Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01971976061322021-06-2974.63.241.23Chrome
tierdomaincountregistrarname_serversorg
0tier_1boxfilms21.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0160729786
1tier_1computaxion.com1Names Stop Here LLCNS1.COMMONMX.COMNone
2tier_1cbs46news.com1Media Elite Holdings LimitedNS1.HASTYDNS.COMFundacion Privacy Services LTD
3tier_1bestwaterproofcamera.com1Media Elite Holdings LimitedNS1.HASTYDNS.COMFundacion Privacy Services LTD
4tier_1bajandoelmagdalena.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159164193
5tier_1abbasytransport.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159838685
6tier_1chloescanines.com1DYNADOT LLCNS1.COMMONMX.COMNone
7tier_1carinaprimavera.com1CommuniGal Communication Ltd.NS1.COMMONMX.COMNone
8tier_1cricketnectar.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
9tier_1cracked-games.com1GRANSY S.R.O D/B/A SUBREG.CZNS1.HASTYDNS.COMWhois protection, this company does not own this domain name s.r.o.
10tier_27577.rebiraert.com90GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
11tier_2redirect.winnerof.today90GoDaddy.com, LLCdina.ns.cloudflare.comDomains By Proxy, LLC
12tier_2click.expmediadirect1.com21NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
13tier_2clk.rtpdn12.com21NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2gloos-ves.com14Amazon Registrar, Inc.NS-1228.AWSDNS-25.ORGWhois Privacy Service
15tier_2btpnav.com121API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
16tier_2rtbstream.com111API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
17tier_2track.vcdc.com11Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
18tier_2v4.s.arclk.net6PSI-USA, Inc. dba Domain RobotA.NS14.NETNone
19tier_2ww2.siteplug.com4DOMAINPEOPLE, INC.NS-1263.AWSDNS-29.ORGREDACTED FOR PRIVACY
20tier_2nizephoros-pom.com3Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
21tier_2trc.kintura.io2GoDaddy.com, LLCNS-599.AWSDNS-10.NETNone
22tier_2mysoloads.qlitrk.com2Name.com, Inc.NS-1332.AWSDNS-38.ORGDomain Protection Services, Inc.
23tier_2api.apptap.com2Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
24tier_2lg.provenpixel.com21&1 IONOS SENS01.PROVENPIXEL.NET1&1 Internet Inc
25tier_2cj.dotomi.com2GoDaddy.com, LLCASIA9.AKAM.NETConversant LLC
26tier_2emjcd.com2MarkMonitor, Inc.ASIA9.AKAM.NETConversant, Inc.
27tier_2click.linksynergy.com1CSC CORPORATE DOMAINS, INC.DNS1.P09.NSONE.NETRakuten Marketing
28tier_2track.bwclick.com1Instra Corporation Pty Ltd.NS10.DNSMADEEASY.COMREDACTED FOR PRIVACY
29tier_2chewy.com1Moniker Online Services LLCNS1.P02.DYNECT.NETChewy, Inc.
30tier_3att-na.winnerof.today90GoDaddy.com, LLCdina.ns.cloudflare.comDomains By Proxy, LLC
31tier_3theglamdates.com21NAMECHEAP INCCHUCK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
32tier_3fatchunkabstract.com18NAMECHEAP INCCHUCK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
33tier_3nuj21.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
34tier_3pagenf.com2Amazon Registrar, Inc.NS-1345.AWSDNS-40.ORGWhois Privacy Service
35tier_3bergdorfgoodman.com1CSC CORPORATE DOMAINS, INC.NS-1513.AWSDNS-61.ORGNM Nevada Trust
36tier_3chewy.com_LOOP_11NoneNoneNone
37tier_3easyasvpn.com1NAMECHEAP INCEDNA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
38tier_3teleflora.com1MarkMonitor, Inc.EPRODNS1A.EFLORIST.COMTeleflora Technologies
39tier_3wild-willies.com1GoDaddy.com, LLCNS01.DOMAINCONTROL.COMDomains By Proxy, LLC
40tier_3americangirl.com1NoneNoneNone
41tier_3ww1.chrisyler.com1Media Elite Holdings LimitedNS1.HASTYDNS.COMFundacion Privacy Services LTD
42tier_3ejuices.com1GoDaddy.com, LLCNS05.DOMAINCONTROL.COMeCig Distributors, Inc
43tier_3bradfordexchangechecks.com1CSC CORPORATE DOMAINS, INC.PDNS1.ULTRADNS.NETThe Bradford Exchange Check Company, Ltd.
