Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
023223511671252021-04-0937.48.65.149Android
tierdomaincountregistrarname_serversorg
0tier_1joniscoffee.com1GoDaddy.com, LLCNS1.COMMONMX.COMDomains By Proxy, LLC
1tier_1bebeto.me1GoDaddy.com, LLCNoneNone
2tier_1azulholisticspa.com1GoDaddy.com, LLCNS1.COMMONMX.COMDomains By Proxy, LLC
3tier_1hao678.info1DYNADOT LLCNS1.COMMONMX.COMNone
4tier_1dsnn.info1DYNADOT LLCNS1.COMMONMX.COMNone
5tier_1gospodina.me1Dynadot, LLCNoneNone
6tier_1apknyot.info1Dynadot, LLCNS1.COMMONMX.COMNone
7tier_1diverte.me1Dynadot, LLCNoneNone
8tier_191zy.cc1Snag Your Name LLCNS1.COMMONMX.COMNone
9tier_1jagdish.me1Dynadot, LLCNoneNone
10tier_2aristo-hag.com81Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2btpnav.com741API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2ads35.adtelligent.com63DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
13tier_2dsp35.adtelligent.com63DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
14tier_2aibm1.mysearch.space63NoneNoneNone
15tier_2externals-1953518744.us-east-1.elb.amazonaws.com63MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
16tier_2search.snjsearch.com63GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2search-checker.com60Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
18tier_2m.onlineweb.mobi60GoDaddy.com, LLCNoneNone
19tier_2click.expmediadirect.com30NoneNoneNone
20tier_22893.rawlexi.com27GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
21tier_2awakeningsco.com27GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
22tier_21track.pro13DANESCO TRADING LTDNS1.TOPDNS.MEDANESCO TRADING LTD.
23tier_2survey2you.com13URL SOLUTIONS INC.NS-1245.AWSDNS-27.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
24tier_2bainushe.com13URL SOLUTIONS INC.NS-1108.AWSDNS-10.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
25tier_2dollarsurvey365.online13URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
26tier_2infopicked.com9NoneNoneNone
27tier_2api.apptap.com9Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
28tier_2redirect.viglink.com9Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
29tier_2link.sylikes.com9MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
30tier_3bing.com63MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
31tier_3a.dollarsurvey365.online13URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
32tier_3m.placesiteb.xyz9Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
33tier_3chrismoneymaker.com7GoDaddy.com, LLCNS65.DOMAINCONTROL.COMAmaya Services Limited
34tier_3m.gladplacespin.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
35tier_3moneyfinancegold.com7NoneNoneNone
36tier_3b.meeryslotspin.xyz6Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
37tier_3b.gladspaceplane.xyz6Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
38tier_3reebok.com6CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
39tier_3mergerinvesting.com6NoneNoneNone
40tier_3rd.bizrate.com3MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
41tier_3b.delightcmain.xyz2Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
42tier_3ram21.proasdf.com2GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
43tier_3healthgrades.com2Amazon Registrar, Inc.NS-1102.AWSDNS-09.ORGWhois Privacy Service
44tier_3searchfrequently.com1GoDaddy.com, LLCNEIL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
45tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
46tier_3filter.onwardclick.com1NoneNoneNone
47tier_3shopnsave.world_LOOP_11NoneNoneNone
48tier_3click.appcast.io_LOOP_11NoneNoneNone
49tier_3m.fastspotb.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
50tier_3thelastpicture.show1NoneNoneNone
51tier_3amazonhvh.thejobnetwork.com1GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
52tier_3feed.int.jobble.com1GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_111nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
7206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_17nannan
874.63.241.30DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1330-241-63-74.static.reverse.lstn.netnan
982.192.82.225AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_283nannan
11209.205.202.42New York CityNew YorkAS55081 24 SHELLS10004United Statestier_263static-42-202-205-209.24shells.netnan
12209.205.202.43New York CityNew YorkAS55081 24 SHELLS10004United Statestier_263static-43-202-205-209.24shells.netnan
1335.162.164.74BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_263ec2-35-162-164-74.us-west-2.compute.amazonaws.comnan
14192.241.228.85San FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_237nannan
1554.210.170.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_235ec2-54-210-170-165.compute-1.amazonaws.comnan
16104.21.41.235San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_234nanTrue
173.125.109.211Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_233ec2-3-125-109-211.eu-central-1.compute.amazonaws.comnan
1852.29.135.45Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_230ec2-52-29-135-45.eu-central-1.compute.amazonaws.comnan
19198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_230nannan
2050.16.173.246AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-50-16-173-246.compute-1.amazonaws.comnan
21198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_228nannan
2234.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-34-197-176-2.compute-1.amazonaws.comnan
23172.67.196.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_226nanTrue
24192.241.229.243San FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_226nannan
2554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-54-208-107-202.compute-1.amazonaws.comnan
26104.18.3.198San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_219nanTrue
27192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_33nannan
28162.254.190.3PhoenixArizonaAS32338 Hostiserver Ltd85001United Statestier_213alt1.omnistrongbow.comnan
29139.45.197.236AmsterdamNorth HollandAS9002 RETN Limited1012Netherlandstier_213nannan
30204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_349a-0001.a-msedge.netTrue
3113.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_314nanTrue
32104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
33104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
34104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_38nanTrue
35104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
3692.205.4.117StrasbourgGrand EstAS21499 Host Europe GmbH67000Francetier_37ip-92-205-4-117.ip.secureserver.netnan
37104.21.95.173San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
3823.201.27.178NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_36a23-201-27-178.deploy.static.akamaitechnologies.comnan
3945.55.189.248CliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_36nannan
40104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
41104.26.15.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
42192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_33nannan
43172.67.72.49San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
44100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
45162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_32nannan
46143.204.148.2NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-143-204-148-2.ewr52.r.cloudfront.netnan
47104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
48172.67.138.156San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4945.33.8.244RichardsonTexasAS63949 Linode, LLC75080United Statestier_31li962-244.members.linode.comnan
50173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nannan
5167.43.9.71LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
52199.83.128.213Redwood CityCaliforniaAS19551 Incapsula Inc94065United Statestier_31199.83.128.213.ip.incapdns.netTrue
5354.234.245.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-234-245-31.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website