Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02752839780372021-08-2537.48.65.149Iphone
tierdomaincountregistrarname_serversorg
0tier_1mundosuenos.com1DYNADOT9 LLCNS1.COMMONMX.COMNone
1tier_1healthsourceofmckinney.com1DropCatch.com 1218 LLCNS1.COMMONMX.COMNone
2tier_1colinalexander.info1DYNADOT LLCNS1.COMMONMX.COMNone
3tier_13456dy.com1DYNADOT LLCNS1.COMMONMX.COMNone
4tier_1campusesolution.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159843300
5tier_1daalmekaala.in1Dynadot LLCns1.commonmx.comNone
6tier_1kickasskatcr.info1DYNADOT LLCNS1.COMMONMX.COMNone
7tier_1aniveldetenis.info1DYNADOT LLCNS1.COMMONMX.COMNone
8tier_1chacalavong.info1DYNADOT LLCNS1.COMMONMX.COMNone
9tier_1bitlockerutility.net1Ripcord Domains, LLCNS1.COMMONMX.COMNone
10tier_2btpnav.com821API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2antig-hra.com46Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
12tier_2api.quotes.com45Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
13tier_2changeslots.com44Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
14tier_2barah-flo.com44Amazon Registrar, Inc.NS-1435.AWSDNS-51.ORGWhois Privacy Service
15tier_2ads35.adtelligent.com22DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
16tier_2dsp35.adtelligent.com22DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
17tier_2aibm1.mysearch.space22NoneNoneNone
18tier_2externals-1953518744.us-east-1.elb.amazonaws.com22MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
19tier_2search.snjsearch.com22GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2search-checker.com20Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
21tier_2m.onlineweb.mobi20GoDaddy.com, LLCNoneNone
22tier_21496.rebiraert.com14GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
23tier_2fabia-her.com14Amazon Registrar, Inc.NS-1206.AWSDNS-22.ORGWhois Privacy Service
24tier_2americanlisted.com13ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
25tier_2api.apptap.com13Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
26tier_2api.mplayit.com13Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
27tier_2redirect.viglink.com12Amazon Registrar, Inc.NS1.VIGLINK.COMNone
28tier_2link.sylikes.com12MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
29tier_2btpnative.com111API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
30tier_3captcha-app.com57DANESCO TRADING LTDAIDEN.NS.CLOUDFLARE.COMDANESCO TRADING LTD.
31tier_3theconnectvpn.com44DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
32tier_3bing.com22MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
33tier_3storystudio.sfchronicle.com6CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
34tier_3upward.careers4GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
35tier_3rd.bizrate.com4NoneNoneNone
36tier_3everyjobforme.com3GoDaddy.com, LLCNS-1009.AWSDNS-62.NETPercipio Holdings, Inc.
37tier_3protect-ios.com3Porkbun LLCCURITIBA.PORKBUN.COMPrivate by Design, LLC
38tier_3click.appcast.io3101Domain GRS LtdNS-85.AWSDNS-10.COMNone
39tier_3seek.theweb.com3MarkMonitor, Inc.DNS1.P09.NSONE.NETCBS Interactive Inc.
40tier_3gua21.proasdf.com2GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
41tier_3careerbuilder.com2CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
42tier_3liquid-iv.com1CSC CORPORATE DOMAINS, INC.DNS02.UNILEVER.COMLiquid IV
43tier_3ssense.com1MarkMonitor, Inc.UMA.NS.CLOUDFLARE.COMNone
44tier_3harryanddavid.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NET1-800-FLOWERS.COM, INC.
45tier_3shopnsave.world1NoneNoneNone
46tier_3datedate.today1GoDaddy.com, LLCzara.ns.cloudflare.comNone
47tier_3walmart.com1CSC CORPORATE DOMAINS, INC.A1-185.AKAM.NETNot Disclosed
48tier_3top.digitaltrendsradar.com1PDR Ltd. d/b/a PublicDomainRegistry.comGWEN.NS.CLOUDFLARE.COMPrivacy Protect, LLC (PrivacyProtect.org)
49tier_3clkmg.com_LOOP_11NoneNoneNone
50tier_3sweetwater.com1CSC CORPORATE DOMAINS, INC.DNS1.P02.NSONE.NETSweetwater Sound, Inc.
