Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0138143337002020-11-13207.244.67.218Chrome
tierdomaincountregistrarname_serversorg
0tier_1u-soft.org1Betterthanaveragedomains.com LLCNS1.DNSNUTS.COM['The Management Group II', 'Statutory Masking Enabled']
1tier_116hineys.com1Magnate Domains, LLCNS1.DNSNUTS.COMNone
2tier_1mcclist.com1Slow Motion Domains LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1beautifuhouse.com1Gradeadomainnames.com LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1charegr.com1Domaincatcher LLCNS1.DNSNUTS.COMNone
5tier_1dallasmavericksdancers.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 816112
6tier_1copywritingbullfighters.com1Namearsenal.com LLCNS1.DNSNUTS.COMNone
7tier_1centralfallscreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 791283
8tier_1erojii.net1Dropcatch Landing Spot LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1rampicta.com1NamePal.com #8007 Inc.NS1.DNSNUTS.COMThe Management Group II
10tier_2pleasetrack.com38Name.com, Inc.NS1DJS.NAME.COMDomain Protection Services, Inc.
11tier_2click.expmediadirect.com25NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
12tier_2track.vcdc.com16Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_2usa.alexa-cam.com16Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
14tier_2dprtb.com11GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
15tier_2usd.alexa-cam.com11Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
16tier_2clk.rtpdn11.com8NoneNoneNone
17tier_2btpnative.com7GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
18tier_2infopicked.com6NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
19tier_2click.junmediadirect.com4NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
20tier_3protects.s3.us-east-2.amazonaws.com38MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
21tier_3stat1.info7GoDaddy.com, LLCNS15.DOMAINCONTROL.COMbingal media
22tier_3irl.com6GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
23tier_3track.vcdc.com3Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
24tier_3affbank.com3DANESCO TRADING LTDGABE.NS.CLOUDFLARE.COMAdvertecy LTD
25tier_3il.betrivers.com2GoDaddy.com, LLCERIN.NS.CLOUDFLARE.COMRivers IP Holdings, LLC
26tier_3ui2.awin.com1Amazon Registrar, Inc.NS-1202.AWSDNS-22.ORGWhois Privacy Service
27tier_3product.directpower.download1Gandi SASart.ns.cloudflare.comNone
28tier_3experian.com1Network Solutions, LLCEXP1.EXPERIAN.COMExperian Information Solutions, Inc.
29tier_3squirt.org1NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nan
4185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
537.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
664.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
7185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
8185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
1034.198.58.156Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_238ec2-34-198-58-156.compute-1.amazonaws.com
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_225nan
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_218nan
1352.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_216ec2-52-205-210-89.compute-1.amazonaws.com
1454.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_214ec2-54-225-132-253.compute-1.amazonaws.com
15173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_212nan
16173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2718.65.c0ad.ip4.static.sl-reverse.com
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.237.185.130.94.clients.your-server.de
18198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nan
19209.132.243.15WyomingMichiganAS7296 Alchemy Communications, Inc.49509United Statestier_24nan
20132.148.19.88MesaArizonaAS26496 GoDaddy.com, LLC85214United Statestier_37ip-132-148-19-88.ip.secureserver.net
2135.156.139.229Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_33ec2-35-156-139-229.eu-central-1.compute.amazonaws.com
22100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
23104.19.235.106San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nan
2452.219.104.24ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_32s3-r-w.us-east-2.amazonaws.com
25138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_32proxy.traffic.club
2652.219.88.80ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_32s3-r-w.us-east-2.amazonaws.com
27104.248.63.231North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
2852.219.105.90ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_32s3-r-w.us-east-2.amazonaws.com
2952.219.96.32ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_31s3-r-w.us-east-2.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website