Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0126127441202021-01-0537.48.65.149Android
tierdomaincountregistrarname_serversorg
0tier_1avg4.us1UdomainName.com LLCns1.dnsnuts.comNone
1tier_1jrpgreview.com1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
2tier_1movienthusiast.com1Traffic Names, LLCNS1.DNSNUTS.COMNone
3tier_1dakmm.com1Private Domains, LLCNS1.DNSNUTS.COMNone
4tier_1rampicta.com1NamePal.com #8007, LLCNS1.DNSNUTS.COMNone
5tier_1abadown.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMNone
6tier_1ava-producao.net1SNAPNAMES 45, LLCNS1.DNSNUTS.COMNone
7tier_1catiatutorialcad.com1NamePal.com #8028, LLCNS1.DNSNUTS.COMNone
8tier_1maincert.com1SNAPNAMES 16, LLCNS1.DNSNUTS.COMNone
9tier_1skidke.com1! #1 Host Australia, LLCNS1.DNSNUTS.COMNone
10tier_3track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_3searchfrequently.com8GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
12tier_3findoffers.co7Key-Systems GmbHns4.monikerdns.netMoniker Privacy Services
13tier_3win3.trustedpush.com6NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
14tier_3win2.trustedpush.com6NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
15tier_3blog.chron.com6CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
16tier_3a.upbeatcboulevard.xyz5Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
17tier_3win4.trustedpush.com5NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_3win5.trustedpush.com4NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
19tier_3win6.trustedpush.com3NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
20tier_2track.vcdc.com28Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_2bradamante-per.com25Amazon Registrar, Inc.NS-1026.AWSDNS-00.ORGWhois Privacy Service
22tier_2get.popplunder.com25NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
23tier_2trustedpush.com25NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
24tier_2win1.trustedpush.com24NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_2win2.trustedpush.com18NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
26tier_2click.expmediadirect.com16NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
27tier_2alfik-fik.com15Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
28tier_2rtbstream.com151API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
29tier_2search.eproute.info15GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nannan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_118nannan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nannan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nannan
437.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
537.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
663.143.32.92DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1392-32-143-63.static.reverse.lstn.netnan
763.143.32.93DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1293-32-143-63.static.reverse.lstn.netnan
863.143.32.83DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1283-32-143-63.static.reverse.lstn.netnan
963.143.32.94DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1194-32-143-63.static.reverse.lstn.netnan
10100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_313pool-100-37-135-2.nycmny.fios.verizon.netnan
11195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_311static.254.92.201.195.clients.your-server.denan
12151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_38nanTrue
1318.190.1.57ColumbusOhioAS16509 Amazon.com, Inc.43221United Statestier_37ec2-18-190-1-57.us-east-2.compute.amazonaws.comnan
1413.225.229.12New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_231server-13-225-229-12.jfk51.r.cloudfront.netnan
15172.67.138.156San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
16104.31.80.30San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
17158.106.84.60TorontoOntarioAS23498 COGECODATAM5NCanadatier_33gay-hookup.comnan
18104.77.8.252New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_33a104-77-8-252.deploy.static.akamaitechnologies.comnan
19104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
2013.225.229.61New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_237server-13-225-229-61.jfk51.r.cloudfront.netnan
2113.225.229.12New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_231server-13-225-229-12.jfk51.r.cloudfront.netnan
2234.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_225ec2-34-199-180-187.compute-1.amazonaws.comnan
23209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_224nannan
2434.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_220ec2-34-226-113-11.compute-1.amazonaws.comnan
2534.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_220ec2-34-202-98-117.compute-1.amazonaws.comnan
26198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_216nannan
2713.225.229.113New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_211server-13-225-229-113.jfk51.r.cloudfront.netnan
2813.225.229.73New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_210server-13-225-229-73.jfk51.r.cloudfront.netnan
29198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_210nannan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website