Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02011997280192021-08-1137.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1managedbystats.com1DYNADOT4 LLCNS1.COMMONMX.COMNone
1tier_1decimalindustries.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159846547
2tier_1kptu.org1UDomainName.com LLCNS1.COMMONMX.COMStatutory Masking Enabled
3tier_1guyny.mobi1GoDaddy.com, LLCNoneNone
4tier_1airtemail.in1Dynadot LLCns1.commonmx.comNone
5tier_1barna.mobi1GoDaddy.com, LLCNoneNone
6tier_1ittechmasters.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
7tier_1mindislife.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1arizonagolf.mobi1DYNADOT LLCNoneNone
9tier_1hao678.info1DYNADOT LLCNS1.COMMONMX.COMNone
10tier_21496.rebiraert.com168GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
11tier_2americanlisted.com167ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2nizephoros-pom.com9Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
13tier_2balanceconsole.com5NAMECHEAP INCBOB.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
14tier_2btpnav.com51API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
15tier_2rtbstream.com21API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
16tier_2click.expmediadirect1.com2NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
17tier_2asufij.xyz2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2antig-hra.com1Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
19tier_2track.bwclick.com1Instra Corporation Pty Ltd.NS10.DNSMADEEASY.COMREDACTED FOR PRIVACY
20tier_2samsung.com1NoneNoneNone
21tier_23hlg0.submitofferlink.com1GoDaddy Online Services Cayman Islands Ltd.NS1.DNS43.ORGNone
22tier_2google.com1MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
23tier_2click.appcast.io1101Domain GRS LtdNS-85.AWSDNS-10.COMNone
24tier_2careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
25tier_2trk.careerbliss.com1GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
26tier_3google.com166MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
27tier_3s3.amazonaws.com5NoneNoneNone
28tier_3balanceconsole.com4NAMECHEAP INCBOB.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
29tier_3xzb.subeamy.pw2NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
30tier_3samsung.com_LOOP_11NoneNoneNone
31tier_3google.com_LOOP_11NoneNoneNone
32tier_3us.jobtome.com1GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0162.210.196.166WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
1199.115.115.118WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
2207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
3199.115.115.119WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_116nannan
4207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_116nannan
5207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
6199.115.115.116WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
7162.210.196.168WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
8199.115.115.102WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_112nannan
9199.115.116.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_19nannan
10198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_2168nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_2167240.61.209.35.bc.googleusercontent.comnan
1234.194.124.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-34-194-124-180.compute-1.amazonaws.comnan
13209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_27nannan
14172.67.130.154San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
15198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_22nannan
1652.33.20.119BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_22ec2-52-33-20-119.us-west-2.compute.amazonaws.comnan
173.224.214.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-3-224-214-180.compute-1.amazonaws.comnan
18207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_22cbsmtp1.careerbliss.comnan
1945.55.107.213North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_21nannan
20104.116.246.107AshburnVirginiaAS16625 Akamai Technologies, Inc.20149United Statestier_21a104-116-246-107.deploy.static.akamaitechnologies.comnan
2123.247.54.43Los AngelesCaliforniaAS46573 LayerHost90009United Statestier_21nannan
22142.250.80.100New York CityNew YorkAS15169 Google LLC10004United Statestier_336lga34s36-in-f4.1e100.netnan
2352.2.188.203AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-2-188-203.compute-1.amazonaws.comnan
24142.250.80.100New York CityNew YorkAS15169 Google LLC10004United Statestier_336lga34s36-in-f4.1e100.netnan
25142.250.80.68New York CityNew YorkAS15169 Google LLC10004United Statestier_331lga34s35-in-f4.1e100.netnan
26142.250.81.228Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_326lga25s74-in-f4.1e100.netTrue
27172.217.11.4WestburyNew YorkAS15169 Google LLC11590United Statestier_317lga25s60-in-f4.1e100.netnan
28142.250.65.196New York CityNew YorkAS15169 Google LLC10004United Statestier_315lga25s72-in-f4.1e100.netnan
29142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_314lga34s33-in-f4.1e100.netnan
30142.251.35.164New York CityNew YorkAS15169 Google LLC10004United Statestier_313lga25s78-in-f4.1e100.netnan
31172.217.6.228WestburyNew YorkAS15169 Google LLC11590United Statestier_38lga25s55-in-f4.1e100.netnan
32172.217.11.36WestburyNew YorkAS15169 Google LLC11590United Statestier_36nannan
3352.216.135.29AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_33s3-1.amazonaws.comnan
34172.67.130.154San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_33nanTrue
35100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
3654.189.33.178BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_31ec2-54-189-33-178.us-west-2.compute.amazonaws.comnan
3752.217.87.38AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
3844.241.202.8BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_31ec2-44-241-202-8.us-west-2.compute.amazonaws.comnan
3952.217.99.142AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
40104.21.8.191San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
41130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_31206.38.211.130.bc.googleusercontent.comTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website