Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0166172665092021-05-1774.63.241.23Safari
tierdomaincountregistrarname_serversorg
0tier_1massimo.us1Communi Gal Communications Ltd.ns2.commonmx.comNone
1tier_1letmedrive.in1Dynadot LLCns1.commonmx.comNone
2tier_1la2tatcom.com1NoneNoneNone
3tier_1drinkfinity.us1Communi Gal Communications Ltd.ns2.commonmx.comNone
4tier_1like-news.us1Dynadot LLCns2.commonmx.comNone
5tier_1mississippidirectory.us1Communi Gal Communications Ltd.ns2.commonmx.comNone
6tier_1cardigans.us1Communi Gal Communications Ltd.ns2.commonmx.comNone
7tier_1telego8.net1NoneNoneNone
8tier_1searchinginternet.net1DYNADOT LLCNS1.COMMONMX.COMNone
9tier_1diario.in1Dynadot LLCns1.commonmx.comNone
10tier_21496.rebiraert.com106GoDaddy Online Services Cayman Islands Ltd.NS-1041.AWSDNS-02.ORGNone
11tier_2americanlisted.com100ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io68NoneNoneNone
13tier_2careerbliss.com44GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
14tier_2trk.careerbliss.com40GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
15tier_2click.appcast.io_LOOP_131NoneNoneNone
16tier_2ziprecruiter.com6Safenames LtdCAROL.NS.CLOUDFLARE.COMNone
17tier_2jsv3.recruitics.com6TUCOWS, INC.NS-1237.AWSDNS-26.ORGREDACTED FOR PRIVACY
18tier_2cmp.jobs5NoneNS1.LINODE.COMNone
19tier_2feed.int.jobble.com4GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
20tier_2click.appcast.io_LOOP_23NoneNoneNone
21tier_2us.jobtome.com3GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
22tier_2dsp.prng.co3GoDaddy.com, LLCns-470.awsdns-58.comDomains By Proxy, LLC
23tier_2ad.doubleclick.net3MarkMonitor, Inc.NS1.GOOGLE.COMGoogle Inc.
24tier_2joblift.com3INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
25tier_2p.nexxt.com2Network Solutions, LLCNS21.WORLDNIC.COMNone
26tier_29nl.es2NoneNoneNone
27tier_2newre-conversions.clickmeter.com2REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
28tier_2nizephoros-pom.com1Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
29tier_2managerformula.com1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
30tier_3google.com31MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3careerbliss.com24GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
32tier_3americanlisted.com6ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
33tier_3feed.int.jobble.com5GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
34tier_3click.appcast.io_LOOP_25NoneNoneNone
35tier_3trk.careerbliss.com4GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
36tier_3hired.recruitics.com3TUCOWS, INC.NS-1237.AWSDNS-26.ORGREDACTED FOR PRIVACY
37tier_3click.appcast.io_LOOP_13NoneNoneNone
38tier_3amazonhvh.thejobnetwork.com2GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
39tier_3uber.com2MarkMonitor, Inc.EDNS126.ULTRADNS.BIZUber Technologies, Inc.
40tier_3jobs.greatclips.com2Network Solutions, LLCNS1.ATOMICDATA.COMNone
41tier_3click.thejobnetwork.com2GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
42tier_3nextcareernow.com2GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
43tier_3jobs.ascension.org2Network Solutions, LLCNS1.ASCENSIONHEALTH.ORGAscension
44tier_3click.joveo.com2Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
45tier_3s3.amazonaws.com1MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
46tier_3neuvoo.com1NoneNoneNone
47tier_3careers.univarsolutions.com1Cloudflare, Inc.ALEC.NS.CLOUDFLARE.COMDATA REDACTED
48tier_3jobsintrucks.com1TUCOWS, INC.NS1.SOFTLAYER.COMREDACTED FOR PRIVACY
49tier_3sonuscompleteformula.com1NAMECHEAP INCMOLLY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
50tier_3txstate.uloop.com1Network Solutions, LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMNone
51tier_3linkup.com_LOOP_11NoneNoneNone
52tier_3linkedin.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
53tier_3open.app.jobrapido.com_LOOP_11NoneNoneNone
54tier_3jobs.jobget.com1Amazon Registrar, Inc.NS-1314.AWSDNS-36.ORGWhois Privacy Service
55tier_3jobs.spectrum.com1CSC CORPORATE DOMAINS, INC.NS1.CHARTER.COMCharter Communications Operating, LLC
56tier_3wayfair.com1NoneNoneNone
57tier_3africanamericanjobsearch.com1ENOM, INC.NS-1162.AWSDNS-17.ORGREDACTED FOR PRIVACY
58tier_3seniorstowork.com1ENOM, INC.NS-1195.AWSDNS-21.ORGREDACTED FOR PRIVACY
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_117nannan
1207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_116nannan
2207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_114nannan
3206.221.176.184NewarkNew JerseyAS23470 ReliableSite.Net LLC07175United Statestier_113nannan
4207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_112nannan
5104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_19nannan
6104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_16nannan
7104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_14nannan
8185.107.56.200RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nannan
9185.107.56.198RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_12nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2106nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
