijrah-selangor.com1DropWalk.com, LLCNS1.DNSNUTS.COMNone
4tier_1t-gr.com1SNAPNAMES 58, LLCNS1.DNSNUTS.COMNone
5tier_1nhahangthanbien.com1NamePal.com #8012, LLCNS1.DNSNUTS.COMNone
6tier_1duet-chehova.net1Afterdark Domains, LLCNS1.DNSNUTS.COMNone
7tier_1isdegypt.com1Your Domain Casa, LLCNS1.DNSNUTS.COMNone
8tier_1nl-fiction.com1WillametteNames.com LLCNS1.DNSNUTS.COMNone
9tier_1xboxlivescore.com1Lucky Elephant Domains, LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com105Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2get.popplunder.com50NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_2trustedpush.com46NoneNoneNone
13tier_2win1.trustedpush.com44NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
14tier_2win2.trustedpush.com39NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
15tier_2usd.ced-max.com36Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
16tier_2usa.mnason-hec.com26Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
17tier_2track.spicefriends.com24NoneNoneNone
18tier_2usd.mnason-hec.com24Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
19tier_2usa.ced-max.com20Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
20tier_3paranoidapanage.club23NAMECHEAP INCelsa.ns.cloudflare.comWhoisGuard, Inc.
21tier_3win3.trustedpush.com19NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
22tier_3track.vcdc.com18Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_3massmaplewood.club13NoneNoneNone
24tier_3win4.trustedpush.com11NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_3pes20.proasdf.com10GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
26tier_3clk.news-headlines.co10NAMECHEAP INCns-1428.awsdns-50.orgWhoisGuard, Inc.
27tier_3socalhondadealers.com8NoneNoneNone
28tier_3win5.trustedpush.com7NameCheap, Inc.NS-1142.AWSDNS-14.ORGNone
29tier_3win2.trustedpush.com5NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_139nan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_134nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_128nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nan
437.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_17nan
537.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nan
637.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
7185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
8185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
9185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
1054.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_255ec2-54-225-132-253.compute-1.amazonaws.com
1152.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_251ec2-52-205-210-89.compute-1.amazonaws.com
1234.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_250ec2-34-199-180-187.compute-1.amazonaws.com
1313.225.228.21Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_34server-13-225-228-21.jfk51.r.cloudfront.net
1434.199.107.160Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_236ec2-34-199-107-160.compute-1.amazonaws.com
1513.225.228.116Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_35server-13-225-228-116.jfk51.r.cloudfront.net
1694.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_232static.231.186.130.94.clients.your-server.de
1713.225.228.15Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_34server-13-225-228-15.jfk51.r.cloudfront.net
1894.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_229static.237.185.130.94.clients.your-server.de
19144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_222static.130.1.76.144.clients.your-server.de
20100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_331pool-100-37-135-2.nycmny.fios.verizon.net
2145.32.198.135DallasTexasAS20473 Choopa, LLC75270United Statestier_32345.32.198.135.vultr.com
22138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_317proxy.traffic.club
23149.28.49.220New York CityNew YorkAS20473 Choopa, LLC10004United Statestier_313149.28.49.220.vultr.com
24162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_310nan
2513.225.228.116Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_35server-13-225-228-116.jfk51.r.cloudfront.net
2635.174.35.73Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_35ec2-35-174-35-73.compute-1.amazonaws.com
2713.225.228.15Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_34server-13-225-228-15.jfk51.r.cloudfront.net
2854.172.16.98Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_34ec2-54-172-16-98.compute-1.amazonaws.com
2913.225.228.21Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_34server-13-225-228-21.jfk51.r.cloudfront.net

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website