Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0177178557002020-12-19207.244.67.218Iphone
tierdomaincountregistrarname_serversorg
0tier_1gifanimasyon.com1Dropcatch Auction LLCNS1.DNSNUTS.COMNone
1tier_1mp3trackz.com1NamePal.com #8010, LLCNS1.DNSNUTS.COMNone
2tier_1emhdf.com1EastEndDomains, LLCNS1.DNSNUTS.COMNone
3tier_1addcomponent.com1Slow Putt Domains LLCNS1.DNSNUTS.COMNone
4tier_1scn4u.com1NamePal.com #8021, LLCNS1.DNSNUTS.COMNone
5tier_1bdlive71.com1NamePal.com #8023, LLCNS1.DNSNUTS.COMNone
6tier_1mltaqa.net1Names On The Drop LLCNS1.DNSNUTS.COMNone
7tier_1duet-chehova.net1Afterdark Domains, LLCNS1.DNSNUTS.COMNone
8tier_1officegeteasygroup.net1Catch Deleting Names LLCNS1.DNSNUTS.COMNone
9tier_1pick-bit.com1NamePal.com #8019, LLCNS1.DNSNUTS.COMNone
10tier_2changeslots.com78Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
11tier_2api.quotes.com65Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
12tier_2track.vcdc.com35Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_2clk.rtpdn11.com19NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
14tier_2euphe-gun.com17Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
15tier_2infopicked.com13NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
16tier_2btpnative.com101API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
17tier_2p274639.infopicked.com9NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
18tier_2media-px.com8GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
19tier_2servedby.flashtalking.com8MESH DIGITAL LIMITEDNS1.P09.DYNECT.NETFlashtalking, Inc.
20tier_3theconnectvpn.com78DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3bestappland.me20NoneNoneNone
22tier_3socalhondadealers.com8DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
23tier_3track.vcdc.com6Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
24tier_3kbb.com5CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
25tier_3api.quotes.com2Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
26tier_3blog.sfgate.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
27tier_3apple.com1CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
28tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
29tier_3squirt.org1NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_138nannan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_127nannan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nannan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_118nannan
4185.107.56.60AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_14nannan
5185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_14nannan
664.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.netnan
7185.107.56.57AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
837.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
1034.207.32.33Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_278ec2-34-207-32-33.compute-1.amazonaws.comnan
115.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_32nannan
12173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22518.65.c0ad.ip4.static.sl-reverse.comnan
13173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_223nannan
14209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_214nannan
1594.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_213static.231.186.130.94.clients.your-server.denan
16144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_210static.130.1.76.144.clients.your-server.denan
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.237.185.130.94.clients.your-server.denan
183.221.180.161Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_28ec2-3-221-180-161.compute-1.amazonaws.comnan
19205.185.216.42DallasTexasAS20446 Highwinds Network Group, Inc.75201United Statestier_28map2.hwcdn.netTrue
20104.27.186.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_332nanTrue
21172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_331nanTrue
22142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_320nannan
23104.27.187.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_315nanTrue
24195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_36static.254.92.201.195.clients.your-server.denan
2523.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a23-44-217-143.deploy.static.akamaitechnologies.comnan
2634.207.4.240Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_35ec2-34-207-4-240.compute-1.amazonaws.comnan
2735.174.35.73Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_33ec2-35-174-35-73.compute-1.amazonaws.comnan
285.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_32nannan
29151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website