Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0165172513002020-12-0837.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1geralgamesfps.net1Meganames LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1kompforum.com1Touchdown Domains LLCNS1.DNSNUTS.COMNone
2tier_1codecramp.com1Traffic Names, IncorporatedNS1.DNSNUTS.COMNone
3tier_1buneido.com1Aegean Domains LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1mowalls.net1eNomToo, Inc.NS1.DNSNUTS.COMNone
5tier_1teslersoftwareapp.com1Best Drop Names LLCNS1.DNSNUTS.COMNone
6tier_1bryantan.info1BigLizarddomains.com LLCNS1.DNSNUTS.COMStatutory Masking Enabled
7tier_1mangaice.com1Leatherneckdomains.com, LLCNS1.DNSNUTS.COMThe Management Group II
8tier_1bestones.net1Major League Domains, LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1pansteak-kitchen.com1Hawthornedomains.com LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com34GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_21496.wcitianka.com34GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com34ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2rd.lcjalerts.com18GoDaddy.com, LLCNS-130.AWSDNS-16.COMDomains By Proxy, LLC
14tier_2us.jobtome.com18GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
15tier_2mnason-hec.com18Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
16tier_2infopicked.com14NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
17tier_2btpnative.com131API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
18tier_2click.junmediadirect.com12NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
19tier_2euphe-gun.com11Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
20tier_3toovolution.club17NAMECHEAP INCdemi.ns.cloudflare.comWhoisGuard, Inc.
21tier_3jobs2careers.com13Amazon Registrar, Inc.NS-1189.AWSDNS-20.ORGWhois Privacy Service
22tier_3cooing.top6URL Solutions Inc.ns3.p06.dynect.netGLOBAL DOMAIN PRIVACY SERVICES INC
23tier_3click.appcast.io6101Domain GRS LtdNS-85.AWSDNS-10.COMNone
24tier_3shipt.com_LOOP_15NoneNoneNone
25tier_3homedepotretailjobs.com4CSC CORPORATE DOMAINS, INC.NS-1365.AWSDNS-42.ORGHome Depot Product Authority, LLC
26tier_3enjoyance.com4NAMECHEAP INCNS-1527.AWSDNS-62.ORGWhoisGuard, Inc.
27tier_3blog.sfgate.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
28tier_3inappropriate.top3URL Solutions Inc.ns3.p06.dynect.netGLOBAL DOMAIN PRIVACY SERVICES INC
29tier_3euphe-gun.com2Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
4185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
537.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
664.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
7185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
837.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
937.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_247nan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_234nan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_234240.61.209.35.bc.googleusercontent.com
13173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21918.65.c0ad.ip4.static.sl-reverse.com
14130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_218206.38.211.130.bc.googleusercontent.com
1534.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_212ec2-34-226-113-11.compute-1.amazonaws.com
16198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_212nan
1734.234.179.35Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-34-234-179-35.compute-1.amazonaws.com
1834.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-34-202-98-117.compute-1.amazonaws.com
1952.73.170.217Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_28ec2-52-73-170-217.compute-1.amazonaws.com
2013.32.192.34WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_38server-13-32-192-34.iad66.r.cloudfront.net
2134.237.249.189Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_35ec2-34-237-249-189.compute-1.amazonaws.com
2234.236.61.118Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_35ec2-34-236-61-118.compute-1.amazonaws.com
23100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35pool-100-37-135-2.nycmny.fios.verizon.net
2423.200.0.18EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_35a23-200-0-18.deploy.static.akamaitechnologies.com
2575.101.207.6Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_35ec2-75-101-207-6.compute-1.amazonaws.com
2613.32.192.35WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_34server-13-32-192-35.iad66.r.cloudfront.net
273.211.178.164Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_34ec2-3-211-178-164.compute-1.amazonaws.com
28138.68.8.221Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_34nan
29151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_33nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website