{ "type": "URL", "indicator": "https://rbxmod.st/r/tools", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://rbxmod.st/r/tools", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 4247186411, "indicator": "https://rbxmod.st/r/tools", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 6, "pulses": [ { "id": "69e6cc14ab26b4d10965ad84", "name": "URLert Daily Threat Intel \u2014 2026-04-21", "description": "URLert Daily Threat Intel \u2014 2026-04-21\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 65 | Indicators: 101\nConfirmed: 24 | Likely: 41\nTop threats: Phishing (51), Malvertising (9), Malware Hosting (2), Dropper (2), Web Attack (1)\nDomains: albb.mom, blizzstafix.com, bnb556.com, bunnyband.com, clarissaflorence.com, comon1.cc, cpuup.com, d4qb.click, dynlora.cfd, google.com, google.it, hustlemancapital.com, issuu.com, koyeb.app...\n\n65 unique threats producing 101 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-21T00:04:31.159000", "created": "2026-04-21T01:00:04.470000", "tags": [ "abused-platform", "account-verification-scam", "adult-content-lure", "aggressive-advertising", "android-malware", "apple-impersonation", "auto-generated-domain", "automated-scan", "blizzard", "bot-driven", "brand-impersonation", "cafe-greg", "cc-domain", "clickbait", "cloud-hosting", "cloudflare", "cold-wallet-impersonation", "combosquatting", "compromised-site", "connection-interception", "content-locker", "credential-harvesting", "cryptocurrency-scam", "cryptocurrency-theme", "daily-threat-intel", "data-harvesting", "data-theft", "deceptive-ads", "deceptive-practices", "deceptive-redirects", "deceptive-site", "deceptive-url", "delivery-failure-scam", "dpd", "dpd-impersonation", "earning-scam", "education-sector", "engagement-trap", "evasion-tactic", "evasion-technique", "fake-app", "fake-delivery-notification", "fake-login", "fake-sale-scam", "fake-testimonials", "financial-fraud", "financial-scam", "financial-scheme", "fiverr", "fraudulent-advertising", "generic-domain", "get-paid-to-scheme", "get-rich-quick-scam", "gibberish-domain", "giveaway-scam", "google-docs", "government-impersonation", "government-services", "impersonation", "information-harvesting", "information-theft", "invalid-certificate", "investment-scam", "jordan-post", "linkvertise", "logistics-impersonation", "low-reputation-sites", "malicious-campaign", "malicious-hosting", "malicious-redirects", "malicious-tunneling", "malvertising", "malware-delivery", "malware-distribution", "mfa-interception", "microsoft-impersonation", "misconfiguration", "monetized-link-shortener", "monetized-redirector", "new-domain", "newly-registered-domain", "nintendo-switch-piracy", "nsp-download", "obfuscation", "offer-scam", "otp-bypass", "pages-dev", "payment-information-harvesting", "personal-data-harvesting", "personal-information-collection", "personal-information-harvesting", "phishing", "phishing-campaign", "phishing-kit", "phishing-site", "pornographic-promotion", "proxy-blocking", "pua", "recruitment-scam", "redirect-chain", "redirect-gateway", "registration-scam", "riskware", "roblox", "roblox-impersonation", "scam", "scam-allegations", "scam-service", "scam-site", "scam-tactics", "search-engine-blocking", "serviceontario", "social-engineering", "sports-betting-scam", "survey-platform", "survey-scam", "suspicious-domain", "suspicious-email", "targeted-phishing", "task-based-scam", "task-scam", "tech-support-scam", "tiktok-impersonation", "tinfoil-installer", "tld-squatting", "traffic-distribution-system", "traffic-redirection", "twitter-impersonation", "typosquatting", "unauthorized-game-distribution", "unrealistic-returns", "unwanted-software", "url-shortener", "urlert", "usps", "vinted-impersonation" ], "references": [ "https://urlert.com/domain/albb.mom", "https://urlert.com/domain/blizzstafix.com", "https://urlert.com/domain/bnb556.