Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
028428910040242021-04-1837.48.65.149Chrome
tierdomaincountregistrarname_serversorg
0tier_1arrecharge.in1Dynadot LLCns1.commonmx.comNone
1tier_1goresults.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1anhdep.pro1DYNADOT LLCNS1.COMMONMX.COMNone
3tier_1dapool.me1Dynadot, LLCNoneNone
4tier_1kuniv.in1Dynadot LLCns1.commonmx.comNone
5tier_1flinzo.com1DYNADOT5 LLCNS1.COMMONMX.COMNone
6tier_1boost.asia1Dynadot, LLCNS1.COMMONMX.COMNone
7tier_1divyabhasakr.co.in1Dynadot LLCns1.commonmx.comNone
8tier_1fujin.in1Dynadot LLCns1.commonmx.comNone
9tier_1emonj.net1Dynadot17 LLCNS1.COMMONMX.COMNone
10tier_2btpnav.com1291API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2aristo-hag.com90Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_21496.rawlexi.com42GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
13tier_2americanlisted.com40ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2us.expand-backend.mindmatch.ai15NoneNoneNone
15tier_2click.expmediadirect.com15NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
16tier_29nl.es15NoneNoneNone
17tier_2newre-conversions.clickmeter.com15REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
18tier_2trk.jometer.com15Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
19tier_2api.l5srv.net15GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2btpnative.com141API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
21tier_2traff0121.com13NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2contentgate.club13URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
23tier_2infopicked.com13NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
24tier_20.contentgate.club12URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
25tier_21.contentgate.club12URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
26tier_22.contentgate.club11URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
27tier_2nizephoros-pom.com11Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
28tier_23.contentgate.club10URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
29tier_2trfktunnel.com10NAMECHEAP INCDAVE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
30tier_3irl.com85GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
31tier_3upward.careers15GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3aliexpress.com_LOOP_110NoneNoneNone
33tier_3neuvoo.com7MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
34tier_3wix.com6GoDaddy.com, LLCDNS1.P03.NSONE.NETWix.com, LTD.
35tier_3google.com_LOOP_15NoneNoneNone
36tier_3ram21.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
37tier_3cehappear.fun4Dynadot LLCAIDEN.NS.CLOUDFLARE.COMNone
38tier_3americanlisted.com4ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
39tier_3us.tideri.com3united domains AGNS.UDAG.DENone
40tier_3weniix.com3NAMECHEAP INCDNS1.NAMECHEAPHOSTING.COMPrivacy service provided by Withheld for Privacy ehf
41tier_3us.allthetopbananas.com3ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
42tier_3us.jobtome.com3GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
43tier_3equinoxadvertising.com2NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
44tier_3aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
45tier_3google.com2MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
46tier_3diversityjobs.com2GoDaddy Online Services Cayman Islands LTDNS-CLOUD-E1.GOOGLEDOMAINS.COMNone
47tier_3us.sercanto.com2OVH, SASNS11.CONSTELLIX.COMWickedin s.r.l.
48tier_3zennioptical.com1Wild West Domains, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
49tier_3hollandamerica.com1MarkMonitor, Inc.EUR2.AKAM.NETHolland America Line - USA Inc.
50tier_33.contentgate.club1URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
51tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
52tier_3seasoned.co1CCI REG S.A.ns-419.awsdns-52.comSEASONED, LLC
53tier_3om.forgeofempires.com1INWX GmbH & Co. KGNS.INWX.DEREDACTED FOR PRIVACY
54tier_3ads.midwayusa.com1GoDaddy.com, LLCNS-1486.AWSDNS-57.ORGMidwayUSA
55tier_30.contentgate.club1URL Solutions Inc.hans.ns.cloudflare.comGLOBAL DOMAIN PRIVACY SERVICES INC
56tier_3opticsplanet.com1GoDaddy.com, LLCNS1.ECENTRIA.COMECENTRIA IPH, LLC
57tier_3go.etoro.com1DomainTheNet.comEUR5.AKAM.NET******
58tier_3filter.onwardclick.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
59tier_3venacbd.com_LOOP_11NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_133nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_129nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_118nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_16nannan
8185.107.56.197RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2145nannan
11178.62.225.201AmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_33nannan
12198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_242nannan
1335.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.comnan
1434.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_227ec2-34-197-176-2.compute-1.amazonaws.comnan
1552.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-52-72-29-7.compute-1.amazonaws.comnan
1618.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-18-235-67-128.compute-1.amazonaws.comnan
1754.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-208-107-202.compute-1.amazonaws.comnan
1888.99.101.106Hohen NeuendorfBrandenburgAS24940 Hetzner Online GmbH16540Germanytier_223static.106.101.99.88.clients.your-server.denan
19173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_22018.65.c0ad.ip4.static.sl-reverse.comnan
2034.120.235.106Kansas CityMissouriAS15169 Google LLC64121United Statestier_215106.235.120.34.bc.googleusercontent.comTrue
21198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_215nannan
2267.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_215nannan
23184.85.14.232NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_210a184-85-14-232.deploy.static.akamaitechnologies.comnan
2423.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-23-21-166-45.compute-1.amazonaws.comnan
2523.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-23-21-53-13.compute-1.amazonaws.comnan
2654.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-54-235-205-204.compute-1.amazonaws.comnan
27108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_26b9.c1.a86c.ip4.static.sl-reverse.comnan
2854.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-54-197-247-190.compute-1.amazonaws.comnan
29173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_25nannan
30100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_318pool-100-37-135-2.nycmny.fios.verizon.netnan
3152.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_316ec2-52-203-36-44.compute-1.amazonaws.comnan
3267.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_315nannan
33157.245.84.7North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_310nannan
34161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_39nannan
3554.205.240.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_39ec2-54-205-240-192.compute-1.amazonaws.comnan
3652.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_38ec2-52-73-153-209.compute-1.amazonaws.comnan
37167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_38nannan
3867.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_38nannan
3967.207.81.229North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_37nannan
40167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
4154.211.44.127AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-54-211-44-127.compute-1.amazonaws.comnan
42162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_34nannan
4352.73.87.228AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-52-73-87-228.compute-1.amazonaws.comnan
4435.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.comnan
4535.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_33123.171.246.35.bc.googleusercontent.comnan
46185.230.61.179Foster CityCaliforniaAS58182 Wix.com Ltd.94404United Statestier_33nannan
47162.0.209.104San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_33premium170-1.web-hosting.comnan
48178.62.225.201AmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_33nannan
49130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_33206.38.211.130.bc.googleusercontent.comTrue
50185.230.61.98Foster CityCaliforniaAS58182 Wix.com Ltd.94404United Statestier_33nannan
5169.16.204.63LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_32host.encontext.comnan
52172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_32lga34s18-in-f4.1e100.netnan
5399.86.38.37SeattleWashingtonAS16509 Amazon.com, Inc.98111United Statestier_32server-99-86-38-37.sea19.r.cloudfront.netnan
54204.12.118.145BoulderColoradoAS20021 HostMySite80304United Statestier_32nannan
5534.90.160.43GroningenGroningenAS15169 Google LLC9711Netherlandstier_3243.160.90.34.bc.googleusercontent.comnan
5618.232.246.222AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-232-246-222.compute-1.amazonaws.comnan
5754.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-208-107-202.compute-1.amazonaws.comnan
58184.85.14.128NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-85-14-128.deploy.static.akamaitechnologies.comnan
5923.44.217.214NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-44-217-214.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website