Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02472529202212021-04-1637.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1edupromocodes.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158845623
1tier_1filr.io1Dynadot, LLCNS1.COMMONMX.COMNone
2tier_1cdhatver.com1NamePal.com #8010 Inc.NS1.COMMONMX.COMNone
3tier_1buysellads.ph1NoneNoneNone
4tier_1avikjain.me1Dynadot, LLCNoneNone
5tier_1chungcucanhogiare.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
6tier_1ikvpromo.com1Communigal Communication LtdNS1.COMMONMX.COMNone
7tier_1akorv.me1GoDaddy.com, LLCNoneNone
8tier_1aicaiwang.me1GoDaddy.com, LLCNoneNone
9tier_1docx.me1Dynadot, LLCNoneNone
10tier_2btpnav.com1241API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2aristo-hag.com65Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_2nizephoros-pom.com47Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
13tier_21496.rawlexi.com41NoneNoneNone
14tier_2americanlisted.com39ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
15tier_29nl.es26NoneNoneNone
16tier_2newre-conversions.clickmeter.com26REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
17tier_2trk.jometer.com26Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
18tier_2api.l5srv.net26GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
19tier_2managerformula.com22NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
20tier_2click.expmediadirect.com21NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2btpnative.com161API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
22tier_2infopicked.com15NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2asufij.xyz15NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
24tier_2hureseyd.top4NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
25tier_2clk.rtpdn12.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
26tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
27tier_2rd.bizrate.com3MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
28tier_2rd.connexity.net3NoneNoneNone
29tier_262843.click.validclick.net2Safenames LtdNS1.FULLMAILBOX.COMNone
30tier_3irl.com53GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
31tier_3upward.careers26GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3managerformula.com25NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
33tier_3s3.amazonaws.com22MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
34tier_3xzb.subeamy.pw15NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
35tier_3us.tideri.com11united domains AGNS.UDAG.DENone
36tier_3chrismoneymaker.com3GoDaddy.com, LLCNS65.DOMAINCONTROL.COMAmaya Services Limited
37tier_3blockchain-com.email3NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
38tier_3storystudio.sfgate.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
39tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
40tier_3wayfair.com2MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
41tier_3runnewest-bestextremelyfile.best2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
42tier_3bing.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
43tier_3play.google.com1NoneNoneNone
44tier_3rd.bizrate.com1NoneNoneNone
45tier_3onnit.com1DNC Holdings, IncNS-1088.AWSDNS-08.ORGREDACTED FOR PRIVACY
46tier_3bostonproper.com1Amazon Registrar, Inc.NS-117.AWSDNS-14.COMWhois Privacy Service
47tier_31496.rawlexi.com1NoneNoneNone
48tier_3adzuna.com1123-Reg LimitedNS-1197.AWSDNS-21.ORGAdHunter
49tier_3us.allthetopbananas.com1ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
50tier_3thredup.com1GoDaddy.com, LLCMATT.NS.CLOUDFLARE.COMThredUp Inc.
51tier_3aristo-hag.com1Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
52tier_3bestsecretflirt.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
7104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
837.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
982.192.82.228AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2141nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_241nannan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
1352.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_236ec2-52-72-29-7.compute-1.amazonaws.comnan
1434.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_234ec2-34-197-176-2.compute-1.amazonaws.comnan
1567.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_226nannan
1654.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-54-208-107-202.compute-1.amazonaws.comnan
17198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_222nannan
1818.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-18-235-67-128.compute-1.amazonaws.comnan
19173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21618.65.c0ad.ip4.static.sl-reverse.comnan
2023.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-23-21-53-13.compute-1.amazonaws.comnan
2123.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-23-21-166-45.compute-1.amazonaws.comnan
2254.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-54-197-247-190.compute-1.amazonaws.comnan
2323.200.0.5EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_310a23-200-0-5.deploy.static.akamaitechnologies.comnan
2454.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-54-235-205-204.compute-1.amazonaws.comnan
2523.200.0.41EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_315a23-200-0-41.deploy.static.akamaitechnologies.comnan
2654.192.100.123NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-54-192-100-123.ewr53.r.cloudfront.netnan
2744.241.50.49BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_27ec2-44-241-50-49.us-west-2.compute.amazonaws.comnan
28192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_25rd.bizrate.comnan
2954.192.100.61NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-54-192-100-61.ewr53.r.cloudfront.netnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_326nannan
3123.200.0.41EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_315a23-200-0-41.deploy.static.akamaitechnologies.comnan
3235.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_311123.171.246.35.bc.googleusercontent.comnan
3323.200.0.5EdisonNew JerseyAS20940 Akamai International B.V.08817United Statestier_310a23-200-0-5.deploy.static.akamaitechnologies.comnan
3454.205.240.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_39ec2-54-205-240-192.compute-1.amazonaws.comnan
3552.88.215.122BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_38ec2-52-88-215-122.us-west-2.compute.amazonaws.comnan
3635.165.21.241BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_37ec2-35-165-21-241.us-west-2.compute.amazonaws.comnan
37167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_36nannan
3852.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-52-73-153-209.compute-1.amazonaws.comnan
3952.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-52-203-36-44.compute-1.amazonaws.comnan
4067.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
41161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
4267.207.81.229North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
43157.245.84.7North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
44167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
4592.205.4.117StrasbourgGrand EstAS21499 Host Europe GmbH67000Francetier_33ip-92-205-4-117.ip.secureserver.netnan
4652.73.87.228AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-73-87-228.compute-1.amazonaws.comnan
475.8.47.52HaarlemNorth HollandAS209813 Fast Content Delivery LTD2031Netherlandstier_33nanTrue
48151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_32nanTrue
4952.216.228.211AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5052.217.81.70AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
51157.245.242.152North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
5235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
53198.199.66.189North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
5464.227.12.111North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nannan
5523.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-39-32-237.deploy.static.akamaitechnologies.comnan
5652.217.81.30AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5752.20.53.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-20-53-118.compute-1.amazonaws.comnan
5852.44.140.30AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-44-140-30.compute-1.amazonaws.comnan
59204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31a-0001.a-msedge.netTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website