Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
06463158002020-10-0864.32.8.67Iphone
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1versaillestovictoria.com1! #1 Host Germany, Inc.NS1.DNSNUTS.COMNone
2tier_1g-paws.com1SNAPNAMES 72, LLCNS1.DNSNUTS.COMNone
3tier_1nontonindrama.com1CloudBreakDomains, LLCNS1.DNSNUTS.COMNone
4tier_118land.net1DuckbilledDomains.com LLCNS1.DNSNUTS.COMNone
5tier_1subfeed.net1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
6tier_1topnettricks.com1Domainjungle.net LLCNS1.DNSNUTS.COMNone
7tier_1tsmarianacordoba.net1Tradewinds Names, LLCNS1.DNSNUTS.COMNone
8tier_1caesarmovies.com1New Order Domains, LLCNS1.DNSNUTS.COMNone
9tier_1cccamfullserver.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
10tier_2go.trackinz.com14NoneNoneNone
11tier_2click.expmediadirect.com13NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
12tier_2btpnative.com10GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
13tier_2infopicked.com10NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
14tier_2p274639.infopicked.com9NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
15tier_2rockymountaintrack.com7Registrar of domain names REG.RU LLCNS1.REG.RUPrivate Person
16tier_2r.ealeo.com6DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
17tier_2rd.bizrate.com6MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
18tier_2rd.connexity.net4MarkMonitor Inc.NS-1190.AWSDNS-20.ORGNone
19tier_2changeslots.com3Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
20tier_3clickitover.com14NAMECHEAP INCNS-1367.AWSDNS-42.ORGWhoisGuard, Inc.
21tier_3vpnhub.com7Eurodns S.A.DNS1.P03.NSONE.NETWhois Privacy (enumDNS dba)
22tier_3theconnectvpn.com3DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
23tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
24tier_3minecraft.net1TUCOWS, INC.NS-1395.AWSDNS-46.ORGContact Privacy Inc. Customer 0120735043
25tier_3macys.com1Network Solutions, LLCA1-135.AKAM.NETNone
26tier_3venus.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMVenus Fashion, Inc.
27tier_3modcloth.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMModCloth Inc
28tier_3samsclub.com1CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
29tier_3webstaurantstore.com1Network Solutions, LLCFIONA.NS.CLOUDFLARE.COMNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_13nan
437.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
546.166.182.116AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
664.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
746.166.182.113AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
8173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22118.65.c0ad.ip4.static.sl-reverse.com
934.226.252.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_217ec2-34-226-252-28.compute-1.amazonaws.com
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_213nan
11209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_213nan
12167.114.103.223TorontoOntarioAS16276 OVH SASM5NCanadatier_27ns511363.ip-167-114-103.net
1366.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2666-165-243-151.static.hvvc.us
14192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26rd.bizrate.com
15192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_24rd.connexity.net
163.224.167.29Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_22ec2-3-224-167-29.compute-1.amazonaws.com
1752.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_21ec2-52-205-210-89.compute-1.amazonaws.com
18157.245.227.32Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_314nan
1966.254.114.123Los AngelesCaliforniaAS29789 Reflected Networks, Inc.90009United Statestier_37reflectededge.reflected.net
20104.27.186.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_32nan
21104.27.187.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_31nan
2223.194.176.185Atlantic CityNew JerseyAS20940 Akamai International B.V.08404United Statestier_31a23-194-176-185.deploy.static.akamaitechnologies.com
23152.195.19.97Los AngelesCaliforniaAS15133 MCI Communications Services, Inc. d/b/a Verizon Business90009United Statestier_31nan
24104.77.220.218NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a104-77-220-218.deploy.static.akamaitechnologies.com
25104.105.81.249NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a104-105-81-249.deploy.static.akamaitechnologies.com
26151.101.2.49San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nan
27184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-74-45.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website