Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0125127420002020-11-0164.32.8.67Iphone
tierdomaincountregistrarname_serversorg
0tier_1maprooacademy.com1Glide Slope Domains, LLCNS1.DNSNUTS.COMNone
1tier_1faststone.com1Media Elite Holdings LimitedNS1.DNSNUTS.COMFundacion Privacy Services LTD
2tier_1tweedinthecity.com1Deep Sea Domains LLCNS1.DNSNUTS.COMNone
3tier_19novels.net1! #1 Host Japan, LLCNS1.DNSNUTS.COMNone
4tier_1aharonic.net1Gradeadomainnames.com LLCNS1.DNSNUTS.COMNone
5tier_1face2facethemagazine.com1Domaininthehole.com LLCNS1.DNSNUTS.COMNone
6tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
7tier_1littlewolfrun.net1Atomicdomainnames.com LLCNS1.DNSNUTS.COMNone
8tier_1tryketoinfiniteacceldiet.com1! #1 Host Korea, LLCNS1.DNSNUTS.COMNone
9tier_1abadown.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com56Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2go.trackinz.com29NAMECHEAP INCNS-1139.AWSDNS-14.ORGWhoisGuard, Inc.
12tier_2atnpx.com28GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
13tier_2infopicked.com25NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
14tier_2usd.ced-max.com23Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
15tier_2p246485.infopicked.com19NoneNoneNone
16tier_2usa.ced-max.com14Amazon Registrar, Inc.NS-1305.AWSDNS-35.ORGWhois Privacy Service
17tier_2ad.doubleclick.net10MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
18tier_2btpnative.com6GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
19tier_2p274639.infopicked.com6NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
20tier_3checkthistime.com29NAMECHEAP INCNS-1262.AWSDNS-29.ORGWhoisGuard, Inc.
21tier_3kbb.com28CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
22tier_3track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_3socalhondadealers.com5DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
24tier_3pes20.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
25tier_3apple.news1NoneNoneNone
26tier_3apple.com1CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
27tier_3dollargeneral.com1CSC CORPORATE DOMAINS, INC.A1-61.AKAM.NETDollar General Corporation
28tier_3hotwire.com1NOM-IQ Ltd dba Com LaudeASIA2.AKAM.NETHotwire, Inc.
29tier_3novica.com1Network Solutions, LLCNS1.EDGECASTDNS.NETNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
3207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
4185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
5185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
637.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
737.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
837.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
9185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
10173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_25218.65.c0ad.ip4.static.sl-reverse.com
1134.226.252.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_229ec2-34-226-252-28.compute-1.amazonaws.com
1252.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_219ec2-52-205-210-89.compute-1.amazonaws.com
1394.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_219static.231.186.130.94.clients.your-server.de
1494.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_218static.237.185.130.94.clients.your-server.de
1554.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_218ec2-54-225-132-253.compute-1.amazonaws.com
16104.26.11.53WashingtonWashington, D.C.AS13335 Cloudflare, Inc.20045United Statestier_212nan
17144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_211static.130.1.76.144.clients.your-server.de
18172.67.74.77New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_29nan
19144.76.0.242NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.242.0.76.144.clients.your-server.de
20157.245.227.32Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_329nan
2123.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_328a23-44-217-143.deploy.static.akamaitechnologies.com
22138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_311proxy.traffic.club
23162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_34nan
2435.174.35.73Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_34ec2-35-174-35-73.compute-1.amazonaws.com
25100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.net
2623.39.32.250NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-39-32-250.deploy.static.akamaitechnologies.com
273.81.196.132Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_31ec2-3-81-196-132.compute-1.amazonaws.com
2834.207.4.240Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_31ec2-34-207-4-240.compute-1.amazonaws.com
29184.87.70.29NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-70-29.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website