Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0140142394502020-10-1437.48.65.151Chrome
tierdomaincountregistrarname_serversorg
0tier_1coolmobmasters.com1NamePal.com #8016, LLCNS1.DNSNUTS.COMNone
1tier_1loany24.com1DomainSprouts.com LLCNS1.DNSNUTS.COMNone
2tier_1ildtv.com1Nameemperor.com LLCNS1.DNSNUTS.COMNone
3tier_1littlewolfrun.net1Atomicdomainnames.com LLCNS1.DNSNUTS.COMNone
4tier_1bangkek.com1NoneNoneNone
5tier_1belledejourney.com1Domainsofvalue.com LLCNS1.DNSNUTS.COMNone
6tier_1guias-trucos-juegos.com1SNAPNAMES 24, LLCNS1.DNSNUTS.COMNone
7tier_1899or.com1Chipshot Domains LLCNS1.DNSNUTS.COMNone
8tier_1ciqhyd.com1Deep Dive Domains, LLCNS1.DNSNUTS.COMNone
9tier_1honyolar.com1NamePal.com #8024, LLCNS1.DNSNUTS.COMNone
10tier_2dprtb.com29GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_2infopicked.com15NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
12tier_2btpnative.com14GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
13tier_25339.wcitianka.com14UNIREGISTRAR CORPNS-1096.AWSDNS-09.ORGNone
14tier_2tr.trackingsys.tech14DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
15tier_2get37.admedit.net14NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
16tier_21496.wcitianka.com14UNIREGISTRAR CORPNS-1096.AWSDNS-09.ORGNone
17tier_2p274639.infopicked.com13NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
18tier_2americanlisted.com12ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
19tier_2106.trackints.com11NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
20tier_3pestexterminator.com11GoDaddy.com, LLCNS-1521.AWSDNS-62.ORGDomains By Proxy, LLC
21tier_3trafficbounce.net8NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
22tier_3amazon.force.com6MarkMonitor, Inc.PCH1.SALESFORCE-DNS.COMSalesforce.com, Inc.
23tier_3smartdeals.icu6NAMECHEAP INCNS-813.AWSDNS-37.NETWhoisGuard, Inc.
24tier_3wix.com4GoDaddy.com, LLCNS1.P14.DYNECT.NETWix.com, LTD.
25tier_3toovolution.club3NAMECHEAP INCdemi.ns.cloudflare.comWhoisGuard, Inc.
26tier_3upgrade12check.yourultimatebettervideoplayer.best2NamecheapDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
27tier_3get.hdstreamsearch.com2GoDaddy.com, LLCISLA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
28tier_3click.appcast.io2101domain GRS LtdNS-85.AWSDNS-10.COMNone
29tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
437.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
564.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
664.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
737.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
864.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
937.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_243nan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_234nan
12173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_23118.65.c0ad.ip4.static.sl-reverse.com
13108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_216b9.c1.a86c.ip4.static.sl-reverse.com
1434.231.10.22Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_214ec2-34-231-10-22.compute-1.amazonaws.com
15137.74.180.226AmsterdamNorth HollandAS16276 OVH SAS1012Netherlandstier_214ip226.ip-137-74-180.eu
1635.209.61.240ChicagoIllinoisAS15169 Google LLC60666United Statestier_32240.61.209.35.bc.googleusercontent.com
17100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37pool-100-37-135-2.nycmny.fios.verizon.net
1852.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_26ec2-52-205-210-89.compute-1.amazonaws.com
1968.168.84.60King of PrussiaPennsylvaniaAS17378 TierPoint, LLC19406United Statestier_2660.84.168.68.static.dbsintl.net
20204.13.108.145RichardsonTexasAS35914 Armor Defense Inc75082United Statestier_311nan
215.2.74.163VeenendaalUtrechtAS60404 Liteserver Holding B.V.3901Netherlandstier_38nan
22100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37pool-100-37-135-2.nycmny.fios.verizon.net
2394.102.49.124AmsterdamNorth HollandAS202425 IP Volume inc1012Netherlandstier_36no-reverse-dns-configured.com
2413.110.70.94San FranciscoCaliforniaAS14340 Salesforce.com, Inc.94103United Statestier_32dcl7-ncg1-c6-iad5.na137-ia5.force.com
25195.154.35.116ParisÎle-de-FranceAS12876 ONLINE S.A.S.75000Francetier_32195-154-35-116.rev.poneytelecom.eu
26185.230.61.179San JoseCaliforniaAS58182 Wix.com Ltd.95119United Statestier_32nan
2713.110.65.94San FranciscoCaliforniaAS14340 Salesforce.com, Inc.94103United Statestier_32dcl2-ncg1-c6-iad5.na137-ia5.force.com
2835.209.61.240ChicagoIllinoisAS15169 Google LLC60666United Statestier_32240.61.209.35.bc.googleusercontent.com
2951.81.112.1WashingtonWashington, D.C.AS16276 OVH SAS20045United Statestier_32ip1.ip-51-81-112.us

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website