Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01631653450352021-09-0893.115.28.104Android
tierdomaincountregistrarname_serversorg
0tier_1healthylivingstyle.net1OldTownDomains.com LLCNS1.RENTONDC.COMNone
1tier_1anshear.com1TUCOWS, INC.NS1.RENTONDC.COMContact Privacy Inc. Customer 0153824061
2tier_1geispo.info1Communigal Communication LtdNS1.RENTONDC.COMNone
3tier_1diamondbladeselect.com1GoDaddy.com, LLCNS1.RENTONDC.COMAbove Privacy
4tier_1ahlyegypt.com1TUCOWS, INC.NS1.RENTONDC.COMREDACTED FOR PRIVACY
5tier_1observator.info1Tucows Domains Inc.NS1.RENTONDC.COMData Protected
6tier_1moviescapital.info1Above.com Pty Ltd.NS1.RENTONDC.COM\n
7tier_1bdlove24.info1Communigal Communication LtdNS1.RENTONDC.COMNone
8tier_1liverpoolminibushire.info1Belmontdomains.com LLCNS1.RENTONDC.COMNone
9tier_1alljobsinafghanistan.com1DYNADOT LLCNS1.RENTONDC.COMNone
10tier_2track.vcdc.com42Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
11tier_2clk.rtpdn14.com35NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
12tier_2click.junmediadirect.com10NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
13tier_2click.expmediadirect1.com10NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2api.apptap.com6Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
15tier_2xml.onwardclick.com4NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2adserver.encontextadvertising.com4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2technoblogs.net4GANDI SASNS-1196.AWSDNS-21.ORGPPCBUZZ
18tier_211165151.searchiqnet.com4GoDaddy.com, LLCNS57.DOMAINCONTROL.COMDomains By Proxy, LLC
19tier_2barah-flo.com4Amazon Registrar, Inc.NS-1435.AWSDNS-51.ORGWhois Privacy Service
20tier_2filter.onwardclick.com3NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2xml.onwardclick.com_LOOP_13NoneNoneNone
22tier_2paid.outbrain.com3Network Solutions, LLCDNS1.P07.NSONE.NETNone
23tier_2api.mplayit.com3Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
24tier_2trackyourmpg.com3GoDaddy Online Services Cayman Islands Ltd.HUGH.NS.CLOUDFLARE.COMNone
25tier_2lifeimpressions.net3GoDaddy.com, LLCNS29.DOMAINCONTROL.COMInfo Bridge Ltd
26tier_2c.pageprotect.net2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_2dailyboard.org2GANDI SASNS-1297.AWSDNS-34.ORGPPCBUZZ
28tier_2c.trafficcertify.com2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
29tier_2lg.provenpixel.com21&1 IONOS SENS01.PROVENPIXEL.NET1&1 Internet Inc
30tier_3us.redirectbuzz.club43Gandi SASns-1650.awsdns-14.co.ukPPCBUZZ
31tier_3pu.vuer.net3GoDaddy.com, LLCLISA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
32tier_3chewy.com3Moniker Online Services LLCNS1.P02.DYNECT.NETChewy, Inc.
33tier_3amazon.com2MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
34tier_3ziprecruiter.com2Safenames LtdCAROL.NS.CLOUDFLARE.COMNone
35tier_3b.fastspinf.xyz2Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
36tier_3btpnative.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
37tier_3forlaptopsandmobile.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
38tier_3g-sponsored-results.com1GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGDomains By Proxy, LLC
39tier_3askmen.com1CSC CORPORATE DOMAINS, INC.MELINDA.NS.CLOUDFLARE.COMZiff Davis LLC
40tier_3healthgrades.com1Amazon Registrar, Inc.NS-1102.AWSDNS-09.ORGWhois Privacy Service
41tier_3btpnav.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
42tier_3xml.userwave.com1GoDaddy.com, LLCNS77.DOMAINCONTROL.COMDomains By Proxy, LLC
43tier_3buzzpatch.com1Cloudflare, Inc.MONROE.NS.CLOUDFLARE.COMDATA REDACTED
44tier_3m.pandaspringe.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
45tier_3e543ab.lifeimpressions.net1GoDaddy.com, LLCNS29.DOMAINCONTROL.COMInfo Bridge Ltd
46tier_3cvs.com1MarkMonitor, Inc.A1-84.AKAM.NETCVS Pharmacy, Inc.
