Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01541575540352021-03-0664.32.8.70Android
tierdomaincountregistrarname_serversorg
0tier_1dakmm.com1Private Domains, IncorporatedNS1.DNSNUTS.COMNone
1tier_1aayaamlabs.com1enom666, Inc.NS1.DNSNUTS.COMNone
2tier_1deresute-japan.com1eNom423, IncorporatedNS1.DNSNUTS.COMThe Management Group II
3tier_1deskbg.com1SNAPNAMES 32, LLCNS1.DNSNUTS.COMNone
4tier_1faidishare.com1SQUIDSAILERDOMAINS.COM, LLCNS1.DNSNUTS.COMNone
5tier_1dailymastro.com1Veritas Domains, LLCNS1.DNSNUTS.COMNone
6tier_1bluebonnetfederalcreditunion.com1Sea Wasp, LLCNS1.DNSNUTS.COMSavvy Investments, LLC Privacy ID# 772559
7tier_1dns100.tv1Domain Stopover LLCNS1.DNSNUTS.COMNone
8tier_1future-techtrends.com1Namesaplenty LLCNS1.DNSNUTS.COMNone
9tier_1b-rq.com1Swordfish Domains LLCNS1.DNSNUTS.COMNone
10tier_2alfik-fik.com97Amazon Registrar, Inc.NS-1264.AWSDNS-30.ORGWhois Privacy Service
11tier_2track.vcdc.com71Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2atnpx.com59GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
13tier_2dprtb.com221API GmbHNS1.DNSIMPLE.COMREDACTED FOR PRIVACY
14tier_262252.click.validclick.net13Safenames LtdNS1.FULLMAILBOX.COMNone
15tier_2blog.sfgate.com13CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
16tier_2ad.doubleclick.net12MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
17tier_262826.click.validclick.net8Safenames LtdNS1.FULLMAILBOX.COMNone
18tier_2media-px.com7GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
19tier_2trackyourmpg.com5GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
20tier_3kbb.com45CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
21tier_3robogarden.io18GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
22tier_3storystudio.sfgate.com16CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
23tier_3preview.houstonchronicle.com8CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
24tier_3happymakesite.xyz5Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
25tier_3socalhondadealers.com3DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
26tier_3reebok.com1CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
27tier_3squirt.org1NAMECHEAP INCNS5.DNSMADEEASY.COMWhoisGuard, Inc.
28tier_3callplumberservice.com1NoneNoneNone
29tier_3win2.trustedpush.com1NAMECHEAP INCNS-1142.AWSDNS-14.ORGWhoisGuard, Inc.
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_118nan
164.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
264.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
364.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_115nan
4185.107.56.58nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_111nan
5185.107.56.60nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_111nan
6185.107.56.57nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_111nan
7185.107.56.59nanAmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_15nan
8167.233.8.197static.197.8.233.167.clients.your-server.deNürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_271nan
934.200.146.95ec2-34-200-146-95.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23458United Statestier_251nan
1054.84.27.165ec2-54-84-27-165.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23458United Statestier_247nan
11104.26.11.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_226True
12209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_225nan
13204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_224nan
14172.67.74.77nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_222True
15151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_36True
16104.26.10.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_211True
17142.250.64.70lga34s30-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_26nan
1823.44.217.143a23-44-217-143.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_342nan
1998.129.228.57nanDallasTexasAS33070 Rackspace Hosting75270United Statestier_316nan
20104.21.80.8nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310True
21172.67.172.143nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_38True
22151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_36True
23104.18.80.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35True
2423.36.197.209a23-36-197-209.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_33nan
2535.174.35.73ec2-35-174-35-73.compute-1.amazonaws.comVirginia BeachVirginiaAS14618 Amazon.com, Inc.23458United Statestier_32nan
26100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32nan
27151.101.64.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_32True

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website