Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
016917350918162021-05-1964.32.8.68Chrome
tierdomaincountregistrarname_serversorg
0tier_1bugpoint.net1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
1tier_1blessedit.com1SNAPNAMES 29, LLCNS1.DNSNUTS.COMNone
2tier_1face2facethemagazine.com1Domaininthehole.com LLCNS1.DNSNUTS.COMNone
3tier_1blogemodir.com1Pipeline Domains, LLCNS1.DNSNUTS.COMNone
4tier_1bamanshop.com1Cool River Names, LLCNS1.DNSNUTS.COMNone
5tier_1fashionsalewatch.com1! #1 Host Korea, LLCNS1.DNSNUTS.COMNone
6tier_1badmuckingfastard.com1Domain Bazaar LLCNS1.DNSNUTS.COMNone
7tier_1eromini.com1Godomaingo.com LLCNS1.DNSNUTS.COMNone
8tier_11seprin.com1BullRunDomains.com LLCNS1.DNSNUTS.COMNone
9tier_1boysforcemilfs.com1NamePal.com #8001, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect1.com27NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
11tier_2traff0121.com19NoneNoneNone
12tier_2goalmedia.cam19NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
13tier_20.goalmedia.cam19NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2btpnative.com171API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
15tier_2mybetterdl.com17NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
16tier_21.goalmedia.cam16NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2click.junmediadirect.com15NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
18tier_22.goalmedia.cam13NamecheapHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2nizephoros-pom.com12Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
20tier_23.goalmedia.cam10NoneNoneNone
21tier_2trfktunnel.com10NAMECHEAP INCDAVE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2aliexpress.com10Alibaba Cloud Computing (Beijing) Co., Ltd.NS1.ALIBABADNS.COMNone
23tier_2rtbstream.com101API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
24tier_2ybbkitcj.harlequinclearbobcat.com9NoneNoneNone
25tier_2sabinus-sun.com8Amazon Registrar, Inc.NS-1009.AWSDNS-62.NETWhois Privacy Service
26tier_2cehappear.fun7DYNADOT LLCAIDEN.NS.CLOUDFLARE.COMNone
27tier_2google.com7MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
28tier_2wolve.pro6DANESCO TRADING LTDAIDEN.NS.CLOUDFLARE.COMDANESCO TRADING LTD.
29tier_2cehappear.fun_LOOP_16NoneNoneNone
30tier_3aliexpress.com_LOOP_110NoneNoneNone
31tier_3fielddisplay.com8NoneNoneNone
32tier_3google.com_LOOP_17NoneNoneNone
33tier_33.goalmedia.cam3NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
34tier_3cehappear.fun3DYNADOT LLCAIDEN.NS.CLOUDFLARE.COMNone
35tier_31.goalmedia.cam3NAMECHEAP INCHANS.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
36tier_32.goalmedia.cam3NoneNoneNone
37tier_3driftstreams.com3GoDaddy.com, LLCFIONA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
38tier_3rd.bizrate.com2MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
39tier_3volume.com2DYNADOT LLCA.NS.VOLUME.COMNone
40tier_3wix.com2GoDaddy.com, LLCDNS1.P03.NSONE.NETWix.com, LTD.
41tier_3dataprivacyadvocate.com2Amazon Registrar, Inc.NS-1519.AWSDNS-61.ORGWhois Privacy Service
42tier_3search.yahoo.com2NoneNoneNone
43tier_3halloweencostumes.com1GoDaddy.com, LLCNS1.HALLOWEENCOSTUMES.COMDomains By Proxy, LLC
44tier_3rpa21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
45tier_3s3.amazonaws.com1MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
46tier_3draxe.com1GoDaddy.com, LLCGWEN.NS.CLOUDFLARE.COMDomains By Proxy, LLC
47tier_3promorepublic.com1Onlinenic IncLIA.NS.CLOUDFLARE.COMPromoRepublic Oy
48tier_3fuckaneighbor.com1Amazon Registrar, Inc.NS-1295.AWSDNS-33.ORGWhois Privacy Service
49tier_3livecamsex.hdpremiumcontent.com1NameCheap, Inc.CNS2055.HOSTGATOR.COMNone
50tier_3zennioptical.com1Wild West Domains, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
51tier_3zennioptical.com_LOOP_11NoneNoneNone
52tier_3google.com1MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
53tier_3zoro.com_LOOP_11NoneNoneNone
54tier_3surveystarz.com1GoDaddy.com, LLCNS13.DOMAINCONTROL.COMDomains By Proxy, LLC
55tier_3feed.techappworlds.com1GoDaddy.com, LLCNS41.DOMAINCONTROL.COMDomains By Proxy, LLC
56tier_3wolve.pro1DANESCO TRADING LTDAIDEN.NS.CLOUDFLARE.COMDANESCO TRADING LTD.
