Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
04845800102021-04-15103.224.182.207Chrome
tierdomaincountregistrarname_serversorg
0tier_1liberdadenews.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
1tier_1123gmail.com1TLD Registrar Solutions Ltd.NS1.ABOVE.COMWhois Privacy Corp.
2tier_1azboxworld.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
3tier_1fashionmazia.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
4tier_1cabins-r-us.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
5tier_1ilikefurniture.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
6tier_1kuma-anime.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
7tier_1asiantrannyporn.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
8tier_1aprendeidiomas.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
9tier_1filmesonlineturbo.net1GoDaddy.com, LLCNS1.ABOVE.COMNone
10tier_20redirb.com10ABOVE.COM PTY LTD.NS1.ABOVE.COMNone
11tier_2americanlisted.com5ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_21496.rawlexi.com4GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
13tier_2r.lnk8j7.com31&1 IONOS SENS-1314.AWSDNS-36.ORG1&1 Internet Limited
14tier_2kamala-cha.com3Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
15tier_2c.adclickthru.net2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
16tier_211164440.searchiqnet.com2GoDaddy.com, LLCNS57.DOMAINCONTROL.COMNone
17tier_2forwrdnow.com2NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
18tier_27lyonline.com2NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
19tier_2givemethislink.com2NAMECHEAP INCBETTY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
20tier_2click.appcast.io2101Domain GRS LtdNS-85.AWSDNS-10.COMNone
21tier_2ww38.123gmail.com1TLD Registrar Solutions Ltd.NS1.ABOVE.COMWhois Privacy Corp.
22tier_2katie.v4.omgtnc.com1PSI-USA, Inc. dba Domain RobotNS-1133.AWSDNS-13.ORGNone
23tier_2ww16.cabins-r-us.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
24tier_2xml.sedodna.com1PSI-USA, Inc. dba Domain RobotNS-1222.AWSDNS-24.ORGNone
25tier_2api.quotes.com1Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
26tier_2btpnav.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
27tier_2ww25.ilikefurniture.com1GoDaddy.com, LLCNS1.ABOVE.COMNone
28tier_2query.pureleads.com1New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
29tier_2queryclick.pureleads.com1New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
30tier_3us.tideri.com3united domains AGNS.UDAG.DENone
31tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
32tier_3get.browsesafelyapp.com2NAMECHEAP INCJACK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
33tier_3careerbliss.com2GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
34tier_3iyfnzgb.com1PDR Ltd. d/b/a PublicDomainRegistry.comNS1.NSRESOLUTION.COMPrivacy Protect, LLC (PrivacyProtect.org)
35tier_3joinsmarty.com1GoDaddy Online Services Cayman Islands LTDDOM.NS.CLOUDFLARE.COMNone
36tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
37tier_3stripchat.com1NAMECHEAP INCAMY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
38tier_3volvocars.com1CSC CORPORATE DOMAINS, INC.UDNS1.CSCDNS.NETVolvoCarCorporation
iphostnamecityregionorgpostalcountry_nametiercountanycast
0103.224.182.207lb-182-207.above.comLos AngelesCaliforniaAS133618 Trellian Pty. Limited90009United Statestier_114nan
1103.224.212.247lb-212-247.above.comLos AngelesCaliforniaAS133618 Trellian Pty. Limited90009United Statestier_210nan
235.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
3209.132.243.15nanLos AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_25nan
4198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_24nan
554.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23nan
6108.168.193.184b8.c1.a86c.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22nan
723.82.9.96nanWashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_22nan
83.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22nan
9143.204.148.57server-143-204-148-57.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_21nan
10185.53.179.28nanMunichBavariaAS61969 Team Internet AG80331Germanytier_21nan
113.220.46.255ec2-3-220-46-255.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21nan
1291.195.240.136nanFrankfurt am MainHesseAS47846 SEDO GmbH60311Germanytier_21nan
13173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_21nan
145.79.68.236nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_21nan
15209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_21nan
16199.59.242.153nanNew York CityNew YorkAS395082 Bodis, LLC10004United Statestier_21nan
1754.200.29.98ec2-54-200-29-98.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_21nan
1854.69.72.6ec2-54-69-72-6.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_21nan
1967.199.248.12cname.bitly.comNew York CityNew YorkAS396982 Google LLC10010United Statestier_21True
20104.21.84.19nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_21True
2135.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_33nan
2235.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
23207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_32nan
24208.91.196.46nanDallasTexasAS40034 Confluence Networks Inc75270United Statestier_31nan
25104.26.13.42nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
2613.33.83.196server-13-33-83-196.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
27104.21.64.17nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
28104.19.182.41nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
29184.87.49.246a184-87-49-246.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31nan
30172.67.174.28nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website