Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0179177546002020-12-0637.48.65.151Safari
tierdomaincountregistrarname_serversorg
0tier_1faststone.com1Media Elite Holdings LimitedNS1.DNSNUTS.COMFundacion Privacy Services LTD
1tier_1mysocaledlife.com1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
2tier_1economictims.com1Domain Landing Zone LLCNS1.DNSNUTS.COMNone
3tier_1newfappening.com1Goto Domains LLCNS1.DNSNUTS.COMNone
4tier_1lightnoveleg.com1! #1 Host Germany, LLCNS1.DNSNUTS.COMNone
5tier_1bangkok-model.com1Namegrab LLCNS1.DNSNUTS.COMNone
6tier_1healthylifestar.com1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
7tier_1kamibbs.biz1UdomainName.com LLCns2.dnsnuts.comNone
8tier_1mospeen.com1Allworldnames.com LLCNS1.DNSNUTS.COMNone
9tier_1grandcasino.com1Media Elite Holdings LimitedNS1.TORRESDNS.COMFundacion Privacy Services LTD
10tier_2dprtb.com28GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_2track.vcdc.com22Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2click.expmediadirect.com21NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
13tier_2mnason-hec.com20Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
14tier_21496.wcitianka.com18GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
15tier_2americanlisted.com17ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
16tier_29nl.es17NoneNoneNone
17tier_2newre-conversions.clickmeter.com17REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
18tier_2clk.rtpdn11.com17NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
19tier_2btpnative.com13GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
20tier_3thefatburner.info19GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
21tier_3toovolution.club19NAMECHEAP INCdemi.ns.cloudflare.comWhoisGuard, Inc.
22tier_3careerbliss.com12GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
23tier_3bitcofeed.info11GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
24tier_3worldoftanks.ru7RU-CENTER-RUns1.wargaming.net.Wargaming.net Limited
25tier_3click.jometer.com5Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
26tier_3newupdate.getstablesystemupgrades.work4NoneNoneNone
27tier_3track.vcdc.com3Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
28tier_3irl.com2GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
29tier_3newsoftready.getstablesystemupgrades.work2NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_123nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
4209.126.123.13St. LouisMissouriAS30083 GoDaddy.com, LLC63150United Statestier_15static-ip-209-126-123-13.inaddr.ip-pool.com
564.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_14customer.sharktech.net
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nan
7185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
8185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
937.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_241nan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_227nan
12198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_222nan
13173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_220nan
1435.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_217240.61.209.35.bc.googleusercontent.com
15173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21418.65.c0ad.ip4.static.sl-reverse.com
16174.129.1.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-174-129-1-28.compute-1.amazonaws.com
1734.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-34-202-98-117.compute-1.amazonaws.com
1823.21.203.213Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-23-21-203-213.compute-1.amazonaws.com
19198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nan
20207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_312cbsmtp1.careerbliss.com
21172.67.218.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nan
2213.32.192.34WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_39server-13-32-192-34.iad66.r.cloudfront.net
23104.27.175.27San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_38nan
2462.210.11.149ParisÎle-de-FranceAS12876 ONLINE S.A.S.75004Francetier_3862-210-11-149.rev.poneytelecom.eu
2592.223.21.73LuxembourgLuxembourgAS199524 G-Core Labs S.A.L-1882Luxembourgtier_37ed-sl-b73.fe.core.pw
26104.24.115.148San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nan
2713.32.192.33WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_34server-13-32-192-33.iad66.r.cloudfront.net
2813.32.192.35WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_34server-13-32-192-35.iad66.r.cloudfront.net
29138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_33proxy.traffic.club

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website