Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02572558650312021-04-19207.244.67.215Chrome
tierdomaincountregistrarname_serversorg
0tier_1lynko.co1Communigal Communication Ltdns2.commonmx.comNone
1tier_1jntukresultsdb.com1Domainsofcourse.com LLCNS1.COMMONMX.COMNone
2tier_1grupocoop.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
3tier_1javweb.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
4tier_1dakikpanel.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
5tier_1abndn.us1Communigal Communication Ltdns1.commonmx.comNone
6tier_1lorieason.com1GoDaddy.com, LLCNS1.COMMONMX.COMDomains By Proxy, LLC
7tier_1mtiwadawa.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1jasonvalesbigjuicechallenge.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158503999
9tier_1chiyou.name1NoneNoneNone
10tier_2btpnav.com1271API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2aristo-hag.com99Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_21496.rawlexi.com42NoneNoneNone
13tier_2americanlisted.com36ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2btpnative.com231API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
15tier_29nl.es20NoneNoneNone
16tier_2newre-conversions.clickmeter.com20REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
17tier_2infopicked.com20NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2trk.jometer.com18Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
19tier_2api.l5srv.net18GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2nizephoros-pom.com7Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
21tier_2click.expmediadirect.com4NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2rqhere2.com3NAMECHEAP INCJEROME.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2ads35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
24tier_2dsp35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
25tier_2aldb1.mysearch.space3NoneNoneNone
26tier_2externals-1953518744.us-east-1.elb.amazonaws.com3MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
27tier_2search.snjsearch.com3GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
28tier_2melanthios-ana.com3Amazon Registrar, Inc.NS-1354.AWSDNS-41.ORGWhois Privacy Service
29tier_2zoro.admobe.com3GoDaddy.com, LLCRAQUEL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
30tier_3irl.com90GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
31tier_3upward.careers18GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3us.tideri.com15united domains AGNS.UDAG.DENone
33tier_3americanlisted.com7ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
34tier_3cehappear.fun4DYNADOT LLCAIDEN.NS.CLOUDFLARE.COMNone
35tier_3medicreed.club3NAMECHEAP INCmolly.ns.cloudflare.comPrivacy service provided by Withheld for Privacy ehf
36tier_3bing.com3MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
37tier_3aristo-hag.com3Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGNone
38tier_3wayfair.com3MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
39tier_3homeadvisorpros.com2GoDaddy.com, LLCARYA.NS.CLOUDFLARE.COMService Magic Inc
40tier_3boot-upcompletely-bestspeedyfile.best2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
41tier_3bestsecretflirt.com2GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
42tier_3wix.com2GoDaddy.com, LLCDNS1.P03.NSONE.NETWix.com, LTD.
43tier_3google.com_LOOP_12NoneNoneNone
44tier_3careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
45tier_3volvocars.com1CSC CORPORATE DOMAINS, INC.UDNS1.CSCDNS.NETVolvoCarCorporation
46tier_3cigarpage.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMBrandshopper, LP
47tier_3us.search.yahoo.com1MarkMonitor, Inc.NS1.YAHOO.COMOath Inc.
48tier_3ram21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMNone
49tier_3surveystarz.com1GoDaddy.com, LLCNS13.DOMAINCONTROL.COMNone
50tier_3performprecise-theuberfile.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
51tier_3promorepublic.com1Onlinenic IncLIA.NS.CLOUDFLARE.COMPromoRepublic Oy
52tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
53tier_3hp.com1MarkMonitor, Inc.NS1.HP.COMHP Inc.
54tier_3yifymovies.cam1NAMECHEAP INCNS1.CONTABO.NETPrivacy service provided by Withheld for Privacy ehf
55tier_3btpnative.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_128nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
3206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
4207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_113nannan
5104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
7185.107.56.199RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
8185.107.56.200RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
982.192.82.225AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2150nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_242nannan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
1352.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-72-29-7.compute-1.amazonaws.comnan
1434.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-34-197-176-2.compute-1.amazonaws.comnan
1554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_227ec2-54-208-107-202.compute-1.amazonaws.comnan
1618.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-18-235-67-128.compute-1.amazonaws.comnan
17173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22518.65.c0ad.ip4.static.sl-reverse.comnan
1867.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_218nannan
1923.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-23-21-53-13.compute-1.amazonaws.comnan
2054.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-54-197-247-190.compute-1.amazonaws.comnan
2123.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-23-21-166-45.compute-1.amazonaws.comnan
2254.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-54-235-205-204.compute-1.amazonaws.comnan
2399.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-99-84-114-25.ewr52.r.cloudfront.netnan
2499.84.114.53NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-99-84-114-53.ewr52.r.cloudfront.netnan
2599.84.114.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-99-84-114-17.ewr52.r.cloudfront.netnan
26209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_25nannan
27198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nannan
28167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_23nannan
2999.84.114.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_23server-99-84-114-65.ewr52.r.cloudfront.netnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_318nannan
3135.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_315123.171.246.35.bc.googleusercontent.comnan
3267.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_314nannan
3367.207.81.229North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_311nannan
34167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_311nannan
3564.227.12.111North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_39nannan
3652.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_38ec2-52-203-36-44.compute-1.amazonaws.comnan
3752.73.87.228AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_37ec2-52-73-87-228.compute-1.amazonaws.comnan
3835.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
3954.205.240.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36ec2-54-205-240-192.compute-1.amazonaws.comnan
40157.245.242.152North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_36nannan
41157.245.84.7North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
42161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
43104.21.68.134San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4423.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33a23-39-32-237.deploy.static.akamaitechnologies.comnan
45104.16.11.24San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
4699.84.189.122WashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_32server-99-84-189-122.iad89.r.cloudfront.netnan
4713.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32nanTrue
48167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
493.233.37.12AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-233-37-12.compute-1.amazonaws.comnan
5052.44.140.30AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-44-140-30.compute-1.amazonaws.comnan
51198.199.66.189North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
5288.80.185.92LondonEnglandAS63949 Linode, LLCEC1AUnited Kingdomtier_32li678-92.members.linode.comnan
5318.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-18-235-67-128.compute-1.amazonaws.comnan
54100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
5552.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-73-153-209.compute-1.amazonaws.comnan
56207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_31cbsmtp1.careerbliss.comnan
57184.87.71.70NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-71-70.deploy.static.akamaitechnologies.comnan
5850.28.76.122LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nannan
5952.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-72-29-7.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website