Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
08585218002020-11-0837.48.65.149Iphone
tierdomaincountregistrarname_serversorg
0tier_1blessedit.com1eNom387, IncorporatedNS1.DNSNUTS.COMNone
1tier_1tcafemm.com1Goto Domains LLCNS1.DNSNUTS.COMNone
2tier_1mp3trackz.com1NamePal.com #8010 Inc.NS1.DNSNUTS.COMThe Management Group II
3tier_1coolmobmasters.com1NamePal.com #8016 Inc.NS1.DNSNUTS.COMThe Management Group II
4tier_1theprettyladyblog.com1eNom409, IncorporatedNS1.DNSNUTS.COMNone
5tier_1mospeen.com1Allworldnames.com LLCNS1.DNSNUTS.COMThe Management Group II
6tier_1onlytruecars.com1Burnsidedomains.com LLCNS1.DNSNUTS.COMThe Management Group II
7tier_1gundamsite7.com1White Rhino Domains, LLCNS1.DNSNUTS.COMThe Management Group II
8tier_1zoegerlach.com1CloudNineDomain, LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1mowalls.net1eNomToo, Inc.NS1.DNSNUTS.COMNone
10tier_3checkthistime.com12NAMECHEAP INCNS-1262.AWSDNS-29.ORGWhoisGuard, Inc.
11tier_3allbestsecureus.com10NoneNoneNone
12tier_3audiobooks.com9Network Solutions, LLCNS-14.AWSDNS-01.COMNone
13tier_3irl.com3GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
14tier_3track.vcdc.com2Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
15tier_3m.carsdirect.com1GoDaddy.com, LLCJEROME.NS.CLOUDFLARE.COMMH Sub I, LLC
16tier_3selectmypolicy.com1GoDaddy.com, LLCNS1.DIGITALOCEAN.COMDomains By Proxy, LLC
17tier_3squirt.org1NoneNoneNone
18tier_3macys.com1Network Solutions, LLCA1-135.AKAM.NETMacy's Systems and Technology, Inc.
19tier_3api.quotes.com1Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
20tier_2click.expmediadirect.com22NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
21tier_2go.trackinz.com12NoneNoneNone
22tier_2infopicked.com12NoneNoneNone
23tier_2peachtrackerus.com10NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
24tier_2track.vcdc.com9Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
25tier_2p246485.infopicked.com9NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
26tier_2138.trackints.com9NameCheap, Inc.NS0.DNSMADEEASY.COMNone
27tier_2affiliates.audiobooks.com9Network Solutions, LLCNS-14.AWSDNS-01.COMNone
28tier_2dprtb.com6GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
29tier_2usd.bryn-seb.com4Amazon Registrar, Inc.NS-1393.AWSDNS-46.ORGWhois Privacy Service
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_15nan
4185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
5185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
764.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
8185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
9138.68.8.221Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_312nan
1054.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_210ns568503.ip-54-39-130.net
1134.206.66.177Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_35ec2-34-206-66-177.compute-1.amazonaws.com
123.217.53.226Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_34ec2-3-217-53-226.compute-1.amazonaws.com
13138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_31proxy.traffic.club
14162.243.166.170North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nan
1598.158.195.112Los AngelesCaliforniaAS13897 Internet Brands Inc.90009United Statestier_31carsdirect.com
163.15.228.23ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_31ec2-3-15-228-23.us-east-2.compute.amazonaws.com
17158.106.84.60TorontoOntarioAS23498 COGECODATAM5NCanadatier_31squirtmail.com
18159.65.216.232North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nan
19173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22318.65.c0ad.ip4.static.sl-reverse.com
20198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_222nan
2134.226.252.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_212ec2-34-226-252-28.compute-1.amazonaws.com
2254.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_210ns568503.ip-54-39-130.net
23108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_210b9.c1.a86c.ip4.static.sl-reverse.com
24209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_29nan
2554.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_25ec2-54-225-132-253.compute-1.amazonaws.com
2634.237.8.128Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_25ec2-34-237-8-128.compute-1.amazonaws.com
2794.130.186.231N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_25static.231.186.130.94.clients.your-server.de
283.211.203.252Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_24ec2-3-211-203-252.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website