Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02132146880162021-05-2664.32.8.68Android
tierdomaincountregistrarname_serversorg
0tier_1clubelan.net1NamePal.com #8027, LLCNS1.DNSNUTS.COMNone
1tier_1ddoba.net1Ripcurl Domains, LLCNS1.DNSNUTS.COMNone
2tier_1face2facethemagazine.com1Domaininthehole.com LLCNS1.DNSNUTS.COMNone
3tier_1civgames.com1Domainsinthebag.com LLCNS1.DNSNUTS.COMNone
4tier_1fudgebananaswirl.com1Name Connection Spot LLCNS1.DNSNUTS.COMNone
5tier_1erojii.net1Dropcatch Landing Spot LLCNS1.DNSNUTS.COMNone
6tier_110dle.com1Free Drop Zone LLCNS1.DNSNUTS.COMNone
7tier_1deresute-japan.com1SNAPNAMES 47, LLCNS1.DNSNUTS.COMNone
8tier_1g-paws.com1SNAPNAMES 72, LLCNS1.DNSNUTS.COMNone
9tier_1dtodo1poco.com1Travel Domains, LLCNS1.DNSNUTS.COMNone
10tier_21496.rebiraert.com73GoDaddy Online Services Cayman Islands Ltd.NS-1041.AWSDNS-02.ORGNone
11tier_2americanlisted.com65ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io49NoneNoneNone
13tier_2steinn-nik.com40Amazon Registrar, Inc.NS-1082.AWSDNS-07.ORGWhois Privacy Service
14tier_2atnpx.com35GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
15tier_2track.vcdc.com28Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
16tier_2ad.doubleclick.net23MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
17tier_2btpnav.com141API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
18tier_2careerbliss.com8GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
19tier_2click.appcast.io_LOOP_17NoneNoneNone
20tier_2trk.careerbliss.com6GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
21tier_2melanthios-ana.com4Amazon Registrar, Inc.NS-1354.AWSDNS-41.ORGWhois Privacy Service
22tier_2lighttopic.com4NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2nextcareernow.com4GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
24tier_2route.g-sponsored-results.com3GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGDomains By Proxy, LLC
25tier_2incues.com3GoDaddy.com, LLCNS-1290.AWSDNS-33.ORGDomains By Proxy, LLC
26tier_2linkup.com3GoDaddy.com, LLCNS-102.AWSDNS-12.COMJobDig
27tier_2ads35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
28tier_2dsp35.adtelligent.com3DANESCO TRADING LTDNS.ANYCASTNS1.ORGVertamedia,LLC
29tier_2aibm1.mysearch.space3NoneNoneNone
30tier_3kbb.com23CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
31tier_3careerbliss.com21GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
32tier_3google.com10MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
33tier_3americanlisted.com8ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
34tier_3robogarden.io8GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
35tier_3click.appcast.io6NoneNoneNone
36tier_3dakshaventures.com4NAMECHEAP INCNS46.WPXHOSTING.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3ad.doubleclick.net4MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
38tier_3nextcareernow.com4GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
39tier_3g-sponsored-results.com3GoDaddy.com, LLCNS-1531.AWSDNS-63.ORGDomains By Proxy, LLC
40tier_3healthcarejobsite.com3ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
41tier_3bing.com3MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
42tier_3trk.careerbliss.com2GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
43tier_3administrativejobs.com2ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
44tier_3linkedin.com2MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
45tier_3click.joveo.com2Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
46tier_3marketingjobforce.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
47tier_3linkup.com_LOOP_11NoneNoneNone
48tier_3click.appcast.io_LOOP_11NoneNoneNone
49tier_3feed.int.jobble.com1GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
50tier_3jobleads.com1united domains AGCRUZ.NS.CLOUDFLARE.COMNone
51tier_3betterhelp.com1GoDaddy.com, LLCNS-103.AWSDNS-12.COMNone
52tier_3hiringcenterjobs.com1TIERRANET INC. DBA DOMAINDISCOVERNS1.DISCOUNTASP.NETWebmaster, Tidemark, Inc.
