Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0266271956002020-11-1364.32.8.70Android
tierdomaincountregistrarname_serversorg
0tier_1acg92.com1Allworldnames.com LLCNS1.DNSNUTS.COMNone
1tier_1mypirateproxy.com1Chipshot Domains LLCNS1.DNSNUTS.COMThe Management Group II
2tier_1almontijacademy.com1NETWORK SOLUTIONS, LLC.NS1.DNSNUTS.COMNone
3tier_1armanikids.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 750472
4tier_1countryfederalcreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 809504
5tier_1epcocreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 840951
6tier_1certificatezet.com1Domain Lifestyle, LLCNS1.DNSNUTS.COMNone
7tier_1destacadashot.com1Streamline Domains, LLCNS1.DNSNUTS.COMNone
8tier_1eatmorecrust.com1EastEnd Domains LLCNS1.DNSNUTS.COMThe Management Group II
9tier_1conceptsrepositorygift.com1NamePal.com #8010 Inc.NS1.DNSNUTS.COMNone
10tier_3unledgedunoperating.club78NoneNoneNone
11tier_3kbb.com26CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
12tier_3track.vcdc.com14Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_3win4.trustedpush.com10NoneNoneNone
14tier_3buyerperpendicularmorality.com7ENOM, INC.NS1.CLOUD-DNS-TECH.COMREDACTED FOR PRIVACY
15tier_3win3.trustedpush.com5NoneNoneNone
16tier_3stat1.info4GoDaddy.com, LLCNS15.DOMAINCONTROL.COMbingal media
17tier_3trustedpush.com3NoneNoneNone
18tier_3win1.trustedpush.com3NoneNoneNone
19tier_3win5.trustedpush.com3NoneNoneNone
20tier_2dprtb.com81GoDaddy.com, LLCNS1.DNSIMPLE.COMDomains By Proxy, LLC
21tier_2track.tasty-natural-lifestyles.com78NAMECHEAP INCDAN.NS.CLOUDFLARE.COMWhoisGuard, Inc.
22tier_2track.vcdc.com77Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_2usa.alexa-cam.com56Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
24tier_2usd.alexa-cam.com55Amazon Registrar, Inc.NS-1493.AWSDNS-58.ORGWhois Privacy Service
25tier_2ad.doubleclick.net27MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
26tier_2atnpx.com26GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
27tier_2get.popplunder.com25NoneNoneNone
28tier_2trustedpush.com22NoneNoneNone
29tier_2win1.trustedpush.com19NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_142nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_140nan
2207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_139nan
3207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_132nan
4185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
564.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_14customer.sharktech.net
637.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nan
764.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_13customer.sharktech.net
864.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
9185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
1045.32.198.135DallasTexasAS20473 Choopa, LLC75270United Statestier_37845.32.198.135.vultr.com
1123.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_326a23-44-217-143.deploy.static.akamaitechnologies.com
12138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_313proxy.traffic.club
13100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.net
1413.224.211.119PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_224server-13-224-211-119.phl50.r.cloudfront.net
15192.243.59.12WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_35nan
1613.224.211.59PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_34server-13-224-211-59.phl50.r.cloudfront.net
17132.148.19.88MesaArizonaAS26496 GoDaddy.com, LLC85214United Statestier_34ip-132-148-19-88.ip.secureserver.net
1895.168.170.165The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_239nan
1913.224.211.117PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_33server-13-224-211-117.phl50.r.cloudfront.net
20209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_282nan
2134.199.107.160Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_278ec2-34-199-107-160.compute-1.amazonaws.com
2252.205.210.89Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_270ec2-52-205-210-89.compute-1.amazonaws.com
2354.225.132.253Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_269ec2-54-225-132-253.compute-1.amazonaws.com
2495.168.170.165The HagueSouth HollandAS60781 LeaseWeb Netherlands B.V.2513Netherlandstier_239nan
2594.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_227static.237.185.130.94.clients.your-server.de
2634.199.180.187Virginia BeachVirginiaAS14618 Amazon.com, Inc.23450United Statestier_225ec2-34-199-180-187.compute-1.amazonaws.com
2713.224.211.119PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_224server-13-224-211-119.phl50.r.cloudfront.net
2894.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_223static.231.186.130.94.clients.your-server.de
29172.217.12.198CliftonNew JerseyAS15169 Google LLC07015United Statestier_219lga25s63-in-f6.1e100.net

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website