44tier_3yam21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
45tier_3d1skx8uzlfrxam.cloudfront.net1NoneNoneNone
46tier_3us.boohoo.com1TUCOWS, INC.DNS1.P06.NSONE.NETREDACTED FOR PRIVACY
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0199.115.115.119WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_116nannan
1199.115.115.102WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
2199.115.115.116WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
3207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nannan
4199.115.115.118WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nannan
5207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
6207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
769.162.80.52DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1752-80-162-69.static.reverse.lstn.netnan
895.211.219.67AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nannan
9104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_15nannan
10198.54.112.216PhoenixArizonaAS22612 Namecheap, Inc.85001United Statestier_291nannan
1154.244.128.126BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_290ec2-54-244-128-126.us-west-2.compute.amazonaws.comnan
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_223nannan
13173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_222nannan
14198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_221nannan
1552.7.145.236AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-52-7-145-236.compute-1.amazonaws.comnan
16167.233.8.197N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_211static.197.8.233.167.clients.your-server.denan
17159.127.43.26WashingtonWashington, D.C.AS25751 Conversant, Inc.20045United Statestier_26nannan
1854.174.112.67AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-54-174-112-67.compute-1.amazonaws.comnan
193.226.191.120AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-3-226-191-120.compute-1.amazonaws.comnan
20216.139.248.127AustinTexasAS32400 Hostway Services, Inc.78701United Statestier_24216-139-248-127.aus.us.siteprotect.comnan
2134.232.219.35AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-34-232-219-35.compute-1.amazonaws.comnan
22209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_22nannan
2352.38.175.126BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_22ec2-52-38-175-126.us-west-2.compute.amazonaws.comnan
2435.212.67.244WashingtonWashington, D.C.AS15169 Google LLC20045United Statestier_21244.67.212.35.bc.googleusercontent.comnan
2534.232.91.105AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-34-232-91-105.compute-1.amazonaws.comnan
2645.55.107.213North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_21nannan
2723.4.234.14PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_21a23-4-234-14.deploy.static.akamaitechnologies.comnan
2834.231.69.183AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-34-231-69-183.compute-1.amazonaws.comnan
2991.195.240.136Frankfurt am MainHesseAS47846 SEDO GmbH60311Germanytier_21nannan
30104.21.42.219San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_364nanTrue
31172.67.210.108San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_326nanTrue
32104.21.95.28San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_314nanTrue
33172.67.200.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_312nanTrue
34104.21.60.194San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
35162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_35nannan
36172.67.169.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
3723.227.38.32OttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_32myshopify.comTrue
38151.101.2.133San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
39100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.netnan
40172.67.210.204San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4113.225.221.108New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-221-108.jfk51.r.cloudfront.netnan
42184.29.181.239AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_31a184-29-181-239.deploy.static.akamaitechnologies.comnan
43184.29.176.200AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_31a184-29-176-200.deploy.static.akamaitechnologies.comnan
4435.186.238.101Kansas CityMissouriAS15169 Google LLC64121United Statestier_31101.238.186.35.bc.googleusercontent.comTrue
4513.225.221.40New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-221-40.jfk51.r.cloudfront.netnan
46184.87.84.14NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-87-84-14.deploy.static.akamaitechnologies.comnan
4713.225.231.179New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-231-179.jfk51.r.cloudfront.netnan
48104.16.127.59San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website