Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02342478600202021-04-0837.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1getinvolver.com1DYNADOT10 LLCNS1.COMMONMX.COMNone
1tier_1marmagoasteel.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1aweldaw.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
3tier_1jobs-safari.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
4tier_1hoppy24shop.de1NoneNoneNone
5tier_1iftin.co1Dynadot LLCns2.commonmx.comNone
6tier_1dd-routers.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
7tier_1createyourlike.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1blender90.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
9tier_1adventuresportspark.com1GoDaddy.com, LLCNS1.COMMONMX.COMVirtua Drug Ltd
10tier_2btpnav.com771API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
11tier_2click.expmediadirect.com46NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
12tier_21496.rawlexi.com40GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
13tier_2americanlisted.com36ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
14tier_2nizephoros-pom.com30Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
15tier_2asufij.xyz19NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2rugab-ans.com18Amazon Registrar, Inc.NS-1165.AWSDNS-17.ORGWhois Privacy Service
17tier_2hureseyd.top17NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
18tier_29nl.es16NoneNoneNone
19tier_2newre-conversions.clickmeter.com16REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
20tier_2trk.jometer.com16Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
21tier_2api.l5srv.net13GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
22tier_2ads35.adtelligent.com12DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
23tier_2dsp35.adtelligent.com12DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
24tier_2externals-1953518744.us-east-1.elb.amazonaws.com12MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
25tier_2search.snjsearch.com12GoDaddy.com, LLCNS73.DOMAINCONTROL.COMDomains By Proxy, LLC
26tier_2btpnative.com111API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
27tier_2infopicked.com10NoneNoneNone
28tier_2blockchain-com.email9NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
29tier_2managerformula.com9NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
30tier_3managerformula.com20NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
31tier_3xzb.subeamy.pw19NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
32tier_3upward.careers13GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
33tier_3bing.com12MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
34tier_3s3.amazonaws.com10NoneNoneNone
35tier_3blockchain-com.email8NameSilo, LLCns1.selectel.orgSee PrivacyGuardian.org
36tier_3us.allthetopbananas.com7ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
37tier_3runnewest-bestextremelyfile.best6NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
38tier_3us.tideri.com6united domains AGNS.UDAG.DENone
39tier_3americanlisted.com5ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
40tier_3check-your-profitzone.life5NoneNoneNone
41tier_3apple.global-info.space4NoneNoneNone
42tier_3play.google.com4MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
43tier_3reebok.com3CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
44tier_3click.appcast.io3101Domain GRS LtdNS-85.AWSDNS-10.COMNone
45tier_3chrismoneymaker.com3GoDaddy.com, LLCNS65.DOMAINCONTROL.COMAmaya Services Limited
46tier_3nizephoros-pom.com2Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
47tier_3bestsecretflirt.com2GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
48tier_3whatjobs.com2123-Reg LimitedVIDA.NS.CLOUDFLARE.COMNone
49tier_3us.jobtome.com1GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
50tier_3jobleads.com1united domains AGCRUZ.NS.CLOUDFLARE.COMNone
51tier_3rugab-ans.com1Amazon Registrar, Inc.NS-1165.AWSDNS-17.ORGNone
52tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
53tier_3macys.com1Network Solutions, LLCA1-135.AKAM.NETMacy's Systems and Technology, Inc.
54tier_3click.appcast.io_LOOP_11NoneNoneNone
55tier_3talbots.com1Network Solutions, LLCASIA3.AKAM.NETThe Talbots, Inc
56tier_3us.sercanto.com1OVH, SASNS11.CONSTELLIX.COMWickedin s.r.l.
