Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
08688233002020-10-0764.32.8.69Iphone
tierdomaincountregistrarname_serversorg
0tier_1blessedit.com1SNAPNAMES 29, LLCNS1.DNSNUTS.COMNone
1tier_1thebachelorsmill.com1SNAPNAMES 98, LLCNS1.DNSNUTS.COMNone
2tier_1versaillestovictoria.com1! #1 Host Germany, LLCNS1.DNSNUTS.COMNone
3tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
4tier_1subfeed.net1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
5tier_1smileydressup.com1DropFall.com, LLCNS1.DNSNUTS.COMNone
6tier_1allmilitaryweapons.com1SNAPNAMES 2, LLCNS1.DNSNUTS.COMNone
7tier_1wtug.net1Nerd Names, LLCNS1.DNSNUTS.COMNone
8tier_1night-support24.com1SNAPNAMES 35, LLCNS1.DNSNUTS.COMNone
9tier_1suki48th.com1SNAPNAMES 21, LLCNS1.DNSNUTS.COMNone
10tier_2btpnative.com16GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
11tier_2infopicked.com16NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
12tier_2p274639.infopicked.com15NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
13tier_2click.expmediadirect.com15NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
14tier_2go.trackinz.com14NoneNoneNone
15tier_2rd.bizrate.com11MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
16tier_2r.ealeo.com10DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
17tier_2rockymountaintrack.com10Registrar of domain names REG.RU LLCNS1.REG.RUPrivate Person
18tier_2rd.connexity.net9MarkMonitor, Inc.NS-1190.AWSDNS-20.ORGConnexity, Inc.
19tier_2changeslots.com4Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
20tier_3clickitover.com14NoneNoneNone
21tier_3vpnhub.com10Eurodns S.A.DNS1.P03.NSONE.NETWhois Privacy (enumDNS dba)
22tier_3wayfair.com7MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
23tier_3theconnectvpn.com4DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
24tier_3topdefence-formob.com2NoneNoneNone
25tier_3allbestsecureus.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
26tier_3samsclub.com1CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
27tier_3samsclub.com_LOOP_11NoneNoneNone
28tier_3frontgate.com1Network Solutions, LLCNS1.HSN.NETNone
29tier_3r.ealeo.com1DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_112nan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_111nan
2207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_19nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_17nan
437.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
546.166.182.110AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
746.166.182.109AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_11nan
864.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
937.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_11nan
10173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_23318.65.c0ad.ip4.static.sl-reverse.com
11209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_218nan
1234.226.252.28Virginia BeachVirginiaAS14618 Amazon.com, Inc.23471United Statestier_218ec2-34-226-252-28.compute-1.amazonaws.com
13198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_215nan
14192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_212rd.bizrate.com
1566.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_21066-165-243-151.static.hvvc.us
16167.114.103.223TorontoOntarioAS16276 OVH SASM5NCanadatier_210ns511363.ip-167-114-103.net
17192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_29rd.connexity.net
18100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.net
19173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_22nan
20157.245.227.32Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_314nan
2166.254.114.123Los AngelesCaliforniaAS29789 Reflected Networks, Inc.90009United Statestier_310reflectededge.reflected.net
2223.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_37a23-39-32-237.deploy.static.akamaitechnologies.com
23104.27.186.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_32nan
2464.225.2.103CliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_32nan
2554.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_32ns568503.ip-54-39-130.net
26184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-74-45.deploy.static.akamaitechnologies.com
27104.27.187.165Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_31nan
28100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.net
29184.87.71.113NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-71-113.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website