Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02712829400202021-05-2974.63.241.23Chrome
tierdomaincountregistrarname_serversorg
0tier_1kalvisolai.co.in1Dynadot LLCns1.commonmx.comNone
1tier_1baanmootuncattery.com1DYNADOT LLCNS1.COMMONMX.COMNone
2tier_1checkvin.us1Communi Gal Communications Ltd.ns1.commonmx.comNone
3tier_1beactivedentist.com1SNAPNAMES 7, LLCNS1.COMMONMX.COMNone
4tier_1puputupu.in1Dynadot LLCns1.commonmx.comNone
5tier_1oilhp.com1Domainsoftheworld.net LLCNS1.COMMONMX.COMNone
6tier_1y10.co1GoDaddy.com, LLCns2.commonmx.comNone
7tier_1roms3ds.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
8tier_1aows.me1GoDaddy.com, LLCNoneNone
9tier_1zongmei.cc1Domains Etc LLCNS1.COMMONMX.COMNone
10tier_21496.rebiraert.com190GoDaddy Online Services Cayman Islands Ltd.NS-1041.AWSDNS-02.ORGNone
11tier_2americanlisted.com175ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2click.appcast.io48NoneNoneNone
13tier_2click.appcast.io_LOOP_120NoneNoneNone
14tier_2careerbliss.com17GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
15tier_2trk.careerbliss.com15GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
16tier_2rdn.celojobs.com10GoDaddy.com, LLCNS-141.AWSDNS-17.COMDomains By Proxy, LLC
17tier_2rdn.vanadailyjobalerts.com8GoDaddy.com, LLCNS-1171.AWSDNS-18.ORGDomains By Proxy, LLC
18tier_2p.nexxt.com6Network Solutions, LLCNS21.WORLDNIC.COMNone
19tier_2feed.int.jobble.com5GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
20tier_2job.myjobhelper.com5ENOM, INC.NS1.MYJOBHELPER.COMREDACTED FOR PRIVACY
21tier_2healthcarejobsite.com3ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
22tier_2rdn.koraljobs.com3GoDaddy.com, LLCNS-1523.AWSDNS-62.ORGDomains By Proxy, LLC
23tier_2us.jobtome.com2GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
24tier_2joblift.com2INWX GmbH & Co. KGNS-CLOUD-E1.GOOGLEDOMAINS.COMREDACTED FOR PRIVACY
25tier_2btpnative.com21API GmbHNS1.DNSIMPLE.COMRegistrant of btpnative.com
26tier_2mybetterdl.com2NAMECHEAP INCNS0.DNSMADEEASY.COMRedacted for Privacy Purposes
27tier_2rdn.fazedailyalerts.com2GoDaddy.com, LLCNS-1132.AWSDNS-13.ORGDomains By Proxy, LLC
28tier_2cmp.jobs2NoneNS1.LINODE.COMNone
29tier_2click.appcast.io_LOOP_22NoneNoneNone
30tier_3google.com106MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
31tier_3americanlisted.com15ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
32tier_3signup.myjobscorner.com12GoDaddy.com, LLCALDO.NS.CLOUDFLARE.COMDomains By Proxy, LLC
33tier_3careerbliss.com6GoDaddy.com, LLCNS10.DNSMADEEASY.COMNone
34tier_3celojobs.com6GoDaddy.com, LLCNS-141.AWSDNS-17.COMNone
35tier_3jobs.myjobhelper.com5ENOM, INC.NS1.MYJOBHELPER.COMREDACTED FOR PRIVACY
36tier_3vanadailyjobalerts.com5GoDaddy.com, LLCNS-1171.AWSDNS-18.ORGNone
37tier_3careerbuilder.com3CSC CORPORATE DOMAINS, INC.BROCK.CBJOBS.NETCareerBuilder, LLC
38tier_3jobs2careers.com3Amazon Registrar, Inc.NS-1189.AWSDNS-20.ORGWhois Privacy Service
39tier_3trk.careerbliss.com2GoDaddy.com, LLCNS10.DNSMADEEASY.COMNone
40tier_3linkedin.com2MarkMonitor, Inc.DNS1.P09.NSONE.NETLinkedIn Corporation
41tier_3click.appcast.io2101domain GRS LtdNS-85.AWSDNS-10.COMNone
42tier_3collegerecruiter.com2Amazon Registrar, Inc.NS-105.AWSDNS-13.COMWhois Privacy Service
43tier_3koraljobs.com2GoDaddy.com, LLCNS-1523.AWSDNS-62.ORGNone
44tier_3driverjobs.groendyke.com2Network Solutions, LLCNS29.WORLDNIC.COMNone
45tier_3upward.careers2GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
46tier_3us.jobtome.com1GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMNone
47tier_3monster.com1CSC CORPORATE DOMAINS, INC.NS1.TMPW.NETMonster Worldwide, Inc.
