Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01711795570242021-08-1074.63.241.23Android
tierdomaincountregistrarname_serversorg
0tier_1ekarmakshetra.com1Silver Domain Names LLCNS1.BRAINYDNS.COMNone
1tier_1dailywellnesstip.com1Pink Elephant Domains, LLCNS1.BRAINYDNS.COMNone
2tier_1seemagic.co1GoDaddy.com, LLCns1.torresdns.comNone
3tier_1phlick.co1GoDaddy.com, LLCns1.torresdns.comNone
4tier_1mueblesfinosvama.com1Names Stop Here LLCNS1.TORRESDNS.COMNone
5tier_1nandkconstruction.com1TUCOWS, INC.NS1.TORRESDNS.COMContact Privacy Inc. Customer 0161283794
6tier_1daniexpress.com1DomaintoOrder, LLCNS1.BRAINYDNS.COMNone
7tier_1mtgm9413.com1Swordfish Domains LLCNS1.TORRESDNS.COMNone
8tier_1playerup.co1GoDaddy.com, LLCns1.torresdns.comNone
9tier_1muchasa.com1DYNADOT12 LLCNS1.TORRESDNS.COMNone
10tier_2antig-hra.com42Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
11tier_2btpnav.com291API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
12tier_2api.apptap.com18Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
13tier_2ads35.adtelligent.com17DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
14tier_2dsp35.adtelligent.com17DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
15tier_2aibm1.mysearch.space17NoneNoneNone
16tier_2externals-1953518744.us-east-1.elb.amazonaws.com17MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
17tier_2search.snjsearch.com17GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2search-checker.com16Name.com, Inc.BETH.NS.CLOUDFLARE.COMDomain Protection Services, Inc.
19tier_2m.onlineweb.mobi16GoDaddy.com, LLCNoneNone
20tier_2track.vcdc.com15Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_2click.expmediadirect1.com13NoneNoneNone
22tier_2redirect.viglink.com13Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
23tier_2link.sylikes.com13MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
24tier_2api.mplayit.com12Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
25tier_2xml.onwardclick.com9NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
26tier_2rd.bizrate.com9MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
27tier_2rd.connexity.net9MarkMonitor Inc.NS-1190.AWSDNS-20.ORGNone
28tier_2nizephoros-pom.com6Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGNone
29tier_2media-px.com6GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
30tier_3bing.com17MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
31tier_3top.allresultsweb.com5NoneNoneNone
32tier_3happy.thanksyoursupport.club5NAMECHEAP INCplato.ns.cloudflare.comPrivacy service provided by Withheld for Privacy ehf
33tier_3storystudio.sfgate.com4CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
34tier_3socalhondadealers.com4DREAMHOSTNS1.DREAMHOST.COMProxy Protection LLC
35tier_3storystudio.sfchronicle.com4CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
36tier_3rd.bizrate.com4MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
37tier_3coolmambo.com3NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
38tier_3filter.onwardclick.com3NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
39tier_3zennioptical.com3Wild West Domains, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
40tier_3zulily.com3SafeNames Ltd.NS-1255.AWSDNS-28.ORGNone
41tier_3robogarden.io2GoDaddy.com, LLCDEE.NS.CLOUDFLARE.COMNone
42tier_3ohdeal.com1MarkMonitor, Inc.DNS1.P08.NSONE.NETConsumer Search, Inc.
43tier_3nike.com_LOOP_11NoneNoneNone
44tier_3details1NoneNoneNone
45tier_3webstaurantstore.com_LOOP_11NoneNoneNone
46tier_3samsclub.bttn.io1GANDI SASNS-59.AWSDNS-07.COMNone
47tier_362813.click.validclick.net1SafeNames Ltd.NS1.FULLMAILBOX.COMNone
48tier_3ww1.survey-smiles.com1Media Elite Holdings LimitedNS1.WOMBATDNS.COMFundacion Privacy Services LTD
49tier_3btpnav.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
50tier_3adserver.encontextadvertising.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
51tier_3progressive.com_LOOP_11NoneNoneNone
52tier_3sweetwater.com1CSC CORPORATE DOMAINS, INC.DNS1.P02.NSONE.NETSweetwater Sound, Inc.
