Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
09594219002020-10-1037.48.65.151Chrome
tierdomaincountregistrarname_serversorg
0tier_1newfappening.com1Goto Domains LLCNS1.DNSNUTS.COMNone
1tier_1trfrm.net1Goldmine Domains LLCNS1.DNSNUTS.COMNone
2tier_1babierus.com1NameSilo, LLCNS1.DNSNUTS.COMSee PrivacyGuardian.org
3tier_1ciqhyd.com1Deep Dive Domains, LLCNS1.DNSNUTS.COMNone
4tier_1dragonflyscans.org1AtlanticFriendNames.com LLCNS1.DNSNUTS.COMThe Management Group II
5tier_1topnettricks.com1Domainjungle.net LLCNS1.DNSNUTS.COMNone
6tier_1naturalezabellezaysalud.com1EndeavourDomains, LLCNS1.DNSNUTS.COMNone
7tier_1egiv.net1GoServeYourDomain.com LLCNS1.DNSNUTS.COMNone
8tier_1mytomgames.com1EUTurbo.com LLCNS1.DNSNUTS.COMNone
9tier_1bitcoinfaucetrelay.com1SNAPNAMES 5, LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com16GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_21496.wcitianka.com14UNIREGISTRAR CORPNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com12ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2btpnative.com10GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
14tier_2infopicked.com10NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
15tier_2click.appcast.io9101Domain GRS LtdNS-85.AWSDNS-10.COMNone
16tier_2rd.dartjobalerts.com7GoDaddy.com, LLCNS-1047.AWSDNS-02.ORGDomains By Proxy, LLC
17tier_2p274639.infopicked.com7NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
18tier_2click.appcast.io_LOOP_15NoneNoneNone
19tier_2usd.mnason-hec.com4Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
20tier_3wix.com4GoDaddy.com, LLCNS1.P14.DYNECT.NETWix.com, LTD.
21tier_3amazon.force.com3MarkMonitor, Inc.PCH1.SALESFORCE-DNS.COMSalesforce.com, Inc.
22tier_3p274639.infopicked.com3NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
23tier_3pestexterminator.com3GoDaddy.com, LLCNS-1521.AWSDNS-62.ORGDomains By Proxy, LLC
24tier_3click.jometer.com2Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
25tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
26tier_3feed.int.jobble.com2GoDaddy.com, LLCNS57.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_3jc2y9.wolve.pro1DANESCO TRADING LTDAIDEN.NS.CLOUDFLARE.COMDANESCO TRADING LTD.
28tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
29tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_16nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_14nan
437.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
537.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
646.166.182.109AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
746.166.182.115AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
846.166.182.113AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
9209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_226nan
10173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_3318.65.c0ad.ip4.static.sl-reverse.com
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_214nan
1235.209.61.240ChicagoIllinoisAS15169 Google LLC60666United Statestier_32240.61.209.35.bc.googleusercontent.com
13108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_27b9.c1.a86c.ip4.static.sl-reverse.com
1454.163.21.106Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_25ec2-54-163-21-106.compute-1.amazonaws.com
15100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
1652.21.128.178Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_24ec2-52-21-128-178.compute-1.amazonaws.com
17207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_24cbsmtp1.careerbliss.com
1852.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_23ec2-52-205-210-89.compute-1.amazonaws.com
19100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
20173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_3318.65.c0ad.ip4.static.sl-reverse.com
21204.13.108.145RichardsonTexasAS35914 Armor Defense Inc75082United Statestier_33nan
2213.110.70.94San FranciscoCaliforniaAS14340 Salesforce.com, Inc.94103United Statestier_32dcl7-ncg1-c6-iad5.na137-ia5.force.com
2335.209.61.240ChicagoIllinoisAS15169 Google LLC60666United Statestier_32240.61.209.35.bc.googleusercontent.com
24185.230.61.163San JoseCaliforniaAS58182 Wix.com Ltd.95119United Statestier_32nan
2554.165.147.203Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_32ec2-54-165-147-203.compute-1.amazonaws.com
26185.230.61.179San JoseCaliforniaAS58182 Wix.com Ltd.95119United Statestier_32nan
2713.226.36.30NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-226-36-30.ewr53.r.cloudfront.net
2823.33.97.165CambridgeMassachusettsAS16625 Akamai Technologies, Inc.02142United Statestier_31a23-33-97-165.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website