Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0212213648002020-12-3164.32.8.70Chrome
tierdomaincountregistrarname_serversorg
0tier_1techiewheels.com1Line Drive Domains, LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1mp3trackz.com1NamePal.com #8010 Inc.NS1.DNSNUTS.COMThe Management Group II
2tier_1whitepinsplus.com1NotSoFamousNames.com LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1officegeteasygroup.net1Catch Deleting Names LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1dk6.net1Domain Locale, LLCNS1.DNSNUTS.COMNone
5tier_1forexbaron.net1Top Level Domains LLCNS1.DNSNUTS.COMThe Management Group II
6tier_1kahimyang.info1Allearthdomains.com LLCNS1.DNSNUTS.COM['The Management Group II', 'Statutory Masking Enabled']
7tier_1colrut.com1eNom459, IncorporatedNS1.DNSNUTS.COMThe Management Group II
8tier_11004mama.com1eNom407, IncorporatedNS1.DNSNUTS.COMThe Management Group II
9tier_1codecramp.com1Traffic Names, IncorporatedNS1.DNSNUTS.COMNone
10tier_2dprtb.com51GoDaddy.com, LLCNS1.DNSIMPLE.COMBidtellect, Inc
11tier_21496.wcitianka.com37GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com34ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2track.vcdc.com34Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
14tier_2alfik-fik.com30Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
15tier_2api.searchlinker.com26GoDaddy.com, LLCNS-1158.AWSDNS-16.ORGDomains By Proxy, LLC
16tier_2bestresults.xyz25NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
17tier_2searchitdown.com25GoDaddy.com, LLCDNS1.P09.NSONE.NETClientConnect LTD
18tier_2bradamante-per.com22Amazon Registrar, Inc.NS-1026.AWSDNS-00.ORGWhois Privacy Service
19tier_2click.expmediadirect.com19NAMECHEAP INCNS1.LINODE.COMWhoisGuard, Inc.
20tier_3bing.com25MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
21tier_3flashpvideo.com22NAMECHEAP INCNS-1045.AWSDNS-02.ORGWhoisGuard, Inc.
22tier_3fortunerain.info15GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
23tier_3us.tideri.com13united domains AGNS.UDAG.DENone
24tier_3track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
25tier_3us.sercanto.com7OVH, SASDNS20.OVH.NETWickedin s.r.l.
26tier_3americanlisted.com3ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
27tier_3squirt.org2NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
28tier_3turbo-pdf.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMWhoisGuard, Inc.
29tier_3apexfocusgroup.com2NAMECHEAP INCCARL.NS.CLOUDFLARE.COMRedacted for Privacy Purposes
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nannan
1207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nannan
263.143.32.86DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_11086-32-143-63.static.reverse.lstn.netnan
363.143.32.93DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1893-32-143-63.static.reverse.lstn.netnan
463.143.32.87DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1887-32-143-63.static.reverse.lstn.netnan
5185.107.56.58AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_18nannan
663.143.32.89DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1889-32-143-63.static.reverse.lstn.netnan
7207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nannan
863.143.32.85DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1785-32-143-63.static.reverse.lstn.netnan
963.143.32.88DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1688-32-143-63.static.reverse.lstn.netnan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_258nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_237nannan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_234240.61.209.35.bc.googleusercontent.comnan
1334.202.98.117Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_230ec2-34-202-98-117.compute-1.amazonaws.comnan
1434.226.113.11Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_222ec2-34-226-113-11.compute-1.amazonaws.comnan
15198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_219nannan
1618.213.221.179Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_215ec2-18-213-221-179.compute-1.amazonaws.comnan
1794.130.185.237NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_213static.237.185.130.94.clients.your-server.denan
183.213.168.177Virginia BeachVirginiaAS14618 Amazon.com, Inc.23464United Statestier_211ec2-3-213-168-177.compute-1.amazonaws.comnan
1935.190.64.22Kansas CityMissouriAS15169 Google LLC64121United Statestier_21122.64.190.35.bc.googleusercontent.comTrue
20204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_324a-0001.a-msedge.netTrue
2135.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_313123.171.246.35.bc.googleusercontent.comnan
22195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_311static.254.92.201.195.clients.your-server.denan
23172.67.185.52San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310nanTrue
2413.226.38.42NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_39server-13-226-38-42.ewr53.r.cloudfront.netnan
2534.90.160.43GroningenGroningenAS15169 Google LLC9711Netherlandstier_3743.160.90.34.bc.googleusercontent.comnan
2613.226.38.82NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-13-226-38-82.ewr53.r.cloudfront.netnan
27104.31.94.162San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
2813.226.38.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-226-38-35.ewr53.r.cloudfront.netnan
2913.226.38.122NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-226-38-122.ewr53.r.cloudfront.netnan

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website