Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02642889580212021-08-3037.48.65.149Safari
tierdomaincountregistrarname_serversorg
0tier_1bitenergy.org1Allearthdomains.com LLCNS1.COMMONMX.COMNone
1tier_1bikershirtclub.com1GoDaddy.com, LLCNS1.COMMONMX.COMNone
2tier_1jfzjt.com1DYNADOT14 LLCNS1.COMMONMX.COMNone
3tier_1chtpm.pro1DYNADOT LLCNS1.COMMONMX.COMNone
4tier_1coachingpraktijkjanny.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0160719986
5tier_1heavyjewelz.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159171053
6tier_1k18.me1GoDaddy.com, LLCNoneNone
7tier_1crackcosette.com1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0160730233
8tier_1editimage.org1NoneNoneNone
9tier_1fulivovo.net1Domaincapitan.com LLCNS1.COMMONMX.COMNone
10tier_21496.rebiraert.com111GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
11tier_2americanlisted.com104ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io98101Domain GRS LtdNS-85.AWSDNS-10.COMNone
13tier_2p.nexxt.com54Network Solutions, LLCNS21.WORLDNIC.COMNone
14tier_2antig-hra.com20Amazon Registrar, Inc.NS-1005.AWSDNS-61.NETWhois Privacy Service
15tier_2joblift.com20INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
16tier_2api.l5srv.net15GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
17tier_2click.appcast.io_LOOP_113NoneNoneNone
18tier_2click.expmediadirect1.com13NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
19tier_2api.apptap.com12Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
20tier_2api.mplayit.com12Amazon Registrar, Inc.NS-1236.AWSDNS-26.ORGWhois Privacy Service
21tier_2rtbstream.com121API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
22tier_2buy.affipro.org11NAMECHEAP INCALINA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2techcareers.com10ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
24tier_2redirect.viglink.com9Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
25tier_2link.sylikes.com9MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
26tier_2rd.bizrate.com9NoneNoneNone
27tier_2rd.connexity.net8NoneNoneNone
28tier_2btpnative.com71API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
29tier_2neuvoo.com7NoneNoneNone
30tier_3careerbuilder.com25CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
31tier_3everyjobforme.com21GoDaddy.com, LLCNS-1009.AWSDNS-62.NETPercipio Holdings, Inc.
32tier_3upward.careers15GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
33tier_3cmp.jobs8NoneNoneNone
34tier_3talent.com7Namespro Solutions INC.NS-1486.AWSDNS-57.ORGNamespro.ca PrivateWHOIS
35tier_3neuvoo.com7MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
36tier_3americanlisted.com6ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
37tier_3top.digitaltrendsradar.com6PDR Ltd. d/b/a PublicDomainRegistry.comGWEN.NS.CLOUDFLARE.COMPrivacy Protect, LLC (PrivacyProtect.org)
38tier_3lensa.com5GoDaddy.com, LLCNS-1165.AWSDNS-17.ORGLensa Inc
39tier_3synccurrentmostthefile.vip5NoneNoneNone
40tier_3click.appcast.io5101Domain GRS LtdNS-85.AWSDNS-10.COMNone
41tier_3wayfair.com4MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
42tier_3syncnewestmostthefile.vip4NoneNoneNone
43tier_3linkedin.com3NoneNoneNone
44tier_3rd.bizrate.com3NoneNoneNone
45tier_3syncrecentintenselythefile.vip2NoneNoneNone
46tier_3xml.userwave.com2GoDaddy.com, LLCNS77.DOMAINCONTROL.COMDomains By Proxy, LLC
47tier_3livetrucking.com1GoDaddy.com, LLCAMY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
48tier_31496.rebiraert.com1GoDaddy Online Services Cayman Islands Ltd.NS11.CONSTELLIX.COMNone
49tier_3top.allresultsweb.com1NoneNoneNone
50tier_3bing.com1NoneNoneNone
51tier_3godaddy.com1GoDaddy.com, LLCA1-245.AKAM.NETGo Daddy Operating Company, LLC
52tier_3finance.yahoo.com1NoneNoneNone
53tier_3healthcarejobsite.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
54tier_3click.appcast.io_LOOP_11NoneNoneNone
55tier_3jobg8.com1REGISTER S.P.A.RES1.AMGSHAREDSERVICES.COMJobg8 Limited
56tier_3google.com1MarkMonitor Inc.NS1.GOOGLE.COMNone
57tier_3carbon38.com_LOOP_11NoneNoneNone
58tier_3surveystarz.com1GoDaddy.com, LLCNS13.DOMAINCONTROL.COMDomains By Proxy, LLC
59tier_3google.com_LOOP_11NoneNoneNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0199.115.115.116WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_118nannan
1199.115.115.102WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
2162.210.196.166WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
3199.115.115.118WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
4162.210.196.168WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_113nannan
5199.115.115.119WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nannan
6207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_110nannan
7207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
8162.210.196.167WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_18nannan
9207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_17nannan