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/clarissaflorence.com", "https://urlert.com/domain/comon1.cc", "https://urlert.com/domain/cpuup.com", "https://urlert.com/domain/d4qb.click", "https://urlert.com/domain/dynlora.cfd", "https://urlert.com/domain/google.com", "https://urlert.com/domain/google.it", "https://urlert.com/domain/hustlemancapital.com", "https://urlert.com/domain/issuu.com", "https://urlert.com/domain/koyeb.app", "https://urlert.com/domain/lejio.cn", "https://urlert.com/domain/lhr.life", "https://urlert.com/domain/link-target.net", "https://urlert.com/domain/mandrillapp.com", "https://urlert.com/domain/mixpanel.com", "https://urlert.com/domain/mub.me" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Financial Services", "Government", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 29, "URL": 34, "hostname": 6 }, "indicator_count": 69, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "11 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69dc409f0305b15d39f0d7f2", "name": "URLert Daily Threat Intel \u2014 2026-04-13", "description": "URLert Daily Threat Intel \u2014 2026-04-13\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 40 | Indicators: 71\nConfirmed: 14 | Likely: 25 | Domain intel: 1\nTop threats: Phishing (32), Malware Hosting (3), Dropper (2), Malvertising (2), Unknown (1)\nDomains: bmz.cc, brak.cc, bringitonmsg.com, bunnyband.com, cxr.cc, dfxecha.com, fast-links.org, gb-tracking.help, getzofr.com, iceiy.com, illgmouk.com, inssupplier.com, izimuves.com, jylus.my.id, l...\n\n40 unique threats producing 71 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-12T23:08:04.035000", "created": "2026-04-13T01:02:23.579000", "tags": [ ".click-tld", "ad-fraud", "adobe-photoshop", "aggressive-advertising", "anti-analysis", "anydesk", "assistance-loans", "automated-scan", "brand-impersonation", "browser-extension", "content-locker", "counterfeit-goods", "credential-harvesting", "crypto-scam", "cryptocurrency-scam", "daily-threat-intel", "data-breach-lookup", "data-collection", "deception", "deceptive-domain", "deceptive-interface", "deceptive-platform", "deceptive-practices", "deceptive-site", "deceptive-subdomain", "deceptive-tactics", "disposable-domain", "domain-classification", "domain-hopping", "e-commerce-scam", "ecommerce", "evasion", "evasion-technique", "fake-exchange", "fake-login", "fake-reviews", "fake-store", "file-sharing", "financial-fraud", "fordeal", "fraudulent-ecommerce", "fraudulent-financial-platform", "fraudulent-gambling", "fraudulent-platform", "fraudulent-retailer", "fund-harvesting", "generic-impersonation", "gibberish-domain", "high-risk-tld", "insecure-redirect", "leak-scam", "logitech", "low-reputation-domain", "luxury-goods", "malicious-infrastructure", "malicious-redirect", "malicious-redirection", "malvertising", "malware", "malware-distribution", "marketplace", "microsoft-account", "money-making-scheme", "nebula-x", "netflix", "new-domain", "newly-registered-domain", "onlyfans", "payload-delivery", "payment-information-harvesting", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "pirated-software", "pledge-mining", "rakuten", "recently-registered-domain", "redirect-chain", "redirect-facade", "redirector", "retail-e-commerce", "retail-scam", "roblox", "roblox-impersonation", "royal-mail-impersonation", "scam", "scam-operation", "scam-operations", "scam-shop", "social-engineering", "social-media-campaigns", "social-media-lure", "software-cracks", "spam-promotion", "stolen-accounts", "streaming-service-impersonation", "survey-scam", "task-scam", "tryst-link-impersonation", "twitter", "typosquatting", "unexpected-file-type", "unsecured-hosting", "unvetted-content", "urlert", "whatsapp-scam" ], "references": [ "https://urlert.com/domain/bmz.cc", "https://urlert.com/domain/brak.cc", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/cxr.cc", "https://urlert.com/domain/dfxecha.com", "https://urlert.com/domain/fast-links.org", "https://urlert.com/domain/gb-tracking.help", "https://urlert.com/domain/getzofr.com", "https://urlert.com/domain/iceiy.com", "https://urlert.com/domain/illgmouk.com", "https://urlert.com/domain/inssupplier.com", "https://urlert.com/domain/izimuves.com", "https://urlert.com/domain/jylus.my.id", "https://urlert.com/domain/luluvid.com", "https://urlert.com/domain/lumenpick.