Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0176192448002020-12-2737.48.65.151Safari
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
1tier_1policito.com1SNAPNAMES 18, LLCNS1.DNSNUTS.COMNone
2tier_1codeyouneed.com1Deep Sea Domains LLCNS1.DNSNUTS.COMNone
3tier_135ink.com1CloudBreakDomains, LLCNS1.DNSNUTS.COMNone
4tier_1alchemicalpsychology.com1SNAPNAMES 13, LLCNS1.DNSNUTS.COMNone
5tier_1guias-trucos-juegos.com1SNAPNAMES 24, LLCNS1.DNSNUTS.COMNone
6tier_1kompforum.com1Touchdown Domains LLCNS1.DNSNUTS.COMNone
7tier_1j20style.com1Domaintimemachine.com LLCNS1.DNSNUTS.COMNone
8tier_1jxieeducation.com1NamePal.com #8021, LLCNS1.DNSNUTS.COMNone
9tier_1pokestache.com1SNAPNAMES 95, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect.com25NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
11tier_2dprtb.com24GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
12tier_25339.wcitianka.com21GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
13tier_2tr.trackingsys.tech21DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
14tier_2euphe-gun.com16Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
15tier_2track.vcdc.com14Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
16tier_2build.mediapicker.com13GoDaddy.com, LLCRAQUEL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
17tier_2clk.rtpdn12.com11NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
18tier_2cash.admobe.com9GoDaddy.com, LLCRAQUEL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
19tier_2icarinsurance.net8DYNADOT LLCNS1.DYNADOT.COMNone
20tier_3bing.com8MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
21tier_3searchfrequently.com6GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
22tier_3boot-upintensely-thespeedyfile.best4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
23tier_3boot-upintensely-thefreefile.best4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
24tier_3winfreegift.club4DYNADOT LLCns-24.awsdns-03.comNone
25tier_3installstrongoverlyapplication.icu4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3fortunerain.info4GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
27tier_3installworking.findyourultimateplayersfirst.best3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
28tier_3casinoentity.info3GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
29tier_3streamswiftcompletelypro.best3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_123nannan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nannan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nannan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_16nannan
437.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nannan
537.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
6185.107.56.57AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
7185.107.56.59AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
837.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nannan
9185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_32nannan
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_227nannan
12198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_222nannan
1334.231.10.22Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_221ec2-34-231-10-22.compute-1.amazonaws.comnan
14173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_219nannan
1518.210.49.168Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_213ec2-18-210-49-168.compute-1.amazonaws.comnan
16137.74.180.226GravelinesHauts-de-FranceAS16276 OVH SAS59820Francetier_212ip226.ip-137-74-180.eunan
1752.44.196.184Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_29ec2-52-44-196-184.compute-1.amazonaws.comnan
1835.169.225.248Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_28ec2-35-169-225-248.compute-1.amazonaws.comnan
19152.44.37.80HoustonTexasAS25697 UpCloud USA Inc77052United Statestier_28152-44-37-80.us-chi1.upcloud.hostnan
2075.101.207.6Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_322ec2-75-101-207-6.compute-1.amazonaws.comnan
2162.210.11.149ParisÎle-de-FranceAS12876 ONLINE S.A.S.75004Francetier_3962-210-11-149.rev.poneytelecom.eunan
22204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_38a-0001.a-msedge.netTrue
23104.31.81.30San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
24104.31.94.162San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
25195.154.40.107ToulouseOccitanieAS12876 ONLINE S.A.S.31000Francetier_33195-154-40-107.rev.poneytelecom.eunan
26116.202.48.54FürthBavariaAS24940 Hetzner Online GmbH90762Germanytier_32static.54.48.202.116.clients.your-server.denan
2752.89.84.43PortlandOregonAS16509 Amazon.com, Inc.97293United Statestier_32ec2-52-89-84-43.us-west-2.compute.amazonaws.comnan
28172.67.221.159San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
29209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_32nannan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website