Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02202248820132021-04-14185.107.56.199Chrome
tierdomaincountregistrarname_serversorg
0tier_1akerdersevi.com1DYNADOT9 LLCNS1.COMMONMX.COMNone
1tier_1adultstarmakers.com1eNom389, IncorporatedNS1.COMMONMX.COMNone
2tier_128277b.com1Sliceofheaven Domains, LLCNS1.COMMONMX.COMNone
3tier_12012columbo.com1NoneNoneNone
4tier_1americanstrikermma.com1Communigal Communication LtdNS1.COMMONMX.COMNone
5tier_1acylogy.com1Snag Your Name LLCNS1.COMMONMX.COMNone
6tier_158xingqu.com1MidWest Domains LLCNS1.COMMONMX.COMNone
7tier_148dc47c7234e5258.com1Communigal Communication LtdNS1.COMMONMX.COMNone
8tier_1alantemusic.com1New Order Domains, LLCNS1.COMMONMX.COMNone
9tier_1acusp.info1Communigal Communication LtdNS1.COMMONMX.COMNone
10tier_21496.rawlexi.com146NoneNoneNone
11tier_2americanlisted.com141ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2btpnav.com421API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
13tier_2click.appcast.io40101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_29nl.es37NoneNoneNone
15tier_2newre-conversions.clickmeter.com37REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
16tier_2trk.jometer.com24Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
17tier_2api.l5srv.net23GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2ring.joveo.com13Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
19tier_2click.expmediadirect.com5NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
20tier_2api.apptap.com5Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
21tier_2click.appcast.io_LOOP_14NoneNoneNone
22tier_2redirect.viglink.com4Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
23tier_2link.sylikes.com4MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
24tier_2api.mplayit.com3Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
25tier_2joblift.com3INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
26tier_2nextcareernow.com3GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_2rtbstream.com21API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
28tier_2folcher-cri.com2Amazon Registrar, Inc.NS-1201.AWSDNS-22.ORGNone
29tier_2melanthios-ana.com2Amazon Registrar, Inc.NS-1354.AWSDNS-41.ORGNone
30tier_3google.com58MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3upward.careers23GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3us.tideri.com18united domains AGNS.UDAG.DENone
33tier_3careerbuilder.com14CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
34tier_3signup.finddreamjobs.com10GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
35tier_3americanlisted.com6ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3signup.careersandjobs.co3GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
37tier_3jobleads.com3united domains AGCRUZ.NS.CLOUDFLARE.COMNone
38tier_3rd.bizrate.com2MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
39tier_3boot-upcompletely-bestrefinedfile.best2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
40tier_3maurices.com_LOOP_12NoneNoneNone
41tier_3us.sercanto.com1OVH, SASNS11.CONSTELLIX.COMWickedin s.r.l.
42tier_3vivint.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMVivint
43tier_3uber.com1MarkMonitor, Inc.EDNS126.ULTRADNS.BIZUber Technologies, Inc.
44tier_3livetrucking.com1GoDaddy.com, LLCAMY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
45tier_3linkup.com1GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
46tier_3monster.com1CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
47tier_3uniqlo.com11API GmbHNS-1415.AWSDNS-48.ORGNone
48tier_3harvest.appvault.com1Cloudflare, Inc.AMY.NS.CLOUDFLARE.COMDATA REDACTED
49tier_3linkup.com_LOOP_11NoneNoneNone
50tier_3ziprecruiter.com1Safenames LtdCAROL.NS.CLOUDFLARE.COMNone
51tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
52tier_3mactoolsfranchises.com1GoDaddy.com, LLCNS21.DOMAINCONTROL.COMus media digital
53tier_3trk.careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
54tier_3getstarjobs.getitcorporate.com1GoDaddy.com, LLCNS-CLOUD-E1.GOOGLEDOMAINS.COMGet It LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
3207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_120nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
5104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
7206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_15nannan
874.63.241.26DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1326-241-63-74.static.reverse.lstn.netnan
9185.107.56.199RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2146nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_245nannan
1323.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-23-21-53-13.compute-1.amazonaws.comnan
1467.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_223nannan
1554.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_221ec2-54-197-247-190.compute-1.amazonaws.comnan
1652.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-52-3-4-129.compute-1.amazonaws.comnan
1723.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-23-21-166-45.compute-1.amazonaws.comnan
1854.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-54-235-205-204.compute-1.amazonaws.comnan
193.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-3-234-0-165.compute-1.amazonaws.comnan
20100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-100-25-52-1.compute-1.amazonaws.comnan
2199.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-99-84-114-25.ewr52.r.cloudfront.netnan
2299.84.114.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_27server-99-84-114-17.ewr52.r.cloudfront.netnan
2399.84.114.53NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_26server-99-84-114-53.ewr52.r.cloudfront.netnan
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
25192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32nannan
26198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_25nannan
2713.33.46.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-13-33-46-93.ewr52.r.cloudfront.netnan
2813.33.46.15NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-13-33-46-15.ewr52.r.cloudfront.netnan
2934.197.67.232AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-34-197-67-232.compute-1.amazonaws.comnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_323nannan
31172.217.12.196CliftonNew JerseyAS15169 Google LLC07015United Statestier_318lga25s63-in-f4.1e100.netnan
3235.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_318123.171.246.35.bc.googleusercontent.comnan
33172.217.10.4WestburyNew YorkAS15169 Google LLC11590United Statestier_311lga34s12-in-f4.1e100.netnan
34172.217.165.132New York CityNew YorkAS15169 Google LLC10004United Statestier_310lga25s70-in-f4.1e100.netnan
35142.250.64.68Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_39lga34s30-in-f4.1e100.netnan
36142.250.64.100Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_36lga34s31-in-f4.1e100.netnan
37104.17.47.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
3835.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
3999.84.47.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-47-93.ewr52.r.cloudfront.netnan
40172.217.9.228CliftonNew JerseyAS15169 Google LLC07015United Statestier_34lga34s11-in-f4.1e100.netnan
41104.17.48.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
4299.84.47.14NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-47-14.ewr52.r.cloudfront.netnan
4399.84.47.36NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-47-36.ewr52.r.cloudfront.netnan
44100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
45172.67.144.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
46194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_32www.jobleads.denan
47192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32nannan
483.233.37.12AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-233-37-12.compute-1.amazonaws.comnan
4999.84.47.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-65.ewr52.r.cloudfront.netnan
5035.204.107.142GroningenGroningenAS15169 Google LLC9711Netherlandstier_31142.107.204.35.bc.googleusercontent.comnan
51104.18.10.116San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
52104.36.195.150WashingtonWashington, D.C.AS63086 Uber Technologies, Inc20045United Statestier_31nannan
53104.21.75.162San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
54209.236.97.200MinneapolisMinnesotaAS13649 Flexential Colorado Corp.55440United Statestier_31nannan
5599.84.47.10NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-10.ewr52.r.cloudfront.netnan
56104.21.10.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5723.38.173.248NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-38-173-248.deploy.static.akamaitechnologies.comnan
58104.19.248.19San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
59104.16.175.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website