Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0166173559002020-10-2364.32.8.67Iphone
tierdomaincountregistrarname_serversorg
0tier_1tesetturgiyimkabini.com1Biglizarddomains.com LLCNS1.DNSNUTS.COMNone
1tier_1zhongzifuli.com1NamePal.com #8001 Inc.NS1.DNSNUTS.COMNone
2tier_1iopy.net1Name Find Source LLCNS1.DNSNUTS.COMNone
3tier_1beautifuhouse.com1Gradeadomainnames.com LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1nhahangthanbien.com1NamePal.com #8012 Inc.NS1.DNSNUTS.COMNone
5tier_1thebachelorsmill.com1eNomX, Inc.NS1.DNSNUTS.COMThe Management Group II
6tier_1putasatrevidas.com1eNom455, IncorporatedNS1.DNSNUTS.COMThe Management Group II
7tier_1omgmanga.com1GreenZoneDomains Inc.NS1.DNSNUTS.COMThe Management Group II
8tier_13starrestaurants.com1BraveNames Inc.NS1.DNSNUTS.COMThe Management Group II
9tier_1stuffyouwillhate.com1NamePal.com #8012 Inc.NS1.DNSNUTS.COMThe Management Group II
10tier_3browsernotification.com57NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
11tier_3theconnectvpn.com20DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
12tier_3btpnative.com17GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
13tier_3kbb.com9CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
14tier_3r.ealeo.com4DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
15tier_3wayfair.com2MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
16tier_3clickherefun.com2NAMECHEAP INCNS-1036.AWSDNS-01.ORGWhoisGuard, Inc.
17tier_3samsclub.com2CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
18tier_3birkenstock.com2PSI-USA, Inc. dba Domain RobotA.NS14.NETBirkenstock Sales GmbH
19tier_3m.beautifulhalo.com1GoDaddy.com, LLCLUCY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
20tier_2infopicked.com69NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
21tier_2track.tkbo.com58Key-Systems GmbHNS1.DNSRES.NETc/o whoisproxy.com
22tier_2p246485.infopicked.com43NoneNoneNone
23tier_2btpnative.com22GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
24tier_2p274639.infopicked.com20NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
25tier_2changeslots.com20Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
26tier_2r.ealeo.com11DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
27tier_2rd.bizrate.com11MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
28tier_2atnpx.com9GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
29tier_2rd.connexity.net9NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_135nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_127nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_127nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nan
4185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
5185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
6185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
737.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
837.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
937.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
1064.225.2.103CliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_357nan
11209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_222nan
1223.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_39a23-44-217-143.deploy.static.akamaitechnologies.com
13104.27.186.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_38nan
14104.27.187.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_37nan
15172.67.181.234New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_35nan
1666.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_21166-165-243-151.static.hvvc.us
1723.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-39-32-237.deploy.static.akamaitechnologies.com
18144.202.92.101WashingtonVirginiaAS20473 Choopa, LLC22747United Statestier_32144.202.92.101.vultr.com
19184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a184-87-74-45.deploy.static.akamaitechnologies.com
20173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_214518.65.c0ad.ip4.static.sl-reverse.com
21209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_222nan
2234.207.32.33Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_220ec2-34-207-32-33.compute-1.amazonaws.com
2394.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_216static.231.186.130.94.clients.your-server.de
24144.76.0.242NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_214static.242.0.76.144.clients.your-server.de
2594.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_212static.237.185.130.94.clients.your-server.de
2666.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_21166-165-243-151.static.hvvc.us
27192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_211rd.bizrate.com
28192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_29rd.connexity.net
29144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.130.1.76.144.clients.your-server.de

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website