Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0174172548002021-01-0464.32.8.68Iphone
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
1tier_1blessedit.com1SNAPNAMES 29, LLCNS1.DNSNUTS.COMNone
2tier_1btvbt.com1Lionshare Domains, LLCNS1.DNSNUTS.COMNone
3tier_1bay4bay.us1UdomainName.com LLCns2.dnsnuts.comNone
4tier_1mltaqa.net1Names On The Drop LLCNS1.DNSNUTS.COMNone
5tier_1brickerenterprise.com1NamePal.com #8011, LLCNS1.DNSNUTS.COMNone
6tier_1worldwidedvdforums.com1Line Drive Domains, LLCNS1.DNSNUTS.COMNone
7tier_1izuba-rirashe.com1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
8tier_1xshappy.com1NamePal.com #8013, LLCNS1.DNSNUTS.COMNone
9tier_1sarkarsoft.com1Mypreciousdomain.com LLCNS1.DNSNUTS.COMNone
10tier_2changeslots.com80Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
11tier_2api.quotes.com66Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
12tier_2track.vcdc.com22Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_2recode.pw20GANDI SASNS-1611.AWSDNS-09.CO.UKPPCBUZZ
14tier_2infopicked.com13NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
15tier_2cevad.xyz11NAMECHEAP INCNS-219.AWSDNS-27.COMWhoisGuard, Inc.
16tier_2misctraff.com10Name.com, Inc.MACIEJ.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
17tier_2trk44.nundori.xyz10NameSilo, LLCPAITYN.NS.CLOUDFLARE.COMSee PrivacyGuardian.org
18tier_2a8672336.mnoova.com10NAMECHEAP INCCOBY.NS.CLOUDFLARE.COMWhoisGuard, Inc.
19tier_2clickbytemedia.go2affise.com10GoDaddy.com, LLCNS-1529.AWSDNS-63.ORGDomains By Proxy, LLC
20tier_3theconnectvpn.com80DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3track.vcdc.com8Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
22tier_3cevad.xyz5NAMECHEAP INCNS-219.AWSDNS-27.COMWhoisGuard, Inc.
23tier_3play.google.com4MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
24tier_3us.redirectbuzz.club4Gandi SASns-2.awsdns-00.comPPCBUZZ
25tier_3b.jubilantdstreet.xyz3Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
26tier_3click.luckhours.com2NAMECHEAP INCDAN.NS.CLOUDFLARE.COMWhoisGuard, Inc.
27tier_3ad.monetizer.co2NAMECHEAP INCdns2.registrar-servers.comWhoisGuard, Inc.
28tier_3minecraft.net2TUCOWS, INC.NS-1395.AWSDNS-46.ORGContact Privacy Inc. Customer 0120735043
29tier_3overstock.com1MarkMonitor, Inc.DNS1.P01.NSONE.NETOverstock.com, Inc - TMA606142
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_128nannan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nannan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_120nannan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_119nannan
4185.107.56.59AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_14nannan
537.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
6185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
763.143.32.94DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1394-32-143-63.static.reverse.lstn.netnan
8185.107.56.60AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
1034.207.32.33Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_280ec2-34-207-32-33.compute-1.amazonaws.comnan
115.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_266nannan
12173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22618.65.c0ad.ip4.static.sl-reverse.comnan
13209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_211nannan
1494.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_210static.231.186.130.94.clients.your-server.denan
15172.64.140.31San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_28nanTrue
16184.154.10.252ChicagoIllinoisAS32475 SingleHop LLC60666United Statestier_32server04.com-2.mobinan
17144.76.1.130NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.130.1.76.144.clients.your-server.denan
18104.27.161.180San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_26nanTrue
19213.227.134.196The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_25nannan
20104.27.187.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_338nanTrue
21172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_329nanTrue
22104.27.186.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_313nanTrue
23195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_38static.254.92.201.195.clients.your-server.denan
24184.154.10.252ChicagoIllinoisAS32475 SingleHop LLC60666United Statestier_32server04.com-2.mobinan
25104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
26108.163.203.125ChicagoIllinoisAS32475 SingleHop LLC60666United Statestier_32server04.com-2.mobinan
27213.32.106.139RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_32ip139.ip-213-32-106.eunan
2823.200.3.80EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_32a23-200-3-80.deploy.static.akamaitechnologies.comnan
29213.32.106.160RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_31ip160.ip-213-32-106.eunan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website