Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain
num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
0253251111201162021-04-04207.244.67.218Iphone
tierdomaincountregistrarname_serversorg
0tier_1saieccal.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
1tier_1animestorm.net1Noteworthydomains, LLCNS1.COMMONMX.COMNone
2tier_1phimm.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
3tier_1arconaitv.co1Communigal Communication Ltdns2.commonmx.comNone
4tier_1ethiojobes.net1GoDaddy.com, LLCNS1.COMMONMX.COMNone
5tier_1golfdvd.net1TUCOWS, INC.NS1.COMMONMX.COMContact Privacy Inc. Customer 0159499232
6tier_1asome.in1Dynadot LLCns1.commonmx.comNone
7tier_1autos.name1NoneNoneNone
8tier_1uucyc.net1eNom409, IncorporatedNS1.COMMONMX.COMNone
9tier_1abndn.us1Communigal Communication Ltdns1.commonmx.comNone
10tier_21496.wcitianka.com148NoneNoneNone
11tier_2americanlisted.com147ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
12tier_29nl.es80NoneNoneNone
13tier_2newre-conversions.clickmeter.com80REGISTER S.P.A.NS-1498.AWSDNS-59.ORGREDACTED FOR PRIVACY
14tier_2ring.joveo.com80Go Canada Domains, LLCNS-1256.AWSDNS-29.ORGDomains By Proxy, LLC
15tier_2click.expmediadirect.com38NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2api.quotes.com19Internet Domain Service BS Corp.NS-CANADA.TOPDNS.COMWhois Privacy Corp.
17tier_2changeslots.com19Instra Corporation Pty Ltd.CLEO.NS.CLOUDFLARE.COMREDACTED FOR PRIVACY
18tier_2c.clickprotects.com8GoDaddy.com, LLCNS63.DOMAINCONTROL.COMDomains By Proxy, LLC
19tier_211165151.addotnet.com8GoDaddy.com, LLCNS75.DOMAINCONTROL.COMDomains By Proxy, LLC
20tier_3signup.surveyvoices.com80GoDaddy.com, LLCALEXIS.NS.CLOUDFLARE.COMNone
21tier_3google.com67MarkMonitor, Inc.NS1.GOOGLE.COMGoogle LLC
22tier_3bestappland.me31NAMECHEAP INCNoneNone
23tier_3theconnectvpn.com19DonDominio (SCIP)ARNOLD.NS.CLOUDFLARE.COMSoluciones Corporativas IP, c/o Whois Proxy
24tier_3music.apple.com8CSC CORPORATE DOMAINS, INC.A.NS.APPLE.COMApple Inc.
25tier_3alkaskakalka.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
26tier_3reebok.com1CSC CORPORATE DOMAINS, INC.NS1.NETNAMES.NETReebok International, Ltd.
27tier_3toryburch.com1CSC CORPORATE DOMAINS, INC.DNS1.CSCDNS.NETRiver Light V, L.P.
28tier_3rugsusa.com1Network Solutions, LLCANGELA.NS.CLOUDFLARE.COMrugsusa.com, Inc.
29tier_3americanlisted.com1ilait ABNS1.TELECOM3.NETIntegration 3 Group AB
ipcityregionorgpostalcountry_nametiercounthostnameanycast
0207.244.67.216WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_135nannan
1207.244.67.214WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_132nannan
2207.244.67.215WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_130nannan
3207.244.67.218WashingtonWashington, D.C.AS30633 Leaseweb USA, Inc.20045United Statestier_123nannan
4104.243.45.190New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_115nannan
5206.221.176.184New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_114nannan
6104.243.45.178New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_112nannan
7104.243.45.179New York CityNew YorkAS23470 ReliableSite.Net LLC10004United Statestier_111nannan
874.63.241.20DallasTexasAS46475 Limestone Networks, Inc.75270United Statestier_1620-241-63-74.static.reverse.lstn.netnan
9185.107.56.198RotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_15nannan
10198.54.112.216San JoseCaliforniaAS22612 Namecheap, Inc.95103United Statestier_2148nannan
1135.209.61.240Council BluffsIowaAS15169 Google LLC51502United Statestier_2147240.61.209.35.bc.googleusercontent.comnan
1254.235.205.204AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_250ec2-54-235-205-204.compute-1.amazonaws.comnan
1323.21.166.230AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_244ec2-23-21-166-230.compute-1.amazonaws.comnan
14198.134.116.30New York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_238nannan
1554.197.247.190AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_236ec2-54-197-247-190.compute-1.amazonaws.comnan
1623.21.53.13AshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_230ec2-23-21-53-13.compute-1.amazonaws.comnan
1713.225.230.105New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_227server-13-225-230-105.jfk51.r.cloudfront.netnan
1813.225.230.11New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_221server-13-225-230-11.jfk51.r.cloudfront.netnan
1913.225.230.128New York CityNew YorkAS16509 Amazon.com, Inc.10004United Statestier_219server-13-225-230-128.jfk51.r.cloudfront.netnan
20104.21.71.177San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_351nanTrue
21142.93.4.215North BergenNew JerseyAS14061 DigitalOcean, LLC07047United Statestier_331nannan
22172.67.147.244San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_329nanTrue
23172.217.11.4New York CityNew YorkAS15169 Google LLC10004United Statestier_313lga25s60-in-f4.1e100.netnan
24104.21.91.236San FranciscoCaliforniaAS13335 Cloudflare, Inc.94107United Statestier_311nanTrue
25172.217.165.132Los AngelesCaliforniaAS15169 Google LLC90009United Statestier_310lax30s03-in-f4.1e100.netnan
26172.217.10.100CliftonNew JerseyAS15169 Google LLC07015United Statestier_39lga34s15-in-f4.1e100.netnan
27100.37.135.2New York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_39pool-100-37-135-2.nycmny.fios.verizon.netnan
28172.217.7.4MillbrookNew YorkAS15169 Google LLC12545United Statestier_39lga25s56-in-f4.1e100.netnan
29142.250.80.4New York CityNew YorkAS15169 Google LLC10004United Statestier_39lga34s33-in-f4.1e100.netnan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website