Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
030631410430192021-04-17207.244.67.215Android
tierdomaincountregistrarname_serversorg
0tier_1igramecka.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159177977
1tier_1habc.co.in1Dynadot LLCns1.commonmx.comNone
2tier_1forumt.biz1Communigal Communication Ltdns2.commonmx.comNone
3tier_1btcapp.co1Communigal Communication Ltdns2.commonmx.comNone
4tier_1coolkicks.co1Dynadot LLCns2.commonmx.comNone
5tier_1csmatrix.org1Atomicdomainnames.com LLCNS1.COMMONMX.COMStatutory Masking Enabled
6tier_1beauty-boutique.co1Communigal Communication Ltdns2.commonmx.comNone
7tier_1avsarangg.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158852301
8tier_1carloscastillo.co1Communigal Communication Ltdns1.commonmx.comNone
9tier_1hqasianphotos.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159171163
10tier_2btpnav.com1411API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2aristo-hag.com121Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_2nizephoros-pom.com31Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
13tier_2get.popplunder.com28NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2trustedpush.com24NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
15tier_2win1.trustedpush.com23NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
16tier_2win2.trustedpush.com20NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
17tier_2atnpx.com18GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
18tier_2click.expmediadirect.com15NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2win3.trustedpush.com14NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
20tier_2btpnative.com111API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
21tier_2infopicked.com11NameCheap, Inc.NS0.DNSMADEEASY.COMNone
22tier_2ad.doubleclick.net11MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
23tier_263156.click.validclick.net9Safenames LtdNS1.FULLMAILBOX.COMNone
24tier_21track.pro8DANESCO TRADING LTDNS1.TOPDNS.MEDANESCO TRADING LTD.
25tier_2survey2you.com8URL SOLUTIONS INC.NS-1245.AWSDNS-27.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
26tier_2lowdodrioon.com8URL SOLUTIONS INC.NS-1228.AWSDNS-25.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
27tier_2dollarsurvey365.online8URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
28tier_2xml.onwardclick.com8NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
29tier_263130.click.validclick.net8Safenames LtdNS1.FULLMAILBOX.COMNone
30tier_3storystudio.sfgate.com26CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
31tier_3irl.com25GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
32tier_3storystudio.chron.com19CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
33tier_3win4.trustedpush.com13NoneNoneNone
34tier_3kbb.com11CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
35tier_3owningland.com9CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
36tier_3a.dollarsurvey365.online8URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
37tier_3robogarden.io7GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
38tier_3win3.trustedpush.com6NoneNoneNone
39tier_3aklief.com5NOM-IQ Ltd dba Com LaudeDNS1.COMLAUDE-DNS.COMGalderma Holding SA
40tier_3storystudio.mysanantonio.com5CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
41tier_3moneyfinancegold.com5NoneNoneNone
42tier_3michael-dowling.com4GoDaddy.com, LLCNS77.DOMAINCONTROL.COMNorthwell Health
43tier_3ketoser.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
44tier_3win2.trustedpush.com3NoneNoneNone
45tier_3aarpmedicareplans.com3CSC CORPORATE DOMAINS, INC.EDNS4.ULTRADNS.BIZUnitedHealth Group Incorporated
46tier_3shopnsave.world_LOOP_13NoneNoneNone
47tier_3htvnativeadsolutions.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Television Inc.
48tier_3weniix.com2NoneNoneNone
49tier_3filter.onwardclick.com2NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
50tier_3m.placesiteb.xyz2Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
51tier_3storystudio.connecticutmag.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Media Services Connecticut, LLC
52tier_3beyourxfriend.com2GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
53tier_3aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
54tier_3win1.trustedpush.com1NoneNoneNone
55tier_3win5.trustedpush.com1NoneNoneNone
56tier_3art.com1CSC CORPORATE DOMAINS, INC.SDNS113.ULTRADNS.BIZArt.com, Inc.
57tier_3halloweenexpress.com1GoDaddy.com, LLCNS27.DOMAINCONTROL.COMASADART LLC
58tier_3click.appcast.io_LOOP_11NoneNoneNone
59tier_3netradioplayer.com1GoDaddy.com, LLCNS41.DOMAINCONTROL.COMDomains By Proxy, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
3207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
4206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
5104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
7104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
882.192.82.225AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_16nannan
9185.107.56.198RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2152nannan
11204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_276204.44.79.214.static.quadranet.comnan
1252.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_246ec2-52-72-29-7.compute-1.amazonaws.comnan
1318.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_237ec2-18-235-67-128.compute-1.amazonaws.comnan
1434.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_237ec2-34-197-176-2.compute-1.amazonaws.comnan
1554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_235ec2-54-208-107-202.compute-1.amazonaws.comnan
1634.199.180.187AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-34-199-180-187.compute-1.amazonaws.comnan
1799.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-90.ewr52.r.cloudfront.netnan
1899.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-114-87.ewr52.r.cloudfront.netnan
1999.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-35.ewr52.r.cloudfront.netnan
20198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_215nannan
21173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21218.65.c0ad.ip4.static.sl-reverse.comnan
2299.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-98.ewr52.r.cloudfront.netnan
23172.217.3.102WestburyNew YorkAS15169 Google LLC11590United Statestier_211lga34s18-in-f6.1e100.netnan
24173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_32nannan
25104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_29nanTrue
26172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_28nanTrue
27162.254.190.3PhoenixArizonaAS32338 Hostiserver Ltd85001United Statestier_28alt1.omnistrongbow.comnan
28139.45.197.236AmsterdamNorth HollandAS9002 RETN Limited1012Netherlandstier_28nannan
29139.45.197.239AmsterdamNorth HollandAS9002 RETN Limited1012Netherlandstier_28nannan
30151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_355nanTrue
31100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_318pool-100-37-135-2.nycmny.fios.verizon.netnan
3223.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_311a23-44-217-143.deploy.static.akamaitechnologies.comnan
3318.191.181.152HilliardOhioAS16509 Amazon.com, Inc.43026United Statestier_39ec2-18-191-181-152.us-east-2.compute.amazonaws.comnan
34172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
35172.67.72.49San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
36104.21.95.173San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
3799.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-114-87.ewr52.r.cloudfront.netnan
3898.129.228.57DallasTexasAS33070 Rackspace Hosting75270United Statestier_34nannan
39167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
4099.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-98.ewr52.r.cloudfront.netnan
4152.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-203-36-44.compute-1.amazonaws.comnan
4299.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-35.ewr52.r.cloudfront.netnan
43161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
44144.202.107.3DavisCaliforniaAS20473 The Constant Company, LLC95618United Statestier_33144.202.107.3.vultr.comnan
4523.73.231.217EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_33a23-73-231-217.deploy.static.akamaitechnologies.comnan
46151.101.66.216San FranciscoCaliforniaAS54113 Fastly94107United Statestier_33nanTrue
47162.0.209.104San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_32premium170-1.web-hosting.comnan
48167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
49173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_32nannan
50151.101.194.216San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue
5167.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
52104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
53104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5464.227.12.111North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
5567.207.81.229North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
56104.26.15.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
57104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5899.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-90.ewr52.r.cloudfront.netnan
5952.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-73-153-209.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website