Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02342367651162021-05-0293.115.28.104Safari
tierdomaincountregistrarname_serversorg
0tier_1abcmopuse.com1NoneNoneNone
1tier_1bachelors.com1NoneNoneNone
2tier_1anshear.com1NoneNoneNone
3tier_13hxestimator.org1NoneNoneNone
4tier_1autothalom.com1NameVolcano.com LLCNS1.RENTONDC.COMNone
5tier_14grabit.com1Deleting Name Zone LLCNS1.RENTONDC.COMNone
6tier_1astrokey.org1NoneNoneNone
7tier_1aasha-online.com1Cool River Names, LLCNS1.RENTONDC.COMNone
8tier_1alwordpress.com1Victorynames LLCNS1.RENTONDC.COMNone
9tier_1ualpilotsforum.org1Domainarmada.com LLCNS1.RENTONDC.COMNone
10tier_21496.rawlexi.com87NoneNoneNone
11tier_2americanlisted.com78ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2rqhere2.com30NAMECHEAP INCJEROME.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
13tier_2bitcohost.club30NoneNoneNone
14tier_2track.vcdc.com22Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
15tier_2clk.rtpdn12.com19NoneNoneNone
16tier_2click.appcast.io13101domain GRS LtdNS-85.AWSDNS-10.COMNone
17tier_29nl.es12NoneNoneNone
18tier_2newre-conversions.clickmeter.com12REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
19tier_2trk.jometer.com12Amazon Registrar, Inc.NS-129.AWSDNS-16.COMWhois Privacy Service
20tier_2click.expmediadirect1.com11NoneNoneNone
21tier_2api.l5srv.net11GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
22tier_2click.junmediadirect.com10NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2nizephoros-pom.com9Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
24tier_2managerformula.com9NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
25tier_2aristo-hag.com9Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
26tier_2rdn.leewardjobs.com8GoDaddy.com, LLCNS-1391.AWSDNS-45.ORGDomains By Proxy, LLC
27tier_2asufij.xyz8NamecheapDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
28tier_2rd.bizrate.com7MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
29tier_2rd.connexity.net7NoneNoneNone
30tier_3try-oneshot-keto.com30NoneNoneNone
31tier_3google.com21MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
32tier_3juju.com12Network Solutions, LLCNS-1111.AWSDNS-10.ORGNone
33tier_3upward.careers11GoDaddy.com, LLCns21.domaincontrol.comDomains By Proxy, LLC
34tier_3s3.amazonaws.com9NoneNoneNone
35tier_3americanlisted.com9ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
36tier_3xzb.subeamy.pw8NoneNoneNone
37tier_3careerbliss.com6GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
38tier_3us.sercanto.com5OVH, SASNS11.CONSTELLIX.COMWickedin s.r.l.
39tier_3leewardjobs.com4GoDaddy.com, LLCNS-1391.AWSDNS-45.ORGDomains By Proxy, LLC
40tier_3wayfair.com4MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
41tier_3click.appcast.io_LOOP_13NoneNoneNone
42tier_3abcmouse.com2Network Solutions, LLCNS-1211.AWSDNS-23.ORGNone
43tier_3posajobs.com2GoDaddy.com, LLCNS-1415.AWSDNS-48.ORGDomains By Proxy, LLC
44tier_3click.appcast.io2101domain GRS LtdNS-85.AWSDNS-10.COMNone
45tier_3amazonhvh.thejobnetwork.com2GoDaddy.com, LLCNS-1356.AWSDNS-41.ORGRealMatch
46tier_3socalhondadealers.com1NoneNoneNone
47tier_3careers.sedgwickcounty.org1GoDaddy.com, LLCNS1.COXMAIL.COMDomains By Proxy, LLC
48tier_3driver.grubhub.com1GoDaddy.com, LLCDNS1.P03.NSONE.NETGrubHub Inc
49tier_3dataprivacyadvocate.com1Amazon Registrar, Inc.NS-1519.AWSDNS-61.ORGWhois Privacy Service
50tier_3medicarecoveragenow.com1GoDaddy.com, LLCNS1.US208.SITEGROUND.USDomains By Proxy, LLC
51tier_3jobs.crh.com1Ascio Technologies, IncNS3.COMBELL.NETNot Disclosed
52tier_3jobs.sephora.com1Network Solutions, LLCNS1.P05.DYNECT.NETNone
53tier_3orthofeet.com_LOOP_11NoneNoneNone
54tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
55tier_3best.aliexpress.com1Alibaba Cloud Computing (Beijing) Co., Ltd.NS1.ALIBABADNS.COMNone
56tier_3nizephoros-pom.com1Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGNone
57tier_3jobs.grainger.com1MarkMonitor, Inc.A1-91.AKAM.NETW.W. Grainger, Inc.
