Malware Discoverer Github Homepage.

Daily Threat Intelligence Report

This report contains following information. All tables and graphs are auto-generated.

  1. Overall statistics
    1. Number of domains detected
    2. Number of domains detected by Google Safe Browsing
    3. IP address behind entry-level domains
    4. date of collection
  2. Top 10 domain statistics
    1. count (number of redirection paths that contain this domain)
    2. tier (1 is entry-level domain, 2 is intermediate hop, 3 is final landing domain)
    3. registar
    4. organization
  3. Top 10 IP statistics
    1. count
    2. location (city, country, region)
    3. hostname
    4. organization
  4. Consolidated redirection path
    1. green: tier one domain
    2. yellow: tier two domain
    3. red: tier three domain

Content Warning: The following domain names and screenshots contain material that may be harmful or traumatizing to some audiences.

num_domainnum_linksnum_full_urlnum_safebrowsing_maliciousnum_vt_maliciousdateipuser_agent
063611740122021-09-0564.32.8.68Safari
tierdomaincountregistrarname_serversorg
0tier_1fuge.it1Munpe Invest SLnNone
1tier_1buysql.com1Long Drive Domains LLCNS1.DNSNUTS.COMNone
2tier_1fudgebananaswirl.com1Name Connection Spot LLCNS1.DNSNUTS.COMThe Management Group II
3tier_1finalhentai.com1Fine Grain Domains, LLCNS1.DNSNUTS.COMNone
4tier_1byhyperion.net1SNAPNAMES 56, LLCNS1.DNSNUTS.COMNone
5tier_1globalpromocodes.com1Ripcurl Domains, LLCNS1.DNSNUTS.COMNone
6tier_1cool-tricks.net1NamePal.com #8013, LLCNS1.DNSNUTS.COMNone
7tier_1fckdownload.com1Fine Grain Domains, LLCNS1.DNSNUTS.COMNone
8tier_1apro-ent.com1SNAPNAMES 34, LLCNS1.DNSNUTS.COMNone
9tier_1imnmarketer.com1SNAPNAMES 56, LLCNS1.DNSNUTS.COMNone
10tier_2click.expmediadirect1.com34NAMECHEAP INCNS1.LINODE.COMPrivacy service provided by Withheld for Privacy ehf
11tier_2buy.affipro.org30NAMECHEAP INCALINA.NS.CLOUDFLARE.COMPrivacy service provided by Withheld for Privacy ehf
12tier_2rtbstream.com151API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
13tier_2brko.admobe.com3GoDaddy.com, LLCRAQUEL.NS.CLOUDFLARE.COMDomains By Proxy, LLC
14tier_2xml.onwardclick.com3NAMECHEAP INCNS1.ENCONTEXT.COMPrivacy service provided by Withheld for Privacy ehf
15tier_2adserver.encontextadvertising.com3NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
16tier_2filter.explorads.com1GoDaddy.com, LLCNS1.LINODE.COMDomains By Proxy, LLC
17tier_2click.expmediadirect1.com_LOOP_11NoneNoneNone
18tier_2ww2.affinity.net1DOMAINPEOPLE, INC.NS-1183.AWSDNS-19.ORGWhoisProtector Inc.
19tier_2bodybuilding.sjv.io1GANDI SASNS-545.AWSDNS-04.NETNone
20tier_2goto.bodybuilding.com1MarkMonitor, Inc.NS1.BODYBUILDING.COMVitalize, LLC
21tier_2bodybuilding.com1NoneNoneNone
22tier_2aphicus.xyz1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
23tier_2adserver.shopnsave.world1NoneNoneNone
24tier_3synccurrentmostthefile.vip15NoneNoneNone
25tier_3syncrecentintenselythefile.vip8NoneNoneNone
26tier_3syncnewestmostthefile.vip7NoneNoneNone
27tier_3thelastpicture.show2NoneNoneNone
28tier_3boot-upheavily-bestsophisticatedfile.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
29tier_3rtbstream.com11API GmbHNS1.DNSIMPLE.COMRegistrant of rtbstream.com
30tier_3rungreatly-bestadvancedfile.best1NAMECHEAP INCDNS1.REGISTRAR-SERVERS.COMPrivacy service provided by Withheld for Privacy ehf
31tier_3shop.bodybuilding.com1MarkMonitor, Inc.NS1.BODYBUILDING.COMVitalize, LLC
32tier_3xzb.subeamy.pw1NoneNoneNone
33tier_3runadvanced-bestgreatlyfile.best1NoneNoneNone
34tier_3shopnsave.world1NoneNoneNone
iphostnamecityregionorgpostalcountry_nametiercountanycast
064.32.8.67customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_19nan
164.32.8.69customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_17nan
2185.107.56.57nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_16nan
364.32.8.70customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_15nan
4185.107.56.59nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_14nan
5185.107.56.58nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
6185.107.56.60nanRotterdamSouth HollandAS43350 NForce Entertainment B.V.3012Netherlandstier_13nan
764.32.8.68customer.sharktech.netLos AngelesCaliforniaAS46844 Sharktech90009United Statestier_12nan
8198.134.116.30nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10013United Statestier_235nan
9107.20.106.95ec2-107-20-106-95.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_233nan
10209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan
11173.239.53.32nanNew York CityNew YorkAS27257 Webair Internet Development Company Inc.10004United Statestier_23nan
1267.227.155.96nanLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_23nan
13100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31nan
14216.139.248.127216-139-248-127.aus.us.siteprotect.comAustinTexasAS32400 Hostway Services, Inc.78701United Statestier_21nan
1535.227.211.136136.211.227.35.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_21True
1634.98.74.145145.74.98.34.bc.googleusercontent.comKansas CityMissouriAS15169 Google LLC64121United Statestier_21True
17184.87.79.49a184-87-79-49.deploy.static.akamaitechnologies.comNewarkNew JerseyAS16625 Akamai Technologies, Inc.07175United Statestier_21nan
1844.236.49.109ec2-44-236-49-109.us-west-2.compute.amazonaws.comBoardmanOregonAS16509 Amazon.com, Inc.97818United Statestier_21nan
1967.227.241.125host.encontext.comLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan
2052.20.53.118ec2-52-20-53-118.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_330nan
2154.243.165.90ec2-54-243-165-90.compute-1.amazonaws.comAshburnVirginiaAS14618 Amazon.com, Inc.20149United Statestier_33nan
2267.43.9.71host.encontext.comLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_32nan
23209.15.13.136nanTorontoOntarioAS13768 Aptum TechnologiesM5NCanadatier_31nan
2423.227.38.74nanOttawaOntarioAS13335 Cloudflare, Inc.K2PCanadatier_31True
25100.37.135.2pool-100-37-135-2.nycmny.fios.verizon.netNew York CityNew YorkAS701 MCI Communications Services, Inc. d/b/a Verizon Business10004United Statestier_31nan
2667.227.241.125host.encontext.comLansingMichiganAS32244 Liquid Web, L.L.C48901United Statestier_31nan

Aggregated redirection graph of domains located on current IP address.

  • The redirection flows from left to right
  • Leftmost domains are initial domains hosted on current IP
  • Rightmost domains are final landing domains we were able to crawl

Screenshot of high-occurrence final landing domains

Have other ideas? / Want to subscribe to get threat intelligence report? / Contact

Zhouhan Chen, NYU Center for Data Science, zc1245@nyu.edu, Personal Website