Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01781725420252021-09-20185.107.56.59Iphone
tierdomaincountregistrarname_serversorg
0tier_1askersitesi.net1Microbreweddomains.com LLCNS1.DNSNUTS.COMNone
1tier_19novels.net1! #1 Host Japan, Inc.NS1.DNSNUTS.COMThe Management Group II
2tier_1altdialogue.com1GateKeeperDomains.net LLCNS1.DNSNUTS.COMNone
3tier_1aimeflv.net1DomainSprouts.com LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1dashitz.com1Name Nelly CorporationNS1.DNSNUTS.COMNone
5tier_1coleman300.net1Arab Internet Names, IncorporatedNS1.DNSNUTS.COMThe Management Group II
6tier_1bangkek.com1Media Elite Holdings LimitedNS1.DNSNUTS.COMFundacion Privacy Services LTD
7tier_1abadown.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMThe Management Group II
8tier_1cheatbooster.net1NamePal.com #8016 Inc.NS1.DNSNUTS.COMThe Management Group II
9tier_1bamanshop.com1Cool River Names, LLCNS1.DNSNUTS.COMNone
10tier_2api.quotes.com81Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
11tier_2changeslots.com81Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
12tier_21496.rebiraert.com34GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
13tier_2americanlisted.com31ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2open.app.jobrapido.com6Marcaria.com International, Inc.NS-CLOUD-D1.GOOGLEDOMAINS.COMGDPR Masked
15tier_2us.jobrapido.com6Marcaria.com International, Inc.NS-CLOUD-D1.GOOGLEDOMAINS.COMGDPR Masked
16tier_2click.expmediadirect1.com5NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2mybetterdl.com4NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
18tier_2btpnative.com31API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
19tier_2p274639.mybetterdl.com3NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
20tier_2open.app.jobrapido.com_LOOP_13NoneNoneNone
21tier_2rtbstream.com21API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
22tier_2route.g-sponsored-results.com2GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGDomains By Proxy, LLC
23tier_2incues.com2GoDaddy.com, LLCNS-1290.AWSDNS-33.ORGDomains By Proxy, LLC
24tier_2tracker.cmclicks000.com2Amazon Registrar, Inc.NS-103.AWSDNS-12.COMWhois Privacy Service
25tier_2theminiplex.com1GoDaddy Online Services Cayman Islands Ltd.HUGH.NS.CLOUDFLARE.COMNone
26tier_2click.junmediadirect.com1NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
27tier_2xapi.juicyads.com1GoDaddy.com, LLCDNS1.P07.NSONE.NETNone
28tier_2redir.jads.co1GoDaddy.com, LLCdns2.p06.nsone.netDomains By Proxy, LLC
29tier_2chaturbate.com1Cloudflare, Inc.NSA.CHATURBATE.COMDATA REDACTED
30tier_3theconnectvpn.com81DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
31tier_3google.com15MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
32tier_3open.app.jobrapido.com10Marcaria.com International, Inc.NS-CLOUD-D1.GOOGLEDOMAINS.COMGDPR Masked
33tier_3open.app.jobrapido.com_LOOP_13NoneNoneNone
34tier_3americanlisted.com3ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
35tier_3g-sponsored-results.com2GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGDomains By Proxy, LLC
36tier_3us.jobrapido.com_LOOP_12NoneNoneNone
37tier_3truecompassion.net2NAMECHEAP INCNS1.BESTDEALPOPPER.COMRedacted for Privacy Purposes
38tier_31496.rebiraert.com1GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
39tier_3d.playwintera.xyz1NoneNoneNone
40tier_3everyjobforme.com1GoDaddy.com, LLCNS-1009.AWSDNS-62.NETPercipio Holdings, Inc.
