Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02212206601242021-07-0893.115.28.104Safari
tierdomaincountregistrarname_serversorg
0tier_1coiphimonline.com1NamePal.com #8015, LLCNS1.RENTONDC.COMNone
1tier_1ahopplaywin.com1SantiamDomains.com LLCNS1.RENTONDC.COMNone
2tier_1harzturbu.de1NoneNoneNone
3tier_1silampuneon.com1Fine Grain Domains, LLCNS1.RENTONDC.COMNone
4tier_1myfreewallpapershub.com1Freefall Domains LLCNS1.RENTONDC.COMNone
5tier_1israelspy.com1Gold Domain Names LLCNS1.RENTONDC.COMNone
6tier_1iccraleigh.org1Belmontdomains.com LLCNS1.RENTONDC.COMNone
7tier_1androidlp5.com1SNAPNAMES 93, LLCNS1.RENTONDC.COMNone
8tier_1fiice.com1TUCOWS, INC.NS1.RENTONDC.COMContact Privacy Inc. Customer 0154367604
9tier_1inisig.com1Millennial Names LLCNS1.RENTONDC.COMNone
10tier_3google.com127MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
11tier_3fatchunkabstract.com12NAMECHEAP INCCHUCK.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
12tier_31496.rebiraert.com4GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
13tier_3dutchbulbs.com2Network Solutions, LLCNS1.COLORMARIA.NETNone
14tier_3beallsflorida.com1CSC CORPORATE DOMAINS, INC.A1-23.AKAM.NETBealls, Inc.
15tier_3sea-m.newchic.com1Xin Net Technology CorporationA1-75.AKAM.NETREDACTED FOR PRIVACY
16tier_3bitdefender.com1Register.com, Inc.PDNS210.ULTRADNS.BIZNone
17tier_3restasis.com1MarkMonitor, Inc.HA1.MARKMONITOR.ZONEAbbVie Inc.
18tier_3robogarden.io1GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
19tier_3nissanusa.com1NoneNoneNone
20tier_3shop.bodybuilding.com1NoneNoneNone
21tier_3myollie.com1GoDaddy.com, LLCNS-1182.AWSDNS-19.ORGNone
22tier_3att.com1CSC CORPORATE DOMAINS, INC.NS1.ATTDNS.COMAT&T SERVICES, INC.
23tier_3best.aliexpress.com1Alibaba Cloud Computing (Beijing) Co., Ltd.NS1.ALIBABADNS.COMNone
24tier_3dutchbulbs.com_LOOP_11NoneNoneNone
25tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
26tier_3medicarecoveragenow.com1GoDaddy.com, LLCNS1.US208.SITEGROUND.USDomains By Proxy, LLC
27tier_3europcar.com1MarkMonitor Inc.NS1.MARKMONITOR.COMNone
28tier_21496.rebiraert.com127GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
29tier_2americanlisted.com127ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
30tier_2click.expmediadirect1.com17NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
31tier_2api.apptap.com5Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
32tier_2track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
33tier_2ww2.siteplug.com5NoneNoneNone
34tier_2api.mplayit.com3Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
35tier_2gloos-ves.com3Amazon Registrar, Inc.NS-1228.AWSDNS-25.ORGWhois Privacy Service
36tier_2ad.doubleclick.net3MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
37tier_2go.shopyourlikes.com3NoneNoneNone
38tier_2rd.bizrate.com3NoneNoneNone
39tier_2rd.connexity.net3NoneNoneNone
40tier_2c.pageprotect.net2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
41tier_211165151.searchiqnet.com2GoDaddy.com, LLCNS57.DOMAINCONTROL.COMDomains By Proxy, LLC
42tier_2clickserve.dartsearch.net2NoneNoneNone
43tier_2dbc.pathroutes.com2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
44tier_2givingcpasupport.com1NAMECHEAP INCNS-1451.AWSDNS-53.ORGPrivacy service provided by Withheld for Privacy ehf
45tier_2t.cfjump.com1Instra Corporation Pty Ltd.NS1-01.AZURE-DNS.COMREDACTED FOR PRIVACY
46tier_2sea.newchic.com1Xin Net Technology CorporationA1-75.AKAM.NETREDACTED FOR PRIVACY
47tier_2bitdefender.f9tmep.net1Amazon Registrar, Inc.NS-1078.AWSDNS-06.ORGImpact
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0172.98.192.35Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_145nannan
1172.98.192.36Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_144nannan
2172.98.192.37Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_140nannan
393.115.28.104VilniusVilniusAS16125 UAB Cherry Servers01001Lithuaniatier_130nannan
4172.217.7.4New York CityNew YorkAS15169 Google LLC10004United Statestier_331lga25s56-in-f4.1e100.netnan
5142.250.64.100New York CityNew YorkAS15169 Google LLC10004United Statestier_330lga34s31-in-f4.1e100.netnan
6172.217.10.228New York CityNew YorkAS15169 Google LLC10004United Statestier_318lga25s59-in-f4.1e100.netnan
7142.250.80.68New York CityNew YorkAS15169 Google LLC10004United Statestier_317lga34s35-in-f4.1e100.netnan