58tier_3whatjobs.com1123-Reg LimitedVIDA.NS.CLOUDFLARE.COMNone
59tier_3jobs.sheetz.com1Network Solutions, LLCNS2017-1.METROCAST.NETNone
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0172.98.192.37Royal PinesNorth CarolinaAS31863 Centrilogic, Inc.28776United Statestier_151nannan
193.115.28.104VilniusVilniusAS16125 UAB Cherry Servers01001Lithuaniatier_136nannan
2172.98.192.36Royal PinesNorth CarolinaAS31863 Centrilogic, Inc.28776United Statestier_132nannan
3172.98.192.35Royal PinesNorth CarolinaAS31863 Centrilogic, Inc.28776United Statestier_132nannan
4198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_287nannan
535.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_39240.61.209.35.bc.googleusercontent.comnan
6167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_230nannan
7167.233.8.197N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_222static.197.8.233.167.clients.your-server.denan
8173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_221nannan
9104.21.57.200San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_220nanTrue
10198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_211nannan
1167.227.173.37LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_211nannan
12198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_210nannan
13172.67.192.46San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_210nanTrue
1423.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_28ec2-23-21-53-13.compute-1.amazonaws.comnan
15192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_28rd.bizrate.comnan
1634.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-34-197-176-2.compute-1.amazonaws.comnan
1754.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-54-197-247-190.compute-1.amazonaws.comnan
18192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_27rd.connexity.netnan
19100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35pool-100-37-135-2.nycmny.fios.verizon.netnan
20192.138.218.215SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26noclick.connexity.comnan
2152.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-3-4-129.compute-1.amazonaws.comnan
2213.225.230.11New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_25server-13-225-230-11.jfk51.r.cloudfront.netnan
233.234.0.165AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-3-234-0-165.compute-1.amazonaws.comnan
243.21.248.176HilliardOhioAS16509 Amazon.com, Inc.43026United Statestier_330ec2-3-21-248-176.us-east-2.compute.amazonaws.comnan
2567.227.172.40LansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_311nannan
2635.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_39240.61.209.35.bc.googleusercontent.comnan
27207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_36cbsmtp1.careerbliss.comnan
28142.250.64.100WestburyNew YorkAS15169 Google LLC11590United Statestier_36lga34s31-in-f4.1e100.netnan
2935.204.107.142GroningenGroningenAS15169 Google LLC9711Netherlandstier_35142.107.204.35.bc.googleusercontent.comnan
30100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_35pool-100-37-135-2.nycmny.fios.verizon.netnan
3123.253.31.170ChicagoIllinoisAS19994 Rackspace Hosting60601United Statestier_35nannan
32172.217.10.68CliftonNew JerseyAS15169 Google LLC07015United Statestier_35lga34s14-in-f4.1e100.netnan
333.211.162.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-3-211-162-98.compute-1.amazonaws.comnan
3435.165.21.241BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_34ec2-35-165-21-241.us-west-2.compute.amazonaws.comnan
3552.206.97.121AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-52-206-97-121.compute-1.amazonaws.comnan
3654.165.163.115AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_34ec2-54-165-163-115.compute-1.amazonaws.comnan
3752.88.215.122BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_34ec2-52-88-215-122.us-west-2.compute.amazonaws.comnan
3823.41.168.201EdisonNew JerseyAS16625 Akamai Technologies, Inc.08817United Statestier_34a23-41-168-201.deploy.static.akamaitechnologies.comnan
39172.217.10.36Clinton CornersNew YorkAS15169 Google LLC12514United Statestier_34lga34s13-in-f4.1e100.netnan
40172.217.12.196CliftonNew JerseyAS15169 Google LLC07015United Statestier_34lga25s63-in-f4.1e100.netnan
4134.232.198.98AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33ec2-34-232-198-98.compute-1.amazonaws.comnan
4213.225.221.160New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_32server-13-225-221-160.jfk51.r.cloudfront.netnan
43172.217.165.132Los AngelesCaliforniaAS15169 Google LLC90009United Statestier_32lax30s03-in-f4.1e100.netnan
44199.83.128.213Redwood CityCaliforniaAS19551 Incapsula Inc94065United Statestier_32199.83.128.213.ip.incapdns.netTrue
4552.217.86.62AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
4652.216.110.149AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_32s3-1.amazonaws.comnan
4752.217.169.16AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
4835.174.35.73AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-35-174-35-73.compute-1.amazonaws.comnan
4952.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-52-3-4-129.compute-1.amazonaws.comnan
50104.22.7.7San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
5113.225.230.94New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_31server-13-225-230-94.jfk51.r.cloudfront.netnan
5235.209.104.110Council BluffsIowaAS15169 Google LLC51502United Statestier_31110.104.209.35.bc.googleusercontent.comnan
533.221.88.239AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_31ec2-3-221-88-239.compute-1.amazonaws.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website