Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01121214391502020-10-1664.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1duet-chehova.net1Afterdark Domains, IncorporatedNS1.DNSNUTS.COMNone
1tier_1freepornretro.com1eNom463, IncorporatedNS1.DNSNUTS.COMNone
2tier_1mospeen.com1Allworldnames.com LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1dakmm.com1Private Domains, IncorporatedNS1.DNSNUTS.COMNone
4tier_1erojii.net1Dropcatch Landing Spot LLCNS1.DNSNUTS.COMThe Management Group II
5tier_1shireen-n.com1Nameselite, LLCNS1.DNSNUTS.COMThe Management Group II
6tier_1honkgames.com1Mark Barker IncorporatedNS1.DNSNUTS.COMNone
7tier_1glacialrealms.com1Freshbreweddomains.com LLCNS1.DNSNUTS.COMNone
8tier_1love-in-air.net1Freefall Domains LLCNS1.DNSNUTS.COMNone
9tier_1totonam.com1NamePal.com #8013 Inc.NS1.DNSNUTS.COMNone
10tier_2track.tasty-natural-lifestyles.com34NoneNoneNone
11tier_2dprtb.com29GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
12tier_2usd.claudia-luc.com26Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
13tier_2usa.claudia-luc.com24Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
14tier_2get.popplunder.com23NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
15tier_2track.tkbo.com20Key-Systems GmbHNS1.DNSRES.NETc/o whoisproxy.com
16tier_2trustedpush.com16NoneNoneNone
17tier_2win1.trustedpush.com14NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
18tier_2win2.trustedpush.com12NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
19tier_2usa.mnason-hec.com11Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
20tier_3euleesiggeir.club28NoneNoneNone
21tier_3dominativesnively.club13NoneNoneNone
22tier_3encryptalert.com7NameCheap, Inc.DNS1.REGISTRAR-SERVERS.COMNone
23tier_3win4.trustedpush.com5NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
24tier_3gladmpath.xyz5Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
25tier_3win3.trustedpush.com3NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
26tier_3win5.trustedpush.com2NoneNoneNone
27tier_3usd.claudia-luc.com2Amazon Registrar, Inc.NS-1534.AWSDNS-63.ORGWhois Privacy Service
28tier_3delightcmain.xyz2Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
29tier_3win1.trustedpush.com2NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_117nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
446.166.182.115AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_14nan
546.166.182.113AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
646.166.182.110AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
746.166.182.112AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
864.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
964.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
1034.199.107.160Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_243ec2-34-199-107-160.compute-1.amazonaws.com
1154.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_239ec2-54-225-132-253.compute-1.amazonaws.com
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_232nan
1352.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_31ec2-52-205-210-89.compute-1.amazonaws.com
1434.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_226ec2-34-199-180-187.compute-1.amazonaws.com
1513.225.65.6NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-225-65-6.ewr53.r.cloudfront.net
1613.225.65.102NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-13-225-65-102.ewr53.r.cloudfront.net
1713.225.65.110NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_213server-13-225-65-110.ewr53.r.cloudfront.net
1894.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.237.185.130.94.clients.your-server.de
19198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_27nan
20149.28.49.220New York CityNew YorkAS20473 Choopa, LLC10004United Statestier_330149.28.49.220.vultr.com
21100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_314pool-100-37-135-2.nycmny.fios.verizon.net
2245.32.198.135DallasTexasAS20473 Choopa, LLC75270United Statestier_3945.32.198.135.vultr.com
23144.202.107.3Live OakCaliforniaAS20473 Choopa, LLC95953United Statestier_37144.202.107.3.vultr.com
2413.225.65.102NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-13-225-65-102.ewr53.r.cloudfront.net
25104.18.78.149Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_33nan
26104.18.79.149Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_33nan
2713.225.65.8NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-225-65-8.ewr53.r.cloudfront.net
2813.225.65.6NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-225-65-6.ewr53.r.cloudfront.net
2952.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_31ec2-52-205-210-89.compute-1.amazonaws.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website