Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02432518831142021-04-15207.244.67.215Iphone
tierdomaincountregistrarname_serversorg
0tier_1goresults.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1globalfilinvestor.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1heavyjewelz.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159171053
3tier_1filtersindo.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
4tier_1deadchicksarecoolmodels.com1Communigal Communication LtdNS1.COMMONMX.COMNone
5tier_1gokhancali.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159513324
6tier_1mobilegang.in1Dynadot LLCns1.commonmx.comNone
7tier_1romanticworld.de1NoneNoneNone
8tier_1reading5u.co1GoDaddy.com, LLCns1.commonmx.comNone
9tier_1gorodgeev.net1eNom403, IncorporatedNS1.COMMONMX.COMNone
10tier_21496.rawlexi.com147GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com140ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io73101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_29nl.es16NoneNoneNone
14tier_2newre-conversions.clickmeter.com16REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
15tier_2ring.joveo.com15Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
16tier_2api.quotes.com14Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
17tier_2changeslots.com14Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
18tier_2joblift.com12INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
19tier_2api.l5srv.net11GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2p.nexxt.com10Network Solutions, LLCNS21.WORLDNIC.COMNone
21tier_2click.appcast.io_LOOP_19NoneNoneNone
22tier_2track.vcdc.com4Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_2clk.rtpdn12.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
24tier_2linkup.com3GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
25tier_2linkup.com_LOOP_13NoneNoneNone
26tier_2linkup.com_LOOP_23NoneNoneNone
27tier_2rtbstream.com31API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
28tier_2click.expmediadirect.com3NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
29tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
30tier_3google.com65MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3careerbuilder.com26CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
32tier_3theconnectvpn.com14DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
33tier_3upward.careers11GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
34tier_3signup.finddreamjobs.com10GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
35tier_3americanlisted.com7ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3jobleads.com6united domains AGCRUZ.NS.CLOUDFLARE.COMNone
37tier_3signup.careersandjobs.co5GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
38tier_3bestappland.me3NAMECHEAP INCNoneNone
39tier_3joblift.com_LOOP_13NoneNoneNone
40tier_3java.limitedtopoffers.com21&1 IONOS SERORY.NS.CLOUDFLARE.COM1&1 Internet Inc
41tier_3grandinroad.com_LOOP_12NoneNoneNone
42tier_3click.appcast.io2101Domain GRS LtdNS-85.AWSDNS-10.COMNone
43tier_3livetrucking.com1GoDaddy.com, LLCAMY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
44tier_3browntruckingjobs.com_LOOP_11NoneNoneNone
45tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
46tier_3linkedin.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
47tier_3jobs-ups.com1Network Solutions, LLCNS1V.DATAPIPE.NETTMP Worldwide Advertising & Communications, LLC
48tier_3rd.bizrate.com1MarkMonitor Inc.NS-1189.AWSDNS-20.ORGNone
49tier_3enroll.recruiting.cbp.gov1NoneNoneNone
50tier_3dedicatedjobs.cdllife.com1GoDaddy.com, LLCAMY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
51tier_3nextcareernow.com1GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
52tier_39nl.es1NoneNoneNone
53tier_3monster.com1CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
54tier_3apexfocusgroup.com1NAMECHEAP INCCARL.NS.CLOUDFLARE.COMRedacted for Privacy Purposes
55tier_3wayup.com1NoneNoneNone
56tier_3click.appcast.io_LOOP_11NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_130nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_18nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_15nannan
8185.107.56.200RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
9185.107.56.198RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2147nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
12100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-100-25-52-1.compute-1.amazonaws.comnan
1352.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-52-3-4-129.compute-1.amazonaws.comnan
143.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-3-234-0-165.compute-1.amazonaws.comnan
15100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
165.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_214nannan
1734.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-34-207-32-33.compute-1.amazonaws.comnan
1835.190.64.22Kansas CityMissouriAS15169 Google LLC64121United Statestier_21222.64.190.35.bc.googleusercontent.comTrue
1968.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_21160.84.168.68.static.dbsintl.netnan
2067.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_211nannan
2154.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-54-197-247-190.compute-1.amazonaws.comnan
2254.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-54-235-205-204.compute-1.amazonaws.comnan
2323.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-23-21-166-45.compute-1.amazonaws.comnan
2423.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-23-21-53-13.compute-1.amazonaws.comnan
2554.86.230.194AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-54-86-230-194.compute-1.amazonaws.comnan
2613.33.46.15NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-13-33-46-15.ewr52.r.cloudfront.netnan
27167.233.8.197NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_24static.197.8.233.167.clients.your-server.denan
2813.33.46.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-13-33-46-93.ewr52.r.cloudfront.netnan
2913.33.46.77NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-13-33-46-77.ewr52.r.cloudfront.netnan
30172.217.12.132CliftonNew JerseyAS15169 Google LLC07015United Statestier_316lga34s19-in-f4.1e100.netnan
31172.217.165.132New York CityNew YorkAS15169 Google LLC10004United Statestier_313lax30s03-in-f4.1e100.netnan
32172.217.11.4New York CityNew YorkAS15169 Google LLC10004United Statestier_312lga25s60-in-f4.1e100.netnan
33172.217.10.132CliftonNew JerseyAS15169 Google LLC07015United Statestier_311lga34s16-in-f4.1e100.netnan
3499.84.114.78NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_311server-99-84-114-78.ewr52.r.cloudfront.netnan
3567.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_311nannan
36142.250.64.100WestburyNew YorkAS15169 Google LLC11590United Statestier_310lga34s31-in-f4.1e100.netnan
37100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
38104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
39104.17.47.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
40172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_37nanTrue
4135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
4299.84.114.91NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-99-84-114-91.ewr52.r.cloudfront.netnan
43194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_36www.jobleads.denan
4499.84.114.84NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-114-84.ewr52.r.cloudfront.netnan
45104.21.10.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
4699.84.114.74NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-114-74.ewr52.r.cloudfront.netnan
47142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_33nannan
48142.250.64.68WestburyNew YorkAS15169 Google LLC11590United Statestier_33lga34s30-in-f4.1e100.netnan
49104.17.48.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
50104.21.28.174San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
51100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-100-25-52-1.compute-1.amazonaws.comnan
52104.21.75.162San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
53151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
5413.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31nanTrue
5523.38.170.136NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-136.deploy.static.akamaitechnologies.comnan
56192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
5723.73.233.116EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31a23-73-233-116.deploy.static.akamaitechnologies.comnan
583.211.204.50AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-211-204-50.compute-1.amazonaws.comnan
59216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_31any-in-2015.1e100.netTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website