Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02702729010152021-04-18185.107.56.199Iphone
tierdomaincountregistrarname_serversorg
0tier_1erotop.info1DYNADOT LLCNS1.COMMONMX.COMNone
1tier_1gorras.in1Dynadot LLCns1.commonmx.comNone
2tier_1aloja.in1Dynadot LLCns1.commonmx.comNone
3tier_1im7love.com1Cool River Names, LLCNS1.COMMONMX.COMNone
4tier_1bestjapaneseporn.net1DYNADOT11 LLCNS1.COMMONMX.COMNone
5tier_1hairygash.com1Tiger Shark Domains, LLCNS1.COMMONMX.COMNone
6tier_1examnotes.net1NameSilo, LLCNS1.COMMONMX.COMSee PrivacyGuardian.org
7tier_1androidupdate.pro1DYNADOT LLCNS1.COMMONMX.COMNone
8tier_1ebookwarez.com1DYNADOT10 LLCNS1.COMMONMX.COMNone
9tier_13bitco.in1Dynadot LLCns1.commonmx.comNone
10tier_2aristo-hag.com95Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2btpnav.com861API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2atnpx.com75GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
13tier_2click.expmediadirect.com49NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2api.quotes.com27Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
15tier_2changeslots.com27Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
16tier_2ad.doubleclick.net14MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
17tier_2c.clickprotects.com9GoDaddy.com, LLCNS63.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_211165151.addotnet.com9GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
19tier_2geo.itunes.apple.com9CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
20tier_2itunes.apple.com9CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
21tier_2exporimy.com9GoDaddy.com, LLCNS-1145.AWSDNS-15.ORGDomains By Proxy, LLC
22tier_2sorrectionki.space9NoneNoneNone
23tier_2btpnative.com71API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
24tier_2infopicked.com7NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
25tier_2security-rd.com7NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
26tier_2apptime.xyz7NAMECHEAP INCPETE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
27tier_2rtbstream.com41API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
28tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
29tier_263028.click.validclick.net3Safenames LtdNS1.FULLMAILBOX.COMNone
30tier_3kbb.com54CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
31tier_3bestappland.me38NAMECHEAP INCNoneNone
32tier_3theconnectvpn.com27DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
33tier_3robogarden.io21GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
34tier_3storystudio.sfgate.com15CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
35tier_3music.apple.com9CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
36tier_3tackis.xyz7NAMECHEAP INCPETE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3storystudio.chron.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
38tier_3gramp.xyz2NAMECHEAP INCDAVID.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
39tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
40tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
41tier_3maurices.com_LOOP_11NoneNoneNone
42tier_3redirect.viglink.com1Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
43tier_3aristo-hag.com1Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
44tier_3vpn1aprotectplus.com1Internet Domain Service BS Corp.SETH.NS.CLOUDFLARE.COMWhois Privacy Corp.
45tier_3filter.onwardclick.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
46tier_3java.limitedtopoffers.com11&1 IONOS SERORY.NS.CLOUDFLARE.COM1&1 Internet Inc
47tier_3owningland.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
48tier_3bostonproper.com1Amazon Registrar, Inc.NS-117.AWSDNS-14.COMNone
49tier_3shopnsave.world_LOOP_11NoneNoneNone
50tier_3btpnav.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
51tier_3venue.com1Network Solutions, LLCALBERT.NS.CLOUDFLARE.COMNone
52tier_3ram21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
53tier_3enterprise.com1MarkMonitor, Inc.NS1.ENTERPRISE.COMEnterprise Rent a Car
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_131nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_128nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
3207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
5104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
8185.107.56.199RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nannan
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_250nannan
125.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_227nannan
1334.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_227ec2-34-207-32-33.compute-1.amazonaws.comnan
1454.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-208-107-202.compute-1.amazonaws.comnan
15104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_226nanTrue
1652.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_225ec2-52-72-29-7.compute-1.amazonaws.comnan
17104.26.11.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_225nanTrue
1834.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-34-197-176-2.compute-1.amazonaws.comnan
19172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_224nanTrue
2018.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-18-235-67-128.compute-1.amazonaws.comnan
21204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_218204.44.79.214.static.quadranet.comnan
22209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_218nannan
2334.202.14.39AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-34-202-14-39.compute-1.amazonaws.comnan
24173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2718.65.c0ad.ip4.static.sl-reverse.comnan
25172.217.9.230CliftonNew JerseyAS15169 Google LLC07015United Statestier_27lga34s11-in-f6.1e100.netnan
26104.90.87.27PhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_26a104-90-87-27.deploy.static.akamaitechnologies.comnan
2723.43.252.68NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_26a23-43-252-68.deploy.static.akamaitechnologies.comnan
28104.21.6.89San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_26nanTrue
293.85.252.251AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-3-85-252-251.compute-1.amazonaws.comnan
3023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_352a23-44-217-143.deploy.static.akamaitechnologies.comnan
31142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_338nannan
32104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_319nanTrue
33151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_317nanTrue
34172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_316nanTrue
35100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.netnan
36104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_311nanTrue
37104.21.65.93San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
38172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
3923.1.205.179EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_32a23-1-205-179.deploy.static.akamaitechnologies.comnan
4099.84.34.146NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-34-146.ewr52.r.cloudfront.netnan
4145.33.8.244RichardsonTexasAS63949 Linode, LLC75080United Statestier_31li962-244.members.linode.comnan
4254.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-208-107-202.compute-1.amazonaws.comnan
43104.21.63.48San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
44172.67.197.33San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
45173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nannan
46104.21.28.174San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
47172.67.189.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4818.191.181.152HilliardOhioAS16509 Amazon.com, Inc.43026United Statestier_31ec2-18-191-181-152.us-east-2.compute.amazonaws.comnan
4913.33.46.107NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-33-46-107.ewr52.r.cloudfront.netnan
50104.21.92.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
51209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nannan
5223.227.38.65OttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31myshopify.comTrue
53162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_31nannan
5423.38.170.178NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-178.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website