Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02162207651132021-04-14185.107.56.199Safari
tierdomaincountregistrarname_serversorg
0tier_1akerdersevi.com1DYNADOT9 LLCNS1.COMMONMX.COMNone
1tier_1adultstarmakers.com1SNAPNAMES 30, LLCNS1.COMMONMX.COMNone
2tier_128277b.com1Sliceofheaven Domains, LLCNS1.COMMONMX.COMNone
3tier_12012columbo.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159174620
4tier_1americanstrikermma.com1Communigal Communication LtdNS1.COMMONMX.COMNone
5tier_1acylogy.com1Snag Your Name LLCNS1.COMMONMX.COMNone
6tier_158xingqu.com1MidWestDomains, LLCNS1.COMMONMX.COMNone
7tier_148dc47c7234e5258.com1Communigal Communication LtdNS1.COMMONMX.COMNone
8tier_1alantemusic.com1New Order Domains, LLCNS1.COMMONMX.COMNone
9tier_1acusp.info1Communigal Communication LtdNS1.COMMONMX.COMNone
10tier_2click.expmediadirect.com79NoneNoneNone
11tier_2rqhere2.com78NoneNoneNone
12tier_21496.rawlexi.com63NoneNoneNone
13tier_2americanlisted.com56ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2btpnav.com331API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
15tier_29nl.es20NoneNoneNone
16tier_2newre-conversions.clickmeter.com20REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
17tier_2api.l5srv.net18GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
18tier_2trk.jometer.com16Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
19tier_2click.appcast.io15101Domain GRS LtdNS-85.AWSDNS-10.COMNone
20tier_2nizephoros-pom.com8Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
21tier_2managerformula.com6NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2ring.joveo.com4Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
23tier_2joblift.com3INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
24tier_2aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
25tier_2tq.adventurefeeds.com2GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
26tier_2clk.rtpdn12.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
27tier_2api.apptap.com2Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
28tier_2redirect.viglink.com2Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
29tier_2link.sylikes.com2MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
30tier_3healthlark.club49NAMECHEAP INCmolly.ns.cloudflare.comPrivacy service provided by Withheld for Privacy ehf
31tier_3ecnoandmlive.club29NAMECHEAP INCmolly.ns.cloudflare.comPrivacy service provided by Withheld for Privacy ehf
32tier_3upward.careers18GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
33tier_3google.com13MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
34tier_3us.tideri.com11united domains AGNS.UDAG.DENone
35tier_3americanlisted.com7ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3s3.amazonaws.com6MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
37tier_3careerbuilder.com3CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
38tier_3signup.careersandjobs.co2GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
39tier_3managerformula.com2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
40tier_3signup.finddreamjobs.com2GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
41tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
42tier_3job.jobadx.com1GoDaddy.com, LLCELINORE.NS.CLOUDFLARE.COM1902063 Ontario Ltd.
43tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
44tier_3us.jobtome.com1GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
45tier_3jobleads.com1united domains AGCRUZ.NS.CLOUDFLARE.COMNone
46tier_3joblift.com_LOOP_11NoneNoneNone
47tier_3apexfocusgroup.com1NAMECHEAP INCCARL.NS.CLOUDFLARE.COMRedacted for Privacy Purposes
48tier_3averittdrivers.com1CSC CORPORATE DOMAINS, INC.NS3.LIONZONE.COMAdmin
49tier_3albeebaby.com_LOOP_11NoneNoneNone
50tier_3kbb.com1CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
51tier_3getstarjobs.getitcorporate.com1GoDaddy.com, LLCNS-CLOUD-E1.GOOGLEDOMAINS.COMGet It LLC
52tier_3topantivreviews.com1NAMECHEAP INCGRAHAM.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_121nannan
3104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_116nannan
4207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_111nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
7104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
874.63.241.20DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1320-241-63-74.static.reverse.lstn.netnan
974.63.241.22DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1322-241-63-74.static.reverse.lstn.netnan
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_280nannan
11167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_278nannan
12198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_263nannan
1335.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
14209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_233nannan
1567.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_218nannan
1623.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-23-21-53-13.compute-1.amazonaws.comnan
1723.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-23-21-166-45.compute-1.amazonaws.comnan
1852.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-52-3-4-129.compute-1.amazonaws.comnan
1999.84.114.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_29server-99-84-114-65.ewr52.r.cloudfront.netnan
2054.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-54-197-247-190.compute-1.amazonaws.comnan
2154.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-54-235-205-204.compute-1.amazonaws.comnan
22100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
2334.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-34-197-176-2.compute-1.amazonaws.comnan
2423.38.169.26NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-169-26.deploy.static.akamaitechnologies.comnan
2599.84.114.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-99-84-114-17.ewr52.r.cloudfront.netnan
26173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_24nannan
27100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-100-25-52-1.compute-1.amazonaws.comnan
2852.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-52-72-29-7.compute-1.amazonaws.comnan
2954.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-54-208-107-202.compute-1.amazonaws.comnan
30172.67.185.192San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_326nanTrue
31104.21.19.102San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_323nanTrue
32104.21.25.171San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_318nanTrue
3367.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_318nannan
34172.67.134.105San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_311nanTrue
3535.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_311123.171.246.35.bc.googleusercontent.comnan
3635.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
37172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_36lga34s18-in-f4.1e100.netnan
38172.217.6.228Clinton CornersNew YorkAS15169 Google LLC12514United Statestier_35lga25s55-in-f228.1e100.netnan
3952.217.168.216AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
40142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_32lga34s33-in-f4.1e100.netnan
41100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
42172.67.144.184San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4352.217.76.246AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
44151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
45104.21.33.120San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4623.38.169.26NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-169-26.deploy.static.akamaitechnologies.comnan
47104.17.47.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
48104.17.48.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
49192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nannan
5099.84.47.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-93.ewr52.r.cloudfront.netnan
5152.216.78.174AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
52130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_31206.38.211.130.bc.googleusercontent.comTrue
53194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_31www.jobleads.denan
5452.217.44.246AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
55172.67.210.243San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5699.84.47.36NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-36.ewr52.r.cloudfront.netnan
5752.217.38.110AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
5869.20.31.221WashingtonWashington, D.C.AS27357 Rackspace Hosting20045United Statestier_31nannan
59104.21.10.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website