8172.217.10.36New York CityNew YorkAS15169 Google LLC10004United Statestier_314lga34s13-in-f4.1e100.netnan
9142.250.80.100New York CityNew YorkAS15169 Google LLC10004United Statestier_36lga34s36-in-f4.1e100.netnan
10142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_36lga34s33-in-f4.1e100.netnan
11172.67.169.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
12104.21.95.28San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
13198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_2127nannan
14172.217.10.100New York CityNew YorkAS15169 Google LLC10004United Statestier_33lga34s15-in-f4.1e100.netnan
15172.217.10.68New York CityNew YorkAS15169 Google LLC10004United Statestier_32lga34s14-in-f4.1e100.netnan
163.227.221.104AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-227-221-104.compute-1.amazonaws.comnan
17184.29.161.122AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_31a184-29-161-122.deploy.static.akamaitechnologies.comnan
18184.29.167.19AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_21a184-29-167-19.deploy.static.akamaitechnologies.comnan
19104.18.169.222San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
2052.55.152.50AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-55-152-50.compute-1.amazonaws.comnan
21172.67.172.143San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
22104.109.146.139PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_31a104-109-146-139.deploy.static.akamaitechnologies.comnan
2323.227.38.74OttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31nanTrue
2452.85.61.120NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-52-85-61-120.ewr53.r.cloudfront.netnan
2523.75.31.157PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_31a23-75-31-157.deploy.static.akamaitechnologies.comnan
2623.10.139.98New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_22a23-10-139-98.deploy.static.akamaitechnologies.comnan
27100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.netnan
2854.230.243.160NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-54-230-243-160.ewr53.r.cloudfront.netnan
2935.209.104.110Council BluffsIowaAS15169 Google LLC51502United Statestier_31110.104.209.35.bc.googleusercontent.comnan
30184.29.162.33AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_31a184-29-162-33.deploy.static.akamaitechnologies.comnan
31198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_2127nannan
3235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_2127240.61.209.35.bc.googleusercontent.comnan
33198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_217nannan
34209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_28nannan
35192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26rd.bizrate.comnan
36167.233.8.197N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_25static.197.8.233.167.clients.your-server.denan
37216.139.248.127AustinTexasAS32400 Hostway Services, Inc.78701United Statestier_25216-139-248-127.aus.us.siteprotect.comnan
3854.84.32.142AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-54-84-32-142.compute-1.amazonaws.comnan
3950.16.132.189AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-50-16-132-189.compute-1.amazonaws.comnan
4052.7.145.236AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-52-7-145-236.compute-1.amazonaws.comnan
41192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_23rd.connexity.netnan
42159.127.43.26WashingtonWashington, D.C.AS25751 Conversant, Inc.20045United Statestier_23nannan
4323.10.139.98New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_22a23-10-139-98.deploy.static.akamaitechnologies.comnan
44173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_22nannan
4534.234.154.208AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-34-234-154-208.compute-1.amazonaws.comnan
4640.82.218.196SydneyNew South WalesAS8075 Microsoft Corporation1001Australiatier_21commissionfactory.comnan
47184.29.167.19AtlantaGeorgiaAS16625 Akamai Technologies, Inc.30302United Statestier_21a184-29-167-19.deploy.static.akamaitechnologies.comnan
4852.71.158.47AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-71-158-47.compute-1.amazonaws.comnan
49142.250.64.102New York CityNew YorkAS15169 Google LLC10004United Statestier_21lga34s31-in-f6.1e100.netnan
50142.250.80.46New York CityNew YorkAS15169 Google LLC10004United Statestier_21lga34s34-in-f14.1e100.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website