Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
02242237350282021-05-1293.115.28.104Safari
tierdomaincountregistrarname_serversorg
0tier_1freewebcounter.info1Compuglobalhypermega.com LLCNS1.RENTONDC.COMNone
1tier_1biblindex.info1Communigal Communication LtdNS1.RENTONDC.COMNone
2tier_1ipod-lounge.com1SNAPNAMES 66, LLCNS1.RENTONDC.COMNone
3tier_1afreeurl.info1Communigal Communication LtdNS1.RENTONDC.COMNone
4tier_1512gc.info1UDomainName.com LLCNS1.RENTONDC.COMNone
5tier_1busbuy.com1TUCOWS, INC.NS1.RENTONDC.COMREDACTED FOR PRIVACY
6tier_1globalotb.net1SNAPNAMES 35, LLCNS1.RENTONDC.COMNone
7tier_1cartool.info1Dynadot, LLCNS1.RENTONDC.COMNone
8tier_1ehealthibsurance.com1ABOVE.COM PTY LTD.NS1.RENTONDC.COMNone
9tier_1kidok.info1TLD Registrar Solutions Ltd.NS1.RENTONDC.COMWhois Privacy Corp.
10tier_21496.rebiraert.com88GoDaddy Online Services Cayman Islands Ltd.NS-1041.AWSDNS-02.ORGNone
11tier_2americanlisted.com30ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_2track.vcdc.com28Key-Systems GmbHGUY.NS.CLOUDFLARE.COMc/o whoisproxy.com
13tier_2click.appcast.io28101Domain GRS LtdNS-85.AWSDNS-10.COMNone
14tier_2rqhere2.com23NAMECHEAP INCJEROME.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
15tier_2crypto-success.club23GoDaddy.com, LLCmolly.ns.cloudflare.comNone
16tier_2vo2trk.com23Google LLCNS-CLOUD-D1.GOOGLEDOMAINS.COMContact Privacy Inc. Customer 1249964498
17tier_2click.expmediadirect1.com21NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
18tier_2melanthios-ana.com15Amazon Registrar, Inc.NS-1354.AWSDNS-41.ORGWhois Privacy Service
19tier_2062kj.rdtk.io15GoDaddy.com, LLCNS-239.AWSDNS-29.COMNone
20tier_2asufij.xyz15NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
21tier_2click.junmediadirect.com11NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
22tier_2clk.rtpdn12.com11NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2careerbliss.com10GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
24tier_2nizephoros-pom.com9Amazon Registrar, Inc.NS-1192.AWSDNS-21.ORGWhois Privacy Service
25tier_2trk.careerbliss.com5GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
26tier_2click.appcast.io_LOOP_15NoneNoneNone
27tier_2btpnav.com51API GmbHNS1.DNSIMPLE.COMRegistrant of btpnav.com
28tier_2rd.bizrate.com5MarkMonitor, Inc.NS-1189.AWSDNS-20.ORGMeredith Corporation
29tier_2rd.connexity.net5NoneNoneNone
30tier_3americanlisted.com58ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
31tier_3try-oneshot-keto.com23NAMECHEAP INCNS-1444.AWSDNS-52.ORGPrivacy service provided by Withheld for Privacy ehf
32tier_3careerbliss.com18GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
33tier_3pages-home.com15Name.com, Inc.NS1GLR.NAME.COMDomain Protection Services, Inc.
34tier_3xzb.subeamy.pw15NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
35tier_3trk.careerbliss.com5GoDaddy.com, LLCNS10.DNSMADEEASY.COMDomains By Proxy, LLC
36tier_3managerformula.com5NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
37tier_3s3.amazonaws.com4MarkMonitor, Inc.R1.AMAZONAWS.COMAmazon.com, Inc.
38tier_3sonuscompleteformula.com3NAMECHEAP INCMOLLY.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
39tier_3wayfair.com3MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
40tier_3google.com2NoneNoneNone
41tier_3nextcareernow.com2GoDaddy.com, LLCNS53.DOMAINCONTROL.COMDomains By Proxy, LLC
42tier_3bestbuy.com1NoneNoneNone
43tier_3sanfranciscogigs.com1eNom, LLCDNS1.NAME-SERVICES.COMNone
44tier_3jobs.myjobhelper.com1ENOM, INC.NS1.MYJOBHELPER.COMREDACTED FOR PRIVACY
45tier_3miamigigs.com1ENOM, INC.DNS1.NAME-SERVICES.COMREDACTED FOR PRIVACY
46tier_3geico.com1Key-Systems GmbHNS-EAST.CERF.NETREDACTED FOR PRIVACY
47tier_3healthinsurancelist.com1GoDaddy.com, LLCNS1.US208.SITEGROUND.USDomains By Proxy, LLC
48tier_3toryburch.com1CSC CORPORATE DOMAINS, INC.UDNS1.CSCDNS.NETRiver Light V, L.P.
