Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0156156393002020-10-1464.32.8.68Chrome
tierdomaincountregistrarname_serversorg
0tier_1therebels.biz1UdomainName.com LLCns2.dnsnuts.comNone
1tier_1shearton.com1NoneNoneNone
2tier_1tokrin.com1Domainsofvalue.com LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1versaillestovictoria.com1! #1 Host Germany, Inc.NS1.DNSNUTS.COMNone
4tier_1reikian.com1Rare Gem Domains LLCNS1.DNSNUTS.COMThe Management Group II
5tier_1m-drug.com1Fetch Registrar, LLCNS1.DNSNUTS.COMNone
6tier_1sabitlink.com1Alethia Domains, LLCNS1.DNSNUTS.COMNone
7tier_1smileydressup.com1DropFall.com, Inc.NS1.DNSNUTS.COMThe Management Group II
8tier_1b-ook.com1Domaincircle LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1mrbtrack.com1Mypreciousdomain.com LLCNS1.DNSNUTS.COMThe Management Group II
10tier_2pleasetrack.com24Name.com, Inc.NS1DJS.NAME.COMDomain Protection Services, Inc.
11tier_2dprtb.com24GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
12tier_21496.wcitianka.com24UNIREGISTRAR CORPNS-1096.AWSDNS-09.ORGNone
13tier_2track.tkbo.com23Key-Systems GmbHNS1.DNSRES.NETc/o whoisproxy.com
14tier_2americanlisted.com23ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
15tier_2click.appcast.io13101domain GRS LtdNS-85.AWSDNS-10.COMNone
16tier_2usa.claudia-luc.com13Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
17tier_2usd.claudia-luc.com11Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
18tier_2click.appcast.io_LOOP_19NoneNoneNone
19tier_2careerbliss.com9GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
20tier_3securetoday.org24Name.com, Inc.YOLANDA.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
21tier_3us.tideri.com4united domains AGNS.UDAG.DENone
22tier_3nextcareernow.com3GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
23tier_3us.sercanto.com2OVH, SASDNS20.OVH.NETWickedin s.r.l.
24tier_3chrome.en.softonic.com2Network Solutions, LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMStatutory Masking Enabled
25tier_3p.nexxt.com1Network Solutions, LLCNS21.WORLDNIC.COMNone
26tier_3careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
27tier_3avg-antivirus-free.en.softonic.com1Network Solutions, LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMStatutory Masking Enabled
28tier_3us.allthetopbananas.com1NoneNoneNone
29tier_3jobs.dish.com1Network Solutions, LLCNS-01.DISH.COMDish Network LLC
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_120nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_116nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nan
437.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
546.166.182.111AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
664.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
746.166.182.110AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
846.166.182.115AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
964.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_228nan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_225nan
1234.198.58.156Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_224ec2-34-198-58-156.compute-1.amazonaws.com
1335.209.61.240ChicagoIllinoisAS15169 Google LLC60666United Statestier_223240.61.209.35.bc.googleusercontent.com
14207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_31cbsmtp1.careerbliss.com
1554.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_213ec2-54-225-132-253.compute-1.amazonaws.com
1652.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_212ec2-52-205-210-89.compute-1.amazonaws.com
17100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_212pool-100-37-135-2.nycmny.fios.verizon.net
1894.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.237.185.130.94.clients.your-server.de
19198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_28nan
20104.18.34.229Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_319nan
2135.227.233.104Kansas CityMissouriAS15169 Google LLC64121United Statestier_36104.233.227.35.bc.googleusercontent.com
22172.67.164.123New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_34nan
2335.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_34123.171.246.35.bc.googleusercontent.com
24216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94035United Statestier_33any-in-2015.1e100.net
2534.90.160.43ChicagoIllinoisAS15169 Google LLC60666United Statestier_3243.160.90.34.bc.googleusercontent.com
2668.168.84.60King of PrussiaPennsylvaniaAS17378 TierPoint, LLC19406United Statestier_3160.84.168.68.static.dbsintl.net
27207.38.44.116IrvineCaliforniaAS5693 Latisys-Irvine, LLC92618United Statestier_31cbsmtp1.careerbliss.com
28172.67.75.236New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_31nan
29107.21.12.60Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_31ec2-107-21-12-60.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website