Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0127128305002020-11-29207.244.67.218Chrome
tierdomaincountregistrarname_serversorg
0tier_1acg92.com1Allworldnames.com LLCNS1.DNSNUTS.COMNone
1tier_1awesomwallpaper.com1SNAPNAMES 22, LLCNS1.DNSNUTS.COMNone
2tier_1accastiboat.com1Domainplace LLCNS1.DNSNUTS.COMNone
3tier_168psd.com1Treasure Trove Domains LLCNS1.DNSNUTS.COMNone
4tier_1bklynbeautymix.com1Namecatch Zone LLCNS1.DNSNUTS.COMNone
5tier_1bamsora1.com1Namesource LLCNS1.DNSNUTS.COMNone
6tier_121nl.com1Wide Right Domains LLCNS1.DNSNUTS.COMNone
7tier_1bandarkota.com1Ripcurl Domains, LLCNS1.DNSNUTS.COMNone
8tier_1americanairlinescenterdallas.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 744376
9tier_1boysforcemilfs.com1NamePal.com #8001, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect.com26NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
11tier_2track.vcdc.com22Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2clk.rtpdn11.com14NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
13tier_2sopho-kat.com13Amazon Registrar, Inc.NS-1009.AWSDNS-62.NETWhois Privacy Service
14tier_2build.mediapicker.com10GoDaddy.com, LLCRAQUEL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
15tier_2media-px.com8GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
16tier_2servedby.flashtalking.com8MESH DIGITAL LIMITEDNS1.P09.DYNECT.NETFlashtalking, Inc.
17tier_2click.junmediadirect.com6NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
18tier_2dprtb.com5GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
19tier_2infopicked.com4NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
20tier_3thefatburner.info18GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
21tier_3bitcofeed.info14GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
22tier_3socalhondadealers.com8NoneNoneNone
23tier_3capitaloneshopping.com2CSC CORPORATE DOMAINS, INC.IVY.NS.CLOUDFLARE.COMCapital One Services, LLC
24tier_3get.streamssitesearch.com2GoDaddy.com, LLCISLA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
25tier_3loadcurrent-theoverlyfile.best2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3amazon.com2MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
27tier_3track.vcdc.com2Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
28tier_3loadlatest-theoverlyfile.best2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
29tier_3performoverlyoriginalapplication.icu2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
437.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
564.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
664.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
764.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
864.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
937.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_226nan
11173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_214nan
12178.62.225.201AmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_210nan
1318.210.49.168AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-18-210-49-168.compute-1.amazonaws.com
14144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_29static.130.1.76.144.clients.your-server.de
1554.225.132.253AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-54-225-132-253.compute-1.amazonaws.com
1694.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.237.185.130.94.clients.your-server.de
17205.185.216.10DallasTexasAS20446 Highwinds Network Group, Inc.75201United Statestier_28map2.hwcdn.net
18209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_28nan
19173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2618.65.c0ad.ip4.static.sl-reverse.com
20172.67.218.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310nan
21104.24.114.148San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_38nan
2254.173.32.183AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36ec2-54-173-32-183.compute-1.amazonaws.com
2334.207.4.240AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-34-207-4-240.compute-1.amazonaws.com
24172.67.188.193San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nan
25104.27.175.27San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nan
263.228.136.124AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-3-228-136-124.compute-1.amazonaws.com
2735.174.35.73AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-35-174-35-73.compute-1.amazonaws.com
28104.27.174.27San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nan
29104.28.31.251San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website