Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0278280108701002021-04-02207.244.67.215Iphone
tierdomaincountregistrarname_serversorg
0tier_1gstreamer.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1abam40.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1bunkerkilts.com1Communigal Communication LtdNS1.COMMONMX.COMNone
3tier_1bbffs.com1Long Drive Domains LLCNS1.COMMONMX.COMNone
4tier_1foto-ramki.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
5tier_1asio.pro1DYNADOT LLCNS1.COMMONMX.COMNone
6tier_1bemember.me1GoDaddy.com, LLCNoneNone
7tier_1englishfluency.co1GoDaddy.com, LLCns2.commonmx.comNone
8tier_1ajudar.me1Dynadot, LLCNoneNone
9tier_1geograph.us1Dynadot LLCns2.commonmx.comNone
10tier_21496.wcitianka.com103GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
11tier_2americanlisted.com103ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_29nl.es71NoneNoneNone
13tier_2newre-conversions.clickmeter.com71REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
14tier_2ring.joveo.com71Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
15tier_2changeslots.com41Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
16tier_2click.expmediadirect.com37NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2api.quotes.com35Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
18tier_2rd.bizrate.com12MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
19tier_2r.ealeo.com9DYNADOT, LLCNS-1186.AWSDNS-20.ORGNone
20tier_3signup.surveyvoices.com69GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMNone
21tier_3theconnectvpn.com41DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
22tier_3bestappland.me32NAMECHEAP INCNoneNone
23tier_3google.com31MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
24tier_3wayfair.com8NoneNoneNone
25tier_3kbb.com5CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
26tier_3iosrecommendedvpn.com4NoneNoneNone
27tier_3music.apple.com3CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
28tier_3robogarden.io3GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
29tier_3signup.finddreamjobs.com2GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_133nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_130nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
4206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_120nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_117nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_113nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
837.48.65.148SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_15nannan
982.192.82.227AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2103nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_2103240.61.209.35.bc.googleusercontent.comnan
1223.21.166.230AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_241ec2-23-21-166-230.compute-1.amazonaws.comnan
1334.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_241ec2-34-207-32-33.compute-1.amazonaws.comnan
1454.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_239ec2-54-235-205-204.compute-1.amazonaws.comnan
15198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_237nannan
165.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_235nannan
1723.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_232ec2-23-21-53-13.compute-1.amazonaws.comnan
1854.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_230ec2-54-197-247-190.compute-1.amazonaws.comnan
1913.225.230.128New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_222server-13-225-230-128.jfk51.r.cloudfront.netnan
20104.21.71.177San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_336nanTrue
21172.67.147.244San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_333nanTrue
22142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_332nannan
23104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_321nanTrue
24172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_320nanTrue
25100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_39pool-100-37-135-2.nycmny.fios.verizon.netnan
26142.250.64.100Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_38lga34s31-in-f4.1e100.netnan
2723.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_38a23-39-32-237.deploy.static.akamaitechnologies.comnan
28142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_38lga34s33-in-f4.1e100.netnan
2923.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a23-44-217-143.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website