Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0223218548002020-09-1864.32.8.70Iphone
tierdomaincountregistrarname_serversorg
0tier_1diosestavivo.com1Lakeodomains.com LLCNS1.DNSNUTS.COMNone
1tier_1bracecodesdevelopment.com1DuckBilledDomains.com LLCNS1.DNSNUTS.COMNone
2tier_19novels.net1! #1 Host Japan, Inc.NS1.DNSNUTS.COMThe Management Group II
3tier_1danoocafe.com1OregonEU.com LLCNS1.DNSNUTS.COMNone
4tier_1omgmanga.com1GreenZoneDomains Inc.NS1.DNSNUTS.COMThe Management Group II
5tier_1accastiboat.com1Domainplace LLCNS1.DNSNUTS.COMThe Management Group II
6tier_1promo-creative.com1Domain Original, LLCNS1.DNSNUTS.COMNone
7tier_1movienthusiast.com1Traffic Names, IncorporatedNS1.DNSNUTS.COMNone
8tier_1easternfinancialfederalcreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 833655
9tier_1camballs.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 784111
10tier_2click.expmediadirect.com51NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
11tier_2r.ealeo.com38DYNADOT LLCNS-1186.AWSDNS-20.ORGNone
12tier_2rd.bizrate.com37MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
13tier_2search.eproute.info31GoDaddy.com, LLCNS22.DOMAINCONTROL.COMDomains By Proxy, LLC
14tier_2peachtrackerus.com22NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
15tier_2myfirsttab.com21GoDaddy.com, LLCNS1.LINODE.COMDomains By Proxy, LLC
16tier_2link.sylikes.com16MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
17tier_2usd.llyr-iap.com8Amazon Registrar, Inc.NS-106.AWSDNS-13.COMWhois Privacy Service
18tier_2dprtb.com5GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
19tier_2ww2.siteplug.com4DOMAINPEOPLE, INC.NS-1263.AWSDNS-29.ORGREDACTED FOR PRIVACY
20tier_3everydayconsumers.com26GoDaddy.com, LLCJANET.NS.CLOUDFLARE.COMDomains By Proxy, LLC
21tier_3allbestsecureus.com22NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
22tier_3samsclub.com13CSC CORPORATE DOMAINS, INC.ASIA1.AKAM.NETNot Disclosed
23tier_3wayfair.com9MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
24tier_3dprtb.com7GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
25tier_3irl.com6GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
26tier_3searchfrequently.com5GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
27tier_3gua20.proasdf.com3GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
28tier_3gladmpath.xyz2Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
29tier_3thredup.com1GoDaddy.com, LLCMATT.NS.CLOUDFLARE.COMThredUp Inc.
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_136nan
1207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_127nan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_124nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_118nan
464.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.net
537.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
664.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
764.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_12customer.sharktech.net
837.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
946.166.182.112AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_12nan
10192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_253rd.bizrate.com
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_251nan
1266.165.243.151TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_23966-165-243-151.static.hvvc.us
1354.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_322ns568503.ip-54-39-130.net
14172.104.144.44Frankfurt am MainHesseAS63949 Linode, LLC60311Germanytier_221li1660-44.members.linode.com
1534.223.115.56PortlandOregonAS16509 Amazon.com, Inc.97269United Statestier_216ec2-34-223-115-56.us-west-2.compute.amazonaws.com
1634.223.196.33PortlandOregonAS16509 Amazon.com, Inc.97269United Statestier_215ec2-34-223-196-33.us-west-2.compute.amazonaws.com
1791.195.240.136KölnNorth Rhine-WestphaliaAS47846 SEDO GmbH50670Germanytier_29nan
1852.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23457United Statestier_27ec2-52-205-210-89.compute-1.amazonaws.com
19209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_39nan
2054.39.130.163LangfordBritish ColumbiaAS16276 OVH SASV9BCanadatier_322ns568503.ip-54-39-130.net
21172.67.219.253New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_317nan
22184.87.74.45NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_313a184-87-74-45.deploy.static.akamaitechnologies.com
23209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_39nan
2423.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_39a23-39-32-237.deploy.static.akamaitechnologies.com
25104.24.119.18Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_36nan
26104.24.118.18Atlantic CityNew JerseyAS13335 Cloudflare, Inc.08404United Statestier_33nan
27162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_33nan
28100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
29172.67.138.156New York CityNew YorkAS13335 Cloudflare, Inc.10004United Statestier_33nan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website