Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
026427712750112021-04-09185.107.56.199Android
tierdomaincountregistrarname_serversorg
0tier_1karsiyakadenizsurucukursu.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1yongkangstreet.org1Biglizarddomains.com LLCNS1.COMMONMX.COMNone
2tier_1androidzoo.in1Dynadot LLCns1.commonmx.comNone
3tier_1tamiat.org1Allearthdomains.com LLCNS1.COMMONMX.COMNone
4tier_1c2sd.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
5tier_1cclover.me1Dynadot, LLCNoneNone
6tier_1affordableglass.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
7tier_1conspir4cy.org1Domaincapitan.com LLCNS1.COMMONMX.COMNone
8tier_1chagford-accom.co.uk1Virtua Drug Ltd t/a autoBackorder [Tag = AUTOBACKORDER]nNone
9tier_1elinformativohipico.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
10tier_2btpnav.com961API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2aristo-hag.com75Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_2click.expmediadirect.com55NoneNoneNone
13tier_2api.apptap.com54Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
14tier_2redirect.viglink.com53Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
15tier_2link.sylikes.com53MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
16tier_2rd.bizrate.com52MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
17tier_2atnpx.com45GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
18tier_2rd.connexity.net41NoneNoneNone
19tier_2nizephoros-pom.com40Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
20tier_2get.popplunder.com40NoneNoneNone
21tier_2trustedpush.com39NoneNoneNone
22tier_2win1.trustedpush.com39NoneNoneNone
23tier_2wayfair.com36MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
24tier_2win2.trustedpush.com33NoneNoneNone
25tier_2api.mplayit.com27Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
26tier_2win3.trustedpush.com25NoneNoneNone
27tier_2win4.trustedpush.com11NoneNoneNone
28tier_2media-px.com9GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
29tier_2ad.doubleclick.net7MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
30tier_3kbb.com36CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
31tier_3wayfair.com_LOOP_131NoneNoneNone
32tier_3win4.trustedpush.com14NoneNoneNone
33tier_3robogarden.io13GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
34tier_3storystudio.sfgate.com13CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
35tier_3win5.trustedpush.com9NoneNoneNone
36tier_3win3.trustedpush.com8NoneNoneNone
37tier_3opticsplanet.com7GoDaddy.com, LLCNS1.ECENTRIA.COMECENTRIA IPH, LLC
38tier_3win2.trustedpush.com6NoneNoneNone
39tier_3wayfair.com_LOOP_25NoneNoneNone
40tier_3socalhondadealers.com5DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
41tier_3m.placesiteb.xyz4Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
42tier_3ram21.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
43tier_3rd.bizrate.com4MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
44tier_3wayfair.com2NoneNoneNone
45tier_3m.gladplacespin.xyz2Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
46tier_3toryburch.com2CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
47tier_3win6.trustedpush.com2NoneNoneNone
48tier_3trustedpush.com1NoneNoneNone
49tier_3zgallerie.com_LOOP_11NoneNoneNone
50tier_3filter.onwardclick.com1NoneNoneNone
51tier_3aristo-hag.com1Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
52tier_3ballarddesigns.com_LOOP_11NoneNoneNone
53tier_3a.dollarsurvey365.online1URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
54tier_3forbeautyandcare.com1NoneNoneNone
55tier_3owletcare.com_LOOP_11NoneNoneNone
56tier_3harryanddavid.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NET1-800-FLOWERS.COM, INC.
57tier_3nizephoros-pom.com1Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
58tier_3m.albeebaby.com1Network Solutions, LLCYNS1.YAHOO.COMNone
59tier_3bing.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_129nannan
1207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
4104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_118nannan
5104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
7206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_17nannan
882.192.82.227AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nannan
11209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2104nannan
12198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_255nannan
1399.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-90.ewr52.r.cloudfront.netnan
14192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_241rd.connexity.netnan
1534.199.180.187AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_240ec2-34-199-180-187.compute-1.amazonaws.comnan
1699.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-87.ewr52.r.cloudfront.netnan
1752.206.141.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_236ec2-52-206-141-190.compute-1.amazonaws.comnan
1823.41.189.99NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-41-189-99.deploy.static.akamaitechnologies.comnan
1999.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-114-35.ewr52.r.cloudfront.netnan
203.226.37.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_229ec2-3-226-37-31.compute-1.amazonaws.comnan
2152.205.177.114AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_227ec2-52-205-177-114.compute-1.amazonaws.comnan
2218.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-235-67-128.compute-1.amazonaws.comnan
2352.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-52-72-29-7.compute-1.amazonaws.comnan
2434.225.128.119AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-34-225-128-119.compute-1.amazonaws.comnan
2599.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-98.ewr52.r.cloudfront.netnan
2654.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-54-208-107-202.compute-1.amazonaws.comnan
2734.197.67.232AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_218ec2-34-197-67-232.compute-1.amazonaws.comnan
2834.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_217ec2-34-197-176-2.compute-1.amazonaws.comnan
29104.26.11.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_217nanTrue
30100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_368pool-100-37-135-2.nycmny.fios.verizon.netnan
3123.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_336a23-44-217-143.deploy.static.akamaitechnologies.comnan
3298.129.228.57DallasTexasAS33070 Rackspace Hosting75270United Statestier_313nannan
33104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
34152.195.32.168AshburnVirginiaAS15133 MCI Communications Services, Inc. d/b/a Verizon Business20147United Statestier_37nanTrue
3599.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-114-35.ewr52.r.cloudfront.netnan
36162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_34nannan
37172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
38192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nannan
3999.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-90.ewr52.r.cloudfront.netnan
40104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4134.207.4.240AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-207-4-240.compute-1.amazonaws.comnan
4299.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-87.ewr52.r.cloudfront.netnan
4323.41.189.99NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-41-189-99.deploy.static.akamaitechnologies.comnan
44104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
4535.174.35.73AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-35-174-35-73.compute-1.amazonaws.comnan
46104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
47173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nannan
4852.206.108.38AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-206-108-38.compute-1.amazonaws.comnan
4923.38.170.99NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-99.deploy.static.akamaitechnologies.comnan
5023.38.170.98NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-98.deploy.static.akamaitechnologies.comnan
51104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5264.91.232.212LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
5318.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-235-67-128.compute-1.amazonaws.comnan
54185.246.209.8ChicagoIllinoisAS60068 Datacamp Limited60666United Statestier_31chicago-4.cdn77.comnan
55204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31a-0001.a-msedge.netTrue
5699.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-98.ewr52.r.cloudfront.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website