Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
024525411830202021-04-1037.48.65.149Android
tierdomaincountregistrarname_serversorg
0tier_1elternportal.org1ABOVE.COM PTY LTD.NS1.COMMONMX.COM\n
1tier_1bunkerkilts.com1Communigal Communication LtdNS1.COMMONMX.COMNone
2tier_1chimichurri.co1GoDaddy.com, LLCns2.commonmx.comNone
3tier_1allbank.co.in1Dynadot LLCns1.commonmx.comNone
4tier_1dakikpanel.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
5tier_1campusesolution.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159843300
6tier_1bicoholics.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158852663
7tier_1aweldaw.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1dd-routers.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
9tier_1freecodes.co1GoDaddy.com, LLCns2.commonmx.comNone
10tier_2aristo-hag.com92Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2btpnav.com881API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2ads35.adtelligent.com54DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
13tier_2dsp35.adtelligent.com54DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
14tier_2aibm1.mysearch.space54NoneNoneNone
15tier_2externals-1953518744.us-east-1.elb.amazonaws.com54MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
16tier_2search.snjsearch.com54GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2search-checker.com53Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
18tier_2m.onlineweb.mobi53GoDaddy.com, LLCNoneNone
19tier_22893.rawlexi.com35GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
20tier_2awakeningsco.com34GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
21tier_2click.expmediadirect.com28NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2api.apptap.com11Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
23tier_2redirect.viglink.com11Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
24tier_21track.pro11DANESCO TRADING LTDNS1.TOPDNS.MEDANESCO TRADING LTD.
25tier_2survey2you.com11URL SOLUTIONS INC.NS-1245.AWSDNS-27.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
26tier_2bainushe.com11URL SOLUTIONS INC.NS-1108.AWSDNS-10.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
27tier_2dollarsurvey365.online11URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
28tier_2api.mplayit.com10Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
29tier_2link.sylikes.com10MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
30tier_3bing.com53MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
31tier_3storystudio.sfgate.com23CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
32tier_3chrismoneymaker.com14GoDaddy.com, LLCNS65.DOMAINCONTROL.COMAmaya Services Limited
33tier_3a.dollarsurvey365.online11URL Solutions Inc.CRYSTAL.NS.CLOUDFLARE.COMNone
34tier_3m.placesiteb.xyz8Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
35tier_3m.gladplacespin.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
36tier_3moneyfinancegold.com6NAMECHEAP INCANNA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3reebok.com5CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
38tier_3b.funmapd.xyz5Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
39tier_3filter.onwardclick.com5NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
40tier_3b.delightcmain.xyz4Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
41tier_3toryburch.com4CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
42tier_3b.gladspaceplane.xyz3Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
43tier_3m.fastspotb.xyz3Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
44tier_3thelastpicture.show3NoneNoneNone
45tier_3b.meeryslotspin.xyz2Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
46tier_3macys.com1Network Solutions, LLCA1-135.AKAM.NETMacy's Systems and Technology, Inc.
47tier_3b.playspind.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
48tier_3coolmambo.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
49tier_3google.com_LOOP_11NoneNoneNone
50tier_3healthgrades.com1Amazon Registrar, Inc.NS-1102.AWSDNS-09.ORGNone
51tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
52tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
53tier_3search-checker.com1Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
54tier_3m.fastmapc.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_129nannan
1207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
2207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_113nannan
5104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
6206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_110nannan
7104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
882.192.82.228AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
9185.107.56.197RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_299nannan
11209.205.202.42New York CityNew YorkAS55081 24 SHELLS10004United Statestier_254static-42-202-205-209.24shells.netnan
12209.205.202.43New York CityNew YorkAS55081 24 SHELLS10004United Statestier_254static-43-202-205-209.24shells.netnan
1335.162.164.74BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_254ec2-35-162-164-74.us-west-2.compute.amazonaws.comnan
14198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_235nannan
15172.67.196.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
16192.241.229.243San FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_233nannan
17198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_228nannan
1850.16.173.246AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-50-16-173-246.compute-1.amazonaws.comnan
193.125.109.211Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_227ec2-3-125-109-211.eu-central-1.compute.amazonaws.comnan
2052.29.135.45Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_227ec2-52-29-135-45.eu-central-1.compute.amazonaws.comnan
2154.210.170.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-54-210-170-165.compute-1.amazonaws.comnan
22204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_223204.44.79.214.static.quadranet.comnan
2334.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-34-197-176-2.compute-1.amazonaws.comnan
24104.18.2.198San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_220nanTrue
25192.241.228.85San FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_220nannan
26104.21.41.235San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_220nanTrue
27192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nannan
2854.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_219ec2-54-208-107-202.compute-1.amazonaws.comnan
2934.207.43.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-34-207-43-7.compute-1.amazonaws.comnan
30204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_337a-0001.a-msedge.netTrue
3198.129.228.57DallasTexasAS33070 Rackspace Hosting75270United Statestier_323nannan
3213.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_316nanTrue
3392.205.4.117StrasbourgGrand EstAS21499 Host Europe GmbH67000Francetier_314ip-92-205-4-117.ip.secureserver.netnan
34104.18.80.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310nanTrue
35104.26.14.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
36104.18.79.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
37104.18.81.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
3823.201.27.178NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a23-201-27-178.deploy.static.akamaitechnologies.comnan
39104.18.82.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
40173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_35nannan
41104.18.78.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
42104.21.95.173San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
43172.67.72.49San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4467.43.9.71LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_33host.encontext.comnan
45172.67.146.181San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4623.38.170.98NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_32a23-38-170-98.deploy.static.akamaitechnologies.comnan
4723.38.170.99NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-99.deploy.static.akamaitechnologies.comnan
4823.39.32.210NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-39-32-210.deploy.static.akamaitechnologies.comnan
4964.91.232.212LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
5023.38.170.41NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-41.deploy.static.akamaitechnologies.comnan
51100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.netnan
52143.204.148.116NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-143-204-148-116.ewr52.r.cloudfront.netnan
5345.33.8.244RichardsonTexasAS63949 Linode, LLC75080United Statestier_31li962-244.members.linode.comnan
54192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nannan
55172.67.196.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
56104.26.15.226San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website