53tier_3upward.careers1GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
54tier_3beyourxfriend.com1GoDaddy.com, LLCNS0.DNSMADEEASY.COMNone
55tier_3us.jobtome.com1GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMNone
56tier_3jobs.myjobhelper.com1ENOM, INC.NS1.MYJOBHELPER.COMREDACTED FOR PRIVACY
57tier_3constructionjobforce.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
58tier_3chicagocareersite.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
59tier_3btpnav.com11API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_123nan
1185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_119nan
2185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_118nan
364.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_116nan
4185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_115nan
5185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_112nan
664.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_111nan
764.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_111nan
8198.54.112.216nanSan JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_273nan
935.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_38nan
10167.233.8.197static.197.8.233.167.clients.your-server.deN├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_228nan
1154.174.112.67ec2-54-174-112-67.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223nan
1252.7.145.236ec2-52-7-145-236.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222nan
13104.26.10.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_219True
1434.197.35.212ec2-34-197-35-212.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
153.224.107.254ec2-3-224-107-254.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
16209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_217nan
1752.207.132.139ec2-52-207-132-139.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
18207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_323nan
19100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35nan
20142.250.64.102lga34s31-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_31nan
21104.26.11.53nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_210True
22172.217.165.134nanNew York CityNew YorkAS15169 Google LLC10004United Statestier_26nan
23172.67.74.77nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_26True
24173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_24nan
25216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_33True
26172.217.11.6lga25s60-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_24nan
27209.132.243.15nanLos AngelesCaliforniaAS7296 Alchemy Communications, Inc.90009United Statestier_24nan
28207.38.44.116cbsmtp1.careerbliss.comLos AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_323nan
2923.193.214.100a23-193-214-100.deploy.static.akamaitechnologies.comNew York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_323nan
3035.209.61.240240.61.209.35.bc.googleusercontent.comCouncil BluffsIowaAS15169 Google LLC51502United Statestier_38nan
31100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35nan
32194.1.147.19wpx.netSofiaSofia-CapitalAS210250 K Media Tech Ltd.1000Bulgariatier_34True
33172.67.172.143nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34True
34104.21.80.8nanSan FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_34True
35216.239.32.21any-in-2015.1e100.netMountain ViewCaliforniaAS15169 Google LLC94043United Statestier_33True
36172.217.12.164lga25s62-in-f4.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_32nan
3768.168.84.162162.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_32nan
38204.79.197.200a-0001.a-msedge.netRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32True
39172.217.10.132lga34s16-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_32nan
40172.217.9.228lga34s11-in-f4.1e100.netAnn ArborMichiganAS15169 Google LLC48109United Statestier_32nan
4152.207.132.139ec2-52-207-132-139.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
4268.168.84.163163.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_32nan
43172.217.10.134lga34s16-in-f6.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_32nan
4413.107.42.14nanRedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32True
453.224.107.254ec2-3-224-107-254.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
4634.197.35.212ec2-34-197-35-212.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32nan
4713.225.230.125server-13-225-230-125.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_32nan
4868.168.84.175175.84.168.68.static.dbsintl.netNorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_31nan
4913.225.230.97server-13-225-230-97.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31nan
5013.225.230.12server-13-225-230-12.jfk51.r.cloudfront.netNew York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31nan
51142.250.64.100lga34s31-in-f4.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_31nan
52142.250.64.102lga34s31-in-f6.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_31nan
5354.234.245.31ec2-54-234-245-31.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
54194.6.195.224www.jobleads.deHamburgHamburgAS39227 Corpex Internet GmbH20038Germanytier_31nan
55172.217.12.196lga25s63-in-f4.1e100.netWestburyNew YorkAS15169 Google LLC11590United Statestier_31nan
563.223.199.227ec2-3-223-199-227.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31nan
57172.217.10.68lga34s14-in-f4.1e100.netNew York CityNew YorkAS15169 Google LLC10004United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website