Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

1. Overall statistics
   1. Number of domains detected
   2. Number of domains detected by Google Safe Browsing
   3. IP address behind entry-level domains
   4. date of collection
2. Top 10 domain statistics
   1. count (number of redirection paths that contain this domain)
   2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
   3. registar
   4. organization
3. Top 10 IP statistics
   1. count
   2. location (city, country, region)
   3. hostname
   4. organization
4. Consolidated redirection path
   1. green: tier one domain
   2. yellow: tier two domain
   3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

	num_domain	num_links	num_full_url	num_safebrowsing_malicious	num_vt_malicious	date	ip	user_agent
0	162	154	452	0	34	2021-09-30	93.115.28.104	Iphone

	tier	domain	count	registrar	name_servers	org
0	tier_1	pancrase.org	1	ABOVE.COM PTY LTD.	NS1.RENTONDC.COM	\n
1	tier_1	bbvabancontinental.com	1	Baronofdomains.com LLC	NS1.RENTONDC.COM	None
2	tier_1	ciottolo.com	1	Internet Domain Service BS Corp.	NS1.RENTONDC.COM	None
3	tier_1	willingen.com	1	Network Solutions, LLC	NS1.RENTONDC.COM	None
4	tier_1	citiband.com	1	Media Elite Holdings Limited	NS1.RENTONDC.COM	Fundacion Privacy Services LTD
5	tier_1	smokezonenyc.com	1	TUCOWS, INC.	NS1.RENTONDC.COM	Contact Privacy Inc. Customer 0150833488
6	tier_1	smway.com	1	TUCOWS, INC.	NS1.RENTONDC.COM	REDACTED FOR PRIVACY
7	tier_1	churchofengland.com	1	TUCOWS, INC.	NS1.RENTONDC.COM	REDACTED FOR PRIVACY
8	tier_1	cirizensbank.com	1	ABOVE.COM PTY LTD.	NS1.RENTONDC.COM	None
9	tier_1	smartcricketlive.com	1	SNAPNAMES 43, LLC	NS1.RENTONDC.COM	None
10	tier_2	changeslots.com	48	Instra Corporation Pty Ltd.	CLEO.NS.CLOUDFLARE.COM	REDACTED FOR PRIVACY
11	tier_2	api.quotes.com	46	Internet Domain Service BS Corp.	NS-CANADA.TOPDNS.COM	Whois Privacy Corp.
12	tier_2	1496.rebiraert.com	32	GoDaddy Online Services Cayman Islands Ltd.	NS11.CONSTELLIX.COM	None
13	tier_2	americanlisted.com	31	ilait AB	NS1.TELECOM3.NET	Integration 3 Group AB
14	tier_2	click.appcast.io	7	101Domain GRS Ltd	NS-85.AWSDNS-10.COM	None
15	tier_2	careerbliss.com	7	GoDaddy.com, LLC	NS10.DNSMADEEASY.COM	Domains By Proxy, LLC
16	tier_2	c.clickprotects.com	6	GoDaddy.com, LLC	NS63.DOMAINCONTROL.COM	Domains By Proxy, LLC
17	tier_2	11165151.addotnet.com	6	GoDaddy.com, LLC	NS75.DOMAINCONTROL.COM	Domains By Proxy, LLC
18	tier_2	trk.careerbliss.com	5	GoDaddy.com, LLC	NS10.DNSMADEEASY.COM	Domains By Proxy, LLC
19	tier_2	mybetterdl.com	5	NAMECHEAP INC	NS0.DNSMADEEASY.COM	Redacted for Privacy Purposes
20	tier_2	click.appcast.io_LOOP_1	4	None	None	None
21	tier_2	geo.itunes.apple.com	4	CSC CORPORATE DOMAINS, INC.	A.NS.APPLE.COM	Apple Inc.
22	tier_2	itunes.apple.com	4	CSC CORPORATE DOMAINS, INC.	A.NS.APPLE.COM	Apple Inc.
