Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01911995990172021-04-1364.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1eagleware.net1Wildzebradomains, LLCNS1.DNSNUTS.COMNone
1tier_1curious-information.net1MidWest Domains LLCNS1.DNSNUTS.COMNone
2tier_1dredown.net1Domainsalsa.com LLCNS1.DNSNUTS.COMNone
3tier_1blessedit.com1eNom387, IncorporatedNS1.DNSNUTS.COMNone
4tier_1economictims.com1Domain Landing Zone LLCNS1.DNSNUTS.COMNone
5tier_1donkis.net1Bonzai Domains, LLCNS1.DNSNUTS.COMThe Management Group II
6tier_1civgames.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMNone
7tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
8tier_1dakmm.com1Private Domains, IncorporatedNS1.DNSNUTS.COMNone
9tier_1alekseypopovv.net1Namearsenal.com LLCNS1.DNSNUTS.COMNone
10tier_2aristo-hag.com69Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2track.vcdc.com60Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
12tier_2api.apptap.com25Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
13tier_2redirect.viglink.com24Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
14tier_2link.sylikes.com24MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
15tier_2rd.bizrate.com20MarkMonitor Inc.NS-1189.AWSDNS-20.ORGNone
16tier_2rd.connexity.net20NoneNoneNone
17tier_2trackyourmpg.com14GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
18tier_2clk.rtpdn12.com14NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2api.mplayit.com10Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
20tier_2click.expmediadirect.com8NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2btpnav.com51API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
22tier_21496.rawlexi.com5GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
23tier_2click.junmediadirect.com4NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
24tier_262992.click.validclick.net4Safenames LtdNS1.FULLMAILBOX.COMNone
25tier_263084.click.validclick.net3Safenames LtdNS1.FULLMAILBOX.COMNone
26tier_2ads35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
27tier_2dsp35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
28tier_2aibm1.mysearch.space3NoneNoneNone
29tier_2externals-1953518744.us-east-1.elb.amazonaws.com3MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
30tier_3irl.com26GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
31tier_3storystudio.sfgate.com18CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
32tier_3m.placesiteb.xyz7Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
33tier_3michaelkors.com7NOM-IQ Ltd dba Com LaudeA1-111.AKAM.NETMichael Kors, L.L.C.
34tier_3m.gladplacespin.xyz7Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
35tier_3rd.bizrate.com6MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
36tier_3venus.com5GoDaddy.com, LLCNS0.DNSMADEEASY.COMVenus Fashion, Inc.
37tier_3americanlisted.com5ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
38tier_3bing.com3MarkMonitor Inc.DNS1.P09.NSONE.NETNone
39tier_3ww1.survey-smiles.com3Media Elite Holdings LimitedNS1.WOMBATDNS.COMFundacion Privacy Services LTD
40tier_3beyourxfriend.com3GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
41tier_3frontgate.com2Network Solutions, LLCNS1.HSN.NETCornerstone Brands, Inc.
42tier_3grandinroad.com_LOOP_11NoneNoneNone
43tier_3track.vcdc.com1Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
44tier_3win1.trustedpush.com1NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
45tier_3wayfair.com_LOOP_11NoneNoneNone
46tier_3michaelkors.com_LOOP_11NoneNoneNone
47tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
48tier_3aspiration.com1NAMECHEAP INCNS-1040.AWSDNS-02.ORGPrivacy service provided by Withheld for Privacy ehf
49tier_3m.fastspotb.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
50tier_3wayfair.com1MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
51tier_3invictastores.com_LOOP_11NoneNoneNone
52tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
53tier_3blair.com1CSC CORPORATE DOMAINS, INC.NS-1237.AWSDNS-26.ORGBluestem Brands, Inc.
54tier_3b.gladspaceplane.xyz1Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
55tier_3carinsurance.net1GoDaddy.com, LLCNS-1055.AWSDNS-03.ORGDomains By Proxy, LLC
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_122nan
164.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_116nan
2185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_113nan
364.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_113nan
4185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_112nan
564.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_110nan
6185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_110nan
7185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_110nan
8167.233.8.197static.197.8.233.167.clients.your-server.deNürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_31nan
9192.138.218.207nanSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_36nan
1034.197.176.2ec2-34-197-176-2.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221nan
11192.138.218.139rd.connexity.netSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_220nan
1218.235.67.128ec2-18-235-67-128.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_219nan
13204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_218nan
1454.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_217nan
1534.197.67.232ec2-34-197-67-232.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_217nan
1652.72.29.7ec2-52-72-29-7.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215nan
17104.18.25.3nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_214True
1852.206.141.190ec2-52-206-141-190.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214nan
19173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_214nan
2034.225.128.119ec2-34-225-128-119.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213nan
213.226.37.31ec2-3-226-37-31.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211nan
22209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_29nan
23198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_28nan
24198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_27nan
25198.134.116.18nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nan
2652.205.177.114ec2-52-205-177-114.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24nan
27209.205.202.42static-42-202-205-209.24shells.netNew York CityNew YorkAS55081 24 SHELLS10004United Statestier_23nan
28151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_317True
29104.18.81.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310True
3023.73.245.89a23-73-245-89.deploy.static.akamaitechnologies.comEdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_36nan
3152.73.87.228ec2-52-73-87-228.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36nan
32192.138.218.207nanSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_36nan
3323.73.235.8a23-73-235-8.deploy.static.akamaitechnologies.comEdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_35nan
34100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35nan
3535.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_35nan
3654.205.240.192ec2-54-205-240-192.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34nan
37104.18.79.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34True
38204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_33True
39161.35.60.200nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nan
40199.59.242.153nanNew York CityNew YorkAS395082 Bodis, LLC10004United Statestier_33nan
4145.33.8.244li962-244.members.linode.comRichardsonTexasAS63949 Linode, LLC75080United Statestier_33nan
4267.207.81.229nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
43157.245.242.152nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
4467.207.80.24nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
4564.227.12.111nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
4652.73.153.209ec2-52-73-153-209.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
47157.245.84.7nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
48151.101.64.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31True
49167.233.8.197static.197.8.233.167.clients.your-server.deNürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_31nan
50100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31nan
51104.18.82.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5223.208.49.206a23-208-49-206.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31nan
5323.59.224.22a23-59-224-22.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31nan
5452.203.36.44ec2-52-203-36-44.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
55100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
5652.35.186.119ec2-52-35-186-119.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_31nan
5723.64.60.211a23-64-60-211.deploy.static.akamaitechnologies.comEdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website