Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
05047890102021-08-0374.63.241.23Chrome
tierdomaincountregistrarname_serversorg
0tier_1potlocker.digital1NAMECHEAP INCns1.thednscloud.comPrivacy service provided by Withheld for Privacy ehf
1tier_1rams.coach1NoneNoneNone
2tier_1liedstem.tech1NAMECHEAP INCNS1.NAMEDYNAMICS.NETPrivacy service provided by Withheld for Privacy ehf
3tier_1prison.school1NoneNoneNone
4tier_1appsvill.vip1NoneNoneNone
5tier_1rangerstv.live1NoneNoneNone
6tier_1tenasuarus.run1NoneNoneNone
7tier_11v1s.lol1NoneNoneNone
8tier_1chessington.world1NoneNoneNone
9tier_1ordeenow.pizza1NoneNoneNone
10tier_2btpnav.com61API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2nizephoros-pom.com6Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
12tier_2antig-hra.com5Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
13tier_2click.expmediadirect1.com4NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2clk.rtpdn14.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
15tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
16tier_2api.mplayit.com3Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
17tier_2offers.devfield.com2NAMECHEAP INCDNS1.NAMECHEAPHOSTING.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2wauwfy.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2c.spnccrzone.com2GoDaddy.com, LLCNS-1493.AWSDNS-58.ORGRewardsFlow, LLC
20tier_2redirect.viglink.com2Amazon Registrar, Inc.NS1.VIGLINK.COMNone
21tier_2link.sylikes.com2MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
22tier_2rtbstream.com11API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
23tier_2acrvclk.com1NAMECHEAP INCNS.ANYCASTNS1.ORGPrivacy service provided by Withheld for Privacy ehf
24tier_2rd.bizrate.com1NoneNoneNone
25tier_2rd.connexity.net1NoneNoneNone
26tier_2folcher-cri.com1Amazon Registrar, Inc.NS-1201.AWSDNS-22.ORGNone
27tier_2tnlnk.com1OVH, SASDNS200.ANYCAST.MEMONETIZE ME
28tier_2api.kelkoogroup.net1NoneNoneNone
29tier_2c.pageprotect.net1GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
30tier_3offers.devfield.com4NAMECHEAP INCDNS1.NAMECHEAPHOSTING.COMPrivacy service provided by Withheld for Privacy ehf
31tier_3dan.com4TUCOWS, INC.EMMA.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
32tier_3electronicpromotionsusa.com2GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMNone
33tier_3top.allresultsweb.com2MarkMonitor, Inc.DNS1.P06.NSONE.NETIAC Publishing, LLC
34tier_3yukoninstant.com2NAMECHEAP INCCHUCK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
35tier_3grandjackpotslot.com1NAMECHEAP INCCHUCK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
36tier_3top.faqtoids.com1NoneNoneNone
37tier_3rd.bizrate.com1NoneNoneNone
38tier_3katom.com1Cloudflare, Inc.ROXY.NS.CLOUDFLARE.COMDATA REDACTED
39tier_3us-go.kelkoogroup.net1NoneNoneNone
40tier_3ziprecruiter.com1SafeNames Ltd.CAROL.NS.CLOUDFLARE.COMNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
023.82.12.32WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_14nannan
1212.32.237.101AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
223.82.12.29WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_12nannan
3192.187.111.221Kansas CityMissouriAS33387 Nocix, LLC64170United Statestier_12tyg.qwiqo.livenan
463.141.242.45Kansas CityMissouriAS33387 Nocix, LLC64170United Statestier_12nannan
523.82.12.31WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_11nannan
663.141.242.43Kansas CityMissouriAS33387 Nocix, LLC64170United Statestier_11nannan
763.141.242.46Kansas CityMissouriAS33387 Nocix, LLC64170United Statestier_11nannan
881.17.29.149LuzernLucerneAS51852 Private Layer INC6015Switzerlandtier_11nannan
923.82.12.30WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_11nannan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_27nanTrue
113.224.214.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-3-224-214-180.compute-1.amazonaws.comnan
1234.194.124.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-34-194-124-180.compute-1.amazonaws.comnan
13198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nannan
14173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_23nannan
1534.196.146.145AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-34-196-146-145.compute-1.amazonaws.comnan
16192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
1794.23.77.126Charleville-MézièresGrand EstAS16276 OVH SAS08000Francetier_22ip126.ip-94-23-77.eunan
183.210.109.245AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-3-210-109-245.compute-1.amazonaws.comnan
1954.236.153.215AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-54-236-153-215.compute-1.amazonaws.comnan
2034.195.100.186AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-34-195-100-186.compute-1.amazonaws.comnan
21209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_22nannan
2234.193.161.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-34-193-161-118.compute-1.amazonaws.comnan
233.210.231.22AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-210-231-22.compute-1.amazonaws.comnan
24213.174.155.140WashingtonWashington, D.C.AS39572 DataWeb Global Group B.V.20045United Statestier_21nannan
25192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_21rd.connexity.netnan
2634.197.79.56AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-34-197-79-56.compute-1.amazonaws.comnan
2767.199.248.12New York CityNew YorkAS396982 Google LLC10010United Statestier_21cname.bitly.comTrue
2899.84.126.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_21server-99-84-126-93.ewr52.r.cloudfront.netnan
2952.28.84.253Frankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_34ec2-52-28-84-253.eu-central-1.compute.amazonaws.comnan
3051.91.200.241RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_33ip241.ip-51-91-200.eunan
31104.21.24.161San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
3234.193.161.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-34-193-161-118.compute-1.amazonaws.comnan
33172.67.136.189San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
343.210.231.22AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-210-231-22.compute-1.amazonaws.comnan
35172.67.182.25San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
36192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
373.217.155.197AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-217-155-197.compute-1.amazonaws.comnan
38104.19.214.102San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
3995.211.116.27AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_31dc1-ecs-pub-go-vip.kelkoo.comnan
40104.16.175.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website