Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0151423012021-04-11185.53.177.73Chrome
tierdomaincountregistrarname_serversorg
0tier_11link.in1TLD Registrar Solutions Ltd.ns1.parkingcrew.netNone
1tier_1all-things-android.com1DropCatch.com 1514 LLCNS1.PARKINGCREW.NETNone
2tier_1apsrtc.co.in1Dynadot LLCns1.parkingcrew.netNone
3tier_1ankitashorey.in1GoDaddy.com, LLCns1.parkingcrew.netNone
4tier_1archiephillips.com1DropCatch.com 357 LLCNS1.PARKINGCREW.NETNone
5tier_1ambrybox.com1GoDaddy.com, LLCNS1.PARKINGCREW.NETNone
6tier_2katie.v4.omgtnc.com6PSI-USA, Inc. dba Domain RobotNS-1133.AWSDNS-13.ORGNone
7tier_2api.apientry.com1GoDaddy.com, LLCELMA.NS.CLOUDFLARE.COMDomains By Proxy, LLC
8tier_2uuid-a.akamaihd.net1Akamai Technologies, INC.AX0.AKAMAISTREAM.NETAkamai Technologies, inc.
9tier_2bestbrandshopping.com1NAMECHEAP INCNS-1347.AWSDNS-40.ORGPrivacy service provided by Withheld for Privacy ehf
10tier_2my-search.com1Go China Domains, LLCNS-1080.AWSDNS-07.ORGDomains By Proxy, LLC
11tier_2powerofsearches.com1GoDaddy.com, LLCDNS1.P09.NSONE.NETClientConnect LTD
12tier_3ram21.proasdf.com4GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
13tier_3bing.com1MarkMonitor, Inc.DNS1.P09.NSONE.NETMicrosoft Corporation
14tier_3rpa21.proasdf.com1GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0104.247.81.73WyandotteMichiganAS206834 Team Internet AG48192United Statestier_16nannan
152.45.77.217AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_24ec2-52-45-77-217.compute-1.amazonaws.comnan
2104.26.1.78San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_21nanTrue
3172.232.19.163NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_21a172-232-19-163.deploy.static.akamaitechnologies.comnan
454.205.225.36AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-54-205-225-36.compute-1.amazonaws.comnan
5172.232.19.208NewarkNew JerseyAS20940 Akamai International B.V.07175United Statestier_21a172-232-19-208.deploy.static.akamaitechnologies.comnan
613.33.46.84NewarkNew JerseyAS16509 Amazon.com, Inc.07175United Statestier_21server-13-33-46-84.ewr52.r.cloudfront.netnan
752.22.6.66AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-22-6-66.compute-1.amazonaws.comnan
83.220.46.255AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-3-220-46-255.compute-1.amazonaws.comnan
9162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_35nannan
10204.79.197.200RedmondWashingtonAS8068 Microsoft Corporation98052United Statestier_31a-0001.a-msedge.netTrue

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website