23	tier_2	cf.apptrck.com	3	Amazon Registrar, Inc.	NS-1503.AWSDNS-59.ORG	Whois Privacy Service
24	tier_2	higherincomejobs.com	3	GoDaddy.com, LLC	NS-1178.AWSDNS-19.ORG	Free Savings Daily
25	tier_2	btpnative.com	3	1API GmbH	NS1.DNSIMPLE.COM	Registrant of btpnative.com
26	tier_2	p274639.mybetterdl.com	3	NAMECHEAP INC	NS0.DNSMADEEASY.COM	Redacted for Privacy Purposes
27	tier_2	62728.click.validclick.net	3	Safenames Ltd	NS1.FULLMAILBOX.COM	None
28	tier_2	p185689.mybetterdl.com	2	NAMECHEAP INC	NS0.DNSMADEEASY.COM	Redacted for Privacy Purposes
29	tier_2	open.app.jobrapido.com	2	Marcaria.com International, Inc.	NS-CLOUD-D1.GOOGLEDOMAINS.COM	GDPR Masked
30	tier_3	theconnectvpn.com	48	DonDominio (SCIP)	ARNOLD.NS.CLOUDFLARE.COM	Soluciones Corporativas IP, c/o Whois Proxy
31	tier_3	google.com	8	MarkMonitor, Inc.	NS1.GOOGLE.COM	Google LLC
32	tier_3	open.app.jobrapido.com	8	Marcaria.com International, Inc.	NS-CLOUD-D1.GOOGLEDOMAINS.COM	GDPR Masked
33	tier_3	lifeworq.com	6	united domains AG	NS.UDAG.DE	None
34	tier_3	music.apple.com	4	CSC CORPORATE DOMAINS, INC.	A.NS.APPLE.COM	Apple Inc.
35	tier_3	amazon01.higherincomejobs.com	3	GoDaddy.com, LLC	NS-1178.AWSDNS-19.ORG	Free Savings Daily
36	tier_3	choicehotels.com	3	CSC CORPORATE DOMAINS, INC.	ASIA3.AKAM.NET	Choice Hotels International, Inc.
37	tier_3	track.vcdc.com	2	Key-Systems GmbH	GUY.NS.CLOUDFLARE.COM	c/o whoisproxy.com
38	tier_3	apps.apple.com	2	CSC CORPORATE DOMAINS, INC.	A.NS.APPLE.COM	Apple Inc.
39	tier_3	open.app.jobrapido.com_LOOP_1	2	None	None	None
40	tier_3	trk.careerbliss.com	2	GoDaddy.com, LLC	NS10.DNSMADEEASY.COM	Domains By Proxy, LLC
41	tier_3	capezio.com	1	Network Solutions, LLC	LEE.NS.CLOUDFLARE.COM	None
42	tier_3	glassdoor.com	1	MarkMonitor, Inc.	JILL.NS.CLOUDFLARE.COM	Glassdoor, Inc.
43	tier_3	blueapron.com	1	None	None	None
44	tier_3	apply.jobot.com	1	Amazon Registrar, Inc.	NS-1243.AWSDNS-27.ORG	Whois Privacy Service
45	tier_3	giftsandspecialoccasions.com	1	None	None	None
46	tier_3	jessicalondon.com	1	CSC CORPORATE DOMAINS, INC.	PDNS1.ULTRADNS.NET	FullBeauty Brands Operations, LLC
47	tier_3	americanlisted.com	1	ilait AB	NS1.TELECOM3.NET	Integration 3 Group AB
48	tier_3	recommended-vpns.com	1	NAMECHEAP INC	DAWN.NS.CLOUDFLARE.COM	Privacy service provided by Withheld for Privacy ehf
49	tier_3	listings.store.com	1	MarkMonitor, Inc.	DNS1.P09.NSONE.NET	CBS Interactive Inc.