57tier_3affbank.com1DANESCO TRADING LTDGABE.NS.CLOUDFLARE.COMAdvertecy LTD
58tier_3hospitalityjobsite.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_120nannan
2104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_119nannan
3207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_111nannan
5207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_111nannan
6206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_111nannan
7104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
837.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_12nannan
974.63.241.19DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1219-241-63-74.static.reverse.lstn.netnan
10209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_294nannan
11198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_246nannan
12198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_244nannan
1335.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
14185.233.2.13Saint PetersburgSt.-PetersburgAS48096 Enterprise Cloud Ltd.190000Russiatier_217nannan
1567.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_213nannan
1654.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-54-208-107-202.compute-1.amazonaws.comnan
1734.207.43.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_212ec2-34-207-43-7.compute-1.amazonaws.comnan
18209.205.202.42New York CityNew YorkAS55081 24 SHELLS10004United Statestier_212static-42-202-205-209.24shells.netnan
19209.205.202.43New York CityNew YorkAS55081 24 SHELLS10004United Statestier_212static-43-202-205-209.24shells.netnan
2035.162.164.74BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_212ec2-35-162-164-74.us-west-2.compute.amazonaws.comnan
21173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_21118.65.c0ad.ip4.static.sl-reverse.comnan
2223.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-23-21-53-13.compute-1.amazonaws.comnan
23192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_29rd.bizrate.comnan
245.8.47.52HaarlemNorth HollandAS209813 Fast Content Delivery LTD2031Netherlandstier_35nannan
2518.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-235-67-128.compute-1.amazonaws.comnan
2644.239.66.208BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_29ec2-44-239-66-208.us-west-2.compute.amazonaws.comnan
2723.21.166.230AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-23-21-166-230.compute-1.amazonaws.comnan
2834.120.235.106Kansas CityMissouriAS15169 Google LLC64121United Statestier_28106.235.120.34.bc.googleusercontent.comTrue
2952.33.20.119BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_28ec2-52-33-20-119.us-west-2.compute.amazonaws.comnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_313nannan
3123.38.167.202PhiladelphiaPennsylvaniaAS20940 Akamai International B.V.19099United Statestier_311a23-38-167-202.deploy.static.akamaitechnologies.comnan
3252.88.215.122BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_311ec2-52-88-215-122.us-west-2.compute.amazonaws.comnan
3323.38.167.227PhiladelphiaPennsylvaniaAS20940 Akamai International B.V.19099United Statestier_39a23-38-167-227.deploy.static.akamaitechnologies.comnan
3435.165.21.241BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_38ec2-35-165-21-241.us-west-2.compute.amazonaws.comnan
35204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_38a-0001.a-msedge.netTrue
3652.20.53.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36ec2-52-20-53-118.compute-1.amazonaws.comnan
3735.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_36123.171.246.35.bc.googleusercontent.comnan
385.8.47.52HaarlemNorth HollandAS209813 Fast Content Delivery LTD2031Netherlandstier_35nannan
3935.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
4031.184.202.191HaarlemNorth HollandAS209813 Fast Content Delivery LTD2031Netherlandstier_35nannan
41104.21.78.145San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34nanTrue
4213.107.21.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_34nanTrue
43100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
4423.201.27.178NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_33a23-201-27-178.deploy.static.akamaitechnologies.comnan
45104.26.13.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4692.205.4.117StrasbourgGrand EstAS21499 Host Europe GmbH67000Francetier_33ip-92-205-4-117.ip.secureserver.netnan
47172.217.10.78CliftonNew JerseyAS15169 Google LLC07015United Statestier_32lga34s14-in-f14.1e100.netnan
4852.216.236.141AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
49104.26.12.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5052.217.16.246AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
51172.67.75.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5288.80.185.92LondonEnglandAS63949 Linode, LLCEC1AUnited Kingdomtier_32li678-92.members.linode.comnan
5352.217.68.110AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
54130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_31206.38.211.130.bc.googleusercontent.comTrue
5552.217.38.30AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
56194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_31www.jobleads.denan
5752.217.64.222AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
5834.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-34-197-176-2.compute-1.amazonaws.comnan
5918.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-235-67-128.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website