Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02262387800172021-08-3037.48.65.149Chrome
tierdomaincountregistrarname_serversorg
0tier_1bitenergy.org1Allearthdomains.com LLCNS1.COMMONMX.COMNone
1tier_1bikershirtclub.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1jfzjt.com1DYNADOT14 LLCNS1.COMMONMX.COMNone
3tier_1chtpm.pro1DYNADOT LLCNS1.COMMONMX.COMNone
4tier_1coachingpraktijkjanny.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0160719986
5tier_1heavyjewelz.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159171053
6tier_1k18.me1GoDaddy.com, LLCNoneNone
7tier_1kolkatalighting.com1DYNADOT16 LLCNS1.COMMONMX.COMNone
8tier_1crackcosette.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0160730233
9tier_1editimage.org1NoneNoneNone
10tier_21496.rebiraert.com96GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
11tier_2americanlisted.com71ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io61101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_2p.nexxt.com31Network Solutions, LLCNS21.WORLDNIC.COMNone
14tier_2antig-hra.com25Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
15tier_2click.appcast.io_LOOP_115NoneNoneNone
16tier_2joblift.com14INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
17tier_2api.apptap.com12Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
18tier_2api.mplayit.com12Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
19tier_2rtbstream.com101API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
20tier_2click.expmediadirect1.com10NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2results.certifyads.com101&1 IONOS SENS1024.UI-DNS.DE1&1 Internet Limited
22tier_2btpnav.com101API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
23tier_2redirect.viglink.com8Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
24tier_2link.sylikes.com8MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
25tier_2xml.additionalmedia.com71&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
26tier_2getbitly.pro7DYNADOT LLCNS1.SERVER44.CO.UKNone
27tier_2viralsparks.io7CloudFlare, Inc.ANNA.NS.CLOUDFLARE.COMNone
28tier_2api.l5srv.net7GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
29tier_2healthcarejobsite.com6ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
30tier_3americanlisted.com25ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
31tier_3careerbuilder.com18CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
32tier_3click.appcast.io9101Domain GRS LtdNS-85.AWSDNS-10.COMNone
33tier_3everyjobforme.com8GoDaddy.com, LLCNS-1009.AWSDNS-62.NETPercipio Holdings, Inc.
34tier_3upward.careers7GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
35tier_3linkedin.com6MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
36tier_3top.digitaltrendsradar.com6PDR Ltd. d/b/a PublicDomainRegistry.comGWEN.NS.CLOUDFLARE.COMPrivacy Protect, LLC (PrivacyProtect.org)
37tier_3talent.com5Namespro Solutions INC.NS-1486.AWSDNS-57.ORGNamespro.ca PrivateWHOIS
38tier_3rd.bizrate.com5NoneNoneNone
39tier_3api.searchlinker.com5GoDaddy.com, LLCNS-1158.AWSDNS-16.ORGDomains By Proxy, LLC
40tier_3neuvoo.com5NoneNoneNone
41tier_3godaddy.com5GoDaddy.com, LLCA1-245.AKAM.NETGo Daddy Operating Company, LLC
42tier_3sports.yahoo.com5NoneNoneNone
43tier_3cmp.jobs4NoneNoneNone
44tier_3xml.additionalmedia.com31&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
45tier_3gua21.proasdf.com3GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
46tier_3lensa.com3GoDaddy.com, LLCNS-1165.AWSDNS-17.ORGLensa Inc
47tier_3finance.yahoo.com2NoneNoneNone
48tier_3kingsize.com1CSC CORPORATE DOMAINS, INC.PDNS92.ULTRADNS.BIZFullBeauty Brands Operations, LLC
49tier_3jobg8.com1REGISTER S.P.A.RES1.AMGSHAREDSERVICES.COMJobg8 Limited
50tier_3affbank.com1DANESCO TRADING LTDGABE.NS.CLOUDFLARE.COMAdvertecy LTD
51tier_3diversityjobs.com1GoDaddy Online Services Cayman Islands Ltd.NS-CLOUD-E1.GOOGLEDOMAINS.COMNone
52tier_3click.appcast.io_LOOP_11NoneNoneNone
53tier_3hiphopbling.com_LOOP_11NoneNoneNone
54tier_3teleflora.com1MarkMonitor, Inc.EPRODNS1A.EFLORIST.COMTeleflora Technologies
55tier_3jednorth.com_LOOP_11NoneNoneNone
56tier_3google.com1NoneNoneNone
57tier_3carbon38.com1GoDaddy.com, LLCNS-1163.AWSDNS-17.ORGDomains By Proxy, LLC
58tier_3joblift.com_LOOP_11NoneNoneNone
59tier_31496.rebiraert.com1GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0199.115.115.118WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
1199.115.115.116WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
2199.115.115.119WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_115nannan
3199.115.115.102WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
4162.210.196.166WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_19nannan
5207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_19nannan
6199.115.116.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
7207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
8162.210.196.168WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_17nannan
