Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02022066640152021-05-1364.32.8.68Iphone
tierdomaincountregistrarname_serversorg
0tier_1clubelan.net1NamePal.com #8027, LLCNS1.DNSNUTS.COMNone
1tier_1blessedit.com1SNAPNAMES 29, LLCNS1.DNSNUTS.COMNone
2tier_1gifanimasyon.com1Dropcatch Auction LLCNS1.DNSNUTS.COMNone
3tier_1albasocial.net1Fushi Tarazu, LLCNS1.DNSNUTS.COMNone
4tier_19novels.net1! #1 Host Japan, LLCNS1.DNSNUTS.COMNone
5tier_1izuba-rirashe.com1Magnolia Domains, LLCNS1.DNSNUTS.COMNone
6tier_1babytalkbungalow.com1Domainraker.net LLCNS1.DNSNUTS.COMNone
7tier_1aokore.com1NamePal.com #8027, LLCNS1.DNSNUTS.COMNone
8tier_1healthylifestar.com1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
9tier_1az-khaos.com1EUTurbo.com LLCNS1.DNSNUTS.COMNone
10tier_2changeslots.com101Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
11tier_2api.quotes.com84Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
12tier_2mybetterdl.com22NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
13tier_2click.expmediadirect1.com20NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2track.vcdc.com18Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
15tier_2btpnative.com151API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
16tier_2p274639.mybetterdl.com13NoneNoneNone
17tier_2aristo-hag.com12Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
18tier_2atnpx.com7GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
19tier_2p246485.mybetterdl.com7NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
20tier_2174.trackingms.com6NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2ad.doubleclick.net6MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
22tier_2rd.bizrate.com5NoneNoneNone
23tier_2rd.connexity.net5NoneNoneNone
24tier_2clk.rtpdn12.com5NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
25tier_2noclick.connexity.com3MarkMonitor, Inc.NS-1235.AWSDNS-26.ORGConnexity, Inc.
26tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
27tier_2api.mplayit.com3Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
28tier_2beta.mybetterdl.com3NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
29tier_2tq.adventurefeeds.com2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
30tier_3theconnectvpn.com101DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
31tier_3bestappland.me22NAMECHEAP INCNoneNone
32tier_3flash-rewards.info6GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMDomains By Proxy, LLC
33tier_3kbb.com5CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
34tier_3wayfair.com3MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
35tier_3robogarden.io2GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
36tier_3socalacuradealers.com2NAMECHEAP INCNS-1244.AWSDNS-27.ORGPrivacy service provided by Withheld for Privacy ehf
37tier_3click.expmediadirect1.com2NoneNoneNone
38tier_3qvc.com1MarkMonitor, Inc.A1-21.AKAM.NETQVC, Inc.
39tier_3amazon.com1NoneNoneNone
40tier_3blair.com1CSC CORPORATE DOMAINS, INC.NS-1237.AWSDNS-26.ORGBluestem Brands, Inc.
41tier_3music.apple.com1CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
42tier_3dickies.com1NoneNoneNone
43tier_3174.trackingms.com1NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
44tier_3p246485.mybetterdl.com1NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0185.107.56.57RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_125nannan
164.32.8.69Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_123customer.sharktech.netnan
264.32.8.67Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_121customer.sharktech.netnan
3185.107.56.60RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_118nannan
4185.107.56.59RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_118nannan
564.32.8.70Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_116customer.sharktech.netnan
6185.107.56.58RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_116nannan
764.32.8.68Los AngelesCaliforniaAS46844 Sharktech90009United Statestier_113customer.sharktech.netnan
834.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_2101ec2-34-207-32-33.compute-1.amazonaws.comnan
95.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_284nannan
10173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_3118.65.c0ad.ip4.static.sl-reverse.comnan
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_220nannan
12167.233.8.197NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_218static.197.8.233.167.clients.your-server.denan
13209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_218nannan
14173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_28nannan
15192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_27rd.bizrate.comnan
16108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_31b9.c1.a86c.ip4.static.sl-reverse.comnan
17192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_25rd.connexity.netnan
1834.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-34-197-176-2.compute-1.amazonaws.comnan
1918.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-18-235-67-128.compute-1.amazonaws.comnan
2054.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-54-208-107-202.compute-1.amazonaws.comnan
21172.217.10.38New York CityNew YorkAS15169 Google LLC10004United Statestier_24lga34s13-in-f6.1e100.netnan
22192.138.218.215SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_23noclick.connexity.comnan
23172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_23nanTrue
2452.20.124.195AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-52-20-124-195.compute-1.amazonaws.comnan
253.222.126.169AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-3-222-126-169.compute-1.amazonaws.comnan
26198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_22nannan
2734.195.100.186AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-34-195-100-186.compute-1.amazonaws.comnan
28104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_376nanTrue
29172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_325nanTrue
30142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_322nannan
31172.67.167.193San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
3223.46.19.199New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_34a23-46-19-199.deploy.static.akamaitechnologies.comnan
3323.52.161.179New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_33a23-52-161-179.deploy.static.akamaitechnologies.comnan
34100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.netnan
3523.36.84.24New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a23-36-84-24.deploy.static.akamaitechnologies.comnan
36172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
3713.225.222.232New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-222-232.jfk51.r.cloudfront.netnan
38104.21.90.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
3923.33.143.140New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a23-33-143-140.deploy.static.akamaitechnologies.comnan
40104.18.252.32San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4154.165.37.159AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-165-37-159.compute-1.amazonaws.comnan
42104.67.12.169New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a104-67-12-169.deploy.static.akamaitechnologies.comnan
43108.168.193.185DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_31b9.c1.a86c.ip4.static.sl-reverse.comnan
44173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_3118.65.c0ad.ip4.static.sl-reverse.comnan
45104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4654.86.91.237AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-86-91-237.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website