Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02052117142762021-04-0164.32.8.68Safari
tierdomaincountregistrarname_serversorg
0tier_1bugpoint.net1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
1tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
2tier_1cupidonx.com1SNAPNAMES 23, LLCNS1.DNSNUTS.COMNone
3tier_1brickerenterprise.com1NamePal.com #8011, LLCNS1.DNSNUTS.COMNone
4tier_1clipxplore.com1SouthNames, LLCNS1.DNSNUTS.COMNone
5tier_1albumkings.net1Snoqulamiedomains.com LLCNS1.DNSNUTS.COMNone
6tier_1dutopia.info1UDomainName.com LLCNS1.DNSNUTS.COMThe Management Group II
7tier_1healthylifestar.com1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
8tier_1alchemicalpsychology.com1SNAPNAMES 13, LLCNS1.DNSNUTS.COMNone
9tier_1aayaamlabs.com1SNAPNAMES 84, LLCNS1.DNSNUTS.COMNone
10tier_2btpnav.com541API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_21496.wcitianka.com44GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
12tier_2americanlisted.com43ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
13tier_2nizephoros-pom.com31Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
14tier_29nl.es25NoneNoneNone
15tier_2newre-conversions.clickmeter.com25NoneNoneNone
16tier_2ring.joveo.com25Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
17tier_2click.expmediadirect.com23NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2rd.centrumjobs.com16GoDaddy.com, LLCNS-1527.AWSDNS-62.ORGDomains By Proxy, LLC
19tier_2click.appcast.io13101Domain GRS LtdNS-85.AWSDNS-10.COMNone
20tier_3signup.surveyvoices.com25GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMNone
21tier_3managerformula.com23NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
22tier_3neuvoo.com12MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
23tier_3xzb.subeamy.pw9NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
24tier_3s3.amazonaws.com8MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
25tier_3bing.com5MarkMonitor Inc.DNS1.P09.NSONE.NETNone
26tier_3click.appcast.io4101Domain GRS LtdNS-85.AWSDNS-10.COMNone
27tier_3livefeed.erotica.live4NoneNoneNone
28tier_3runnewest-bestextremelyfile.best3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
29tier_3kohls.com_LOOP_12NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_121nan
164.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_119nan
264.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
364.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_116nan
4185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_113nan
5185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_112nan
6185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_19nan
7185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_17nan
8209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_267nan
9198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_245nan
1035.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_243nan
1134.200.146.95ec2-34-200-146-95.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224nan
12198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_223nan
1354.197.247.190ec2-54-197-247-190.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_220nan
1454.84.27.165ec2-54-84-27-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_218nan
1554.235.205.204ec2-54-235-205-204.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216nan
16192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_214nan
17173.192.101.2418.65.c0ad.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_212nan
18172.232.19.138a172-232-19-138.deploy.static.akamaitechnologies.comNewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_314nan
19172.67.147.244nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_313True
20104.21.71.177nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_312True
21100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38nan
22204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_35True
23172.232.19.147a172-232-19-147.deploy.static.akamaitechnologies.comNewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_35nan
2452.88.215.122ec2-52-88-215-122.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_35nan
253.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34nan
2635.165.21.241ec2-35-165-21-241.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_34nan
27104.219.248.15server133-1.web-hosting.comSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_34nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website