Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0113114464002020-11-0937.48.65.151Android
tierdomaincountregistrarname_serversorg
0tier_1sengoku-expo.net1Soldierofonedomains.com, LLCNS1.DNSNUTS.COMNone
1tier_1indieknow.net1Goldmine Domains LLCNS1.DNSNUTS.COMThe Management Group II
2tier_1squarelion.net1Namesaplenty LLCNS1.DNSNUTS.COMNone
3tier_1ok-ch.net1Domain Name Root, LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1pdgs.net1Pink Elephant Domains, LLCNS1.DNSNUTS.COMNone
5tier_1nentai.net1enom650, Inc.NS1.DNSNUTS.COMThe Management Group II
6tier_1videopremium.net1Domainsareforever.net LLCNS1.DNSNUTS.COMThe Management Group II
7tier_1taeanfestival.net1Desert Sand Domains, LLCNS1.DNSNUTS.COMNone
8tier_1ip138.net1Sssasss, IncorporatedNS1.DNSNUTS.COMThe Management Group II
9tier_1virtuanaut.net1Domainnovations, IncorporatedNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com50Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2get.popplunder.com26NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_2trustedpush.com26NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
13tier_2atnpx.com24GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
14tier_2ad.doubleclick.net24MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
15tier_2win1.trustedpush.com22NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
16tier_2usa.alexa-cam.com19Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
17tier_2win2.trustedpush.com18NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_2usd.alexa-cam.com16Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
19tier_2usa.mnason-hec.com13Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
20tier_3kbb.com24CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
21tier_3track.vcdc.com10Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
22tier_3voraciousribat.club10NAMECHEAP INCelsa.ns.cloudflare.comWhoisGuard, Inc.
23tier_3win4.trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
24tier_3win3.trustedpush.com6NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
25tier_3enrollnotice.com5NameCheap, Inc.DNS1.REGISTRAR-SERVERS.COMNone
26tier_3win5.trustedpush.com4NoneNoneNone
27tier_3win1.trustedpush.com4NoneNoneNone
28tier_3win2.trustedpush.com4NoneNoneNone
29tier_3wayfair.com1MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
4185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_16nan
537.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nan
637.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nan
737.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nan
8185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
9185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
1052.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_235ec2-52-205-210-89.compute-1.amazonaws.com
1154.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_231ec2-54-225-132-253.compute-1.amazonaws.com
1234.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_231ec2-34-199-180-187.compute-1.amazonaws.com
1313.225.65.6NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-225-65-6.ewr53.r.cloudfront.net
1413.225.65.102NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-65-102.ewr53.r.cloudfront.net
1594.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_215static.231.186.130.94.clients.your-server.de
1613.225.65.110NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-65-110.ewr53.r.cloudfront.net
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_213static.237.185.130.94.clients.your-server.de
18104.26.11.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_212nan
19144.76.0.242NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_212static.242.0.76.144.clients.your-server.de
2023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_324a23-44-217-143.deploy.static.akamaitechnologies.com
21100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_317pool-100-37-135-2.nycmny.fios.verizon.net
22138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_310proxy.traffic.club
2345.32.198.135DallasTexasAS20473 Choopa, LLC75270United Statestier_31045.32.198.135.vultr.com
24144.202.107.3Live OakCaliforniaAS20473 Choopa, LLC95953United Statestier_35144.202.107.3.vultr.com
2513.225.65.6NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-225-65-6.ewr53.r.cloudfront.net
2613.225.65.102NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-65-102.ewr53.r.cloudfront.net
2713.225.65.110NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-65-110.ewr53.r.cloudfront.net
2823.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-39-32-237.deploy.static.akamaitechnologies.com
29208.91.196.145Road TownBritish Virgin IslandsAS40034 Confluence Networks IncnanBritish Virgin Islandstier_31nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website