Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01471485280172021-04-2164.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMThe Management Group II
1tier_1clipxplore.com1SouthNames Inc.NS1.DNSNUTS.COMThe Management Group II
2tier_1albumkings.net1Snoqulamiedomains.com LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1drmommyonline.com1DevilDogDomains.com, LLCNS1.DNSNUTS.COMThe Management Group II
4tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
5tier_1beritatrendz.com1Nameselite, LLCNS1.DNSNUTS.COMNone
6tier_1dakmm.com1Private Domains, IncorporatedNS1.DNSNUTS.COMNone
7tier_1alchemicalpsychology.com1SNAPNAMES 13, LLCNS1.DNSNUTS.COMNone
8tier_1kahimyang.info1Allearthdomains.com LLCNS1.DNSNUTS.COM['The Management Group II', 'Statutory Masking Enabled']
9tier_1download-wallpaper.net1eNom461, IncorporatedNS1.DNSNUTS.COMThe Management Group II
10tier_21496.rawlexi.com62GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com59ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io29101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_29nl.es28NoneNoneNone
14tier_2newre-conversions.clickmeter.com28NoneNoneNone
15tier_2api.l5srv.net24GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
16tier_2trk.jometer.com23Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
17tier_2aristo-hag.com18Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
18tier_2careerbliss.com12GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
19tier_2track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
20tier_2trk.careerbliss.com10GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
21tier_2btpnav.com61API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
22tier_2click.appcast.io_LOOP_14NoneNoneNone
23tier_2trackyourmpg.com3GoDaddy Online Services Cayman Islands LTDHUGH.NS.CLOUDFLARE.COMNone
24tier_2p.nexxt.com3Network Solutions, LLCNS21.WORLDNIC.COMNone
25tier_2seattlejobs.com2ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
26tier_2nizephoros-pom.com2Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
27tier_2get.popplunder.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
28tier_2trustedpush.com2NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
29tier_2win1.trustedpush.com2NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
30tier_3upward.careers24GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
31tier_3careerbliss.com17GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
32tier_3irl.com10GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
33tier_3google.com7MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
34tier_3storystudio.sfgate.com5CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
35tier_3click.joveo.com5Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
36tier_3americanlisted.com3ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
37tier_3trk.careerbliss.com2GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
38tier_3moneyfinancegold.com1NAMECHEAP INCANNA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
39tier_3lendingtree.com1MarkMonitor, Inc.NS-1223.AWSDNS-24.ORGLENDINGTREE, LLC
40tier_3linkup.com_LOOP_11NoneNoneNone
41tier_3m.gladplacespin.xyz1Epik LLCMARJORY.NS.CLOUDFLARE.COMAnonymize, Inc.
42tier_3api.l5srv.net1GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
43tier_3leisurecare.jobaline.com1GoDaddy.com, LLCNS-1232.AWSDNS-26.ORGJobaline Inc.
44tier_3manhattanjobs.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
45tier_3rpa21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
46tier_3m.placesiteb.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
47tier_3win3.trustedpush.com1NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
48tier_3slotocash.im1Nonedane.ns.cloudflare.com.None
49tier_3m.fastmapc.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
50tier_3win5.trustedpush.com1NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_118nan
1185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_117nan
264.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_112nan
3185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_111nan
464.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_110nan
564.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_18nan
6185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_17nan
7185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
8198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_263nan
935.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_33nan
1067.227.173.37nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan
11207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_319nan
1254.197.247.190ec2-54-197-247-190.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215nan
1354.235.205.204ec2-54-235-205-204.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214nan
1423.21.53.13ec2-23-21-53-13.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214nan
1523.21.166.45ec2-23-21-166-45.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213nan
1652.3.4.129ec2-52-3-4-129.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212nan
17167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_211nan
183.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29nan
19100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28nan
2099.84.114.35server-99-84-114-35.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28nan
2199.84.114.53server-99-84-114-53.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_27nan
2299.84.114.17server-99-84-114-17.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_27nan
2334.197.176.2ec2-34-197-176-2.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
2418.235.67.128ec2-18-235-67-128.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
25204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_26nan
26209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_26nan
2799.84.114.65server-99-84-114-65.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_26nan
2867.227.172.40nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_324nan
29207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_319nan
30151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_35True
31172.217.10.228lga25s59-in-f4.1e100.netCliftonNew JerseyAS15169 Google LLC07015United Statestier_33nan
3267.207.80.24nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nan
33100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33nan
3435.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_33nan
35172.217.3.100lga34s18-in-f4.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_32nan
36157.245.242.152nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_32nan
3752.203.36.44ec2-52-203-36-44.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
38104.18.82.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
39142.250.80.4lga34s33-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_32nan
4099.84.114.67server-99-84-114-67.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32nan
41104.21.95.173nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
42104.19.146.29nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
4352.73.87.228ec2-52-73-87-228.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
44167.172.136.193nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nan
4567.227.173.37nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan
4634.237.135.0ec2-34-237-135-0.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
4768.168.84.196196.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan
48162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_31nan
49157.245.84.7nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nan
50104.18.79.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5199.84.114.81server-99-84-114-81.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
5299.84.114.4server-99-84-114-4.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
53104.26.0.162nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5499.84.114.107server-99-84-114-107.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website