48tier_3cryptowebnow.info1GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
49tier_3livetrucking.com1GoDaddy.com, LLCAMY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
50tier_3google.com_LOOP_11NoneNoneNone
51tier_3exp.eurosptp.com1OVH, SASDNS200.ANYCAST.MENone
52tier_3juju.com1Network Solutions, LLCNS-1111.AWSDNS-10.ORGNone
53tier_3constructionjobforce.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
54tier_3theuniremedy.com1GoDaddy.com, LLCMOLLY.NS.CLOUDFLARE.COMNone
55tier_3leewardjobs.com1GoDaddy.com, LLCNS-1391.AWSDNS-45.ORGNone
56tier_3careers.hireology.com1Safenames LtdNS-1514.AWSDNS-61.ORGNone
57tier_3fazedailyalerts.com1GoDaddy.com, LLCNS-1132.AWSDNS-13.ORGNone
58tier_3neuvoo.com1MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
59tier_3feed.int.jobble.com1GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_140nannan
1207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_134nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_133nannan
3207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_133nannan
437.48.65.149AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
5185.107.56.197RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nannan
637.48.65.151AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
763.143.32.91DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1391-32-143-63.static.reverse.lstn.netnan
837.48.65.148AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_13nannan
963.143.32.90DallasTexasAS46475 Limestone Networks, Inc.75202United Statestier_1390-32-143-63.static.reverse.lstn.netnan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2190nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_315240.61.209.35.bc.googleusercontent.comnan
12207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_38cbsmtp1.careerbliss.comnan
13100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.netnan
1434.192.220.207AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_218ec2-34-192-220-207.compute-1.amazonaws.comnan
1554.161.244.86AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_216ec2-54-161-244-86.compute-1.amazonaws.comnan
1634.238.12.49AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-34-238-12-49.compute-1.amazonaws.comnan
1734.231.205.78AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-34-231-205-78.compute-1.amazonaws.comnan
1868.168.84.60NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_2660.84.168.68.static.dbsintl.netnan
19216.150.143.166HawthorneNew YorkAS11383 Xand Corporation10532United Statestier_35nannan
2034.203.89.167AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-34-203-89-167.compute-1.amazonaws.comnan
2152.0.217.21AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-52-0-217-21.compute-1.amazonaws.comnan
2275.101.189.112AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-75-101-189-112.compute-1.amazonaws.comnan
2352.205.184.55AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-52-205-184-55.compute-1.amazonaws.comnan
2454.209.152.151AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-54-209-152-151.compute-1.amazonaws.comnan
25209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_23nannan
2668.168.84.162NorristownPennsylvaniaAS17378 TierPoint, LLC19403United Statestier_23162.84.168.68.static.dbsintl.netnan
2754.81.3.79AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-54-81-3-79.compute-1.amazonaws.comnan
28130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_31206.38.211.130.bc.googleusercontent.comTrue
2934.117.159.76Kansas CityMissouriAS15169 Google LLC64121United Statestier_2276.159.117.34.bc.googleusercontent.comTrue
30172.217.6.228WestburyNew YorkAS15169 Google LLC11590United Statestier_320lga25s55-in-f4.1e100.netnan
31142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_320lga34s33-in-f4.1e100.netnan
32142.250.64.100WestburyNew YorkAS15169 Google LLC11590United Statestier_317lga34s31-in-f4.1e100.netnan
33172.217.9.228Ann ArborMichiganAS15169 Google LLC48109United Statestier_316lga34s11-in-f4.1e100.netnan
3435.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_315240.61.209.35.bc.googleusercontent.comnan
35172.217.12.132WestburyNew YorkAS15169 Google LLC11590United Statestier_313lga34s19-in-f4.1e100.netnan
36172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_313lga34s18-in-f4.1e100.netnan
37151.101.1.195San FranciscoCaliforniaAS54113 Fastly94107United Statestier_39nanTrue
38207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_38cbsmtp1.careerbliss.comnan
39172.217.10.4New York CityNew YorkAS15169 Google LLC10004United Statestier_37lga34s12-in-f4.1e100.netnan
40216.150.143.166HawthorneNew YorkAS11383 Xand Corporation10532United Statestier_35nannan
4134.238.20.127AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-34-238-20-127.compute-1.amazonaws.comnan
423.234.199.43AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-3-234-199-43.compute-1.amazonaws.comnan
4354.224.3.134AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-224-3-134.compute-1.amazonaws.comnan
44151.101.65.195San FranciscoCaliforniaAS54113 Fastly94107United Statestier_33nanTrue
4534.237.249.189AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-34-237-249-189.compute-1.amazonaws.comnan
4613.225.222.104New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_32server-13-225-222-104.jfk51.r.cloudfront.netnan
4713.107.42.14RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_32nanTrue
4852.22.0.248AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-22-0-248.compute-1.amazonaws.comnan
4954.227.61.196AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-54-227-61-196.compute-1.amazonaws.comnan
5013.225.222.64New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_32server-13-225-222-64.jfk51.r.cloudfront.netnan
5167.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_32nannan
5213.225.222.92New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-222-92.jfk51.r.cloudfront.netnan
5334.236.61.118AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-34-236-61-118.compute-1.amazonaws.comnan
54130.211.38.206Kansas CityMissouriAS15169 Google LLC64121United Statestier_31206.38.211.130.bc.googleusercontent.comTrue
5513.225.222.23New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-222-23.jfk51.r.cloudfront.netnan
56172.67.216.65San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
57172.67.178.188San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
58100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31pool-100-37-135-2.nycmny.fios.verizon.netnan
59213.186.33.19ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_31cluster010.hosting.ovh.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website