51tier_3m.pocketoption.com1GoDaddy.com, LLCNS75.DOMAINCONTROL.COMNone
52tier_3ihirenursing.com1ENOM, INC.NS1.IHIRE.COMREDACTED FOR PRIVACY
53tier_3adserver.encontextadvertising.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
54tier_3pesoaniz.com1URL SOLUTIONS INC.NS-1270.AWSDNS-30.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
55tier_3luj21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
56tier_3verifiedbrandsite.com1GoDaddy.com, LLCNS1.DIGITALOCEAN.COMDomains By Proxy, LLC
57tier_3replacements.com1Network Solutions, LLCJEREMY.NS.CLOUDFLARE.COMNone
58tier_3top.allresultsweb.com1MarkMonitor, Inc.DNS1.P06.NSONE.NETIAC Publishing, LLC
59tier_3michaelkors.com1NOM-IQ Ltd dba Com LaudeA1-111.AKAM.NETMichael Kors, L.L.C.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0162.210.196.168WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
1199.115.115.102WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
2162.210.196.166WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
3199.115.115.118WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_115nannan
4207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_115nannan
5162.210.196.167WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_115nannan
6199.115.115.119WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_113nannan
7207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nannan
8207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_19nannan
9199.115.115.116WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_17nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_296nannan
1134.194.124.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_260ec2-34-194-124-180.compute-1.amazonaws.comnan
125.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_245nannan
1318.204.186.203AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_244ec2-18-204-186-203.compute-1.amazonaws.comnan
14107.23.13.159AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_244ec2-107-23-13-159.compute-1.amazonaws.comnan
15209.205.202.42New York CityNew YorkAS55081 24 SHELLS10004United Statestier_222static-42-202-205-209.24shells.netnan
16209.205.202.43New York CityNew YorkAS55081 24 SHELLS10004United Statestier_222static-43-202-205-209.24shells.netnan
1735.162.164.74BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_222ec2-35-162-164-74.us-west-2.compute.amazonaws.comnan
18192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34rd.bizrate.comnan
19192.241.228.85San FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_216nannan
20198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_214nannan
2135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_213240.61.209.35.bc.googleusercontent.comnan
22104.21.12.139San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_213nanTrue
2352.72.49.164AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-52-72-49-164.compute-1.amazonaws.comnan
2452.0.77.178AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-52-0-77-178.compute-1.amazonaws.comnan
2535.156.81.126Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_212ec2-35-156-81-126.eu-central-1.compute.amazonaws.comnan
26173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21118.65.c0ad.ip4.static.sl-reverse.comnan
273.209.187.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-3-209-187-98.compute-1.amazonaws.comnan
283.66.206.147Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_210ec2-3-66-206-147.eu-central-1.compute.amazonaws.comnan
2934.205.249.3AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-34-205-249-3.compute-1.amazonaws.comnan
30172.67.193.170San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_343nanTrue
31104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_325nanTrue
32172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_319nanTrue
33104.21.12.48San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_314nanTrue
34204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_310a-0001.a-msedge.netTrue
35131.253.33.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_38a-0001.dc-msedge.netTrue
36151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_36nanTrue
3767.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_34nannan
38192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34rd.bizrate.comnan
3913.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_34nanTrue
40162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_33nannan
4151.79.176.33SingaporeSingaporeAS16276 OVH SAS048508Singaporetier_33ns5002345.ip-51-79-176.netnan
42158.69.125.9MontréalQuebecAS16276 OVH SASH2WCanadatier_33ns521759.ip-158-69-125.netnan
43100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
44104.18.28.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
45104.18.29.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
46107.22.225.160AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-107-22-225-160.compute-1.amazonaws.comnan
47104.16.103.92San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
48151.101.2.126San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
4967.227.241.125LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
5013.225.229.65New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-229-65.jfk51.r.cloudfront.netnan
51172.67.138.153San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
52184.50.207.107EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31a184-50-207-107.deploy.static.akamaitechnologies.comnan
5366.81.205.246AustinTexasAS40034 Confluence Networks Inc78701United Statestier_31nannan
5452.2.188.203AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-2-188-203.compute-1.amazonaws.comnan
55151.101.2.133San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
56185.104.210.34PragueHlavní město PrahaAS200449 Qrator Labs CZ s.r.o.110 00Czech Republictier_31nanTrue
57208.86.80.146WashingtonWashington, D.C.AS22253 IHIRE LLC20045United Statestier_31host146-80.208-86-80-146-ihire.comnan
5867.227.155.96LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nannan
59139.45.197.155AmsterdamNorth HollandAS9002 RETN Limited1012Netherlandstier_31nannan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website