Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02772809280242021-04-1837.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1arrecharge.in1Dynadot LLCns1.commonmx.comNone
1tier_1goresults.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1anhdep.pro1DYNADOT LLCNS1.COMMONMX.COMNone
3tier_1dapool.me1Dynadot, LLCNoneNone
4tier_1kuniv.in1Dynadot LLCns1.commonmx.comNone
5tier_1flinzo.com1Dynadot5 LLCNS1.COMMONMX.COMNone
6tier_1boost.asia1Dynadot, LLCNS1.COMMONMX.COMNone
7tier_1divyabhasakr.co.in1Dynadot LLCns1.commonmx.comNone
8tier_1fujin.in1Dynadot LLCns1.commonmx.comNone
9tier_1emonj.net1Dynadot17 LLCNS1.COMMONMX.COMNone
10tier_2btpnav.com1311API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2nizephoros-pom.com60Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
12tier_2aristo-hag.com52Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
13tier_21496.rawlexi.com42GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
14tier_2americanlisted.com41ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
15tier_2managerformula.com27NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2click.expmediadirect.com23NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2asufij.xyz16NoneNoneNone
18tier_29nl.es16NoneNoneNone
19tier_2newre-conversions.clickmeter.com16REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
20tier_2btpnative.com151API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
21tier_2trk.jometer.com15Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
22tier_2api.l5srv.net15GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
23tier_2infopicked.com14NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
24tier_2mega.affiliate-dash.com4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
25tier_2rtbstream.com41API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
26tier_2us.expand-backend.mindmatch.ai4NoneNoneNone
27tier_2t.co3CSC Corporate Domains, Inc.d01-01.ns.twtrdns.netTwitter, Inc.
28tier_2us.tideri.com2united domains AGNS.UDAG.DENone
29tier_2recode.pw2GANDI SASNS-1611.AWSDNS-09.CO.UKPPCBUZZ
30tier_3irl.com49GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
31tier_3managerformula.com30NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
32tier_3s3.amazonaws.com27MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
33tier_3us.tideri.com18united domains AGNS.UDAG.DENone
34tier_3xzb.subeamy.pw16NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
35tier_3upward.careers15GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
36tier_3runnewest-bestextremelyfile.best4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3us.jobtome.com3GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
38tier_3weniix.com3NameCheap, Inc.DNS1.NAMECHEAPHOSTING.COMNone
39tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
40tier_3clkmg.com_LOOP_11NoneNoneNone
41tier_3visitmyrtlebeach.com1GoDaddy.com, LLCNS1.MBACC.NETMyrtle Beach Area Chamber of Commerce
42tier_3blockchain-com.email1NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
43tier_3heartfailure.healthclips.com1GoDaddy.com, LLCNS05.DOMAINCONTROL.COMThe Wellness Network
44tier_3homeadvisorpros.com1GoDaddy.com, LLCARYA.NS.CLOUDFLARE.COMService Magic Inc
45tier_3ads.midwayusa.com1GoDaddy.com, LLCNS-1486.AWSDNS-57.ORGMidwayUSA
46tier_3neuvoo.com1MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
47tier_3stocks.etoro.com1DomainTheNet.comEUR5.AKAM.NET******
48tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
49tier_3thelastpicture.show_LOOP_11NoneNoneNone
50tier_3vitalydesign.com1GoDaddy.com, LLCNS11.DOMAINCONTROL.COMVitaly Design Ltd.
51tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
52tier_3us.allthetopbananas.com1ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
53tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
54tier_3pec.healthination.com1Network Solutions, LLCNS-1509.AWSDNS-60.ORGHealthiNation, Inc.
55tier_3us.sercanto.com1OVH, SASNS11.CONSTELLIX.COMWickedin s.r.l.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_132nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
3207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_120nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_116nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
8185.107.56.198RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
982.192.82.226AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_2151nannan
11198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_242nannan
1235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
1354.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_234ec2-54-208-107-202.compute-1.amazonaws.comnan
1452.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_229ec2-52-72-29-7.compute-1.amazonaws.comnan
1518.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_229ec2-18-235-67-128.compute-1.amazonaws.comnan
1634.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-34-197-176-2.compute-1.amazonaws.comnan
17198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_223nannan
18172.232.19.138NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_312a172-232-19-138.deploy.static.akamaitechnologies.comnan
19173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21618.65.c0ad.ip4.static.sl-reverse.comnan
2067.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_215nannan
2123.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-23-21-166-45.compute-1.amazonaws.comnan
22172.232.19.147NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_317a172-232-19-147.deploy.static.akamaitechnologies.comnan
2354.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-54-235-205-204.compute-1.amazonaws.comnan
2444.239.66.208BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_27ec2-44-239-66-208.us-west-2.compute.amazonaws.comnan
2523.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-23-21-53-13.compute-1.amazonaws.comnan
2644.241.50.49BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_26ec2-44-241-50-49.us-west-2.compute.amazonaws.comnan
2754.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-54-197-247-190.compute-1.amazonaws.comnan
2899.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-99-84-114-25.ewr52.r.cloudfront.netnan
2952.207.48.224AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-52-207-48-224.compute-1.amazonaws.comnan
3035.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_318123.171.246.35.bc.googleusercontent.comnan
31172.232.19.147NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_317a172-232-19-147.deploy.static.akamaitechnologies.comnan
3267.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_315nannan
33172.232.19.138NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_312a172-232-19-138.deploy.static.akamaitechnologies.comnan
3452.88.215.122BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_311ec2-52-88-215-122.us-west-2.compute.amazonaws.comnan
3564.227.12.111North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_38nannan
36157.245.242.152North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_36nannan
3752.73.87.228AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36ec2-52-73-87-228.compute-1.amazonaws.comnan
3835.165.21.241BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_35ec2-35-165-21-241.us-west-2.compute.amazonaws.comnan
3954.205.240.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-54-205-240-192.compute-1.amazonaws.comnan
4067.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
41161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
4252.20.53.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-52-20-53-118.compute-1.amazonaws.comnan
4367.207.81.229North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
44167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
4552.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-203-36-44.compute-1.amazonaws.comnan
46130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_33206.38.211.130.bc.googleusercontent.comTrue
47162.0.209.104San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_33premium170-1.web-hosting.comnan
4852.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-73-153-209.compute-1.amazonaws.comnan
49100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
5052.217.1.102AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5152.216.137.78AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5252.217.98.206AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5352.216.137.46AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5452.217.73.38AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5552.217.43.126AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5635.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
5752.217.161.232AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5852.217.8.158AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
5952.217.13.46AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website