Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02292429150152021-04-1374.63.241.23Iphone
tierdomaincountregistrarname_serversorg
0tier_1lynko.co1Communigal Communication Ltdns2.commonmx.comNone
1tier_1asiancams365.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1ezdra.us1Communigal Communication Ltdns2.commonmx.comNone
3tier_1allmomboy.com1ABOVE.COM PTY LTD.NS1.COMMONMX.COMNone
4tier_1helico.us1Communigal Communication Ltdns2.commonmx.comNone
5tier_1findajobquick.us1Communigal Communication Ltdns1.commonmx.comNone
6tier_1akktif.com1OldTownDomains.com LLCNS1.COMMONMX.COMNone
7tier_1abuadzhan.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1brooklyning.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
9tier_1bucetasx.com1DYNADOT3 LLCNS1.COMMONMX.COMNone
10tier_2click.expmediadirect.com90NoneNoneNone
11tier_2aristo-hag.com48Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
12tier_2api.apptap.com46Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
13tier_2redirect.viglink.com46Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
14tier_2link.sylikes.com45MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
15tier_2btpnav.com421API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
16tier_2atnpx.com35GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
17tier_2rd.bizrate.com33MarkMonitor Inc.NS-1189.AWSDNS-20.ORGNone
18tier_2api.mplayit.com32Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
19tier_2rd.connexity.net28NoneNoneNone
20tier_2api.quotes.com20Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
21tier_2changeslots.com20Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
22tier_2ad.doubleclick.net10NoneNoneNone
23tier_2exporimy.com7GoDaddy.com, LLCNS-1145.AWSDNS-15.ORGDomains By Proxy, LLC
24tier_2sorrectionki.space7NoneNoneNone
25tier_2web-shield-club.com6NoneNoneNone
26tier_2rd.connexity.net_LOOP_16NoneNoneNone
27tier_2btpnative.com61API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
28tier_2infopicked.com6NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
29tier_2apptime.xyz5NAMECHEAP INCPETE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
30tier_3bestappland.me38NoneNoneNone
31tier_3kbb.com25CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
32tier_3theconnectvpn.com20DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
33tier_3rd.bizrate.com12MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
34tier_3robogarden.io10GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
35tier_3storystudio.sfgate.com9CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
36tier_3adameve.com9Network Solutions, LLCA1-75.AKAM.NETNone
37tier_3theory.com8CSC CORPORATE DOMAINS, INC.NS0.DNSMADEEASY.COMTheory LLC
38tier_3berettausa.com5Network Solutions, LLCNS1.AMERICANEAGLE.COMBeretta USA Corp
39tier_3frontgate.com5Network Solutions, LLCNS1.HSN.NETCornerstone Brands, Inc.
40tier_3tackis.xyz5NAMECHEAP INCPETE.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
41tier_3theory.com_LOOP_13NoneNoneNone
42tier_3music.apple.com2CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
43tier_3irl.com2GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
44tier_3bing.com2MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
45tier_3berettausa.com_LOOP_11NoneNoneNone
46tier_3frontgate.com_LOOP_11NoneNoneNone
47tier_3adameve.com_LOOP_11NoneNoneNone
48tier_3bulley.shop1Namecheap, Inc.DAVID.NS.CLOUDFLARE.COMNone
49tier_3gramp.xyz1NAMECHEAP INCDAVID.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
50tier_3toryburch.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
51tier_3bestbody.s3.amazonaws.com1MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_122nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_111nannan
7206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
837.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_16nannan
937.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_290nannan
11192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_312nannan
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_248nannan
1334.197.67.232AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_236ec2-34-197-67-232.compute-1.amazonaws.comnan
14192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_228rd.connexity.netnan
1552.205.177.114AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-52-205-177-114.compute-1.amazonaws.comnan
163.226.37.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_225ec2-3-226-37-31.compute-1.amazonaws.comnan
1734.225.128.119AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-34-225-128-119.compute-1.amazonaws.comnan
185.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_220nannan
1934.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_220ec2-34-207-32-33.compute-1.amazonaws.comnan
20104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_218nanTrue
2118.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_217ec2-18-235-67-128.compute-1.amazonaws.comnan
2252.206.141.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-52-206-141-190.compute-1.amazonaws.comnan
2354.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-54-208-107-202.compute-1.amazonaws.comnan
24172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_214nanTrue
2552.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-52-72-29-7.compute-1.amazonaws.comnan
26204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_29204.44.79.214.static.quadranet.comnan
2734.202.14.39AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-34-202-14-39.compute-1.amazonaws.comnan
28100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
29173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2718.65.c0ad.ip4.static.sl-reverse.comnan
30142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_338nannan
3123.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_325a23-44-217-143.deploy.static.akamaitechnologies.comnan
32172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_313nanTrue
33192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_312nannan
34151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_39nanTrue
3523.73.247.78EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_39a23-73-247-78.deploy.static.akamaitechnologies.comnan
36100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
37184.85.22.65NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_38a184-85-22-65.deploy.static.akamaitechnologies.comnan
38104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
39172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
4023.73.224.199EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_35a23-73-224-199.deploy.static.akamaitechnologies.comnan
41184.87.71.113NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a184-87-71-113.deploy.static.akamaitechnologies.comnan
42104.21.80.8San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
43172.67.189.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
44104.21.65.93San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
45204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32a-0001.a-msedge.netTrue
46104.21.25.197San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
47167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nannan
48167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nannan
49104.21.92.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5023.38.170.98NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-98.deploy.static.akamaitechnologies.comnan
5152.216.20.171AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1-w.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website