Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0128132229002020-11-1864.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1frelsitv.com1Burnsidedomains.com LLCNS1.DNSNUTS.COMNone
2tier_1iopy.net1Name Find Source LLCNS1.DNSNUTS.COMNone
3tier_1izuba-rirashe.com1Magnolia Domains, LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1cloudfilezz.com1Lionshare Domains, LLCNS1.DNSNUTS.COMThe Management Group II
5tier_1flippaper.net1eNom373, IncorporatedNS1.DNSNUTS.COMNone
6tier_1illeg4lizm.com1PDXPrivateNames.com LLCNS1.DNSNUTS.COMNone
7tier_1harlequinseries.com1Victorynames LLCNS1.DNSNUTS.COMNone
8tier_1learn-turkish-ar2.com1Meganames LLCNS1.DNSNUTS.COMNone
9tier_1dallahds.com1Domain Name Origin, LLCNS1.DNSNUTS.COMThe Management Group II
10tier_2track.vcdc.com20Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2sopho-kat.com13Amazon Registrar, Inc.NS-1009.AWSDNS-62.NETWhois Privacy Service
12tier_2mnason-hec.com10Amazon Registrar, Inc.NS-1205.AWSDNS-22.ORGWhois Privacy Service
13tier_2track.special-promotions.online8NAMECHEAP INCNS1.DIGITALOCEAN.COMNone
14tier_2special-offers.online8NAMECHEAP INCNS1.DIGITALOCEAN.COMNone
15tier_2check-this.news7NoneNoneNone
16tier_2dprtb.com4GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
17tier_260360.click.validclick.net3Safenames LtdNS1.FULLMAILBOX.COMNone
18tier_2tr.trackingsys.tech3DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
19tier_2b3stcond1tions.com3NAMECHEAP INCARON.NS.CLOUDFLARE.COMWhoisGuard, Inc.
20tier_3htvnativeadsolutions.com6CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Television Inc.
21tier_3track.vcdc.com6Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
22tier_3blog.chron.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
23tier_3blog.sfgate.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
24tier_3google.com_LOOP_12NoneNoneNone
25tier_3findoffers.co1Key-Systems GmbHns4.monikerdns.netMoniker Privacy Services
26tier_3e4x1y.check-this.news1NoneNoneNone
27tier_3win3.trustedpush.com1NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
28tier_3h3mds.check-this.news1NoneNoneNone
29tier_3ucv7x.check-this.news1NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_16nan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_15nan
337.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
4207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_13nan
5185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
637.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
737.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
8185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
964.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
1095.168.170.165The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_34nan
11213.227.145.147The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_33nan
12213.227.149.216ZaltbommelGelderlandAS60781 LeaseWeb Netherlands B.V.5301Netherlandstier_31nan
1352.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_214ec2-52-205-210-89.compute-1.amazonaws.com
14204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_212204.44.79.214.static.quadranet.com
1554.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_29ec2-54-225-132-253.compute-1.amazonaws.com
1613.224.211.22PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_31server-13-224-211-22.phl50.r.cloudfront.net
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.237.185.130.94.clients.your-server.de
1835.245.138.132WashingtonWashington, D.C.AS15169 Google LLC20045United Statestier_26132.138.245.35.bc.googleusercontent.com
19209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan
20151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_311nan
21138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_36proxy.traffic.club
2295.168.170.165The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_34nan
23213.227.145.147The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_33nan
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
2518.190.1.57ColumbusOhioAS16509 Amazon.com, Inc.43209United Statestier_31ec2-18-190-1-57.us-east-2.compute.amazonaws.com
2613.224.211.22PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_31server-13-224-211-22.phl50.r.cloudfront.net
27213.227.149.216ZaltbommelGelderlandAS60781 LeaseWeb Netherlands B.V.5301Netherlandstier_31nan
2898.129.228.57BrookhavenMississippiAS33070 Rackspace Hosting39601United Statestier_31nan
29209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website