Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
029829812120502021-04-05207.244.67.215Iphone
tierdomaincountregistrarname_serversorg
0tier_1imle.us1Dynadot LLCns2.commonmx.comNone
1tier_1ebonictemple.us1Communigal Communication Ltdns2.commonmx.comNone
2tier_1abndn.us1Communigal Communication Ltdns1.commonmx.comNone
3tier_1cdhatver.com1NamePal.com #8010, LLCNS1.COMMONMX.COMNone
4tier_1geograph.us1Dynadot LLCns2.commonmx.comNone
5tier_1pajar.us1Communigal Communication Ltdns2.commonmx.comNone
6tier_1clairs.us1Communigal Communication Ltdns2.commonmx.comNone
7tier_1recette.us1Communigal Communication Ltdns1.commonmx.comNone
8tier_1cod4.us1Communigal Communication Ltdns2.commonmx.comNone
9tier_1ahnr.us1Communigal Communication Ltdns2.commonmx.comNone
10tier_21496.wcitianka.com120GoDaddy Online Services Cayman Islands LTDNS-1096.AWSDNS-09.ORGNone
11tier_2americanlisted.com119ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_29nl.es78NoneNoneNone
13tier_2newre-conversions.clickmeter.com78REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
14tier_2ring.joveo.com78Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
15tier_2click.expmediadirect.com57NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2changeslots.com26Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
17tier_2api.quotes.com23Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
18tier_2redirect.viglink.com15Amazon Registrar, Inc.NS1.VIGLINK.COMWhois Privacy Service
19tier_2api.apptap.com14Amazon Registrar, Inc.NS-1256.AWSDNS-29.ORGWhois Privacy Service
20tier_3signup.surveyvoices.com78GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMNone
21tier_3google.com40MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
22tier_3bestappland.me37NAMECHEAP INCNoneNone
23tier_3theconnectvpn.com26DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
24tier_3wayfair.com_LOOP_111NoneNoneNone
25tier_3alkaskakalka.com6NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
26tier_3robogarden.io5GoDaddy.com, LLCBECKY.NS.CLOUDFLARE.COMNone
27tier_3kbb.com5CSC CORPORATE DOMAINS, INC.PDNS164.ULTRADNS.BIZAutotrader.com
28tier_3music.apple.com4CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
29tier_3americanlisted.com3ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_136nannan
1207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_130nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_126nannan
3104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_124nannan
4207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_121nannan
6104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
7104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_111nannan
837.48.65.151SoestUtrechtAS60781 LeaseWeb Netherlands B.V.3765Netherlandstier_15nannan
982.192.82.226AmsterdamNorth HollandAS60781 LeaseWeb Netherlands B.V.1012Netherlandstier_14nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2120nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_2119240.61.209.35.bc.googleusercontent.comnan
12198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_257nannan
1323.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_245ec2-23-21-53-13.compute-1.amazonaws.comnan
1423.21.166.230AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_242ec2-23-21-166-230.compute-1.amazonaws.comnan
1554.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_236ec2-54-197-247-190.compute-1.amazonaws.comnan
1654.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_233ec2-54-235-205-204.compute-1.amazonaws.comnan
1713.225.230.11New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_231server-13-225-230-11.jfk51.r.cloudfront.netnan
18192.138.218.207SeattleWashingtonAS14332 Connexity, Inc.98111United Statestier_228rd.bizrate.comnan
1934.207.32.33AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_226ec2-34-207-32-33.compute-1.amazonaws.comnan
20104.21.71.177San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_341nanTrue
21172.67.147.244San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_337nanTrue
22142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_337nannan
23100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_318pool-100-37-135-2.nycmny.fios.verizon.netnan
24172.217.10.100CliftonNew JerseyAS15169 Google LLC07015United Statestier_317lga34s15-in-f4.1e100.netnan
25104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_316nanTrue
26172.67.181.234San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_310nanTrue
27165.22.6.204North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_36nannan
28172.217.6.196WestburyNew YorkAS15169 Google LLC11590United Statestier_36lga25s54-in-f196.1e100.netnan
29172.217.3.100WestburyNew YorkAS15169 Google LLC11590United Statestier_36lga34s18-in-f4.1e100.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website