Patent attributes
A method for inferring a domain for an IP address, the method including receiving a computerized flow record from a communication service provider including the IP address, wherein the IP address corresponds to a request from a subscriber for an Internet resource, performing an in-stream lookup including: determining whether any SSL exchanges result from the request for the Internet resource, when the SSL exchanges exist, attempting to retrieve domain information corresponding to the IP address from the SSL exchanges, determining whether any DNS records exist that include the IP address, and when the DNS records exist that include the IP address, attempting to retrieve the domain information corresponding to the IP address from the DNS records, performing contextual mapping including: performing a whois query using the IP address in an attempt to identify the domain information corresponding to the IP address, performing a reverse DNS lookup in an attempt to identify the domain information corresponding to the IP address, attempting to establish an SSL connection to the IP address to identify the domain information, and querying clickstream information from the content service provider in an attempt to identify the domain information.