41tier_3m.chaturbate.com1Cloudflare, Inc.NSA.CHATURBATE.COMDATA REDACTED
42tier_3m.enrichloan.clickgocash.com1GoDaddy.com, LLCNS-1160.AWSDNS-17.ORGDomains By Proxy, LLC
43tier_3shipstation.com1GoDaddy.com, LLCNS-1407.AWSDNS-47.ORGAuctane LLC
44tier_3api-mailkeeper.mirelia.app11API GmbHalla.ns.cloudflare.comRegistrant of mirelia.app
45tier_3bend-me-over.com1NAMECHEAP INCNS-1292.AWSDNS-33.ORGPrivacy service provided by Withheld for Privacy ehf
46tier_3streamingvideosnow.com1NAMECHEAP INCHAL.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
47tier_3ww1.survey-smiles.com1Media Elite Holdings LimitedNS1.WOMBATDNS.COMFundacion Privacy Services LTD
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_121nannan
164.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_120customer.sharktech.netnan
264.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_117customer.sharktech.netnan
3185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_117nannan
4185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_114nannan
564.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_113customer.sharktech.netnan
664.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_113customer.sharktech.netnan
7185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_113nannan
85.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_281nannan
918.204.186.203AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_281ec2-18-204-186-203.compute-1.amazonaws.comnan
10198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_31nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_33240.61.209.35.bc.googleusercontent.comnan
12173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2818.65.c0ad.ip4.static.sl-reverse.comnan
13209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_26nannan
1491.134.128.52RoubaixHauts-de-FranceAS16276 OVH SAS59100Francetier_26nanTrue
15198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_25nannan
16100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36pool-100-37-135-2.nycmny.fios.verizon.netnan
17159.127.43.26WashingtonWashington, D.C.AS25751 Conversant, Inc.20045United Statestier_23nannan
1813.225.229.55New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_22server-13-225-229-55.jfk51.r.cloudfront.netnan
195.39.72.129RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_22ns347543.ip-5-39-72.eunan
2047.252.5.31WashingtonWashington, D.C.AS45102 Alibaba (US) Technology Co., Ltd.20045United Statestier_22nannan
2123.111.80.77AmsterdamNorth HollandAS7979 Servers.com, Inc.1012Netherlandstier_22nannan
22173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_22nannan
23104.18.152.5San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_21nanTrue
2452.20.253.147AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-20-253-147.compute-1.amazonaws.comnan
25176.31.237.74MontlhéryÎle-de-FranceAS16276 OVH SAS91310Francetier_21ns325147.ip-176-31-237.eunan
26176.31.228.38ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31ns3042244.ip-176-31-228.eunan
27198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_21nannan
28104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_359nanTrue
29172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_322nanTrue
30142.250.65.228New York CityNew YorkAS15169 Google LLC10004United Statestier_37lga25s73-in-f4.1e100.netnan
31100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36pool-100-37-135-2.nycmny.fios.verizon.netnan
32142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_35lga34s33-in-f4.1e100.netnan
3335.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_33240.61.209.35.bc.googleusercontent.comnan
3413.225.229.29New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_32server-13-225-229-29.jfk51.r.cloudfront.netnan
35142.250.65.164New York CityNew YorkAS15169 Google LLC10004United Statestier_32lga25s71-in-f4.1e100.netnan
36199.192.20.234San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_32server1.bestdealpopper.comnan
3751.91.64.195RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_32ns31189212.ip-51-91-64.eunan
3851.210.240.70LilleHauts-de-FranceAS16276 OVH SAS59005 CEDEXFrancetier_32ns3182412.ip-51-210-240.eunan
39176.31.228.3ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31ns3042245.ip-176-31-228.eunan
40198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_31nannan
41104.18.71.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4246.105.105.97ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31ns3436170.ip-46-105-105.eunan
43176.31.228.38ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31ns3042244.ip-176-31-228.eunan
44104.18.29.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
45104.18.100.40San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4634.206.77.171AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-34-206-77-171.compute-1.amazonaws.comnan
47141.193.213.21AustinTexasAS209242 Cloudflare London, LLC78701United Statestier_31nanTrue
48142.250.176.196New York CityNew YorkAS15169 Google LLC10004United Statestier_31lga34s37-in-f4.1e100.netnan
4952.8.84.226San JoseCaliforniaAS16509 Amazon.com, Inc.95103United Statestier_31ec2-52-8-84-226.us-west-1.compute.amazonaws.comnan
50104.21.17.178San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
51199.59.242.153New York CityNew YorkAS395082 Bodis, LLC10004United Statestier_31nannan
52176.31.233.85ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31ns3025388.ip-176-31-233.eunan
53141.94.101.16LilleHauts-de-FranceAS16276 OVH SAS59005 CEDEXFrancetier_31ns3198682.ip-141-94-101.eunan
5446.105.112.200RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_31ns320212.ip-46-105-112.eunan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website