Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02402458270152021-04-14207.244.67.215Android
tierdomaincountregistrarname_serversorg
0tier_1anbinhquangcao.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159170819
1tier_1995kkk.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159164739
2tier_19xfilx.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159841062
3tier_1arnoldgeneralcontractor.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159508283
4tier_1alohatubr.com1EPAG Domainservices GmbHNS1.COMMONMX.COMREDACTED FOR PRIVACY
5tier_1ascogsm.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158854044
6tier_1ahiretrehberi.com1Domainsnapper LLCNS1.COMMONMX.COMNone
7tier_1ajirazetutz.com1Name Connection Area LLCNS1.COMMONMX.COMNone
8tier_1amazonyildizi.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0158510097
9tier_1apathtopeace.info1DYNADOT LLCNS1.COMMONMX.COMNone
10tier_21496.rawlexi.com114NoneNoneNone
11tier_2americanlisted.com108ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io58101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_29nl.es20NoneNoneNone
14tier_2newre-conversions.clickmeter.com20REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
15tier_2ring.joveo.com19Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
16tier_2aristo-hag.com17Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
17tier_2nizephoros-pom.com12Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
18tier_2get.popplunder.com12NoneNoneNone
19tier_2trustedpush.com12NoneNoneNone
20tier_2win1.trustedpush.com12NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
21tier_263130.click.validclick.net9Safenames LtdNS1.FULLMAILBOX.COMNone
22tier_2win2.trustedpush.com8NoneNoneNone
23tier_2win3.trustedpush.com6NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
24tier_2btpnav.com61API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
25tier_2linkup.com5GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
26tier_2nextcareernow.com4GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
27tier_2linkup.com_LOOP_14NoneNoneNone
28tier_2linkup.com_LOOP_24NoneNoneNone
29tier_2click.expmediadirect.com4NoneNoneNone
30tier_3google.com46MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3careerbuilder.com20CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
32tier_3signup.finddreamjobs.com15GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
33tier_3storystudio.chron.com9CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
34tier_3jobleads.com7united domains AGCRUZ.NS.CLOUDFLARE.COMNone
35tier_3americanlisted.com5ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3upward.careers4GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
37tier_3signup.careersandjobs.co4GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
38tier_3click.appcast.io4101Domain GRS LtdNS-85.AWSDNS-10.COMNone
39tier_3win2.trustedpush.com4NoneNoneNone
40tier_3win5.trustedpush.com3NoneNoneNone
41tier_3nextcareernow.com3GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
42tier_3win4.trustedpush.com3NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
43tier_3win3.trustedpush.com2NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
44tier_3sjtransportation.com2GoDaddy.com, LLCAMS-NS1.WEBSITEHOSTSERVER.NETSJ Transportation
45tier_3rd.bizrate.com2MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
46tier_3storystudio.mysanantonio.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMThe Hearst Corporation
47tier_3storystudio.sfgate.com2CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
48tier_3bing.com1NoneNoneNone
49tier_3schwendinc.com1GoDaddy.com, LLCNS1.TMHTECHNOLOGY.COMTMH Technology Services, Inc.
50tier_3amazon.com1NoneNoneNone
51tier_3zeitnerandsons.com1GoDaddy.com, LLCNS71.DOMAINCONTROL.COMJM Web Designs
52tier_3aarpmedicareplans.com1CSC CORPORATE DOMAINS, INC.EDNS4.ULTRADNS.BIZUnitedHealth Group Incorporated
53tier_3orthofeet.com1Network Solutions, LLCNS27.WORLDNIC.COMORTHOFEET INC.
54tier_3google.com_LOOP_11NoneNoneNone
55tier_3joinsmarty.com1NoneNoneNone
56tier_3uber.com1MarkMonitor, Inc.EDNS126.ULTRADNS.BIZUber Technologies, Inc.
57tier_3aklief.com1NOM-IQ Ltd dba Com LaudeDNS1.COMLAUDE-DNS.COMGalderma Holding SA
58tier_3blair.com1CSC CORPORATE DOMAINS, INC.NS-1237.AWSDNS-26.ORGBluestem Brands, Inc.
