Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01471445940112021-05-1064.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1curious-information.net1MidWestDomains, LLCNS1.DNSNUTS.COMNone
1tier_1bao-cheat.net1Sourced Domains, LLCNS1.DNSNUTS.COMNone
2tier_1abouteproduct.com1NamePal.com #8002, LLCNS1.DNSNUTS.COMNone
3tier_1anthropologica.net1Deep Dive Domains, LLCNS1.DNSNUTS.COMNone
4tier_1brickerenterprise.com1NamePal.com #8011, LLCNS1.DNSNUTS.COMNone
5tier_1copytoon67.com1Best Drop Names LLCNS1.DNSNUTS.COMNone
6tier_1albumkings.net1Snoqulamiedomains.com LLCNS1.DNSNUTS.COMNone
7tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
8tier_1dakmm.com1Private Domains, LLCNS1.DNSNUTS.COMNone
9tier_1aptrk10.com1One Putt, LLCNS1.DNSNUTS.COMNone
10tier_2aristo-hag.com87Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
11tier_2atnpx.com86GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
12tier_2track.vcdc.com78Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_2ad.doubleclick.net32MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
14tier_2btpnav.com211API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
15tier_2nizephoros-pom.com11Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
16tier_2get.popplunder.com11NoneNoneNone
17tier_2trustedpush.com9NoneNoneNone
18tier_2win1.trustedpush.com8NoneNoneNone
19tier_2win2.trustedpush.com7NoneNoneNone
20tier_2click.expmediadirect1.com5NoneNoneNone
21tier_2api.apptap.com4Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
22tier_2api.mplayit.com4Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
23tier_2folcher-cri.com3Amazon Registrar, Inc.NS-1201.AWSDNS-22.ORGWhois Privacy Service
24tier_2redirect.viglink.com1Amazon Registrar, Inc.NS1.VIGLINK.COMNone
25tier_2link.sylikes.com1MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
26tier_2phygical-questall.icu1Key-Systems GmbHNS-1531.AWSDNS-63.ORGc/o whoisproxy.com
27tier_2google.com1MarkMonitor Inc.NS1.GOOGLE.COMNone
28tier_2bankomerca.com1Media Elite Holdings LimitedNS1.RENTONDC.COMFundacion Privacy Services LTD
29tier_2rtbstream.com11API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
30tier_3kbb.com49CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
31tier_3robogarden.io37GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
32tier_3win3.trustedpush.com7NoneNoneNone
33tier_3trustedpush.com2NoneNoneNone
34tier_3nizephoros-pom.com1Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGNone
35tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
36tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
37tier_3google.com_LOOP_11NoneNoneNone
38tier_3win1.trustedpush.com1NoneNoneNone
39tier_3ww1.bankomerca.com1Media Elite Holdings LimitedNS1.RENTONDC.COMFundacion Privacy Services LTD
40tier_3choicehotels.com1CSC CORPORATE DOMAINS, INC.ASIA3.AKAM.NETChoice Hotels International, Inc.
41tier_3win2.trustedpush.com1NoneNoneNone
42tier_3details1NoneNoneNone
43tier_3booking.com1MarkMonitor, Inc.NS0.BKNGS.COMBooking.com B.V.
44tier_3farfetch.com1Network Solutions, LLCNS0.DNSMADEEASY.COMNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
164.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_115nan
2185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_114nan
364.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_114nan
4185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_113nan
5185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_111nan
664.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_111nan
7185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_111nan
8167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_278nan
9104.26.10.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_239True
10104.26.11.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_230True
1118.235.67.128ec2-18-235-67-128.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_227nan
1234.197.176.2ec2-34-197-176-2.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226nan
1352.72.29.7ec2-52-72-29-7.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_225nan
1454.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
15209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_222nan
16172.67.74.77nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_217True
1713.224.206.86server-13-224-206-86.phl50.r.cloudfront.netPhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_34nan
1834.199.180.187ec2-34-199-180-187.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211nan
19172.217.3.102lga34s18-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_29nan
20172.217.12.198lga25s63-in-f6.1e100.netCliftonNew JerseyAS15169 Google LLC07015United Statestier_27nan
21172.217.11.38lga25s61-in-f6.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_26nan
2213.224.206.30server-13-224-206-30.phl50.r.cloudfront.netPhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_31nan
23198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_25nan
24142.250.64.102lga34s31-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_25nan
253.227.100.16ec2-3-227-100-16.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25nan
26172.217.6.230lga25s55-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_24nan
2752.201.205.142ec2-52-201-205-142.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23nan
28104.21.80.8nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_329True
2923.36.197.209a23-36-197-209.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_314nan
30104.67.12.169a104-67-12-169.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_312nan
31104.90.89.104a104-90-89-104.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_312nan
3223.201.25.191a23-201-25-191.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_311nan
33172.67.172.143nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_38True
34100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_36nan
3513.224.206.86server-13-224-206-86.phl50.r.cloudfront.netPhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_34nan
3613.224.206.107server-13-224-206-107.phl50.r.cloudfront.netPhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_32nan
3754.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
38192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nan
3945.33.8.244li962-244.members.linode.comRichardsonTexasAS63949 Linode, LLC75080United Statestier_31nan
4013.224.206.30server-13-224-206-30.phl50.r.cloudfront.netPhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_31nan
41208.91.196.145nanDallasTexasAS40034 Confluence Networks Inc75270United Statestier_31nan
4223.36.198.38a23-36-198-38.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31nan
43185.28.222.11nanWolf TrapVirginiaAS43996 Booking.com BV22182United Statestier_31nan
4423.39.174.124a23-39-174-124.deploy.static.akamaitechnologies.comEdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website