9207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_17nannan
10198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_296nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_325240.61.209.35.bc.googleusercontent.comnan
1268.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_23260.84.168.68.static.dbsintl.netnan
1344.195.255.207AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-44-195-255-207.compute-1.amazonaws.comnan
14209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_224nannan
153.232.183.77AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-3-232-183-77.compute-1.amazonaws.comnan
16173.239.53.16New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_33nannan
17107.23.13.159AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-107-23-13-159.compute-1.amazonaws.comnan
18192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_35rd.bizrate.comnan
1952.204.63.126AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_215ec2-52-204-63-126.compute-1.amazonaws.comnan
20100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
2134.117.159.76Kansas CityMissouriAS15169 Google LLC64121United Statestier_21476.159.117.34.bc.googleusercontent.comTrue
2252.72.49.164AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-52-72-49-164.compute-1.amazonaws.comnan
23198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nannan
2434.194.124.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-34-194-124-180.compute-1.amazonaws.comnan
2534.195.15.110AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-34-195-15-110.compute-1.amazonaws.comnan
26155.254.31.154CharlotteNorth CarolinaAS397373 H4Y Technologies LLC28202United Statestier_27server44.dhcp.31.254.155.in-addr.arpanan
2767.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_27nannan
2868.168.84.162NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_26162.84.168.68.static.dbsintl.netnan
293.209.187.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-3-209-187-98.compute-1.amazonaws.comnan
3035.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_325240.61.209.35.bc.googleusercontent.comnan
3167.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_37nannan
3213.225.67.91NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-13-225-67-91.ewr53.r.cloudfront.netnan
3366.81.205.246AustinTexasAS40034 Confluence Networks Inc78701United Statestier_36nannan
34104.18.29.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_36nanTrue
3513.225.67.9NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-13-225-67-9.ewr53.r.cloudfront.netnan
36192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_35rd.bizrate.comnan
3744.195.255.207AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35ec2-44-195-255-207.compute-1.amazonaws.comnan
3869.147.92.11WashingtonWashington, D.C.AS14777 Oath Holdings Inc.20045United Statestier_35e1.ycpi.vip.dca.yahoo.comnan
3913.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_35nanTrue
40184.85.3.215NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_35a184-85-3-215.deploy.static.akamaitechnologies.comnan
4113.225.67.126NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_35server-13-225-67-126.ewr53.r.cloudfront.netnan
423.213.168.177AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-3-213-168-177.compute-1.amazonaws.comnan
43100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_34pool-100-37-135-2.nycmny.fios.verizon.netnan
4445.33.72.236Morris PlainsNew JerseyAS63949 Linode, LLC07927United Statestier_34li1018-236.members.linode.comnan
45173.239.53.16New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_33nannan
46162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_33nannan
473.232.183.77AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-3-232-183-77.compute-1.amazonaws.comnan
4844.196.7.192AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-44-196-7-192.compute-1.amazonaws.comnan
4913.225.67.45NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-13-225-67-45.ewr53.r.cloudfront.netnan
5069.147.92.12WashingtonWashington, D.C.AS14777 Oath Holdings Inc.20045United Statestier_32e2.ycpi.vip.dca.yahoo.comnan
5134.193.138.21AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-34-193-138-21.compute-1.amazonaws.comnan
523.210.231.203AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-3-210-231-203.compute-1.amazonaws.comnan
53104.18.28.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
5464.71.161.140AshburnVirginiaAS393259 Yottaa, Inc20149United Statestier_31nannan
5523.22.141.86AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-23-22-141-86.compute-1.amazonaws.comnan
56213.146.171.90TiptreeEnglandAS209765 ASPIRE MEDIA GROUP LIMITEDCO5United Kingdomtier_31www.jobg8.comnan
57104.21.77.97San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5852.45.237.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-45-237-165.compute-1.amazonaws.comnan
59204.12.118.145NewarkNew JerseyAS20021 HostMySite07175United Statestier_31nannan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website