53tier_3thelastpicture.show_LOOP_11NoneNoneNone
54tier_365437.click.validclick.net1SafeNames Ltd.NS1.FULLMAILBOX.COMNone
55tier_3a.spotplanetc.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
56tier_364799.click.validclick.net1SafeNames Ltd.NS1.FULLMAILBOX.COMNone
57tier_3shopnsave.world1NoneNoneNone
58tier_3b.fastspinf.xyz1NoneNoneNone
59tier_3samsclub.bttn.io_LOOP_11NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
0209.126.123.11static-ip-209-126-123-11.inaddr.ip-pool.comSt. LouisMissouriAS30083 GoDaddy.com, LLC63150United Statestier_116nan
1209.126.123.12static-ip-209-126-123-12.inaddr.ip-pool.comSt. LouisMissouriAS30083 GoDaddy.com, LLC63150United Statestier_112nan
2209.126.123.13static-ip-209-126-123-13.inaddr.ip-pool.comSt. LouisMissouriAS30083 GoDaddy.com, LLC63150United Statestier_111nan
3162.210.199.87nanWashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_15nan
4192.157.56.141nanBuffaloNew YorkAS55286 B2 Net Solutions Inc.14202United Statestier_13nan
578.41.204.31nanLopikUtrechtAS62370 Snel.com B.V.3411Netherlandstier_13nan
678.41.204.34server368.snel.comLopikUtrechtAS62370 Snel.com B.V.3411Netherlandstier_12nan
778.41.204.39server368.snel.comLopikUtrechtAS62370 Snel.com B.V.3411Netherlandstier_12nan
882.192.82.227nanAmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nan
9162.210.199.65nanWashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_12nan
10209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan
1134.194.124.180ec2-34-194-124-180.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_229nan
123.224.214.180ec2-3-224-214-180.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224nan
13192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nan
14209.205.202.42static-42-202-205-209.24shells.netNew York CityNew YorkAS55081 24 SHELLS10004United Statestier_217nan
15209.205.202.43static-43-202-205-209.24shells.netNew York CityNew YorkAS55081 24 SHELLS10004United Statestier_217nan
1635.162.164.74ec2-35-162-164-74.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_217nan
17167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_215nan
18173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_33nan
19172.67.196.184nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_214True
20198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_213nan
2135.175.49.38ec2-35-175-49-38.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212nan
22192.241.229.243nanSan FranciscoCaliforniaAS14061 DigitalOcean, LLC94124United Statestier_211nan
2352.0.77.178ec2-52-0-77-178.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210nan
2418.208.78.181ec2-18-208-78-181.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29nan
253.66.206.147ec2-3-66-206-147.eu-central-1.compute.amazonaws.comFrankfurt am MainHesseAS16509 Amazon.com, Inc.60311Germanytier_29nan
26192.138.218.139rd.connexity.netSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_29nan
2754.85.88.236ec2-54-85-88-236.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29nan
2834.195.100.186ec2-34-195-100-186.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29nan
29204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_33nan
30204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_314True
31151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_38True
32100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38nan
3351.91.200.241ip241.ip-51-91-200.euRoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_35nan
34192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_34nan
3564.91.232.212host.encontext.comLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_33nan
36131.253.33.200a-0001.dc-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_33True
37104.21.5.45nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33True
38173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_33nan
3923.4.231.62a23-4-231-62.deploy.static.akamaitechnologies.comPiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_33nan
4034.207.4.240ec2-34-207-4-240.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33nan
41204.44.79.214204.44.79.214.static.quadranet.comLos AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_33nan
42172.67.132.245nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
43151.101.2.114nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31True
4435.174.35.73ec2-35-174-35-73.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
4552.85.61.32server-52-85-61-32.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
46172.67.167.157nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
47199.59.242.153nanNew York CityNew YorkAS395082 Bodis, LLC10004United Statestier_31nan
48209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan
4952.85.61.42server-52-85-61-42.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
50104.21.67.16nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5167.227.155.96nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan
52151.101.2.133nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31True
53104.18.82.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5467.227.241.125host.encontext.comLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan
5552.85.61.40server-52-85-61-40.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
56104.18.78.149nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5723.227.38.32myshopify.comOttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31True

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website