Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0222246002021-04-13185.53.177.73Android
tierdomaincountregistrarname_serversorg
0tier_1accessjpmorgan.com1Communigal Communication LtdNS1.PARKINGCREW.NETPythagoras FZE
1tier_13dcounters.com1Sea Wasp, LLCNS1.NAMELOT.COMSuccessClick
2tier_12639.com1GoDaddy.com, LLCNS1.PARKINGCREW.NETInfomerica Inc
3tier_188g.com1Internet Domain Service BS Corp.NS1.PARKINGCREW.NETNone
4tier_1666bbb.com1Alibaba Cloud Computing (Beijing) Co., Ltd.NS1.PARKINGCREW.NETNone
5tier_1aborigin.com1Megazone Corp., dba HOSTING.KRNS1.PARKINGCREW.NETYang Kyung Won
6tier_1acentra.com1GoDaddy.com, LLCNS1.PARKINGCREW.NETCLOUDNIC SOFT LLP
7tier_17771.com1Alibaba Cloud Computing (Beijing) Co., Ltd.NS1.PARKINGCREW.NETNone
8tier_2katie.v4.omgtnc.com8PSI-USA, Inc. dba Domain RobotNS-1133.AWSDNS-13.ORGNone
9tier_2api.apptap.com3Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
10tier_2redirect.viglink.com3Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
11tier_2link.sylikes.com3MarkMonitor, Inc.NS-1063.AWSDNS-04.ORGConnexity, Inc.
12tier_2rd.bizrate.com3NoneNoneNone
13tier_2rd.connexity.net3NoneNoneNone
14tier_2aristo-hag.com2Amazon Registrar, Inc.NS-1226.AWSDNS-25.ORGWhois Privacy Service
15tier_2atnpx.com2GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMDomains By Proxy, LLC
16tier_2wayfair.com2MarkMonitor, Inc.A1-100.AKAM.NETWayfair, LLC
17tier_2click.clkepd.com1NoneNoneNone
18tier_3ram21.proasdf.com3GoDaddy.com, LLCNS61.DOMAINCONTROL.COMDomains By Proxy, LLC
19tier_3kbb.com2CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
20tier_3wayfair.com_LOOP_12NoneNoneNone
21tier_3catherines.com1CSC CORPORATE DOMAINS, INC.PDNS1.ULTRADNS.NETFullBeauty Brands Operations, LLC
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0104.247.81.73WyandotteMichiganAS206834 Team Internet AG48192United Statestier_18nannan
1192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_26nannan
23.220.46.255AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_25ec2-3-220-46-255.compute-1.amazonaws.comnan
352.205.177.114AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-52-205-177-114.compute-1.amazonaws.comnan
434.225.128.119AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_23ec2-34-225-128-119.compute-1.amazonaws.comnan
5192.138.218.139SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_23rd.connexity.netnan
6172.67.74.77San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_22nanTrue
723.39.32.237NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_22a23-39-32-237.deploy.static.akamaitechnologies.comnan
852.45.77.217AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_22ec2-52-45-77-217.compute-1.amazonaws.comnan
934.197.176.2AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-34-197-176-2.compute-1.amazonaws.comnan
1052.22.6.66AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-22-6-66.compute-1.amazonaws.comnan
1152.72.29.7AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_21ec2-52-72-29-7.compute-1.amazonaws.comnan
12198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_21nannan
13162.243.10.151New York CityNew YorkAS14061 DigitalOcean, LLC10011United Statestier_33nannan
1423.44.217.143NewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_32a23-44-217-143.deploy.static.akamaitechnologies.comnan
15100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_32pool-100-37-135-2.nycmny.fios.verizon.netnan
16165.254.198.133DallasTexasAS393259 Yottaa, Inc75270United Statestier_31d3-12-0-1-2-0.a02.nycmny01.us.ra.verio.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website