Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0133134521002020-12-0737.48.65.149Android
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1addcomponent.com1Slow Putt Domains LLCNS1.DNSNUTS.COMThe Management Group II
2tier_1clipxplore.com1SouthNames Inc.NS1.DNSNUTS.COMThe Management Group II
3tier_1erocity.net1Domaincomesaround.com LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
5tier_1feby.net1NamePal.com #8024 Inc.NS1.DNSNUTS.COMNone
6tier_1guhani.net1Straight 8 Domains, LLCNS1.DNSNUTS.COMNone
7tier_1justoatiempo.net1NamePal.com #8007 Inc.NS1.DNSNUTS.COMNone
8tier_1kinosvalka.net1NamePal.com #8011 Inc.NS1.DNSNUTS.COMNone
9tier_1free-business-directory-listing.com1DropWeek.com, Inc.NS1.DNSNUTS.COMNone
10tier_3win4.trustedpush.com12NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
11tier_3track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_3win2.trustedpush.com10NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
13tier_3win3.trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
14tier_3a.upbeatcboulevard.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
15tier_3win5.trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
16tier_3irl.com7GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
17tier_3modcloth.com4GoDaddy.com, LLCNS0.DNSMADEEASY.COMModCloth Inc
18tier_3e.livelyyroad.xyz4Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
19tier_3trustedpush.com3NoneNoneNone
20tier_2track.vcdc.com44Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_2mnason-hec.com42Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
22tier_2get.popplunder.com42NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
23tier_2trustedpush.com39NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
24tier_2win1.trustedpush.com37NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_2win2.trustedpush.com27NameCheap, Inc.NS-1142.AWSDNS-14.ORGNone
26tier_2win3.trustedpush.com20NoneNoneNone
27tier_2euphe-gun.com14Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
28tier_22893.wcitianka.com11GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
29tier_2awakeningsco.com11GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
4185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nan
537.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
6185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
7185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
837.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
9185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
10100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_325pool-100-37-135-2.nycmny.fios.verizon.net
11138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_39proxy.traffic.club
1299.84.118.103NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_236server-99-84-118-103.ewr52.r.cloudfront.net
1399.84.118.101NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_227server-99-84-118-101.ewr52.r.cloudfront.net
14151.101.2.49San FranciscoCaliforniaAS54113 Fastly94107United Statestier_34nan
1599.84.118.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_223server-99-84-118-87.ewr52.r.cloudfront.net
16104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nan
17104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nan
1899.84.118.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_246server-99-84-118-35.ewr52.r.cloudfront.net
19104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nan
2099.84.118.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_246server-99-84-118-35.ewr52.r.cloudfront.net
2134.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_242ec2-34-199-180-187.compute-1.amazonaws.com
2299.84.118.103NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_236server-99-84-118-103.ewr52.r.cloudfront.net
2399.84.118.101NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_227server-99-84-118-101.ewr52.r.cloudfront.net
2499.84.118.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_223server-99-84-118-87.ewr52.r.cloudfront.net
253.221.180.161Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_216ec2-3-221-180-161.compute-1.amazonaws.com
2652.73.170.217Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_215ec2-52-73-170-217.compute-1.amazonaws.com
2794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_214static.237.185.130.94.clients.your-server.de
2834.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_214ec2-34-202-98-117.compute-1.amazonaws.com
2994.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_212static.231.186.130.94.clients.your-server.de

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website