Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
017918889235592021-02-0464.32.8.68Safari
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
1tier_1blessedit.com1SNAPNAMES 29, LLCNS1.DNSNUTS.COMNone
2tier_1das-telefon.de1NoneNoneNone
3tier_1albasocial.net1Fushi Tarazu, LLCNS1.DNSNUTS.COMNone
4tier_1brickerenterprise.com1NamePal.com #8011, LLCNS1.DNSNUTS.COMNone
5tier_1codeyouneed.com1Deep Sea Domains LLCNS1.DNSNUTS.COMNone
6tier_1coin-inflate.com1Domainhawks.net LLCNS1.DNSNUTS.COMNone
7tier_1civgames.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMNone
8tier_1dakmm.com1Private Domains, LLCNS1.DNSNUTS.COMNone
9tier_1cloudfilezz.com1Lionshare Domains, LLCNS1.DNSNUTS.COMNone
10tier_2track.vcdc.com66Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2bradamante-per.com44Amazon Registrar, Inc.NS-1026.AWSDNS-00.ORGWhois Privacy Service
12tier_2apinew.fpvideoplayer.com44NoneNoneNone
13tier_2r65g7vxgee.execute-api.us-east-1.amazonaws.com44MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
14tier_2r65g7vxgee.execute-api.us-east-1.amazonaws.com_LOOP_144NoneNoneNone
15tier_2alfik-fik.com41Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
16tier_2vpnostracking.com35NAMECHEAP INCANNA.NS.CLOUDFLARE.COMWhoisGuard, Inc.
17tier_2f2ns9trk.com35Google LLCNS-CLOUD-E1.GOOGLEDOMAINS.COMContact Privacy Inc. Customer 1248213701
18tier_2thedeinc.com35GoDaddy.com, LLCNS-1071.AWSDNS-05.ORGNone
19tier_2tkqlhce.com35MarkMonitor, Inc.ASIA9.AKAM.NETConversant, Inc.
20tier_3mcafee.com35CSC CORPORATE DOMAINS, INC.A1-44.AKAM.NETMcAfee LLC
21tier_3jmpbmltwisyjfjtsskvlbilysyiajs.s3.amazonaws.com15MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
22tier_3scpscyuimqyqjqevzpnlnqxqpdwrhd.s3.amazonaws.com13NoneNoneNone
23tier_3jsstcnjkvkieloobmcezrhxvptshbz.s3.amazonaws.com10NoneNoneNone
24tier_3operatenewest-theuberfile.best8NoneNoneNone
25tier_3qtzussvpewcmljsmzhwquhlmtsgvpm.s3.amazonaws.com3MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
26tier_3suxntaphugmlurqnqtihitsymjfbbs.s3.amazonaws.com3NoneNoneNone
27tier_3irl.com2GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
28tier_3upalways.thebettercleanplayer.info2NoneNoneNone
29tier_3squirt.org2NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_120nan
164.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
264.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
3185.107.56.57nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_113nan
4185.107.56.59nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_112nan
564.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_112nan
6185.107.56.58nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_18nan
7185.107.56.60nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_18nan
8159.127.43.26nanSouthboroughMassachusettsAS25751 Conversant, Inc.01772United Statestier_2105nan
9100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_288nan
10167.233.8.197static.197.8.233.167.clients.your-server.deNürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_266nan
1154.84.27.165ec2-54-84-27-165.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23452United Statestier_247nan
1234.200.146.95ec2-34-200-146-95.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23452United Statestier_238nan
1345.77.230.20045.77.230.200.vultr.comLondonEnglandAS20473 Choopa, LLCEC1AUnited Kingdomtier_235nan
1435.190.17.222222.17.190.35.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_235True
15209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_220nan
1646.137.70.201ec2-46-137-70-201.eu-west-1.compute.amazonaws.comDublinLeinsterAS16509 Amazon.com, Inc.D02Irelandtier_212nan
1754.194.14.156ec2-54-194-14-156.eu-west-1.compute.amazonaws.comDublinLeinsterAS16509 Amazon.com, Inc.D02Irelandtier_212nan
18184.85.29.23a184-85-29-23.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_335nan
1935.173.166.197ec2-35-173-166-197.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23452United Statestier_310nan
2054.162.183.76ec2-54-162-183-76.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23452United Statestier_37nan
2152.217.14.124s3-1-w.amazonaws.comVirginia BeachVirginiaAS16509 Amazon.com, Inc.23452United Statestier_32nan
22158.106.84.60www.squirtgame.comTorontoOntarioAS23498 COGECODATAM5NCanadatier_32nan
2352.216.144.11s3-1-w.amazonaws.comVirginia BeachVirginiaAS16509 Amazon.com, Inc.23452United Statestier_32nan
2454.39.130.163ns568503.ip-54-39-130.netMontréalQuebecAS16276 OVH SASH3ACanadatier_32nan
2552.216.28.124s3-1-w.amazonaws.comVirginia BeachVirginiaAS16509 Amazon.com, Inc.23452United Statestier_32nan
2652.217.80.140s3-1-w.amazonaws.comVirginia BeachVirginiaAS16509 Amazon.com, Inc.23452United Statestier_32nan
2752.217.70.68s3-1-w.amazonaws.comVirginia BeachVirginiaAS16509 Amazon.com, Inc.23452United Statestier_32nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website