Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01491505170172021-04-21185.107.56.59Chrome
tierdomaincountregistrarname_serversorg
0tier_1freemoneysystem.net1Interlakenames.com LLCNS1.DNSNUTS.COMNone
1tier_1antoniotrichini.it1Munpe Invest SLnNone
2tier_1forumuslim.com1Namecatch Zone LLCNS1.DNSNUTS.COMNone
3tier_1constitutionalsummitusa.com1Domainsofvalue.com LLCNS1.DNSNUTS.COMNone
4tier_1aharonic.net1Gradeadomainnames.com LLCNS1.DNSNUTS.COMNone
5tier_1bttorrents.net1Fine Grain Domains, LLCNS1.DNSNUTS.COMNone
6tier_1aiss.cc1Top Shelf Domains LLCNS1.DNSNUTS.COMNone
7tier_1esuniptv.com1Riptide Domains, LLCNS1.DNSNUTS.COMNone
8tier_1erojii.net1Dropcatch Landing Spot LLCNS1.DNSNUTS.COMNone
9tier_1deresute-japan.com1SNAPNAMES 47, LLCNS1.DNSNUTS.COMNone
10tier_21496.rawlexi.com81GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com67ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io39101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_29nl.es19NoneNoneNone
14tier_2newre-conversions.clickmeter.com19REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
15tier_2ring.joveo.com16Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
16tier_2btpnav.com121API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
17tier_2aristo-hag.com6Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
18tier_2linkup.com6GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
19tier_2nextcareernow.com6GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2linkup.com_LOOP_15NoneNoneNone
21tier_2linkup.com_LOOP_25NoneNoneNone
22tier_2joblift.com4INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
23tier_2click.junmediadirect.com4NoneNoneNone
24tier_2rqhere2.com4NoneNoneNone
25tier_2rd.bizrate.com3MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
26tier_2rd.connexity.net3NoneNoneNone
27tier_2trk.jometer.com3Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
28tier_2track.vcdc.com3Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
29tier_2noclick.connexity.com2MarkMonitor Inc.NS-1235.AWSDNS-26.ORGNone
30tier_3americanlisted.com14ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
31tier_3google.com14MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
32tier_3signup.finddreamjobs.com9GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
33tier_3us.tideri.com8united domains AGNS.UDAG.DENone
34tier_3signup.careersandjobs.co7GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
35tier_3click.appcast.io6101Domain GRS LtdNS-85.AWSDNS-10.COMNone
36tier_3linkup.com4GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
37tier_3healthyshield.club4NoneNoneNone
38tier_3jobleads.com3united domains AGCRUZ.NS.CLOUDFLARE.COMNone
39tier_3irl.com3GoDaddy.com, LLCNS-106.AWSDNS-13.COMDomains By Proxy, LLC
40tier_3wayfair.com2MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
41tier_3whatjobs.com2123-Reg LimitedVIDA.NS.CLOUDFLARE.COMNone
42tier_3superprof.com2OVH, SASDNS200.ANYCAST.MEJBWG
43tier_3getstarjobs.getitcorporate.com2GoDaddy.com, LLCNS-CLOUD-E1.GOOGLEDOMAINS.COMGet It LLC
44tier_3nextcareernow.com2GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
45tier_3ram21.proasdf.com2GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
46tier_31496.rawlexi.com1GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
47tier_3driveheniff.com1GoDaddy.com, LLCNS69.DOMAINCONTROL.COMRandall-Reilly, LLC
48tier_3joblift.com1INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
49tier_3linkup.com_LOOP_11NoneNoneNone
50tier_3midwestcontinentaltruckingjobs.com1GoDaddy.com, LLCNS03.DOMAINCONTROL.COMRandall-Reilly, LLC
51tier_39nl.es1NoneNoneNone
52tier_3careerbuilder.com1CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
53tier_3profoundnaturalsuccess.com1TUCOWS, INC.AMY.NS.CLOUDFLARE.COMContact Privacy Inc. Customer 0160302410
54tier_3thredup.com1GoDaddy.com, LLCMATT.NS.CLOUDFLARE.COMThredUp Inc.
55tier_3google.com_LOOP_11NoneNoneNone
56tier_3click.appcast.io_LOOP_11NoneNoneNone
57tier_3hiringcenterjobs.com1TIERRANET INC. DBA DOMAINDISCOVERNS1.DISCOUNTASP.NETWebmaster, Tidemark, Inc.
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_116nan
164.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_114nan
2185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_114nan
3185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_113nan
4185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_111nan
564.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_110nan
6185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_110nan
764.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_18nan
8198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_31nan
935.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_314nan
103.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
11100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
12209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_212nan
1352.3.4.129ec2-52-3-4-129.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
1454.197.247.190ec2-54-197-247-190.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212nan
15100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37nan
1623.21.53.13ec2-23-21-53-13.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211nan
1754.235.205.204ec2-54-235-205-204.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28nan
1813.33.46.77server-13-33-46-77.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_27nan
1923.21.166.45ec2-23-21-166-45.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
20209.236.97.200nanMinneapolisMinnesotaAS13649 Flexential Colorado Corp.55440United Statestier_26nan
21216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_32True
22192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_24nan
2313.33.46.93server-13-33-46-93.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24nan
2413.33.46.15server-13-33-46-15.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24nan
2535.190.64.2222.64.190.35.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_31True
26198.134.116.18nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_24nan
27167.99.3.175nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_24nan
2835.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_314nan
29104.17.47.14nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39True
3035.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_38nan
31100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37nan
32104.21.10.65nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35True
33172.217.12.164lga25s62-in-f4.1e100.netCliftonNew JerseyAS15169 Google LLC07015United Statestier_34nan
34172.217.10.4lga34s12-in-f4.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_34nan
35104.21.20.7nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34True
36172.217.10.228lga25s59-in-f4.1e100.netCliftonNew JerseyAS15169 Google LLC07015United Statestier_33nan
37194.6.195.224www.jobleads.deHamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_33nan
3823.41.168.201a23-41-168-201.deploy.static.akamaitechnologies.comEdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_32nan
39172.67.144.184nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
40198.27.126.78us.superprof.comMontréalQuebecAS16276 OVH SASH2WCanadatier_32nan
413.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
4235.241.55.5151.55.241.35.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_32True
43216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_32True
44100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
45162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_32nan
4652.3.4.129ec2-52-3-4-129.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
47172.217.10.132lga34s16-in-f4.1e100.netCliftonNew JerseyAS15169 Google LLC07015United Statestier_32nan
48198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_31nan
49104.26.7.145nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5050.22.4.905a.04.1632.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_31nan
51104.26.6.145nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5235.190.64.2222.64.190.35.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_31True
5367.207.81.229nanNorth BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_31nan
5450.22.4.774d.04.1632.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_31nan
5552.73.87.228ec2-52-73-87-228.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
5652.203.36.44ec2-52-203-36-44.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
5799.84.47.93server-99-84-47-93.ewr52.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website