Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
028630010790202021-04-11207.244.67.215Android
tierdomaincountregistrarname_serversorg
0tier_1digaaz.com1NamePal.com #8013, LLCNS1.COMMONMX.COMNone
1tier_1filmapik.tv1Domain Landing Zone LLCNS1.COMMONMX.COMNone
2tier_1licnewagency.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
3tier_1la2tatcom.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159165625
4tier_1cdhatver.com1NamePal.com #8010, LLCNS1.COMMONMX.COMNone
5tier_1interests.pro1DYNADOT LLCNS1.COMMONMX.COMNone
6tier_1editimage.org1GoDaddy.com, LLCNS1.COMMONMX.COMVirtua Drug Ltd
7tier_1jsamsplace.com1GoDaddy.com, LLCNS1.COMMONMX.COMDomains By Proxy, LLC
8tier_1eatatjacknjills.com1GoDaddy.com, LLCNS1.COMMONMX.COMDomains By Proxy, LLC
9tier_1bexindonesia.com1Domaintimemachine.com LLCNS1.COMMONMX.COMNone
10tier_2aristo-hag.com128Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2btpnav.com1031API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2winfreegift.net40DYNADOT, LLCVIP1.ALIDNS.COMNone
13tier_2ads35.adtelligent.com23DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
14tier_2dsp35.adtelligent.com23DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
15tier_2aibm1.mysearch.space23NoneNoneNone
16tier_2externals-1953518744.us-east-1.elb.amazonaws.com22MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
17tier_2search.snjsearch.com22GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2search-checker.com22Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
19tier_2m.onlineweb.mobi22GoDaddy.com, LLCNoneNone
20tier_2click.expmediadirect.com19NoneNoneNone
21tier_2btpnative.com181API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
22tier_2infopicked.com17NoneNoneNone
23tier_22893.rawlexi.com15GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
24tier_2awakeningsco.com15GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
25tier_263110.click.validclick.net10Safenames LtdNS1.FULLMAILBOX.COMNone
26tier_2api.apptap.com9Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
27tier_2api.mplayit.com9Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
28tier_2rd.bizrate.com8MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
29tier_2rd.connexity.net8NoneNoneNone
30tier_3free-gifts.net40DYNADOT, LLCVIP1.ALIDNS.COMNone
31tier_3storystudio.sfgate.com26CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
32tier_3bing.com22MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
33tier_3storystudio.mysanantonio.com10CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
34tier_3storystudio.chron.com8CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
35tier_3b.delightcmain.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
36tier_3michael-dowling.com5GoDaddy.com, LLCNS77.DOMAINCONTROL.COMNorthwell Health
37tier_3moneyfinancegold.com5NoneNoneNone
38tier_3a.dollarsurvey365.online5URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
39tier_3wayfair.com4MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
40tier_3m.gladplacespin.xyz4Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
41tier_3b.gladspaceplane.xyz3Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
42tier_3win3.trustedpush.com3NoneNoneNone
43tier_3thelastpicture.show3NoneNoneNone
44tier_3aarpmedicareplans.com3CSC CORPORATE DOMAINS, INC.EDNS4.ULTRADNS.BIZUnitedHealth Group Incorporated
45tier_3win2.trustedpush.com2NoneNoneNone
46tier_3fanatics.com2MarkMonitor, Inc.A1-147.AKAM.NETFanatics Inc.
47tier_3m.placesiteb.xyz2Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
48tier_3htvnativeadsolutions.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Television Inc.
49tier_3dollarshaveclub.com2GoDaddy.com, LLCNS-1465.AWSDNS-55.ORGDomains By Proxy, LLC
50tier_3aklief.com2NOM-IQ Ltd dba Com LaudeDNS1.COMLAUDE-DNS.COMGalderma Holding SA
51tier_3shopnsave.world2NoneNoneNone
52tier_3m.fastmapc.xyz2Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
53tier_3reebok.com1CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
54tier_3b.playspind.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
55tier_3externals-1953518744.us-east-1.elb.amazonaws.com1MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
56tier_3shopnsave.world_LOOP_11NoneNoneNone
57tier_3filter.onwardclick.com1NoneNoneNone
58tier_3rd.bizrate.com1NoneNoneNone
59tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_131nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_128nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
3207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
4206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_114nannan
5104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
774.63.241.29DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1429-241-63-74.static.reverse.lstn.netnan
837.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
974.63.241.26DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1326-241-63-74.static.reverse.lstn.netnan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2121nannan
11204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_256204.44.79.214.static.quadranet.comnan
1247.254.67.38Mountain ViewCaliforniaAS45102 Alibaba (US) Technology Co., Ltd.94035United Statestier_340nannan
1318.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_234ec2-18-235-67-128.compute-1.amazonaws.comnan
1452.206.108.38AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_225ec2-52-206-108-38.compute-1.amazonaws.comnan
15209.205.202.42New York CityNew YorkAS55081 24 SHELLS10004United Statestier_223static-42-202-205-209.24shells.netnan
16209.205.202.43New York CityNew YorkAS55081 24 SHELLS10004United Statestier_223static-43-202-205-209.24shells.netnan
1752.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-52-72-29-7.compute-1.amazonaws.comnan
1835.162.164.74BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_222ec2-35-162-164-74.us-west-2.compute.amazonaws.comnan
1934.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-34-197-176-2.compute-1.amazonaws.comnan
2034.207.43.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-34-207-43-7.compute-1.amazonaws.comnan
21198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_219nannan
22173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21818.65.c0ad.ip4.static.sl-reverse.comnan
23172.67.196.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_218nanTrue
24198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_215nannan
2554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-54-208-107-202.compute-1.amazonaws.comnan
263.125.109.211Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_214ec2-3-125-109-211.eu-central-1.compute.amazonaws.comnan
2750.16.173.246AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-50-16-173-246.compute-1.amazonaws.comnan
28104.18.2.198San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_214nanTrue
29192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nannan
3098.129.228.57DallasTexasAS33070 Rackspace Hosting75270United Statestier_349nannan
3147.254.67.38Mountain ViewCaliforniaAS45102 Alibaba (US) Technology Co., Ltd.94035United Statestier_340nannan
32204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_321a-0001.a-msedge.netTrue
33104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
34100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37pool-100-37-135-2.nycmny.fios.verizon.netnan
35104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
3623.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_34a23-39-32-237.deploy.static.akamaitechnologies.comnan
37104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
38172.67.146.181San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
39104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4067.43.9.71LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_33host.encontext.comnan
41184.85.16.190NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33a184-85-16-190.deploy.static.akamaitechnologies.comnan
42184.87.65.240NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a184-87-65-240.deploy.static.akamaitechnologies.comnan
43151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue
44151.101.1.9San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue
45151.101.194.216San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue
46104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
47172.67.72.49San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
4867.227.241.125LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_32nannan
4923.201.27.178NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-201-27-178.deploy.static.akamaitechnologies.comnan
5013.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31nanTrue
5150.16.173.246AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-50-16-173-246.compute-1.amazonaws.comnan
52173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nannan
53192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nannan
54104.76.101.253New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a104-76-101-253.deploy.static.akamaitechnologies.comnan
55104.18.23.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
56104.26.15.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
57104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5899.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-87.ewr52.r.cloudfront.netnan
59104.21.95.173San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website