Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0144147361002020-12-3164.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1umdstudents.com1NamePal.com #8017, LLCNS1.DNSNUTS.COMNone
1tier_1porkybeauties.com1EuropeanConnectionOnline.com LLCNS1.DNSNUTS.COMNone
2tier_1freeporntop.com1Bounce Pass Domains LLCNS1.DNSNUTS.COMNone
3tier_1woolstonrovers.com1SNAPNAMES 17, LLCNS1.DNSNUTS.COMNone
4tier_1v2new.com1NamePal.com #8017, LLCNS1.DNSNUTS.COMNone
5tier_1lasermanncuts.com1Ripcurl Domains, LLCNS1.DNSNUTS.COMNone
6tier_1vul4.com1Swordfish Domains LLCNS1.DNSNUTS.COMNone
7tier_1ppspot.com1Jumpshot Domains LLCNS1.DNSNUTS.COMNone
8tier_1instanike.com1NameVolcano.com LLCNS1.DNSNUTS.COMNone
9tier_1elitedomination.info1Baronofdomains.com LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com26Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2clk.rtpdn12.com20NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_22893.wcitianka.com20NoneNoneNone
13tier_2cpakd.com20NoneNoneNone
14tier_2gofast.pw17NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
15tier_2click.expmediadirect.com16NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
16tier_2alfik-fik.com9Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
17tier_26ao3r.bemobtrcks.com8NAMECHEAP INCNS-1124.AWSDNS-12.ORGWhoisGuard, Inc.
18tier_2rtbstream.com7GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
19tier_2search.eproute.info7GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_3toprevenuecpmnetwork.com13ENOM, INC.NS1.CLOUD-DNS-TECH.COMREDACTED FOR PRIVACY
21tier_3a.upbeatcboulevard.xyz9Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
22tier_3vpnliebao.com8GoDaddy.com, LLCAINSLEY.NS.CLOUDFLARE.COMNone
23tier_3delightcmain.xyz8Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
24tier_3squirt.org5NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
25tier_3track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
26tier_3findoffers.co5Key-Systems GmbHns4.monikerdns.netMoniker Privacy Services
27tier_3buyerperpendicularmorality.com4ENOM, INC.NS1.CLOUD-DNS-TECH.COMREDACTED FOR PRIVACY
28tier_3b.jubilantdstreet.xyz3Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
29tier_3blackcocktoys.com2GoDaddy.com, LLCNS07.DOMAINCONTROL.COMDomains By Proxy, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nannan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_114nannan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nannan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_19nannan
4185.107.56.59AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
563.143.32.94DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1394-32-143-63.static.reverse.lstn.netnan
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
763.143.32.91DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1291-32-143-63.static.reverse.lstn.netnan
863.143.32.84DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1284-32-143-63.static.reverse.lstn.netnan
9185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
10173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_225nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_220nannan
12198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_216nannan
13104.19.217.16San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_214nanTrue
14209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_213nannan
1595.211.26.199AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_210nannan
16173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2918.65.c0ad.ip4.static.sl-reverse.comnan
1794.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_28static.231.186.130.94.clients.your-server.denan
1885.17.29.187AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_27nannan
1994.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.237.185.130.94.clients.your-server.denan
20192.243.59.13WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_39nannan
21104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
22104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
23104.18.18.169San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36pool-100-37-135-2.nycmny.fios.verizon.netnan
25158.106.84.60TorontoOntarioAS23498 COGECODATAM5NCanadatier_35gay-hookup.comnan
26195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_35static.254.92.201.195.clients.your-server.denan
2718.190.1.57ColumbusOhioAS16509 Amazon.com, Inc.43221United Statestier_35ec2-18-190-1-57.us-east-2.compute.amazonaws.comnan
28104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
29192.243.59.12WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_33nannan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website