10198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_31nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
1268.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_25560.84.168.68.static.dbsintl.netnan
133.232.183.77AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-232-183-77.compute-1.amazonaws.comnan
1452.204.63.126AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-204-63-126.compute-1.amazonaws.comnan
1544.195.255.207AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_228ec2-44-195-255-207.compute-1.amazonaws.comnan
16209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_225nannan
17192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_33rd.bizrate.comnan
1834.117.159.76Kansas CityMissouriAS15169 Google LLC64121United Statestier_22076.159.117.34.bc.googleusercontent.comTrue
1967.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_215nannan
20100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
2134.194.124.180AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213ec2-34-194-124-180.compute-1.amazonaws.comnan
223.209.187.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213ec2-3-209-187-98.compute-1.amazonaws.comnan
23198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_213nannan
24107.20.106.95AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211ec2-107-20-106-95.compute-1.amazonaws.comnan
2568.168.84.170NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_210170.84.168.68.static.dbsintl.netnan
26107.23.13.159AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-107-23-13-159.compute-1.amazonaws.comnan
27192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_28rd.connexity.netnan
2852.72.49.164AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-52-72-49-164.compute-1.amazonaws.comnan
29173.192.101.24DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_2718.65.c0ad.ip4.static.sl-reverse.comnan
3067.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_315nannan
31104.18.29.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_312nanTrue
3252.20.53.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_311ec2-52-20-53-118.compute-1.amazonaws.comnan
3313.225.67.45NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_311server-13-225-67-45.ewr53.r.cloudfront.netnan
34104.18.28.118San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_39nanTrue
35100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_38pool-100-37-135-2.nycmny.fios.verizon.netnan
3645.33.72.236Morris PlainsNew JerseyAS63949 Linode, LLC07927United Statestier_38li1018-236.members.linode.comnan
3713.225.67.91NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_36server-13-225-67-91.ewr53.r.cloudfront.netnan
3835.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
3966.81.205.246AustinTexasAS40034 Confluence Networks Inc78701United Statestier_36nannan
4023.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_34a23-39-32-237.deploy.static.akamaitechnologies.comnan
4113.225.67.126NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-225-67-126.ewr53.r.cloudfront.netnan
4213.225.67.9NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_34server-13-225-67-9.ewr53.r.cloudfront.netnan
4334.233.185.157AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-233-185-157.compute-1.amazonaws.comnan
44192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_33rd.bizrate.comnan
4552.204.63.126AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-52-204-63-126.compute-1.amazonaws.comnan
4669.147.92.12WashingtonWashington, D.C.AS14777 Oath Holdings Inc.20045United Statestier_32e2.ycpi.vip.dca.yahoo.comnan
4754.157.236.241AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-54-157-236-241.compute-1.amazonaws.comnan
4813.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32nanTrue
49174.137.133.16New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_32nannan
50104.21.75.162San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
51198.54.112.216Los AngelesCaliforniaAS22612 Namecheap, Inc.90009United Statestier_31nannan
5218.210.73.248AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-18-210-73-248.compute-1.amazonaws.comnan
5351.91.200.241RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_31ip241.ip-51-91-200.eunan
54204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31a-0001.a-msedge.netTrue
55104.109.149.76PiscatawayNew JerseyAS16625 Akamai Technologies, Inc.08854United Statestier_31a104-109-149-76.deploy.static.akamaitechnologies.comnan
563.232.183.77AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-232-183-77.compute-1.amazonaws.comnan
5744.197.62.224AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-44-197-62-224.compute-1.amazonaws.comnan
583.211.68.114AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-211-68-114.compute-1.amazonaws.comnan
59213.146.171.90TiptreeEnglandAS209765 ASPIRE MEDIA GROUP LIMITEDCO5United Kingdomtier_31www.jobg8.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website