Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02372468451142021-04-13185.107.56.199Android
tierdomaincountregistrarname_serversorg
0tier_1akerdersevi.com1DYNADOT9 LLCNS1.COMMONMX.COMNone
1tier_1adultstarmakers.com1eNom389, IncorporatedNS1.COMMONMX.COMNone
2tier_128277b.com1Sliceofheaven Domains, LLCNS1.COMMONMX.COMNone
3tier_12012columbo.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159174620
4tier_1americanstrikermma.com1Communigal Communication LtdNS1.COMMONMX.COMNone
5tier_1acylogy.com1Snag Your Name LLCNS1.COMMONMX.COMNone
6tier_158xingqu.com1MidWest Domains LLCNS1.COMMONMX.COMNone
7tier_148dc47c7234e5258.com1Communigal Communication LtdNS1.COMMONMX.COMNone
8tier_1alantemusic.com1New Order Domains, LLCNS1.COMMONMX.COMNone
9tier_1acusp.info1Communigal Communication LtdNS1.COMMONMX.COMNone
10tier_2aristo-hag.com123Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2btpnav.com1081API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2atnpx.com86GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
13tier_2click.expmediadirect.com13NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2ad.doubleclick.net12MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
15tier_2btpnative.com121API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
16tier_2api.apptap.com12Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
17tier_2infopicked.com11NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2redirect.viglink.com11Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
19tier_2api.mplayit.com10Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
20tier_2link.sylikes.com10MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
21tier_2media-px.com9GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
22tier_2trackyourmpg.com8GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
23tier_2nizephoros-pom.com7Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGNone
24tier_2get.popplunder.com7NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
25tier_2trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
26tier_2win1.trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
27tier_2win2.trustedpush.com7NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
28tier_2rd.bizrate.com6MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
29tier_2rd.connexity.net6NoneNoneNone
30tier_3kbb.com60CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
31tier_3robogarden.io29GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
32tier_3storystudio.sfgate.com15CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
33tier_3socalhondadealers.com6DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
34tier_3m.gladplacespin.xyz4NoneNoneNone
35tier_3rd.bizrate.com4MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
36tier_3m.placesiteb.xyz3Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
37tier_3bing.com2NoneNoneNone
38tier_3irl.com2GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
39tier_3ram21.proasdf.com2GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
40tier_3win4.trustedpush.com2NameCheap, Inc.NS-1142.AWSDNS-14.ORGNone
41tier_3win6.trustedpush.com2NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
42tier_3win5.trustedpush.com2NoneNoneNone
43tier_3m.albeebaby.com1Network Solutions, LLCYNS1.YAHOO.COMNone
44tier_3vivint.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
45tier_3equinoxadvertising.com_LOOP_11NoneNoneNone
46tier_3a.dollarsurvey365.online1URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
47tier_3thredup.com1GoDaddy.com, LLCMATT.NS.CLOUDFLARE.COMThredUp Inc.
48tier_3thelastpicture.show1NoneNoneNone
49tier_3grandinroad.com_LOOP_11NoneNoneNone
50tier_3rue21.com_LOOP_11NoneNoneNone
51tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
52tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
53tier_3wayfair.com_LOOP_11NoneNoneNone
54tier_3toryburch.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
55tier_3win3.trustedpush.com1NoneNoneNone
56tier_3lampsplus.com_LOOP_11NoneNoneNone
57tier_3m.fastmapc.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
1207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
2207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
3206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
4207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
8185.107.56.199RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nannan
974.63.241.19DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1219-241-63-74.static.reverse.lstn.netnan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2122nannan
11172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_242nanTrue
1252.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_242ec2-52-72-29-7.compute-1.amazonaws.comnan
1334.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_239ec2-34-197-176-2.compute-1.amazonaws.comnan
1454.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-54-208-107-202.compute-1.amazonaws.comnan
1518.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-18-235-67-128.compute-1.amazonaws.comnan
16104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_222nanTrue
17104.26.11.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_222nanTrue
1899.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_217server-99-84-114-98.ewr52.r.cloudfront.netnan
19192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nannan
20204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_215204.44.79.214.static.quadranet.comnan
21198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_213nannan
22173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21218.65.c0ad.ip4.static.sl-reverse.comnan
2352.205.177.114AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-52-205-177-114.compute-1.amazonaws.comnan
2499.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_29server-99-84-114-87.ewr52.r.cloudfront.netnan
2552.206.141.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-52-206-141-190.compute-1.amazonaws.comnan
2634.199.180.187AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-34-199-180-187.compute-1.amazonaws.comnan
2799.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-90.ewr52.r.cloudfront.netnan
2834.225.128.119AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-34-225-128-119.compute-1.amazonaws.comnan
29192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26rd.connexity.netnan
3023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_341a23-44-217-143.deploy.static.akamaitechnologies.comnan
31104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_324nanTrue
3223.1.205.179EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_319a23-1-205-179.deploy.static.akamaitechnologies.comnan
33151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_315nanTrue
34100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_311pool-100-37-135-2.nycmny.fios.verizon.netnan
35172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
36192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nannan
37104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
3835.174.35.73AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-35-174-35-73.compute-1.amazonaws.comnan
3934.207.4.240AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-207-4-240.compute-1.amazonaws.comnan
40104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
41131.253.33.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32a-0001.dc-msedge.netTrue
4252.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-73-153-209.compute-1.amazonaws.comnan
43162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_32nannan
44185.246.209.7ChicagoIllinoisAS60068 Datacamp Limited60666United Statestier_31nannan
45104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
46104.18.11.116San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4799.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-90.ewr52.r.cloudfront.netnan
48104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
49104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
50104.18.23.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5167.43.9.71LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
5223.201.25.61NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-201-25-61.deploy.static.akamaitechnologies.comnan
5345.33.8.244RichardsonTexasAS63949 Linode, LLC75080United Statestier_31li962-244.members.linode.comnan
5423.38.170.98NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-98.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website