50	tier_3	emilydeals.com	1	NAMECHEAP INC	NS1.ENCONTEXT.COM	Privacy service provided by Withheld for Privacy ehf
51	tier_3	cinemark.com	1	Network Solutions, LLC	KIP.NS.CLOUDFLARE.COM	None

	ip	city	region	org	postal	country_name	tier	count	hostname	anycast
0	172.98.192.36	Union City	Georgia	AS31863 Centrilogic, Inc.	30291	United States	tier_1	30	nan	nan
1	172.98.192.37	Union City	Georgia	AS31863 Centrilogic, Inc.	30291	United States	tier_1	22	nan	nan
2	172.98.192.35	Union City	Georgia	AS31863 Centrilogic, Inc.	30291	United States	tier_1	21	nan	nan
3	134.119.176.19	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	4	nan	nan
4	134.119.176.20	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	4	nan	nan
5	134.119.176.23	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	3	nan	nan
6	134.119.176.22	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	2	nan	nan
7	134.119.176.28	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	2	nan	nan
8	134.119.176.24	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	2	nan	nan
9	134.119.176.30	Strasbourg	Grand Est	AS29066 Host Europe GmbH	67000	France	tier_1	2	nan	nan
10	18.204.186.203	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_2	48	ec2-18-204-186-203.compute-1.amazonaws.com	nan
11	5.79.68.236	Amsterdam	North Holland	AS60781 LeaseWeb Netherlands B.V.	1012	Netherlands	tier_2	46	nan	nan
12	198.54.112.216	Oakland	California	AS22612 Namecheap, Inc.	94604	United States	tier_2	32	nan	nan
13	35.209.61.240	Council Bluffs	Iowa	AS15169 Google LLC	51502	United States	tier_3	1	240.61.209.35.bc.googleusercontent.com	nan
14	207.38.44.116	Santa Ana	California	AS5693 Latisys-Irvine, LLC	92701	United States	tier_3	2	cbsmtp1.careerbliss.com	nan
15	209.132.243.15	Los Angeles	California	AS7296 Alchemy Communications, Inc.	90009	United States	tier_2	12	nan	nan
16	173.192.101.24	Dallas	Texas	AS36351 SoftLayer Technologies Inc.	75270	United States	tier_2	10	18.65.c0ad.ip4.static.sl-reverse.com	nan
17	100.37.135.2	New York City	New York	AS701 MCI Communications Services, Inc. d/b/a Verizon Business	10004	United States	tier_3	6	pool-100-37-135-2.nycmny.fios.verizon.net	nan
18	209.15.13.136	Toronto	Ontario	AS13768 Aptum Technologies	M5N	Canada	tier_2	5	nan	nan
19	23.57.129.207	Piscataway	New Jersey	AS16625 Akamai Technologies, Inc.	08854	United States	tier_2	4	a23-57-129-207.deploy.static.akamaitechnologies.com	nan
20	23.78.2.47	Piscataway	New Jersey	AS16625 Akamai Technologies, Inc.	08854	United States	tier_3	2	a23-78-2-47.deploy.static.akamaitechnologies.com	nan
21	23.21.84.12	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_2	3	ec2-23-21-84-12.compute-1.amazonaws.com	nan
22	54.145.128.173	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_2	3	ec2-54-145-128-173.compute-1.amazonaws.com	nan
23	54.146.222.222	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_3	3	ec2-54-146-222-222.compute-1.amazonaws.com	nan
24	204.44.79.214	Los Angeles	California	AS8100 QuadraNet Enterprises LLC	90014	United States	tier_2	3	204.44.79.214.static.quadranet.com	nan
25	54.85.16.180	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_2	3	ec2-54-85-16-180.compute-1.amazonaws.com	nan
26	173.239.53.32	New York City	New York	AS27257 Webair Internet Development Company Inc.	10004	United States	tier_2	3	nan	nan
27	159.127.43.26	Washington	Washington, D.C.	AS25751 Conversant, Inc.	20045	United States	tier_2	3	nan	nan
28	91.134.128.52	Roubaix	Hauts-de-France	AS16276 OVH SAS	59100	France	tier_2	2	nan	True
29	198.134.116.30	Chinatown	New York	AS27257 Webair Internet Development Company Inc.	10013	United States	tier_2	2	nan	nan
