Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
024023910210212021-04-2137.48.65.149Chrome
tierdomaincountregistrarname_serversorg
0tier_1jntukresultsdb.com1Domainsofcourse.com LLCNS1.COMMONMX.COMNone
1tier_1fibroidclear.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1arconaitv.co1Communigal Communication Ltdns2.commonmx.comNone
3tier_1airtemail.in1Dynadot LLCns1.commonmx.comNone
4tier_1filmapik.tv1Domain Landing Zone LLCNS1.COMMONMX.COMNone
5tier_1alriyadh.us1Communigal Communication Ltdns2.commonmx.comNone
6tier_1impotencemeds.info1DYNADOT LLCNS1.COMMONMX.COMNone
7tier_1bezlohotrona.info1DYNADOT LLCNS1.COMMONMX.COMNone
8tier_1haimatsu.info1DYNADOT LLCNS1.COMMONMX.COMNone
9tier_1buysellads.ph1NoneNoneNone
10tier_21496.rawlexi.com187GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com178ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_29nl.es48NoneNoneNone
13tier_2newre-conversions.clickmeter.com48REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
14tier_2click.appcast.io30101Domain GRS LtdNS-85.AWSDNS-10.COMNone
15tier_2trk.jometer.com24Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
16tier_2api.l5srv.net24GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2click.joveo.com13Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
18tier_2ring.joveo.com11Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
19tier_2jobdiagnosis.com11GoDaddy.com, LLC10.SUCURIDNS.COMVHMnetwork LLC
20tier_2careerbliss.com10GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
21tier_2trk.careerbliss.com10GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
22tier_2click.appcast.io_LOOP_16NoneNoneNone
23tier_211165151.searchiqnet.com4GoDaddy.com, LLCNS57.DOMAINCONTROL.COMDomains By Proxy, LLC
24tier_2c.pageprotect.net3GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
25tier_2linkup.com2GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
26tier_2aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
27tier_2noclick.connexity.com2MarkMonitor, Inc.NS-1235.AWSDNS-26.ORGConnexity, Inc.
28tier_2rd.bizrate.com2MarkMonitor Inc.NS-1189.AWSDNS-20.ORGNone
29tier_2rd.connexity.net2NoneNoneNone
30tier_3google.com103MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3upward.careers24GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
32tier_3careerbliss.com20GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
33tier_3click.joveo.com11Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGNone
34tier_3homeadvisorpros.com10GoDaddy.com, LLCARYA.NS.CLOUDFLARE.COMNone
35tier_3americanlisted.com9ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3linkedin.com4NoneNoneNone
37tier_31496.rawlexi.com2GoDaddy Online Services Cayman Islands LTDNS-128.AWSDNS-16.COMNone
38tier_3search.discoverweb.com2GoDaddy.com, LLCNINA.NS.CLOUDFLARE.COMNone
39tier_3ring.joveo.com2Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
40tier_3careers.walmart.com1CSC CORPORATE DOMAINS, INC.A1-185.AKAM.NETNot Disclosed
41tier_3homeadvisor.com1GoDaddy.com, LLCARYA.NS.CLOUDFLARE.COMNone
42tier_3ads.midwayusa.com1GoDaddy.com, LLCNS-1486.AWSDNS-57.ORGNone
43tier_3overstock.com1NoneNoneNone
44tier_3neuvoo.com1NoneNoneNone
45tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
46tier_3click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
47tier_3linkup.com_LOOP_11NoneNoneNone
48tier_3godaddy.com1GoDaddy.com, LLCA1-245.AKAM.NETNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_130nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_127nannan
2207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_124nannan
3207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_120nannan
4104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_118nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
6206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_110nannan
882.192.82.228AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_16nannan
982.192.82.227AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_15nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_31nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
1254.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_225ec2-54-235-205-204.compute-1.amazonaws.comnan
1323.21.166.45AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-23-21-166-45.compute-1.amazonaws.comnan
1467.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_224nannan
1554.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_224ec2-54-197-247-190.compute-1.amazonaws.comnan
1623.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-23-21-53-13.compute-1.amazonaws.comnan
17207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_320cbsmtp1.careerbliss.comnan
18100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-100-25-52-1.compute-1.amazonaws.comnan
19192.124.249.12MenifeeCaliforniaAS30148 Sucuri92584United Statestier_211cloudproxy10012.sucuri.netTrue
203.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-234-0-165.compute-1.amazonaws.comnan
2152.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-52-3-4-129.compute-1.amazonaws.comnan
22209.132.243.15Los AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_29nannan
2399.84.114.65NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_28server-99-84-114-65.ewr52.r.cloudfront.netnan
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
2599.84.114.53NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_27server-99-84-114-53.ewr52.r.cloudfront.netnan
2699.84.114.67NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-67.ewr52.r.cloudfront.netnan
2713.33.46.93NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-13-33-46-93.ewr52.r.cloudfront.netnan
2899.84.114.25NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_25server-99-84-114-25.ewr52.r.cloudfront.netnan
2999.84.114.17NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_24server-99-84-114-17.ewr52.r.cloudfront.netnan
30142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_324lga34s33-in-f4.1e100.netnan
3167.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_324nannan
32172.217.165.132Los AngelesCaliforniaAS15169 Google LLC90009United Statestier_322lax30s03-in-f4.1e100.netnan
33207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_320cbsmtp1.careerbliss.comnan
34172.217.12.132CliftonNew JerseyAS15169 Google LLC07015United Statestier_317lga34s19-in-f4.1e100.netnan
35172.217.7.4Clinton CornersNew YorkAS15169 Google LLC12514United Statestier_316lga25s56-in-f4.1e100.netnan
36172.217.10.228CliftonNew JerseyAS15169 Google LLC07015United Statestier_312lga25s59-in-f4.1e100.netnan
37142.250.64.68WestburyNew YorkAS15169 Google LLC11590United Statestier_312lga34s30-in-f4.1e100.netnan
3835.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_37240.61.209.35.bc.googleusercontent.comnan
39104.16.10.24San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
4099.84.114.81NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-99-84-114-81.ewr52.r.cloudfront.netnan
41104.16.11.24San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35nanTrue
42100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
4313.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_34nanTrue
4499.84.114.4NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_33server-99-84-114-4.ewr52.r.cloudfront.netnan
4599.84.114.107NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-99-84-114-107.ewr52.r.cloudfront.netnan
46104.21.95.133San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
47192.237.192.239DallasTexasAS33070 Rackspace Hosting75270United Statestier_31nannan
48104.16.9.28San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4923.32.160.166New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a23-32-160-166.deploy.static.akamaitechnologies.comnan
50104.77.221.88New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31a104-77-221-88.deploy.static.akamaitechnologies.comnan
5152.22.57.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-22-57-118.compute-1.amazonaws.comnan
5213.33.46.77NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-33-46-77.ewr52.r.cloudfront.netnan
5399.84.114.67NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-114-67.ewr52.r.cloudfront.netnan
5413.33.46.26NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-13-33-46-26.ewr52.r.cloudfront.netnan
55151.101.1.131San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
563.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-234-0-165.compute-1.amazonaws.comnan
57198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_31nannan
5823.1.196.29EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_31a23-1-196-29.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website