49tier_3belk.com1CSC CORPORATE DOMAINS, INC.DNS1.P08.NSONE.NETBelk Stores Services, Inc
50tier_3amazon.com1MarkMonitor, Inc.NS1.P31.DYNECT.NETAmazon Technologies, Inc.
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0172.98.192.37Royal PinesNorth CarolinaAS31863 Centrilogic, Inc.28776United Statestier_166nannan
1172.98.192.36Royal PinesNorth CarolinaAS31863 Centrilogic, Inc.28776United Statestier_150nannan
293.115.28.104VilniusVilniusAS16125 UAB Cherry Servers01001Lithuaniatier_146nannan
3198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_288nannan
435.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_358240.61.209.35.bc.googleusercontent.comnan
5167.233.8.197N├╝rnbergBavariaAS24940 Hetzner Online GmbH90402Germanytier_228static.197.8.233.167.clients.your-server.denan
6167.99.3.175North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_223nannan
734.117.12.47Kansas CityMissouriAS15169 Google LLC64121United Statestier_22347.12.117.34.bc.googleusercontent.comTrue
8198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_221nannan
9104.21.9.144San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_218nanTrue
1023.105.36.164WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_215nannan
11207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_323cbsmtp1.careerbliss.comnan
1252.3.4.129AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_213ec2-52-3-4-129.compute-1.amazonaws.comnan
13173.239.53.32New York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_212nannan
14198.134.116.18New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_211nannan
1554.208.107.202AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-54-208-107-202.compute-1.amazonaws.comnan
16100.25.52.1AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_210ec2-100-25-52-1.compute-1.amazonaws.comnan
1734.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_27ec2-34-197-176-2.compute-1.amazonaws.comnan
18100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
1944.241.50.49BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_26ec2-44-241-50-49.us-west-2.compute.amazonaws.comnan
20209.15.13.136TorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_26nannan
2118.235.67.128AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_26ec2-18-235-67-128.compute-1.amazonaws.comnan
22192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26rd.bizrate.comnan
2335.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_358240.61.209.35.bc.googleusercontent.comnan
243.21.248.176HilliardOhioAS16509 Amazon.com, Inc.43026United Statestier_323ec2-3-21-248-176.us-east-2.compute.amazonaws.comnan
25207.38.44.116Los AngelesCaliforniaAS5693 Latisys-Irvine, LLC90009United Statestier_323cbsmtp1.careerbliss.comnan
26195.181.168.47New York CityNew YorkAS60068 Datacamp Limited10004United Statestier_315unn-195-181-168-47.datapacket.comnan
2752.88.215.122BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_310ec2-52-88-215-122.us-west-2.compute.amazonaws.comnan
2835.165.21.241BoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_35ec2-35-165-21-241.us-west-2.compute.amazonaws.comnan
2923.52.161.179New York CityNew YorkAS16625 Akamai Technologies, Inc.10004United Statestier_33a23-52-161-179.deploy.static.akamaitechnologies.comnan
30100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
31172.232.19.147NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_32a172-232-19-147.deploy.static.akamaitechnologies.comnan
32172.217.10.4New York CityNew YorkAS15169 Google LLC10004United Statestier_32lga34s12-in-f4.1e100.netnan
33216.239.32.21Mountain ViewCaliforniaAS15169 Google LLC94043United Statestier_32any-in-2015.1e100.netTrue
34104.21.95.25San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_32nanTrue
3523.201.24.11NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_31a23-201-24-11.deploy.static.akamaitechnologies.comnan
36216.150.143.166HawthorneNew YorkAS11383 Xand Corporation10532United Statestier_31nannan
3723.43.59.178New York CityNew YorkAS20940 Akamai International B.V.10004United Statestier_31a23-43-59-178.deploy.static.akamaitechnologies.comnan
3852.216.140.46AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
3952.216.236.197AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
4052.217.70.46AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
41172.67.169.74San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_31nanTrue
4223.221.57.48PhiladelphiaPennsylvaniaAS16625 Akamai Technologies, Inc.19099United Statestier_31a23-221-57-48.deploy.static.akamaitechnologies.comnan
4335.209.104.110Council BluffsIowaAS15169 Google LLC51502United Statestier_31110.104.209.35.bc.googleusercontent.comnan
4452.217.101.182AshburnVirginiaAS16509 Amazon.com, Inc.20149United Statestier_31s3-1.amazonaws.comnan
4523.38.170.41NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a23-38-170-41.deploy.static.akamaitechnologies.comnan
46151.101.1.131San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
47162.219.225.118San FranciscoCaliforniaAS54113 Fastly94107United Statestier_31nanTrue
48172.232.19.138NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_31a172-232-19-138.deploy.static.akamaitechnologies.comnan
4923.43.59.155New York CityNew YorkAS20940 Akamai International B.V.10004United Statestier_31a23-43-59-155.deploy.static.akamaitechnologies.comnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website