59tier_3osprey.com1Network Solutions, LLCNS1.BROWNRICE.COMOsprey Pack, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_131nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
3207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_119nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_116nannan
5104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
737.48.65.150AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
8104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_14nannan
9103.224.212.222CommerceCaliforniaAS133618 Trellian Pty. Limited90040United Statestier_12lb-212-222.above.comnan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2114nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
123.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-234-0-165.compute-1.amazonaws.comnan
13100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_219ec2-100-25-52-1.compute-1.amazonaws.comnan
1452.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-3-4-129.compute-1.amazonaws.comnan
1554.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-54-235-205-204.compute-1.amazonaws.comnan
16204.44.79.214Los AngelesCaliforniaAS8100 QuadraNet Enterprises LLC90014United Statestier_215204.44.79.214.static.quadranet.comnan
1734.199.180.187AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-34-199-180-187.compute-1.amazonaws.comnan
1899.84.114.87NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_212server-99-84-114-87.ewr52.r.cloudfront.netnan
1999.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-90.ewr52.r.cloudfront.netnan
2054.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-54-197-247-190.compute-1.amazonaws.comnan
2113.33.46.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_210server-13-33-46-93.ewr52.r.cloudfront.netnan
2299.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-35.ewr52.r.cloudfront.netnan
2334.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-34-197-176-2.compute-1.amazonaws.comnan
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_311pool-100-37-135-2.nycmny.fios.verizon.netnan
2554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-54-208-107-202.compute-1.amazonaws.comnan
2623.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-23-21-166-45.compute-1.amazonaws.comnan
2713.33.46.26NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-13-33-46-26.ewr52.r.cloudfront.netnan
2899.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-99-84-114-98.ewr52.r.cloudfront.netnan
29209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_27nannan
30172.217.10.132CliftonNew JerseyAS15169 Google LLC07015United Statestier_317lga34s16-in-f4.1e100.netnan
31172.217.10.68CliftonNew JerseyAS15169 Google LLC07015United Statestier_315lga34s14-in-f4.1e100.netnan
32151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_313nanTrue
33100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_311pool-100-37-135-2.nycmny.fios.verizon.netnan
34104.17.48.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
35194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_37www.jobleads.denan
36104.17.47.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
37172.217.11.36New York CityNew YorkAS15169 Google LLC10004United Statestier_36lga25s61-in-f4.1e100.netnan
3899.84.47.14NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-99-84-47-14.ewr52.r.cloudfront.netnan
3999.84.47.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-99-84-47-65.ewr52.r.cloudfront.netnan
4035.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
41172.217.10.100CliftonNew JerseyAS15169 Google LLC07015United Statestier_35lga34s15-in-f4.1e100.netnan
4299.84.47.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-47-93.ewr52.r.cloudfront.netnan
4367.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_34nannan
44104.21.10.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
45216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_33any-in-2015.1e100.netTrue
4699.84.47.36NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-47-36.ewr52.r.cloudfront.netnan
47142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_33lga34s33-in-f4.1e100.netnan
48184.154.60.110MolineIllinoisAS32475 SingleHop LLC61266United Statestier_32chi-node73.websitehostserver.netnan
49192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32nannan
503.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-234-0-165.compute-1.amazonaws.comnan
5199.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-35.ewr52.r.cloudfront.netnan
5252.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-3-4-129.compute-1.amazonaws.comnan
5399.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-90.ewr52.r.cloudfront.netnan
5413.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31nanTrue
55192.185.159.70HoustonTexasAS46606 Unified Layer77052United Statestier_31192-185-159-70.unifiedlayer.comnan
5699.84.34.146NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-34-146.ewr52.r.cloudfront.netnan
5766.135.47.185WashingtonWashington, D.C.AS13768 Aptum Technologies20045United Statestier_31metrosharedip.comnan
58184.85.16.190NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a184-85-16-190.deploy.static.akamaitechnologies.comnan
5923.227.38.74OttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31nanTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website