12207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_328cbsmtp1.careerbliss.comnan
13100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.netnan
1452.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-52-3-4-129.compute-1.amazonaws.comnan
15100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_223ec2-100-25-52-1.compute-1.amazonaws.comnan
163.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_222ec2-3-234-0-165.compute-1.amazonaws.comnan
1745.33.72.236Morris PlainsNew JerseyAS63949 Linode, LLC07927United Statestier_25li1018-236.members.linode.comnan
18107.21.18.57AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-107-21-18-57.compute-1.amazonaws.comnan
1954.234.245.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-234-245-31.compute-1.amazonaws.comnan
20130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_23206.38.211.130.bc.googleusercontent.comTrue
21104.16.175.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_23nanTrue
22172.217.11.38WestburyNew YorkAS15169 Google LLC11590United Statestier_23lga25s61-in-f6.1e100.netnan
2334.117.159.76Kansas CityMissouriAS15169 Google LLC64121United Statestier_2376.159.117.34.bc.googleusercontent.comTrue
24209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_22nannan
25104.16.176.190San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_22nanTrue
263.208.40.10AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-3-208-40-10.compute-1.amazonaws.comnan
2768.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_2260.84.168.68.static.dbsintl.netnan
2854.235.161.36AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-54-235-161-36.compute-1.amazonaws.comnan
2952.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-72-29-7.compute-1.amazonaws.comnan
30207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_328cbsmtp1.careerbliss.comnan
31100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_312pool-100-37-135-2.nycmny.fios.verizon.netnan
32172.217.7.4New York CityNew YorkAS15169 Google LLC10004United Statestier_38lga25s56-in-f4.1e100.netnan
33172.217.12.132WestburyNew YorkAS15169 Google LLC11590United Statestier_37lga34s19-in-f4.1e100.netnan
34172.217.12.196WestburyNew YorkAS15169 Google LLC11590United Statestier_37lga25s63-in-f4.1e100.netnan
3535.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_36240.61.209.35.bc.googleusercontent.comnan
36199.83.128.213Redwood CityCaliforniaAS19551 Incapsula Inc94065United Statestier_34199.83.128.213.ip.incapdns.netTrue
37172.217.12.164WestburyNew YorkAS15169 Google LLC11590United Statestier_34lga25s62-in-f4.1e100.netnan
38172.217.10.36New York CityNew YorkAS15169 Google LLC10004United Statestier_34lga34s13-in-f4.1e100.netnan
3954.234.245.31AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-234-245-31.compute-1.amazonaws.comnan
4099.83.154.180SeattleWashingtonAS16509 Amazon.com, Inc.98108United Statestier_33a6e4ff5a7b437f1df.awsglobalaccelerator.comTrue
41104.36.195.150WashingtonWashington, D.C.AS63086 Uber Technologies, Inc20045United Statestier_32nannan
4223.194.131.41PhiladelphiaPennsylvaniaAS20940 Akamai International B.V.19099United Statestier_32a23-194-131-41.deploy.static.akamaitechnologies.comnan
43107.23.244.178AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-107-23-244-178.compute-1.amazonaws.comnan
4452.216.168.37AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
4554.242.20.247AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-242-20-247.compute-1.amazonaws.comnan
46104.26.8.46San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
47169.60.133.82DallasTexasAS36351 SoftLayer Technologies Inc.75270United Statestier_31jobsinlogistics.comnan
48104.21.95.25San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
49108.61.152.179New York CityNew YorkAS20473 The Constant Company, LLC10004United Statestier_31108.61.152.179.reliableservers.comnan
50216.239.34.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_31any-in-2215.1e100.netTrue
5152.204.197.79AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-204-197-79.compute-1.amazonaws.comnan
52172.217.11.36WestburyNew YorkAS15169 Google LLC11590United Statestier_31lga25s61-in-f4.1e100.netnan
5313.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31nanTrue
54216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_31any-in-2015.1e100.netTrue
5534.107.171.149Kansas CityMissouriAS15169 Google LLC64121United Statestier_31149.171.107.34.bc.googleusercontent.comTrue
5623.221.225.161PhiladelphiaPennsylvaniaAS20940 Akamai International B.V.19099United Statestier_31a23-221-225-161.deploy.static.akamaitechnologies.comnan
5723.194.121.4PhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31a23-194-121-4.deploy.static.akamaitechnologies.comnan
5813.224.206.106PhiladelphiaPennsylvaniaAS16509 Amazon.com, Inc.19099United Statestier_31server-13-224-206-106.phl50.r.cloudfront.netnan
5934.239.188.78AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-34-239-188-78.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website