Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0198209594002020-12-0664.32.8.70Iphone
tierdomaincountregistrarname_serversorg
0tier_1trethovn.net1Domainstreetdirect.com LLCNS1.DNSNUTS.COMNone
1tier_1playrusthq.com1Bounce Pass Domains LLCNS1.DNSNUTS.COMNone
2tier_1mp3trackz.com1NamePal.com #8010, LLCNS1.DNSNUTS.COMNone
3tier_1tinrao24h.net1Domain Esta Aqui, LLCNS1.DNSNUTS.COMNone
4tier_1switech-hk.net1NamePal.com #8014, LLCNS1.DNSNUTS.COMNone
5tier_1smutfix.com1Lucky Elephant Domains, LLCNS1.DNSNUTS.COMNone
6tier_1trfrm.net1Goldmine Domains LLCNS1.DNSNUTS.COMNone
7tier_1clipxplore.com1SouthNames, LLCNS1.DNSNUTS.COMNone
8tier_1worldwidedvdforums.com1Line Drive Domains, LLCNS1.DNSNUTS.COMNone
9tier_1lordntaylor.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 937761
10tier_2changeslots.com90Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
11tier_2api.quotes.com74Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
12tier_2euphe-gun.com23Amazon Registrar, Inc.NS-1325.AWSDNS-37.ORGWhois Privacy Service
13tier_2infopicked.com19NoneNoneNone
14tier_2track.vcdc.com19Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
15tier_2btpnative.com8GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
16tier_2p274639.infopicked.com7NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
17tier_2p54677.infopicked.com7NAMECHEAP INCNS0.DNSMADEEASY.COMWhoisGuard, Inc.
18tier_2rd.bizrate.com7MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
19tier_2rd.connexity.net7NoneNoneNone
20tier_3theconnectvpn.com90DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
21tier_3track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
22tier_3kbb.com5CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
23tier_3blog.sfgate.com5CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
24tier_3enjoyance.com4NAMECHEAP INCNS-1527.AWSDNS-62.ORGWhoisGuard, Inc.
25tier_3music.apple.com2CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
26tier_3bestappland.me2NAMECHEAP INCNoneNone
27tier_3volvocars.com2CSC CORPORATE DOMAINS, INC.UDNS1.CSCDNS.NETVolvoCarCorporation
28tier_3apple.com2CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
29tier_3overstock.com1MarkMonitor, Inc.DNS1.P01.NSONE.NETOverstock.com, Inc - TMA606142
ipcityregionorgpostalcountry_nametiercounthostname
0207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_135nan
1207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_129nan
2207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_128nan
3207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_122nan
464.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_14customer.sharktech.net
5185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
6185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nan
7185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_11nan
864.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
964.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_11customer.sharktech.net
1034.207.32.33Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_290ec2-34-207-32-33.compute-1.amazonaws.com
115.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_274nan
12173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_24118.65.c0ad.ip4.static.sl-reverse.com
13209.132.243.15Grand RapidsMichiganAS7296 Alchemy Communications, Inc.49502United Statestier_219nan
14209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_29nan
1534.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_28ec2-34-202-98-117.compute-1.amazonaws.com
16192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_28rd.bizrate.com
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.237.185.130.94.clients.your-server.de
1894.130.186.231NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27static.231.186.130.94.clients.your-server.de
19192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_27rd.connexity.net
20172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_346nan
21104.27.187.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_323nan
22104.27.186.165San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_321nan
23138.201.252.161GeldernNorth Rhine-WestphaliaAS24940 Hetzner Online GmbH47608Germanytier_35proxy.traffic.club
2423.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a23-44-217-143.deploy.static.akamaitechnologies.com
25151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_35nan
26138.68.8.221Santa ClaraCaliforniaAS14061 DigitalOcean, LLC95051United Statestier_34nan
27100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.net
28142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
29184.87.71.70NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a184-87-71-70.deploy.static.akamaitechnologies.com

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website