Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0113114307002020-09-2437.48.65.151Chrome
tierdomaincountregistrarname_serversorg
0tier_1jrpgreview.com1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
1tier_1omgmanga.com1GreenZoneDomains, LLCNS1.DNSNUTS.COMNone
2tier_1jikbakguri.com1SNAPNAMES 40, LLCNS1.DNSNUTS.COMNone
3tier_1ro-gaming.net1Tradewinds Names, LLCNS1.DNSNUTS.COMNone
4tier_1pelfind.net1NamePal.com #8007, LLCNS1.DNSNUTS.COMNone
5tier_1kompforum.com1Touchdown Domains LLCNS1.DNSNUTS.COMNone
6tier_1sovietwarplanes.com1SNAPNAMES 56, LLCNS1.DNSNUTS.COMNone
7tier_1kiwis-pie.com1Alboran Domains LLCNS1.DNSNUTS.COMNone
8tier_1alterchemicals.com1SNAPNAMES 79, LLCNS1.DNSNUTS.COMNone
9tier_1msnboard.net1SNAPNAMES 64, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect.com44NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
11tier_2rqhere.com22NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_2btpnative.com14GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
13tier_2infopicked.com14NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
14tier_210.trackints.com13NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
15tier_2p274639.infopicked.com12NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
16tier_2search.eproute.info9GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2clk.rtpdn11.com4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
18tier_2ojrq.net4GANDI SASNS-1151.AWSDNS-15.ORGImpact Radius
19tier_2secured.mobile-redirect.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
20tier_3casinomoneydaily.xyz21GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
21tier_3wix.com13GoDaddy.com, LLCNS1.P14.DYNECT.NETWix.com, LTD.
22tier_3roadtoyourhealth.info13GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
23tier_3searchfrequently.com9GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
24tier_3resume-now.com3MarkMonitor, Inc.DNS1.P04.NSONE.NETBold Limited
25tier_3minecraft.en.softonic.com1Network Solutions, LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMNone
26tier_3daytrading.com1GoDaddy.com, LLCNS21.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_3grand-theft-auto-vice-city.en.softonic.com1Network Solutions, LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMNone
28tier_3irl.com1GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
29tier_3p274639.infopicked.com1NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nan
482.192.82.227SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_14nan
546.166.182.111AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nan
682.192.82.228SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_13nan
746.166.182.109AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
882.192.82.225SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_12nan
982.192.82.226SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_11nan
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_244nan
11173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22718.65.c0ad.ip4.static.sl-reverse.com
12167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_222nan
13209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_216nan
14108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_213b9.c1.a86c.ip4.static.sl-reverse.com
1534.230.220.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23457United Statestier_26ec2-34-230-220-28.compute-1.amazonaws.com
1691.195.240.136KölnNorth Rhine-WestphaliaAS47846 SEDO GmbH50670Germanytier_25nan
1734.223.115.56PortlandOregonAS16509 Amazon.com, Inc.97269United Statestier_25ec2-34-223-115-56.us-west-2.compute.amazonaws.com
18173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nan
1934.223.196.33PortlandOregonAS16509 Amazon.com, Inc.97269United Statestier_24ec2-34-223-196-33.us-west-2.compute.amazonaws.com
20172.67.178.184New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_310nan
21104.27.160.179Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_38nan
22185.230.61.179San JoseCaliforniaAS58182 Wix.com Ltd.95119United Statestier_38nan
23172.67.181.25New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_37nan
24172.67.138.156New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_35nan
2535.227.233.104Kansas CityMissouriAS15169 Google LLC64121United Statestier_34104.233.227.35.bc.googleusercontent.com
26104.31.80.30New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_34nan
27104.27.130.174Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_33nan
28104.27.161.179Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_33nan
29184.85.27.68Atlantic CityNew JerseyAS16625 Akamai Technologies, Inc.08404United Statestier_33a184-85-27-68.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website