Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02442587430192021-05-26185.107.56.59Android
tierdomaincountregistrarname_serversorg
0tier_1acehomework.net1Blue Angel Domains LLCNS1.DNSNUTS.COMNone
1tier_1economictims.com1Domain Landing Zone LLCNS1.DNSNUTS.COMNone
2tier_1duet-chehova.net1Afterdark Domains, IncorporatedNS1.DNSNUTS.COMNone
3tier_1ageofcomp.info1Domaingazelle.com LLCNS1.DNSNUTS.COMStatutory Masking Enabled
4tier_1aokore.com1NamePal.com #8027 Inc.NS1.DNSNUTS.COMNone
5tier_1crafthd.net1SNAPNAMES 42, LLCNS1.DNSNUTS.COMNone
6tier_1dutopia.info1UDomainName.com LLCNS1.DNSNUTS.COM['The Management Group II', 'Statutory Masking Enabled']
7tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
8tier_1eclect21.com1V12 Domains, LLCNS1.DNSNUTS.COMNone
9tier_1esuniptv.com1Riptide Domains, LLCNS1.DNSNUTS.COMNone
10tier_21496.rebiraert.com81GoDaddy Online Services Cayman Islands Ltd.NS-1041.AWSDNS-02.ORGNone
11tier_2americanlisted.com74ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2steinn-nik.com38Amazon Registrar, Inc.NS-1082.AWSDNS-07.ORGWhois Privacy Service
13tier_2click.appcast.io32NoneNoneNone
14tier_2atnpx.com24GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
15tier_2track.vcdc.com20Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
16tier_2ad.doubleclick.net15MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
17tier_29nl.es14NoneNoneNone
18tier_2newre-conversions.clickmeter.com14REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
19tier_2trk.jometer.com14Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
20tier_2job-openings.monster.com14CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
21tier_2click.appcast.io_LOOP_112NoneNoneNone
22tier_2btpnav.com91API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
23tier_2careerbliss.com9GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
24tier_2trk.careerbliss.com9GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
25tier_2us.tideri.com6united domains AGNS.UDAG.DENone
26tier_2media-px.com6GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
27tier_2us.jobtome.com4GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
28tier_2noclick.connexity.com4MarkMonitor, Inc.NS-1235.AWSDNS-26.ORGConnexity, Inc.
29tier_2rd.bizrate.com4NoneNoneNone
30tier_3robogarden.io16GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
31tier_3google.com14MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
32tier_3monster.com14CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
33tier_3kbb.com14CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
34tier_3americanlisted.com7ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
35tier_3storystudio.sfgate.com4CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
36tier_3careerbuilder.com4CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
37tier_3wayfair.com4NoneNoneNone
38tier_3careerbliss.com3GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
39tier_3fedexground.thejobnetwork.com3GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
40tier_3nextcareernow.com3GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
41tier_3linkup.com_LOOP_12NoneNoneNone
42tier_3jobs.myjobhelper.com2ENOM, INC.NS1.MYJOBHELPER.COMREDACTED FOR PRIVACY
43tier_3lcjalerts.com2GoDaddy.com, LLCNS-130.AWSDNS-16.COMDomains By Proxy, LLC
44tier_3jobleads.com2united domains AGCRUZ.NS.CLOUDFLARE.COMNone
45tier_3healthcarejobsite.com2ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
46tier_3tieronealerts.com2GoDaddy.com, LLCNS-1160.AWSDNS-17.ORGDomains By Proxy, LLC
47tier_3signup.myjobscorner.com1GoDaddy.com, LLCALDO.NS.CLOUDFLARE.COMNone
48tier_3famous-smoke.com1GoDaddy.com, LLCIGOR.NS.CLOUDFLARE.COMNone
49tier_3g-sponsored-results.com1GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGNone
50tier_3watchgang.com1NAMECHEAP INCMONA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
51tier_3click.appcast.io_LOOP_11NoneNoneNone
52tier_3techcareers.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
53tier_3shipt.com_LOOP_11NoneNoneNone
54tier_3constructionjobforce.com1NoneNoneNone
55tier_3rdn.parsecjobs.com1GoDaddy.com, LLCNS-1016.AWSDNS-63.NETDomains By Proxy, LLC
56tier_3amazonhvh.thejobnetwork.com1GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGNone
57tier_3drive4roehl.com_LOOP_11NoneNoneNone
58tier_3metroplusjobs.org1Network Solutions, LLCNS1.LINODE.COM['BUYER ADVERTISING, INC.', 'Statutory Masking Enabled']
59tier_3nussbaumdrivingcareers.com1GoDaddy.com, LLCNS41.DOMAINCONTROL.COMNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_127nan
164.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_120nan
264.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_119nan
364.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_117nan
4185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_116nan
5185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_110nan
6185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_19nan
7185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_18nan
8198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_281nan
935.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_37nan
1054.174.112.67ec2-54-174-112-67.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222nan
11167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_220nan
1252.7.145.236ec2-52-7-145-236.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_218nan
13207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_33nan
14100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37nan
1552.207.132.139ec2-52-207-132-139.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213nan
16104.26.10.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_212True
17209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_212nan
183.224.107.254ec2-3-224-107-254.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212nan
1923.21.117.173ec2-23-21-117-173.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28nan
20172.67.74.77nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_28True
2154.235.205.204ec2-54-235-205-204.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
2234.197.35.212ec2-34-197-35-212.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
2323.21.53.13ec2-23-21-53-13.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27nan
2435.246.171.123123.171.246.35.bc.googleusercontent.comFrankfurt am MainHesseAS15169 Google LLC60311Germanytier_26nan
2554.225.247.71ec2-54-225-247-71.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26nan
26172.67.134.220nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_26True
2713.225.62.39server-13-225-62-39.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_26nan
28104.90.89.104a104-90-89-104.deploy.static.akamaitechnologies.comPhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_314nan
29104.21.80.8nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310True
30100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_37nan
3135.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_37nan
32172.67.172.143nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36True
3313.225.206.5server-13-225-206-5.ewr50.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35nan
34199.83.128.213199.83.128.213.ip.incapdns.netRedwood CityCaliforniaAS19551 Incapsula Inc94065United Statestier_34True
3513.225.206.60server-13-225-206-60.ewr50.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34nan
36151.101.0.200nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_34True
3723.41.189.99a23-41-189-99.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_34nan
38172.217.9.228lga34s11-in-f4.1e100.netAnn ArborMichiganAS15169 Google LLC48109United Statestier_33nan
39207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_33nan
40172.217.7.4lga25s56-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_33nan
4113.225.206.50server-13-225-206-50.ewr50.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33nan
42216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_33True
43172.217.165.132lga25s70-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_33nan
44172.217.10.100lga34s15-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_33nan
4552.7.103.10ec2-52-7-103-10.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33nan
4613.225.62.15server-13-225-62-15.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32nan
47216.150.143.166nanHawthorneNew YorkAS11383 Xand Corporation10532United Statestier_32nan
4813.225.62.74server-13-225-62-74.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32nan
4913.225.206.73server-13-225-206-73.ewr50.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32nan
50194.6.195.224www.jobleads.deHamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_32nan
5168.168.84.162162.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_32nan
52151.101.65.195nanSan FranciscoCaliforniaAS54113 Fastly94107United Statestier_31True
53104.18.65.79nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5413.225.62.52server-13-225-62-52.ewr53.r.cloudfront.netNewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31nan
55172.67.15.177nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
5668.168.84.170170.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan
5768.168.84.173173.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website