Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
01621594550132021-05-0964.32.8.68Safari
tierdomaincountregistrarname_serversorg
0tier_1acehomework.net1Blue Angel Domains LLCNS1.DNSNUTS.COMNone
1tier_1hickorydickorybox.com1JarheadDomains.com LLCNS1.DNSNUTS.COMNone
2tier_1chastnoevideo.net1SNAPNAMES 90, LLCNS1.DNSNUTS.COMNone
3tier_1exphoenixtrade.com1Domainsoverboard.com LLCNS1.DNSNUTS.COMNone
4tier_1cheapvba.com1Adomainofyourown.com LLCNS1.DNSNUTS.COMNone
5tier_1guias-trucos-juegos.com1SNAPNAMES 24, LLCNS1.DNSNUTS.COMNone
6tier_1ice43.com1Wildzebradomains, LLCNS1.DNSNUTS.COMNone
7tier_1depladoc.net1SNAPNAMES 3, LLCNS1.DNSNUTS.COMNone
8tier_1ecoleinternationalelagloire.com1MidWestDomains, LLCNS1.DNSNUTS.COMNone
9tier_1eromini.com1Godomaingo.com LLCNS1.DNSNUTS.COMNone
10tier_21496.rawlexi.com36GoDaddy Online Services Cayman Islands Ltd.NS-128.AWSDNS-16.COMNone
11tier_2americanlisted.com34ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.expmediadirect1.com29NoneNoneNone
13tier_2click.appcast.io23101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_2asufij.xyz17NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
15tier_2clk.rtpdn12.com8NoneNoneNone
16tier_2nizephoros-pom.com8Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
17tier_2managerformula.com8NoneNoneNone
18tier_2btpnav.com71API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
19tier_2api.l5srv.net7GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_2track.vcdc.com7Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
21tier_2adserver.additionalmedia.com71&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
22tier_2xml.additionalmedia.com71&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
23tier_2aristo-hag.com6Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
24tier_2rtbstream.com61API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
25tier_2buy.affipro.org6NoneNoneNone
26tier_2anmtzzon.equalowl.com5NAMECHEAP INCIAN.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
27tier_2plus.tubroaffs.org5NoneNoneNone
28tier_29nl.es4NoneNoneNone
29tier_2newre-conversions.clickmeter.com4REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
30tier_3xzb.subeamy.pw17NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
31tier_3s3.amazonaws.com8MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
32tier_3upward.careers7GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
33tier_3autoproyecto.com7GoDaddy.com, LLCLARA.NS.CLOUDFLARE.COMAUTOPROYECTO LLC
34tier_3google.com6NoneNoneNone
35tier_3click.appcast.io5101Domain GRS LtdNS-85.AWSDNS-10.COMNone
36tier_3signup.finddreamjobs.com4GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMFind Dream Jobs
37tier_3yam21.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
38tier_3nextcareernow.com3GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
39tier_3boot-upoverly-bestadvancedfile.best3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
40tier_3linkup.com2GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
41tier_3streamrenewed-bestoverlyfile.best2NoneNoneNone
42tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
43tier_3boot-upfree-bestuberfile.best2NoneNoneNone
44tier_3retailgigs.com2ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
45tier_3mergerinvesting.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
46tier_3streamprogressive-bestoverlyfile.best1NoneNoneNone
47tier_3wayfair.com1MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
48tier_3click.thejobnetwork.com1GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
49tier_3sjtransportation.com1GoDaddy.com, LLCAMS-NS1.WEBSITEHOSTSERVER.NETSJ Transportation
50tier_3nexxt.com1Network Solutions, LLCNS21.WORLDNIC.COMNone
51tier_3robogarden.io1GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
52tier_3rd.bizrate.com1NoneNoneNone
53tier_3hospitalityjobsite.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
54tier_3adserver.additionalmedia.com11&1 IONOS SENS1049.UI-DNS.BIZJW Digital Limited
55tier_3boot-upuber-bestfreefile.best1NoneNoneNone
56tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
57tier_3streamoverly-bestrenewedfile.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
58tier_3volume.com1DYNADOT LLCA.NS.VOLUME.COMNone
59tier_3joblift.com1INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_118nan
1185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_115nan
2185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_112nan
3185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_111nan
464.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_111nan
564.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_110nan
664.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_110nan
7185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_16nan
8198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_236nan
935.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
10198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_229nan
11173.239.53.16nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nan
12209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_213nan
13107.20.106.95ec2-107-20-106-95.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_211nan
14173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_210nan
1544.241.50.49ec2-44-241-50-49.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_29nan
16100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33nan
1752.3.4.129ec2-52-3-4-129.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
1867.227.173.37nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_27nan
19167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_27nan
203.234.0.165ec2-3-234-0-165.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26nan
2134.197.176.2ec2-34-197-176-2.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25nan
22104.21.62.226nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_25True
2344.239.66.208ec2-44-239-66-208.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_25nan
2452.72.29.7ec2-52-72-29-7.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24nan
25173.192.101.2418.65.c0ad.ip4.static.sl-reverse.comDallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_24nan
2654.208.107.202ec2-54-208-107-202.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24nan
2752.33.20.119ec2-52-33-20-119.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_23nan
2852.88.215.122ec2-52-88-215-122.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_312nan
2967.227.172.40nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_37nan
3052.20.53.118ec2-52-20-53-118.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_36nan
3135.165.21.241ec2-35-165-21-241.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_35nan
3234.230.237.125ec2-34-230-237-125.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_35nan
33104.26.10.238nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_35True
34104.17.48.14nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34True
35162.243.10.151nanNew York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_34nan
36100.25.52.1ec2-100-25-52-1.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33nan
37172.217.11.4lga25s60-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_33nan
38216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_33True
39172.217.10.36lga34s13-in-f4.1e100.netClinton CornersNew YorkAS15169 Google LLC12514United Statestier_32nan
40104.26.11.238nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32True
4135.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_32nan
4268.168.84.165165.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_32nan
4352.217.84.94s3-1.amazonaws.comAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32nan
4452.3.4.129ec2-52-3-4-129.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
4552.217.38.174s3-1.amazonaws.comAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32nan
4645.55.189.248nanCliftonNew JerseyAS14061 DigitalOcean, LLC07014United Statestier_31nan
47104.77.220.252a104-77-220-252.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_31nan
48199.83.128.213199.83.128.213.ip.incapdns.netRedwood CityCaliforniaAS19551 Incapsula Inc94065United Statestier_31True
49209.236.97.200nanMinneapolisMinnesotaAS13649 Flexential Colorado Corp.55440United Statestier_31nan
50184.154.60.110chi-node73.websitehostserver.netMolineIllinoisAS32475 SingleHop LLC61266United Statestier_31nan
5168.168.84.6060.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan
52104.21.80.8nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31True
53192.138.218.207rd.bizrate.comSeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31nan
5468.168.84.167167.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan
5552.217.92.62s3-1.amazonaws.comAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31nan
56173.239.53.16nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_31nan
5752.217.109.134s3-1.amazonaws.comAshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website