57tier_3ww1.survey-smiles.com1Media Elite Holdings LimitedNS1.WOMBATDNS.COMFundacion Privacy Services LTD
58tier_3choicehotels.com1CSC CORPORATE DOMAINS, INC.ASIA3.AKAM.NETChoice Hotels International, Inc.
59tier_3aveda.com1NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
164.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_111nan
2185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_19nan
364.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_18nan
4185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_18nan
5185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_16nan
664.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_16nan
7185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nan
8178.62.225.201nanAmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_39nan
9209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_230nan
1088.99.101.106static.106.101.99.88.clients.your-server.deHohen NeuendorfBrandenburgAS24940 Hetzner Online GmbH16540Germanytier_229nan
11198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_227nan
12173.192.101.2418.65.c0ad.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_219nan
13198.134.116.18nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_215nan
1478.46.197.88static.88.197.46.78.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_210nan
1523.223.1.107a23-223-1-107.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_210nan
16192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32nan
1734.197.176.2ec2-34-197-176-2.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26nan
1899.84.189.117server-99-84-189-117.iad89.r.cloudfront.netWashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_26nan
19100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_319nan
20139.45.197.237nanAmsterdamNorth HollandAS9002 RETN Limited1012Netherlandstier_26nan
21104.21.32.6nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_26True
22173.239.53.16nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_26nan
2354.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25nan
2418.235.67.128ec2-18-235-67-128.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25nan
2552.72.29.7ec2-52-72-29-7.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25nan
2634.196.151.230ec2-34-196-151-230.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
2754.210.198.87ec2-54-210-198-87.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24nan
28100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_319nan
29178.62.225.201nanAmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_39nan
30104.21.51.203nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35True
31172.67.185.222nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33True
32104.26.2.212nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33True
33192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32nan
3466.218.84.137ats1.l7.search.vip.bf1.yahoo.comTorontoOntarioAS26101 Oath Holdings Inc.M5NCanadatier_32nan
3552.85.132.46server-52-85-132-46.iad50.r.cloudfront.netAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31nan
36152.195.55.91nanAshburnVirginiaAS15133 MCI Communications Services, Inc. d/b/a Verizon Business20147United Statestier_31True
37162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_31nan
3852.217.17.230s3-1.amazonaws.comAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31nan
39104.26.6.13nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
40172.67.72.21nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
41104.22.71.250nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
4213.225.230.14server-13-225-230-14.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31nan
43162.144.18.22corporacionricvic.comRancho CucamongaCaliforniaAS46606 Unified Layer91729United Statestier_31nan
44104.90.71.180a104-90-71-180.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31nan
4599.84.189.115server-99-84-189-115.iad89.r.cloudfront.netWashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_31nan
46185.230.61.179nanFoster CityCaliforniaAS58182 Wix.com Ltd.94404United Statestier_31nan
47172.217.10.36lga34s13-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_31nan
4813.225.230.22server-13-225-230-22.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31nan
49185.230.61.163nanFoster CityCaliforniaAS58182 Wix.com Ltd.94404United Statestier_31nan
5099.84.189.122server-99-84-189-122.iad89.r.cloudfront.netWashingtonWashington, D.C.AS16509 Amazon.com, Inc.20045United Statestier_31nan
51165.227.96.45109327.cloudwaysapps.comCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_31nan
5213.84.45.249nanSan AntonioTexasAS8075 Microsoft Corporation78295United Statestier_31nan
5334.196.151.230ec2-34-196-151-230.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
5413.225.230.61server-13-225-230-61.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31nan
55199.59.242.153nanMorris PlainsNew JerseyAS395082 Bodis, LLC07950United Statestier_31nan
56172.67.26.187nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
57104.90.73.233a104-90-73-233.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website