47tier_3nike.com1NoneNoneNone
48tier_3thelastpicture.show1NoneNoneNone
49tier_3forbeautyandcare.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
50tier_3cbd.co1GoDaddy.com, LLCns03.domaincontrol.comMarketplace Ventures, LLC
51tier_3cashusa.com1Sea Wasp, LLCNS10.DNSMADEEASY.COMJewella Privacy LLC Privacy ID# 1211426
52tier_3gogiersan.com1URL SOLUTIONS INC.NS-1324.AWSDNS-37.ORGGLOBAL DOMAIN PRIVACY SERVICES INC
53tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
54tier_3m.placespina.xyz1Sav.comLLCHUGH.NS.CLOUDFLARE.COMPrivacy Protection
55tier_3ww25.wdayfair.com1Key-Systems GmbHNS1.ABOVE.COMc/o whoisproxy.com
56tier_3forcoolfashion.com1NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
57tier_310391c.lifeimpressions.net1GoDaddy.com, LLCNS29.DOMAINCONTROL.COMInfo Bridge Ltd
58tier_3a6fefb.lifeimpressions.net1GoDaddy.com, LLCNS29.DOMAINCONTROL.COMInfo Bridge Ltd
59tier_3track.vcdc.com1Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
ipcityregionorgpostalcountry_nametiercounthostnameanycast
093.115.28.104VilniusVilniusAS16125 UAB Cherry Servers01001Lithuaniatier_124nannan
1172.98.192.35Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_119nannan
2172.98.192.36Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_119nannan
3172.98.192.37Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_118nannan
4173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_245nannan
5167.233.8.197N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_242static.197.8.233.167.clients.your-server.denan
6198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nannan
7198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nannan
8209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_28nannan
9100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_25pool-100-37-135-2.nycmny.fios.verizon.netnan
1067.227.155.96LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_24nannan
1166.232.112.85TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-85.static.hvvc.usnan
1252.72.49.164AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-52-72-49-164.compute-1.amazonaws.comnan
13192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_24rd.bizrate.comnan
1434.195.129.193AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-34-195-129-193.compute-1.amazonaws.comnan
15104.18.24.3San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_23nanTrue
16178.128.246.195AmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_33nannan
173.209.187.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-3-209-187-98.compute-1.amazonaws.comnan
18199.232.66.132San FranciscoCaliforniaAS54113 Fastly94107United Statestier_22nannan
1966.232.112.73TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_2266-232-112-73.static.hvvc.usnan
2034.195.15.110AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-34-195-15-110.compute-1.amazonaws.comnan
2152.73.147.241AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-52-73-147-241.compute-1.amazonaws.comnan
2269.172.200.185Los AngelesCaliforniaAS19324 Dosarrest Internet Security LTD90017United Statestier_22maxbounty.comTrue
23173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2218.65.c0ad.ip4.static.sl-reverse.comnan
2466.232.112.74TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3666-232-112-74.static.hvvc.usnan
2566.232.112.68TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3566-232-112-68.static.hvvc.usnan
2666.232.112.67TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3466-232-112-67.static.hvvc.usnan
2766.232.112.84TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3466-232-112-84.static.hvvc.usnan
2866.232.112.72TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3466-232-112-72.static.hvvc.usnan
2964.91.232.212LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_33host.encontext.comnan
3066.232.112.85TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-85.static.hvvc.usnan
3123.4.234.14PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_33a23-4-234-14.deploy.static.akamaitechnologies.comnan
3266.232.112.76TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-76.static.hvvc.usnan
33178.128.246.195AmsterdamNorth HollandAS14061 DigitalOcean, LLC1012Netherlandstier_33nannan
3466.232.112.77TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-77.static.hvvc.usnan
3566.232.112.81TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-81.static.hvvc.usnan
3666.232.112.70TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3366-232-112-70.static.hvvc.usnan
37209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_32nannan
38172.67.182.245San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
3966.232.112.82TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3266-232-112-82.static.hvvc.usnan
4066.232.112.75TampaFloridaAS29802 HIVELOCITY, Inc.33606United Statestier_3266-232-112-75.static.hvvc.usnan
4113.225.229.29New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-229-29.jfk51.r.cloudfront.netnan
4213.225.229.232New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-229-232.jfk51.r.cloudfront.netnan
43104.16.178.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
44104.18.31.10San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4513.225.229.123New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-229-123.jfk51.r.cloudfront.netnan
46174.137.133.16New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_31nannan
4723.227.38.65OttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31myshopify.comTrue
48104.18.68.149San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
49104.16.174.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5023.57.131.241PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_31a23-57-131-241.deploy.static.akamaitechnologies.comnan
5123.75.30.111PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_31a23-75-30-111.deploy.static.akamaitechnologies.comnan
5267.43.9.71LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31host.encontext.comnan
53104.21.67.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website