Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02562597770192021-04-1674.63.241.23Safari
tierdomaincountregistrarname_serversorg
0tier_1asiancams365.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1congelifract.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1allmomboy.com1ABOVE.COM PTY LTD.NS1.COMMONMX.COMNone
3tier_1bidguru.in1Dynadot LLCns1.commonmx.comNone
4tier_1tpremium.me1Dynadot, LLCNoneNone
5tier_1akktif.com1OldTownDomains.com LLCNS1.COMMONMX.COMNone
6tier_1abuadzhan.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
7tier_1newbrandjewelry.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1webage.in1Dynadot LLCns1.commonmx.comNone
9tier_152stu.me1Dynadot, LLCNoneNone
10tier_2click.expmediadirect.com78NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
11tier_2btpnav.com671API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2rqhere2.com61NAMECHEAP INCJEROME.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
13tier_21496.rawlexi.com41GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
14tier_2aristo-hag.com37Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
15tier_2americanlisted.com36ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
16tier_2track.vcdc.com9Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
17tier_2nizephoros-pom.com9Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
18tier_2managerformula.com9NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2btpnative.com51API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
20tier_2clk.rtpdn12.com5NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2infopicked.com4NAMECHEAP INCNS0.DNSMADEEASY.COMPrivacy service provided by Withheld for Privacy ehf
22tier_21redira.com4ABOVE.COM PTY LTD.NS1.TRELLIAN.COMNone
23tier_2atnpx.com2GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
24tier_2linkconnector.com2Network Solutions, LLCEDNA.NS.CLOUDFLARE.COMLinkConnector Corporation
25tier_2tr.trackingsys.tech2DonDominio (SCIP)NS1.DONDOMINIO.COMSoluciones Corporativas IP, c/o Whois Proxy
26tier_2zen.affiliateland.io2NAMECHEAP INCALINA.NS.CLOUDFLARE.COMNone
27tier_2api.apptap.com2Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
28tier_2cj.dotomi.com2GoDaddy.com, LLCASIA9.AKAM.NETConversant LLC
29tier_2emjcd.com2MarkMonitor, Inc.ASIA9.AKAM.NETConversant, Inc.
30tier_3vitalityzen.club61NoneNoneNone
31tier_3us.tideri.com36united domains AGNS.UDAG.DENone
32tier_3irl.com31GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
33tier_3bitcophase.com16NAMECHEAP INCMOLLY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
34tier_3s3.amazonaws.com10MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
35tier_3americanlisted.com4ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3datelively.com3NAMECHEAP INCMOLLY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3kbb.com2CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
38tier_3topantivreviews.com2NAMECHEAP INCGRAHAM.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
39tier_3halloweencostumes.com1GoDaddy.com, LLCNS1.HALLOWEENCOSTUMES.COMDomains By Proxy, LLC
40tier_3loadfree-bestheavilyfile.best1NamecheapDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
41tier_3bedbathandbeyond.com1Network Solutions, LLCA1-189.AKAM.NETBed Bath & Beyond Procurement Co. Inc.
42tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
43tier_3macpaw.com1GANDI SASNS-1492.AWSDNS-58.ORGMacPaw Family Ltd.
44tier_3google.com_LOOP_11NoneNoneNone
45tier_3thomann.de1NoneNoneNone
46tier_3vipaffnetwork.com1NoneNoneNone
47tier_3citypass.com_LOOP_11NoneNoneNone
48tier_3grandinroad.com_LOOP_11NoneNoneNone
49tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
50tier_3om.forgeofempires.com1INWX GmbH & Co. KGNS.INWX.DEREDACTED FOR PRIVACY
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_128nannan
1207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
2207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
3207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
8185.107.56.197RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
974.63.241.22DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1422-241-63-74.static.reverse.lstn.netnan
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_279nannan
11209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_273nannan
12167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_261nannan
13198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_241nannan
1435.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.comnan
1534.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-34-197-176-2.compute-1.amazonaws.comnan
1654.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-54-208-107-202.compute-1.amazonaws.comnan
1752.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-52-72-29-7.compute-1.amazonaws.comnan
1818.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-18-235-67-128.compute-1.amazonaws.comnan
19167.233.8.197NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_29static.197.8.233.167.clients.your-server.denan
20173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_26nannan
21159.127.43.26WashingtonWashington, D.C.AS25751 Conversant, Inc.20045United Statestier_26nannan
22173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2518.65.c0ad.ip4.static.sl-reverse.comnan
23103.224.182.206Los AngelesCaliforniaAS133618 Trellian Pty. Limited90009United Statestier_24bidr.trellian.comnan
24192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
253.224.109.140AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-3-224-109-140.compute-1.amazonaws.comnan
26104.26.10.53San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_22nanTrue
2734.231.10.22AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-34-231-10-22.compute-1.amazonaws.comnan
28107.20.106.95AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-107-20-106-95.compute-1.amazonaws.comnan
2978.46.197.88NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_22static.88.197.46.78.clients.your-server.denan
30104.21.12.71San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_348nanTrue
3135.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_336123.171.246.35.bc.googleusercontent.comnan
32172.67.193.189San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_313nanTrue
33172.67.165.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
34104.21.34.223San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
35167.172.139.120North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_35nannan
3664.227.12.111North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
3767.207.80.24North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
3835.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_34240.61.209.35.bc.googleusercontent.comnan
39167.172.136.193North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
40161.35.60.200North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
4152.73.153.209AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-73-153-209.compute-1.amazonaws.comnan
4254.205.240.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-205-240-192.compute-1.amazonaws.comnan
4352.73.87.228AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-73-87-228.compute-1.amazonaws.comnan
44104.21.6.63San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
45100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_33pool-100-37-135-2.nycmny.fios.verizon.netnan
4652.203.36.44AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-203-36-44.compute-1.amazonaws.comnan
4752.217.200.72AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
4852.217.77.94AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
49104.21.77.247San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5023.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-44-217-143.deploy.static.akamaitechnologies.comnan
51152.195.55.91AshburnVirginiaAS15133 MCI Communications Services, Inc. d/b/a Verizon Business20147United Statestier_31nanTrue
5252.20.53.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-20-53-118.compute-1.amazonaws.comnan
5352.217.88.222AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
5423.41.190.46NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-41-190-46.deploy.static.akamaitechnologies.comnan
55157.245.84.7North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nannan
56192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
5723.1.205.179EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31a23-1-205-179.deploy.static.akamaitechnologies.comnan
5852.217.201.104AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
5935.224.231.200Council BluffsIowaAS15169 Google LLC51502United Statestier_31200.231.224.35.bc.googleusercontent.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website