Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0116112266002021-01-0164.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1crfashionwear.net1Active Market Domains LLCNS1.DNSNUTS.COMNone
1tier_1albumkings.net1Snoqulamiedomains.com LLCNS1.DNSNUTS.COMNone
2tier_1alchemicalpsychology.com1SNAPNAMES 13, LLCNS1.DNSNUTS.COMNone
3tier_1amateureden.net1SNAPNAMES 70, LLCNS1.DNSNUTS.COMNone
4tier_1nontonindrama.com1CloudBreakDomains, LLCNS1.DNSNUTS.COMNone
5tier_1vul4.com1Swordfish Domains LLCNS1.DNSNUTS.COMNone
6tier_1kakashi-stresser.com1Rare Gem Domains LLCNS1.DNSNUTS.COMNone
7tier_1ava-producao.net1SNAPNAMES 45, LLCNS1.DNSNUTS.COMNone
8tier_1onewire.net1Fastball Domains LLCNS1.DNSNUTS.COMNone
9tier_1elitedomination.info1Baronofdomains.com LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com24Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2clk.rtpdn12.com20NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
12tier_2gofast.pw18NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
13tier_22893.wcitianka.com14GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
14tier_2cpakd.com13GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
15tier_2rtbstream.com7GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
16tier_2click.expmediadirect.com7NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
17tier_2search.eproute.info6GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2alfik-fik.com5Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
19tier_26ao3r.bemobtrcks.com3NoneNoneNone
20tier_3toprevenuecpmnetwork.com11ENOM, INC.NS1.CLOUD-DNS-TECH.COMREDACTED FOR PRIVACY
21tier_3a.upbeatcboulevard.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
22tier_3buyerperpendicularmorality.com7ENOM, INC.NS1.CLOUD-DNS-TECH.COMREDACTED FOR PRIVACY
23tier_3delightcmain.xyz5Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
24tier_3findoffers.co5Key-Systems GmbHns4.monikerdns.netMoniker Privacy Services
25tier_3track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
26tier_3vpnliebao.com3GoDaddy.com, LLCAINSLEY.NS.CLOUDFLARE.COMNone
27tier_3squirt.org3NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
28tier_3searchfrequently.com1GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
29tier_3overstock.com1MarkMonitor, Inc.DNS1.P01.NSONE.NETOverstock.com, Inc - TMA606142
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nannan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nannan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nannan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nannan
4185.107.56.57AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
5185.107.56.60AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
7185.107.56.59AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nannan
863.143.32.88DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1188-32-143-63.static.reverse.lstn.netnan
963.143.32.93DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1193-32-143-63.static.reverse.lstn.netnan
10173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_221nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_214nannan
12144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_212static.130.1.76.144.clients.your-server.denan
13104.19.217.16San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_211nanTrue
1485.17.29.187AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_210nannan
15209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_210nannan
1695.211.26.199AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_28nannan
1794.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.231.186.130.94.clients.your-server.denan
18198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_27nannan
1934.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_24ec2-34-226-113-11.compute-1.amazonaws.comnan
20192.243.59.12WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_39nannan
21192.243.59.13WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_36nannan
22104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
2318.190.1.57ColumbusOhioAS16509 Amazon.com, Inc.43221United Statestier_35ec2-18-190-1-57.us-east-2.compute.amazonaws.comnan
24195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_35static.254.92.201.195.clients.your-server.denan
25100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
26104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
27158.106.84.60TorontoOntarioAS23498 COGECODATAM5NCanadatier_33gay-hookup.comnan
28104.18.18.169San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
29104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website