Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01571655420212021-01-24207.244.67.215Safari
tierdomaincountregistrarname_serversorg
0tier_1cheatanarchy.com1Domainsofvalue.com LLCNS1.COMMONMX.COMNone
1tier_1tns.name1NoneNoneNone
2tier_1a97b4nxfkr0a.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158509081
3tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
4tier_1bbc-news.asia1Dynadot, LLCNS1.COMMONMX.COMNone
5tier_12homeremedies.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158840318
6tier_13310.pro1Dynadot, LLCNS1.COMMONMX.COMNone
7tier_1chungcucanhogiare.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1cgmusic.in1Dynadot LLCns1.commonmx.comNone
9tier_1bestlinkdir.info1GoDaddy.com, LLCNS1.COMMONMX.COMNone
10tier_21496.wcitianka.com78GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
11tier_2americanlisted.com71ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io37101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_2job.com23GoDaddy Online Services Cayman Islands LTDCASS.NS.CLOUDFLARE.COMNone
14tier_2rd.nebulajobs.com22GoDaddy.com, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
15tier_2systems.job.com20GoDaddy Online Services Cayman Islands LTDCASS.NS.CLOUDFLARE.COMNone
16tier_2click.appcast.io_LOOP_118NoneNoneNone
17tier_2ziprecruiter.com14Safenames LtdCAROL.NS.CLOUDFLARE.COMNone
18tier_2click.appcast.io_LOOP_212NoneNoneNone
19tier_2dprtb.com51API GmbHNS1.DNSIMPLE.COMREDACTED FOR PRIVACY
20tier_3us.tideri.com32united domains AGNS.UDAG.DENone
21tier_3americanlisted.com7ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
22tier_3godaddy.com5GoDaddy.com, LLCA1-245.AKAM.NETGo Daddy Operating Company, LLC
23tier_3careerbuilder.com4CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
24tier_3track.vcdc.com4Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
25tier_3feed.int.jobble.com3GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
26tier_3systems.job.com3GoDaddy Online Services Cayman Islands LTDCASS.NS.CLOUDFLARE.COMNone
27tier_3lyft.com3Safenames LtdNS-1254.AWSDNS-28.ORGNone
28tier_3resignation.top3URL Solutions Inc.ns2.p06.dynect.netGLOBAL DOMAIN PRIVACY SERVICES INC
29tier_3click.appcast.io_LOOP_13NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_115nannan
1104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
2207.244.67.218ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_110nannan
3206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
5207.244.67.214ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_18nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_17nannan
7207.244.67.215ManassasVirginiaAS30633 Leaseweb USA, Inc.20108United Statestier_16nannan
8185.107.56.200AmsterdamNorth HollandAS43350 NForce Entertainment B.V.1012Netherlandstier_13nannan
9162.210.195.122WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_12nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_278nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
12100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
1334.194.75.233Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_222ec2-34-194-75-233.compute-1.amazonaws.comnan
143.211.178.164Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_215ec2-3-211-178-164.compute-1.amazonaws.comnan
15104.22.58.82San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_212nanTrue
163.86.134.189Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_28ec2-3-86-134-189.compute-1.amazonaws.comnan
17172.67.4.34San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_27nanTrue
18104.16.175.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_27nanTrue
1952.86.208.245Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_27ec2-52-86-208-245.compute-1.amazonaws.comnan
2035.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_332123.171.246.35.bc.googleusercontent.comnan
21100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
2235.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
2323.51.164.51PhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_35a23-51-164-51.deploy.static.akamaitechnologies.comnan
24195.201.92.254NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_34static.254.92.201.195.clients.your-server.denan
2513.225.65.111NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-65-111.ewr53.r.cloudfront.netnan
2634.201.214.108Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_32ec2-34-201-214-108.compute-1.amazonaws.comnan
2752.70.237.37Virginia BeachVirginiaAS14618 Amazon.com, Inc.23479United Statestier_32ec2-52-70-237-37.compute-1.amazonaws.comnan
2813.226.25.76NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-226-25-76.ewr53.r.cloudfront.netnan
2923.38.167.144PhiladelphiaPennsylvaniaAS20940 Akamai International B.V.19099United Statestier_32a23-38-167-144.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website