Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
026127210151212021-04-1537.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1hochkrimmel.de1NoneNoneNone
1tier_1im7love.com1Cool River Names, LLCNS1.COMMONMX.COMNone
2tier_1pods.info1DYNADOT LLCNS1.COMMONMX.COMNone
3tier_1bidguru.in1Dynadot LLCns1.commonmx.comNone
4tier_1hablon.biz1GoDaddy.com, LLCns2.commonmx.comNone
5tier_1mukdahan.org1GoDaddy.com, LLCNS1.COMMONMX.COMNone
6tier_1kurzgeschichten.biz1GoDaddy.com, LLCns2.commonmx.comNone
7tier_1nctvnews.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1iori-yagami.mobi1DYNADOT LLCNoneNone
9tier_1desaqq.info1DYNADOT LLCNS1.COMMONMX.COMNone
10tier_21496.rawlexi.com167GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com162ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2btpnav.com431API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
13tier_2click.appcast.io42101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_29nl.es35NoneNoneNone
15tier_2newre-conversions.clickmeter.com35REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
16tier_2api.l5srv.net29GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2trk.jometer.com26Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
18tier_2joblift.com13INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
19tier_2click.appcast.io_LOOP_112NoneNoneNone
20tier_2ring.joveo.com9Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
21tier_2nizephoros-pom.com7Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
22tier_2managerformula.com7NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2p.nexxt.com4Network Solutions, LLCNS21.WORLDNIC.COMNone
24tier_2us.expand-backend.mindmatch.ai4NoneNoneNone
25tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
26tier_2redirect.viglink.com3Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
27tier_2ad.doubleclick.net3MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
28tier_2aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
29tier_2us.jobtome.com2GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
30tier_3google.com79MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3upward.careers29GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3careerbuilder.com12CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
33tier_3us.tideri.com12united domains AGNS.UDAG.DENone
34tier_3s3.amazonaws.com7MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
35tier_3signup.finddreamjobs.com5GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
36tier_3americanlisted.com5ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
37tier_3linkedin.com3NoneNoneNone
38tier_3joblift.com_LOOP_13NoneNoneNone
39tier_3signup.careersandjobs.co3GoDaddy.com, LLCalexis.ns.cloudflare.comDomains By Proxy, LLC
40tier_3neuvoo.com2NoneNoneNone
41tier_3jobleads.com2united domains AGCRUZ.NS.CLOUDFLARE.COMNone
42tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
43tier_3careers.walmart.com1CSC CORPORATE DOMAINS, INC.A1-185.AKAM.NETNot Disclosed
44tier_3whenupdate.yourstablegreatupdates.work1NoneNoneNone
45tier_3wayup.com1NAMECHEAP INCKARINA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
46tier_3nextcareernow.com1GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
47tier_3reebok.com1CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
48tier_3careers.homedepot.com1CSC CORPORATE DOMAINS, INC.A1-27.AKAM.NETHome Depot Product Authority, LLC
49tier_3enroll.recruiting.cbp.gov1NoneNoneNone
50tier_3toryburch.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
51tier_3bing.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
52tier_3careersingovernment.com1Network Solutions, LLCNS-1370.AWSDNS-43.ORGCareers in Government
53tier_3click.appcast.io_LOOP_11NoneNoneNone
54tier_3linkup.com1GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
55tier_31NoneNoneNone
56tier_3cdljobs.driveformvt.com1Google LLCNS-1127.AWSDNS-12.ORGMesilla Valley Transportation
57tier_3us.allthetopbananas.com1ENOM, INC.DANE.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
58tier_3monster.com1CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
59tier_3macys.com1Network Solutions, LLCA1-135.AKAM.NETMacy's Systems and Technology, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_129nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
3207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
7104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
882.192.82.226AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
982.192.82.228AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2167nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
12209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_246nannan
1367.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_229nannan
14100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-100-25-52-1.compute-1.amazonaws.comnan
1554.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_220ec2-54-235-205-204.compute-1.amazonaws.comnan
1654.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_219ec2-54-197-247-190.compute-1.amazonaws.comnan
1723.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-23-21-166-45.compute-1.amazonaws.comnan
18100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35pool-100-37-135-2.nycmny.fios.verizon.netnan
1923.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-23-21-53-13.compute-1.amazonaws.comnan
2035.190.64.22Kansas CityMissouriAS15169 Google LLC64121United Statestier_21322.64.190.35.bc.googleusercontent.comTrue
2199.84.114.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_212server-99-84-114-65.ewr52.r.cloudfront.netnan
2252.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-52-3-4-129.compute-1.amazonaws.comnan
233.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-3-234-0-165.compute-1.amazonaws.comnan
2499.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_26server-99-84-114-25.ewr52.r.cloudfront.netnan
2568.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_2560.84.168.68.static.dbsintl.netnan
2654.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-54-208-107-202.compute-1.amazonaws.comnan
2799.84.114.53NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-99-84-114-53.ewr52.r.cloudfront.netnan
2834.120.235.106Kansas CityMissouriAS15169 Google LLC64121United Statestier_24106.235.120.34.bc.googleusercontent.comTrue
29192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_24rd.bizrate.comnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_329nannan
31172.217.165.132New York CityNew YorkAS15169 Google LLC10004United Statestier_314lax30s03-in-f4.1e100.netnan
32172.217.12.196CliftonNew JerseyAS15169 Google LLC07015United Statestier_314lga25s63-in-f4.1e100.netnan
33142.250.64.100WestburyNew YorkAS15169 Google LLC11590United Statestier_313lga34s31-in-f4.1e100.netnan
34172.217.10.36Clinton CornersNew YorkAS15169 Google LLC12514United Statestier_312lga34s13-in-f4.1e100.netnan
3535.246.171.123Frankfurt am MainHesseAS15169 Google LLC60311Germanytier_312123.171.246.35.bc.googleusercontent.comnan
36142.250.64.68WestburyNew YorkAS15169 Google LLC11590United Statestier_311lga34s30-in-f4.1e100.netnan
37172.217.7.4Clinton CornersNew YorkAS15169 Google LLC12514United Statestier_39lga25s56-in-f4.1e100.netnan
38172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_36lga34s18-in-f4.1e100.netnan
39100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35pool-100-37-135-2.nycmny.fios.verizon.netnan
4035.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_35240.61.209.35.bc.googleusercontent.comnan
4199.84.114.78NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-99-84-114-78.ewr52.r.cloudfront.netnan
42104.17.48.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
4399.84.114.91NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-91.ewr52.r.cloudfront.netnan
4413.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_33nanTrue
4599.84.114.84NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-84.ewr52.r.cloudfront.netnan
46104.21.10.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
47104.17.47.14San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
4899.84.114.74NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-74.ewr52.r.cloudfront.netnan
4952.217.99.78AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
50194.6.195.224HamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_32www.jobleads.denan
51151.101.0.200San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
5252.217.129.104AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
53192.237.192.239DallasTexasAS33070 Rackspace Hosting75270United Statestier_31nannan
5452.217.200.40AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
553.129.62.170HilliardOhioAS16509 Amazon.com, Inc.43026United Statestier_31ec2-3-129-62-170.us-east-2.compute.amazonaws.comnan
5634.232.57.217AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-34-232-57-217.compute-1.amazonaws.comnan
57104.26.14.51San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
58216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_31any-in-2015.1e100.netTrue
5923.33.113.45New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a23-33-113-45.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website