30	104.21.91.236	San Francisco	California	AS13335 Cloudflare, Inc.	94107	United States	tier_3	36	nan	True
31	172.67.181.234	San Francisco	California	AS13335 Cloudflare, Inc.	94107	United States	tier_3	12	nan	True
32	142.251.32.100	New York City	New York	AS15169 Google LLC	10004	United States	tier_3	7	lga25s77-in-f4.1e100.net	nan
33	100.37.135.2	New York City	New York	AS701 MCI Communications Services, Inc. d/b/a Verizon Business	10004	United States	tier_3	6	pool-100-37-135-2.nycmny.fios.verizon.net	nan
34	34.107.113.45	Frankfurt am Main	Hesse	AS15169 Google LLC	60311	Germany	tier_3	6	45.113.107.34.bc.googleusercontent.com	nan
35	54.146.222.222	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_3	3	ec2-54-146-222-222.compute-1.amazonaws.com	nan
36	167.233.8.197	Gunzenhausen	Bavaria	AS24940 Hetzner Online GmbH	91710	Germany	tier_3	2	static.197.8.233.167.clients.your-server.de	nan
37	23.78.2.47	Piscataway	New Jersey	AS16625 Akamai Technologies, Inc.	08854	United States	tier_3	2	a23-78-2-47.deploy.static.akamaitechnologies.com	nan
38	151.101.2.133	San Francisco	California	AS54113 Fastly	94107	United States	tier_3	2	nan	True
39	104.90.73.233	Philadelphia	Pennsylvania	AS16625 Akamai Technologies, Inc.	19099	United States	tier_3	2	a104-90-73-233.deploy.static.akamaitechnologies.com	nan
40	51.91.83.174	Roubaix	Hauts-de-France	AS16276 OVH SAS	59051 CEDEX 1	France	tier_3	2	ns3164816.ip-51-91-83.eu	nan
41	64.91.232.212	Lansing	Michigan	AS32244 Liquid Web, L.L.C	48901	United States	tier_3	2	host.encontext.com	nan
42	207.38.44.116	Santa Ana	California	AS5693 Latisys-Irvine, LLC	92701	United States	tier_3	2	cbsmtp1.careerbliss.com	nan
43	104.109.154.120	Piscataway	New Jersey	AS16625 Akamai Technologies, Inc.	08854	United States	tier_3	1	a104-109-154-120.deploy.static.akamaitechnologies.com	nan
44	46.105.112.200	Roubaix	Hauts-de-France	AS16276 OVH SAS	59051 CEDEX 1	France	tier_3	1	ns320212.ip-46-105-112.eu	nan
45	51.91.64.195	Roubaix	Hauts-de-France	AS16276 OVH SAS	59051 CEDEX 1	France	tier_3	1	ns31189212.ip-51-91-64.eu	nan
46	51.210.240.70	Lille	Hauts-de-France	AS16276 OVH SAS	59028 CEDEX	France	tier_3	1	ns3182412.ip-51-210-240.eu	nan
47	104.17.91.51	San Francisco	California	AS13335 Cloudflare, Inc.	94107	United States	tier_3	1	nan	True
48	51.210.34.129	Conflans-Sainte-Honorine	Île-de-France	AS16276 OVH SAS	78700	France	tier_3	1	ns3174214.ip-51-210-34.eu	nan
49	46.105.105.97	Paris	Île-de-France	AS16276 OVH SAS	75000	France	tier_3	1	ns3436170.ip-46-105-105.eu	nan
50	72.44.32.51	Ashburn	Virginia	AS14618 Amazon.com, Inc.	20149	United States	tier_3	1	ec2-72-44-32-51.compute-1.amazonaws.com	nan
51	140.174.12.81	Waltham	Massachusetts	AS393259 Yottaa, Inc	02451	United States	tier_3	1	nan	nan
52	35.209.61.240	Council Bluffs	Iowa	AS15169 Google LLC	51502	United States	tier_3	1	240.61.209.35.bc.googleusercontent.com	nan
53	51.77.152.140	Roubaix	Hauts-de-France	AS16276 OVH SAS	59051 CEDEX 1	France	tier_3	1	ns31067693.ip-51-77-152.eu	nan
54	172.67.140.193	San Francisco	California	AS13335 Cloudflare, Inc.	94107	United States	tier_3	1	nan	True
55	158.69.125.9	Montréal	Quebec	AS16276 OVH SAS	H2W	Canada	tier_3	1	ns521759.ip-158-69-125.net	nan
56	104.18.251.2	San Francisco	California	AS13335 Cloudflare, Inc.	94107	United States	tier_3	1	nan	True
57	142.251.35.164	New York City	New York	AS15169 Google LLC	10004	United States	tier_3	1	lga25s78-in-f4.1e100.net	nan

Aggregated redirection graph of domains located on current IP address.

• The redirection flows from left to right
• Leftmost domains are initial domains hosted on current IP
• Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website