Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
026626811272132021-04-21207.244.67.215Android
tierdomaincountregistrarname_serversorg
0tier_1onewhiteweb.com1Ripcurl Domains, LLCNS1.COMMONMX.COMNone
1tier_1namecoin-wallet.com1Domainnovations, LLCNS1.COMMONMX.COMNone
2tier_1antonaberg.info1DYNADOT LLCNS1.COMMONMX.COMNone
3tier_1my-movies.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
4tier_1hairygash.com1Tiger Shark Domains, LLCNS1.COMMONMX.COMNone
5tier_1newmp4movies.in1Dynadot LLCns1.commonmx.comNone
6tier_1hisocraft.net1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159836646
7tier_1brawler.io1Dynadot, LLCNS1.COMMONMX.COMNone
8tier_1jallo.pro1DYNADOT LLCNS1.COMMONMX.COMNone
9tier_1endominicana.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
10tier_21496.rawlexi.com170NoneNoneNone
11tier_2americanlisted.com164ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io43101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_29nl.es37NoneNoneNone
14tier_2newre-conversions.clickmeter.com37REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
15tier_2trk.jometer.com34Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
16tier_2api.l5srv.net32GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2careerbliss.com29GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
18tier_2trk.careerbliss.com28GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
19tier_2click.appcast.io_LOOP_120NoneNoneNone
20tier_2nizephoros-pom.com10Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
21tier_2get.popplunder.com10NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2trustedpush.com10NoneNoneNone
23tier_2win1.trustedpush.com10NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
24tier_2win2.trustedpush.com10NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
25tier_2aristo-hag.com10Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
26tier_2win3.trustedpush.com8NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
27tier_2btpnav.com61API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
28tier_2rd.bizrate.com5MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
29tier_2rd.connexity.net5NoneNoneNone
30tier_3google.com89MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3upward.careers32GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3careerbliss.com14GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
33tier_3americanlisted.com6ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
34tier_3sanfranciscogigs.com4ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
35tier_3win5.trustedpush.com4NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
36tier_3win4.trustedpush.com4NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
37tier_3jobleads.com3united domains AGCRUZ.NS.CLOUDFLARE.COMNone
38tier_3storystudio.chron.com3CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
39tier_3linkedin.com3MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
40tier_3feed.int.jobble.com3GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
41tier_3wayfair.com3NoneNoneNone
42tier_3win3.trustedpush.com2NAMECHEAP INCNS-1142.AWSDNS-14.ORGPrivacy service provided by Withheld for Privacy ehf
43tier_3careerbuilder.com2CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
44tier_3toryburch.com2CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
45tier_3click.appcast.io_LOOP_12NoneNoneNone
46tier_3rd.bizrate.com2NoneNoneNone
47tier_3nextcareernow.com2GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
48tier_3manhattanjobs.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
49tier_3jobs.intuit.com1MarkMonitor, Inc.A1-182.AKAM.NETIntuit Inc.
50tier_3memorialplan.nolig.com1GoDaddy.com, LLCNS1.DIGITALOCEAN.COMJob Post Media
51tier_3savatree.com1GoDaddy.com, LLCAURORA.NS.CLOUDFLARE.COMSavATree
52tier_3careers.lifetime.life1NoneNoneNone
53tier_3drive4roehl.com_LOOP_11NoneNoneNone
54tier_3kbb.com1CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
55tier_3drivers.reyesholdingsjobs.com1GoDaddy.com, LLCNS69.DOMAINCONTROL.COMRandall-Reilly, LLC
56tier_3medicarecoveragenow.com1GoDaddy.com, LLCNS1.US208.SITEGROUND.USDomains By Proxy, LLC
57tier_3trk.careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
58tier_3teleflora.com1NoneNoneNone
59tier_3owningland.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Newspapers, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_125nannan
3207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_116nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
7206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
882.192.82.226AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_17nannan
9185.107.56.197RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2170nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
12207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_315cbsmtp1.careerbliss.comnan
1367.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_232nannan
14100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.netnan
1554.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-54-235-205-204.compute-1.amazonaws.comnan
1654.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_220ec2-54-197-247-190.compute-1.amazonaws.comnan
1799.84.114.35NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_218server-99-84-114-35.ewr52.r.cloudfront.netnan
1823.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_217ec2-23-21-166-45.compute-1.amazonaws.comnan
193.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-3-234-0-165.compute-1.amazonaws.comnan
2052.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-52-3-4-129.compute-1.amazonaws.comnan
2123.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-23-21-53-13.compute-1.amazonaws.comnan
2299.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-98.ewr52.r.cloudfront.netnan
23100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-100-25-52-1.compute-1.amazonaws.comnan
2434.199.180.187AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-34-199-180-187.compute-1.amazonaws.comnan
2599.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_210server-99-84-114-25.ewr52.r.cloudfront.netnan
2699.84.114.53NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_29server-99-84-114-53.ewr52.r.cloudfront.netnan
27192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32rd.bizrate.comnan
2899.84.114.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-99-84-114-17.ewr52.r.cloudfront.netnan
2999.84.114.90NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-99-84-114-90.ewr52.r.cloudfront.netnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_332nannan
31142.250.64.68WestburyNew YorkAS15169 Google LLC11590United Statestier_320lga34s30-in-f4.1e100.netnan
32142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_319lga34s33-in-f4.1e100.netnan
33172.217.11.4New York CityNew YorkAS15169 Google LLC10004United Statestier_315lga25s60-in-f4.1e100.netnan
34207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_315cbsmtp1.careerbliss.comnan
35142.250.64.100WestburyNew YorkAS15169 Google LLC11590United Statestier_313lga34s31-in-f4.1e100.netnan
36100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.netnan
37172.217.12.164CliftonNew JerseyAS15169 Google LLC07015United Statestier_312lga25s62-in-f4.1e100.netnan
38172.217.165.132Los AngelesCaliforniaAS15169 Google LLC90009United Statestier_310lax30s03-in-f4.1e100.netnan
3935.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
40151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_34nanTrue
41194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_33www.jobleads.denan
4213.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_33nanTrue
4368.168.84.133NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_33133.84.168.68.static.dbsintl.netnan
4454.234.245.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-234-245-31.compute-1.amazonaws.comnan
4523.41.189.99NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33a23-41-189-99.deploy.static.akamaitechnologies.comnan
4623.59.250.96NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_32a23-59-250-96.deploy.static.akamaitechnologies.comnan
47192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_32rd.bizrate.comnan
48216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_32any-in-2015.1e100.netTrue
4999.84.114.98NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-98.ewr52.r.cloudfront.netnan
5068.168.84.196NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31196.84.168.68.static.dbsintl.netnan
51172.232.19.41NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a172-232-19-41.deploy.static.akamaitechnologies.comnan
5299.84.47.14NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-14.ewr52.r.cloudfront.netnan
53138.197.61.36CliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_31nannan
54141.193.213.21AustinTexasAS209242 Cloudflare London, LLC78701United Statestier_31nanTrue
5552.44.205.19AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-44-205-19.compute-1.amazonaws.comnan
5699.84.47.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-47-93.ewr52.r.cloudfront.netnan
5723.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-44-217-143.deploy.static.akamaitechnologies.comnan
5850.22.4.77DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_314d.04.1632.ip4.static.sl-reverse.comnan
5935.209.104.110Council BluffsIowaAS15169 Google LLC51502United Statestier_31110.104.209.35.bc.googleusercontent.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website