Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
09288262002020-10-0837.48.65.151Iphone
tierdomaincountregistrarname_serversorg
0tier_1trethovn.net1Domainstreetdirect.com LLCNS1.DNSNUTS.COMNone
1tier_1newfappening.com1Goto Domains LLCNS1.DNSNUTS.COMNone
2tier_1akeremuna2018.com1Domain Secure LLCNS1.DNSNUTS.COMNone
3tier_1blackpointcapitalmanagement.com1Nameselite, LLCNS1.DNSNUTS.COMNone
4tier_1medallionlearning.com1Private Domains, LLCNS1.DNSNUTS.COMNone
5tier_1eromini.com1Godomaingo.com LLCNS1.DNSNUTS.COMNone
6tier_1honyolar.com1NamePal.com #8024, LLCNS1.DNSNUTS.COMNone
7tier_1fileswill.com1MidWestDomains, LLCNS1.DNSNUTS.COMNone
8tier_1yaruyarablog.com1Top Pick Names LLCNS1.DNSNUTS.COMNone
9tier_1lovelyteenmovs.com1Names On The Drop LLCNS1.DNSNUTS.COMNone
10tier_2go.trackinz.com28NAMECHEAP INCNS-1139.AWSDNS-14.ORGWhoisGuard, Inc.
11tier_2click.expmediadirect.com23NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
12tier_2btpnative.com19GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
13tier_2infopicked.com18NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
14tier_2p274639.infopicked.com18NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
15tier_2rockymountaintrack.com11Registrar of domain names REG.RU LLCNS1.REG.RUPrivate Person
16tier_2dprtb.com4GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
17tier_2atnpx.com4GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
18tier_2ad.doubleclick.net4MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
19tier_2usd.claudia-luc.com3Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
20tier_3clickitover.com28NAMECHEAP INCNS-1367.AWSDNS-42.ORGWhoisGuard, Inc.
21tier_3vpnhub.com11Eurodns S.A.DNS1.P03.NSONE.NETWhois Privacy (enumDNS dba)
22tier_3kbb.com4CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
23tier_3music.apple.com2CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
24tier_3theconnectvpn.com2DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
25tier_3play.google.com1MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
26tier_3allbestsecureus.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
27tier_3findqualityinsurance.com1Amazon Registrar, Inc.NS-113.AWSDNS-14.COMWhois Privacy Service
28tier_3booking.com1NoneNoneNone
29tier_3samsung.com1NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_13nan
446.166.182.114AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
546.166.182.116AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
637.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
764.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
864.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
937.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
10173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_23718.65.c0ad.ip4.static.sl-reverse.com
1134.226.252.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_230ec2-34-226-252-28.compute-1.amazonaws.com
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_223nan
13198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_223nan
14167.114.103.223TorontoOntarioAS16276 OVH SASM5NCanadatier_211ns511363.ip-167-114-103.net
15209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_26nan
1654.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_23ec2-54-225-132-253.compute-1.amazonaws.com
1752.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_23ec2-52-205-210-89.compute-1.amazonaws.com
1823.208.37.135Atlantic CityNew JerseyAS16625 Akamai Technologies, Inc.08404United Statestier_22a23-208-37-135.deploy.static.akamaitechnologies.com
1923.43.252.68NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_22a23-43-252-68.deploy.static.akamaitechnologies.com
20157.245.227.32Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_328nan
2166.254.114.123Los AngelesCaliforniaAS29789 Reflected Networks, Inc.90009United Statestier_311reflectededge.reflected.net
2223.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_34a23-44-217-143.deploy.static.akamaitechnologies.com
23100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.net
24104.27.187.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_31nan
25172.217.6.238MillbrookNew YorkAS15169 Google LLC12545United Statestier_31lga25s55-in-f14.1e100.net
26104.27.186.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_31nan
2754.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_31ns568503.ip-54-39-130.net
2834.218.185.35PortlandOregonAS16509 Amazon.com, Inc.97220United Statestier_31ec2-34-218-185-35.us-west-2.compute.amazonaws.com
29185.28.222.11WashingtonWashington, D.C.AS43996 Booking.com BV20045United Statestier_31nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website