Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0110118384002020-11-0737.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1mp3trackz.com1NamePal.com #8010, LLCNS1.DNSNUTS.COMNone
1tier_1porkybeauties.com1EuropeanConnectionOnline.com LLCNS1.DNSNUTS.COMNone
2tier_1freeporntop.com1Bounce Pass Domains LLCNS1.DNSNUTS.COMNone
3tier_1universaltipsandhacks.com1Domain Pickup LLCNS1.DNSNUTS.COMNone
4tier_1larosadeguadalupe.tv1Targeted Drop Catch LLCNS1.DNSNUTS.COMNone
5tier_1serialkeylar.com1NamePal.com #8023, LLCNS1.DNSNUTS.COMNone
6tier_1firsttechcu.org1Adomainofyourown.com LLCNS1.DNSNUTS.COMThe Management Group II
7tier_1kimskandykreations.net1NamePal.com #8018, LLCNS1.DNSNUTS.COMNone
8tier_1krovatka.org1UDomainName.com LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1seller-store.com1Domainshop LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com40GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_21496.wcitianka.com38GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com37ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2click.appcast.io35101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_2rd.kayajobs.com13GoDaddy.com, LLCNS-1411.AWSDNS-48.ORGDomains By Proxy, LLC
15tier_2feed.int.jobble.com12GoDaddy.com, LLCNS57.DOMAINCONTROL.COMJobble Inc.
16tier_2us.jobtome.com11GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
17tier_2track.vcdc.com10Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
18tier_2btpnative.com10GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
19tier_2infopicked.com10NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
20tier_3careerbliss.com13GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
21tier_3us.allthetopbananas.com10ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
22tier_3toovolution.club6NAMECHEAP INCdemi.ns.cloudflare.comWhoisGuard, Inc.
23tier_3track.vcdc.com4Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
24tier_3feed.int.jobble.com2GoDaddy.com, LLCNS57.DOMAINCONTROL.COMJobble Inc.
25tier_3rd.nebulajobs.com2GoDaddy.com, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
26tier_3usd.mnason-hec.com2Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
27tier_3adzuna.com2123-Reg LimitedNS-1197.AWSDNS-21.ORGAdHunter
28tier_3amazon.force.com2MarkMonitor, Inc.PCH1.SALESFORCE-DNS.COMSalesforce.com, Inc.
29tier_3santandercareers.com1NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_19nan
437.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nan
5185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
664.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
7209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_250nan
8198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_238nan
935.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_237240.61.209.35.bc.googleusercontent.com
1054.163.21.106Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_218ec2-54-163-21-106.compute-1.amazonaws.com
1134.225.4.3Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_217ec2-34-225-4-3.compute-1.amazonaws.com
12207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_313cbsmtp1.careerbliss.com
13130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_211206.38.211.130.bc.googleusercontent.com
14173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21018.65.c0ad.ip4.static.sl-reverse.com
1552.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_32ec2-52-205-210-89.compute-1.amazonaws.com
1652.205.5.115Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_26ec2-52-205-5-115.compute-1.amazonaws.com
17207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_313cbsmtp1.careerbliss.com
18104.26.12.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nan
19104.26.13.236WashingtonWashington, D.C.AS13335 Cloudflare, Inc.20045United Statestier_34nan
20138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_33proxy.traffic.club
21172.67.75.236New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_32nan
2234.201.214.108Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_32ec2-34-201-214-108.compute-1.amazonaws.com
2352.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_32ec2-52-205-210-89.compute-1.amazonaws.com
2413.225.228.112Atlantic CityNew JerseyAS16509 Amazon.com, Inc.08404United Statestier_32server-13-225-228-112.jfk51.r.cloudfront.net
2513.32.179.83WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_32server-13-32-179-83.iad66.r.cloudfront.net
2654.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_32ec2-54-225-132-253.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website