Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02001987250172021-04-2493.115.28.104Iphone
tierdomaincountregistrarname_serversorg
0tier_1chinaheritagenewsletter.org1TUCOWS, INC.NS1.RENTONDC.COM['Balticsea LLC', 'REDACTED FOR PRIVACY']
1tier_1battleforkids.org1TUCOWS, INC.NS1.RENTONDC.COM['Data Protected', 'REDACTED FOR PRIVACY']
2tier_1etymonline.org1Internet Domain Service BS Corp.NS1.RENTONDC.COMWhois Privacy Corp.
3tier_144renti.org1NoneNoneNone
4tier_1anabolicsteroid.org1TUCOWS, INC.NS1.RENTONDC.COM['Data Protected', 'REDACTED FOR PRIVACY']
5tier_1engine-search.biz1TLD Registrar Solutions Ltd.ns2.rentondc.comNone
6tier_14char.org1Allworldnames.com LLCNS1.RENTONDC.COMNone
7tier_1agrobank.org1Deschutesdomains.com LLCNS1.RENTONDC.COMNone
8tier_1gacc.org11API GmbHNS1.RENTONDC.COM['Onyx Domain Solutions', 'REDACTED FOR PRIVACY']
9tier_1aaaaaarg.org1TUCOWS, INC.NS1.RENTONDC.COM['Data Protected', 'REDACTED FOR PRIVACY']
10tier_21496.rawlexi.com78NoneNoneNone
11tier_2americanlisted.com76ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2api.quotes.com37Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
13tier_2changeslots.com37Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
14tier_2rd.parsecjobs.com33GoDaddy.com, LLCNS-1016.AWSDNS-63.NETDomains By Proxy, LLC
15tier_2open.app.jobrapido.com30Marcaria.com International, Inc.NS-CLOUD-D1.GOOGLEDOMAINS.COMGDPR Masked
16tier_2us.jobrapido.com30Marcaria.com International, Inc.NS-CLOUD-D1.GOOGLEDOMAINS.COMGDPR Masked
17tier_2click.appcast.io20101Domain GRS LtdNS-85.AWSDNS-10.COMNone
18tier_2rd.southfljobs.com15GoDaddy.com, LLCNS-1082.AWSDNS-07.ORGDomains By Proxy, LLC
19tier_2systems.job.com13NoneNoneNone
20tier_2click.appcast.io_LOOP_112NoneNoneNone
21tier_2rd.tieronealerts.com7GoDaddy.com, LLCNS-1160.AWSDNS-17.ORGDomains By Proxy, LLC
22tier_2track.vcdc.com5Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
23tier_2open.app.jobrapido.com_LOOP_15NoneNoneNone
24tier_2rd.micronjobs.com3GoDaddy.com, LLCNS-1144.AWSDNS-15.ORGDomains By Proxy, LLC
25tier_2directnavbt.com31API GmbHNS1.DNSIMPLE.COMRegistrant of directnavbt.com
26tier_2query.pureleads.com3New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
27tier_2queryclick.pureleads.com3New Frontier, Inc.NS1.P05.DYNECT.NETDomain Protection Services, Inc.
28tier_2amzn.to3NoneNoneNone
29tier_2us.jobtome.com3GoDaddy.com, LLCCHRIS.NS.CLOUDFLARE.COMJobtome Internantional SA
30tier_3theconnectvpn.com37DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
31tier_3open.app.jobrapido.com_LOOP_125NoneNoneNone
32tier_3neuvoo.com13MarkMonitor, Inc.NS-1302.AWSDNS-34.ORGTalent.com
33tier_3google.com12NoneNoneNone
34tier_3click.appcast.io8101Domain GRS LtdNS-85.AWSDNS-10.COMNone
35tier_3rd.parsecjobs.com4GoDaddy.com, LLCNS-1016.AWSDNS-63.NETDomains By Proxy, LLC
36tier_3bestappland.me4NAMECHEAP INCNoneNone
37tier_3feed.int.jobble.com3GoDaddy.com, LLCNS-1238.AWSDNS-26.ORGDomains By Proxy, LLC
38tier_3amazon.com3MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
39tier_3amazon.tal.net2GoDaddy.com, LLCNS1.TAL.NETWorld Careers Network plc
40tier_3us.jobrapido.com_LOOP_12NoneNoneNone
41tier_3fountain.com2GoDaddy.com, LLCDEE.NS.CLOUDFLARE.COMDomains By Proxy, LLC
42tier_3americanlisted.com2ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
43tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
44tier_3click.appcast.io_LOOP_11NoneNoneNone
45tier_3gazelle.com1GoDaddy.com, LLCNS-1220.AWSDNS-24.ORGGazelle, Inc.
