Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0116116314002020-09-2064.32.8.69Iphone
tierdomaincountregistrarname_serversorg
0tier_1gifanimasyon.com1Dropcatch Auction LLCNS1.DNSNUTS.COMNone
1tier_1ddtpulse.com1Gozerdomains.com LLCNS1.DNSNUTS.COMNone
2tier_1mltaqa.net1Names On The Drop LLCNS1.DNSNUTS.COMNone
3tier_1simsterest.com1Domainsoftheday.net LLCNS1.DNSNUTS.COMNone
4tier_1thebachelorsmill.com1SNAPNAMES 98, LLCNS1.DNSNUTS.COMNone
5tier_1movienthusiast.com1Traffic Names, LLCNS1.DNSNUTS.COMNone
6tier_1alchemicalpsychology.com1SNAPNAMES 13, LLCNS1.DNSNUTS.COMNone
7tier_1dashitz.com1Name Nelly, LLCNS1.DNSNUTS.COMNone
8tier_1eco-poules.com1Domain Name Root LLCNS1.DNSNUTS.COMNone
9tier_1codecramp.com1Traffic Names, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect.com21NoneNoneNone
11tier_2r.ealeo.com16DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
12tier_2rd.bizrate.com15MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
13tier_2c.clickprotects.com12GoDaddy.com, LLCNS63.DOMAINCONTROL.COMDomains By Proxy, LLC
14tier_211165151.addotnet.com12GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
15tier_2peachtrackerus.com12NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
16tier_2search.eproute.info12GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2usd.llyr-iap.com10Amazon Registrar, Inc.NS-106.AWSDNS-13.COMWhois Privacy Service
18tier_2myfirsttab.com10GoDaddy.com, LLCNS1.LINODE.COMDomains By Proxy, LLC
19tier_2trackyourmpg.com8UNIREGISTRAR CORPHUGH.NS.CLOUDFLARE.COMNone
20tier_3allbestsecureus.com12NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
21tier_3samsclub.com10CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
22tier_3everydayconsumers.com10GoDaddy.com, LLCJANET.NS.CLOUDFLARE.COMDomains By Proxy, LLC
23tier_3gladmpath.xyz8Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
24tier_3music.apple.com7CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
25tier_3wayfair.com4MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
26tier_3apple.news3NoneNoneNone
27tier_3irl.com3GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
28tier_3volvocars.com2CSC CORPORATE DOMAINS, INC.UDNS1.CSCDNS.NETVolvoCarCorporation
29tier_3modcloth.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMModCloth Inc
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_121nan
1207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_113nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
3207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
482.192.82.227SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_12nan
564.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
646.166.182.115AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
746.166.182.113AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
864.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
964.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_221nan
11209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_216nan
1266.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_21666-165-243-151.static.hvvc.us
13192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_216rd.bizrate.com
14209.132.243.70MaitlandFloridaAS7296 Alchemy Communications, Inc.32751United Statestier_214nan
1554.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_312ns568503.ip-54-39-130.net
1654.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23457United Statestier_210ec2-54-225-132-253.compute-1.amazonaws.com
17172.104.144.44Frankfurt am MainHesseAS63949 Linode, LLC60311Germanytier_210li1660-44.members.linode.com
18184.85.6.44Atlantic CityNew JerseyAS16625 Akamai Technologies, Inc.08404United Statestier_27a184-85-6-44.deploy.static.akamaitechnologies.com
1923.43.252.68NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_27a23-43-252-68.deploy.static.akamaitechnologies.com
2054.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_312ns568503.ip-54-39-130.net
21100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_310pool-100-37-135-2.nycmny.fios.verizon.net
22184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_310a184-87-74-45.deploy.static.akamaitechnologies.com
23104.18.81.149Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_37nan
24104.24.119.18Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_35nan
25104.24.118.18Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_34nan
2623.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_34a23-39-32-237.deploy.static.akamaitechnologies.com
27184.87.71.70NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a184-87-71-70.deploy.static.akamaitechnologies.com
28151.101.2.49Cape TownWestern CapeAS54113 Fastly7945South Africatier_31nan
29104.78.191.236NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a104-78-191-236.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website