Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0142151427002020-12-2637.48.65.149Android
tierdomaincountregistrarname_serversorg
0tier_1amatue21.com1Soldierofonedomains.com, LLCNS1.DNSNUTS.COMNone
1tier_1acglifan.com1Chipshot Domains LLCNS1.DNSNUTS.COMNone
2tier_1albasocial.net1Fushi Tarazu, LLCNS1.DNSNUTS.COMNone
3tier_12stapps.com1ProtonDomains.com LLCNS1.DNSNUTS.COMNone
4tier_110xdrops.com1Domain Locale, LLCNS1.DNSNUTS.COMNone
5tier_1ambrawfederalcreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 744078
6tier_1abrahamlincolnhistory.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 733409
7tier_1colrut.com1SNAPNAMES 65, LLCNS1.DNSNUTS.COMNone
8tier_121nl.com1Wide Right Domains LLCNS1.DNSNUTS.COMNone
9tier_1kidsmovies.tv1Swordfish Domains LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com41Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2mnason-hec.com28Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
12tier_2get.popplunder.com28NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
13tier_2trustedpush.com25NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
14tier_2euphe-gun.com24Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
15tier_2win1.trustedpush.com23NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
16tier_2win2.trustedpush.com17NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
17tier_2win3.trustedpush.com12NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_2dprtb.com7GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
19tier_22893.wcitianka.com6GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
20tier_3track.vcdc.com16Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_3blog.sfgate.com12CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
22tier_3dprtb.com9GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
23tier_3win4.trustedpush.com9NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
24tier_3win2.trustedpush.com6NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_3win3.trustedpush.com5NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
26tier_3trustedpush.com3NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
27tier_3delightcmain.xyz3NoneNoneNone
28tier_3blog.chron.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
29tier_3storystudio.hearstnp.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nannan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nannan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nannan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nannan
464.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.netnan
537.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
6185.107.56.57AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
7185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
837.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
9185.107.56.59AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
1099.84.120.121NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-120-121.ewr52.r.cloudfront.netnan
1134.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_228ec2-34-199-180-187.compute-1.amazonaws.comnan
1299.84.120.9NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_221server-99-84-120-9.ewr52.r.cloudfront.netnan
13204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_218204.44.79.214.static.quadranet.comnan
1434.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_214ec2-34-202-98-117.compute-1.amazonaws.comnan
1594.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_213static.231.186.130.94.clients.your-server.denan
1634.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_213ec2-34-226-113-11.compute-1.amazonaws.comnan
173.221.180.161Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_213ec2-3-221-180-161.compute-1.amazonaws.comnan
1852.73.170.217Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_212ec2-52-73-170-217.compute-1.amazonaws.comnan
1994.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_212static.237.185.130.94.clients.your-server.denan
20100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_317pool-100-37-135-2.nycmny.fios.verizon.netnan
21151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_316nanTrue
22195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_315static.254.92.201.195.clients.your-server.denan
23209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_39nannan
2499.84.120.121NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-120-121.ewr52.r.cloudfront.netnan
2599.84.120.110NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-120-110.ewr52.r.cloudfront.netnan
26104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
2798.129.228.57BrookhavenMississippiAS33070 Rackspace Hosting39601United Statestier_32nannan
2852.89.84.43PortlandOregonAS16509 Amazon.com, Inc.97293United Statestier_32ec2-52-89-84-43.us-west-2.compute.amazonaws.comnan
29104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website