46tier_3careers.integritystaffing.com1GoDaddy.com, LLCNS37.DOMAINCONTROL.COMIntegrity Staffing Solutions
47tier_3marketloans.net1DNC Holdings, IncNS-1137.AWSDNS-14.ORGSearchROI
48tier_3rd.bizrate.com1MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
49tier_3collegerecruiter.com1Amazon Registrar, Inc.NS-105.AWSDNS-13.COMWhois Privacy Service
50tier_3track.webgains.com1123-Reg LimitedDOM.NS.CLOUDFLARE.COMWebgains Ltd
51tier_3rd.tieronealerts.com1GoDaddy.com, LLCNS-1160.AWSDNS-17.ORGDomains By Proxy, LLC
52tier_3rd.southfljobs.com1GoDaddy.com, LLCNS-1082.AWSDNS-07.ORGDomains By Proxy, LLC
53tier_31800contacts.com1Wild West Domains, LLCNS-1418.AWSDNS-49.ORGNone
54tier_3storystudio.sfgate.com1CSC CORPORATE DOMAINS, INC.NS1.HEARSTNP.COMHearst Communications, Inc.
55tier_3chewy.com1Moniker Online Services LLCNS1.P02.DYNECT.NETChewy, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
093.115.28.104VilniusVilniusAS16125 UAB Cherry Servers01001Lithuaniatier_155nannan
1172.98.192.37Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_130nannan
2172.98.192.36Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_123nannan
3172.98.192.35Union CityGeorgiaAS31863 Centrilogic, Inc.30291United Statestier_122nannan
4198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_278nannan
535.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
65.79.68.236AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_237nannan
734.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_237ec2-34-207-32-33.compute-1.amazonaws.comnan
891.134.128.52RoubaixHauts-de-FranceAS16276 OVH SAS59100Francetier_230nannan
9100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_333pool-100-37-135-2.nycmny.fios.verizon.netnan
1052.203.101.113AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_214ec2-52-203-101-113.compute-1.amazonaws.comnan
1134.196.177.100AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-196-177-100.compute-1.amazonaws.comnan
12100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-100-25-52-1.compute-1.amazonaws.comnan
133.226.165.125AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_29ec2-3-226-165-125.compute-1.amazonaws.comnan
1452.200.26.103AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-52-200-26-103.compute-1.amazonaws.comnan
1552.22.222.38AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-22-222-38.compute-1.amazonaws.comnan
1654.85.103.139AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-54-85-103-139.compute-1.amazonaws.comnan
1752.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-3-4-129.compute-1.amazonaws.comnan
1846.105.112.200RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_26ns320212.ip-46-105-112.eunan
19167.233.8.197NürnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_25static.197.8.233.167.clients.your-server.denan
205.39.72.129RoubaixHauts-de-FranceAS16276 OVH SAS59051 CEDEX 1Francetier_25nannan
213.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-3-234-0-165.compute-1.amazonaws.comnan
2234.197.58.123AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-34-197-58-123.compute-1.amazonaws.comnan
23176.31.228.17ParisÎle-de-FranceAS16276 OVH SAS75000Francetier_24ns3042239.ip-176-31-228.eunan
24100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_333pool-100-37-135-2.nycmny.fios.verizon.netnan
25104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_326nanTrue
26172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_311nanTrue
27142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_36lga34s33-in-f4.1e100.netnan
28172.217.12.164CliftonNew JerseyAS15169 Google LLC07015United Statestier_35lga25s62-in-f4.1e100.netnan
29142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_34nannan
3034.196.177.100AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-196-177-100.compute-1.amazonaws.comnan
3154.162.242.54AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-54-162-242-54.compute-1.amazonaws.comnan
3234.232.57.217AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-232-57-217.compute-1.amazonaws.comnan
333.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-3-234-0-165.compute-1.amazonaws.comnan
3452.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-3-4-129.compute-1.amazonaws.comnan
3534.235.174.239AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-34-235-174-239.compute-1.amazonaws.comnan
36213.52.141.150LondonEnglandAS15830 Equinix ConnectEC1AUnited Kingdomtier_32nannan
37143.204.142.6NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_32server-143-204-142-6.ewr52.r.cloudfront.netnan
38104.22.63.88San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
3952.22.222.38AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_32ec2-52-22-222-38.compute-1.amazonaws.comnan
4035.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_32240.61.209.35.bc.googleusercontent.comnan
41151.101.1.131San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
4254.242.20.247AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-242-20-247.compute-1.amazonaws.comnan
43100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-100-25-52-1.compute-1.amazonaws.comnan
44199.232.192.65San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
4554.243.167.92AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-243-167-92.compute-1.amazonaws.comnan
4652.36.144.152BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_31ec2-52-36-144-152.us-west-2.compute.amazonaws.comnan
4754.173.167.240AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-173-167-240.compute-1.amazonaws.comnan
48192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_31rd.bizrate.comnan
4999.84.126.39NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_31server-99-84-126-39.ewr52.r.cloudfront.netnan
5054.163.119.112AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-54-163-119-112.compute-1.amazonaws.comnan
51172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_31lga34s18-in-f4.1e100.netnan
5246.236.13.147LondonEnglandAS24931 Pulsant LimitedEC1AUnited Kingdomtier_3146-236-13-147.servers.dedipower.netnan
5352.21.31.105AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-21-31-105.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website