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/newtv.site", "https://urlert.com/domain/nowplaytoc.com", "https://urlert.com/domain/pccompressed.blog" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 21, "URL": 21, "hostname": 6 }, "indicator_count": 48, "is_author": false, "is_subscribing": null, "subscriber_count": 31, "modified_text": "19 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69dee993357e7b6f29b213a7", "name": "URLert Daily Threat Intel \u2014 2026-04-13", "description": "URLert Daily Threat Intel \u2014 2026-04-13\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 40 | Indicators: 71\nConfirmed: 14 | Likely: 25 | Domain intel: 1\nTop threats: Phishing (32), Malware Hosting (3), Dropper (2), Malvertising (2), Unknown (1)\nDomains: bmz.cc, brak.cc, bringitonmsg.com, bunnyband.com, cxr.cc, dfxecha.com, fast-links.org, gb-tracking.help, getzofr.com, iceiy.com, illgmouk.com, inssupplier.com, izimuves.com, jylus.my.id, l...\n\n40 unique threats producing 71 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-12T23:08:04.035000", "created": "2026-04-15T01:27:47.408000", "tags": [ ".click-tld", "ad-fraud", "adobe-photoshop", "aggressive-advertising", "anti-analysis", "anydesk", "assistance-loans", "automated-scan", "brand-impersonation", "browser-extension", "content-locker", "counterfeit-goods", "credential-harvesting", "crypto-scam", "cryptocurrency-scam", "daily-threat-intel", "data-breach-lookup", "data-collection", "deception", "deceptive-domain", "deceptive-interface", "deceptive-platform", "deceptive-practices", "deceptive-site", "deceptive-subdomain", "deceptive-tactics", "disposable-domain", "domain-classification", "domain-hopping", "e-commerce-scam", "ecommerce", "evasion", "evasion-technique", "fake-exchange", "fake-login", "fake-reviews", "fake-store", "file-sharing", "financial-fraud", "fordeal", "fraudulent-ecommerce", "fraudulent-financial-platform", "fraudulent-gambling", "fraudulent-platform", "fraudulent-retailer", "fund-harvesting", "generic-impersonation", "gibberish-domain", "high-risk-tld", "insecure-redirect", "leak-scam", "logitech", "low-reputation-domain", "luxury-goods", "malicious-infrastructure", "malicious-redirect", "malicious-redirection", "malvertising", "malware", "malware-distribution", "marketplace", "microsoft-account", "money-making-scheme", "nebula-x", "netflix", "new-domain", "newly-registered-domain", "onlyfans", "payload-delivery", "payment-information-harvesting", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "pirated-software", "pledge-mining", "rakuten", "recently-registered-domain", "redirect-chain", "redirect-facade", "redirector", "retail-e-commerce", "retail-scam", "roblox", "roblox-impersonation", "royal-mail-impersonation", "scam", "scam-operation", "scam-operations", "scam-shop", "social-engineering", "social-media-campaigns", "social-media-lure", "software-cracks", "spam-promotion", "stolen-accounts", "streaming-service-impersonation", "survey-scam", "task-scam", "tryst-link-impersonation", "twitter", "typosquatting", "unexpected-file-type", "unsecured-hosting", "unvetted-content", "urlert", "whatsapp-scam" ], "references": [ "https://urlert.com/domain/bmz.cc", "https://urlert.com/domain/brak.cc", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/cxr.cc", "https://urlert.com/domain/dfxecha.com", "https://urlert.com/domain/fast-links.org", "https://urlert.com/domain/gb-tracking.help", "https://urlert.com/domain/getzofr.com", "https://urlert.com/domain/iceiy.com", "https://urlert.com/domain/illgmouk.com", "https://urlert.com/domain/inssupplier.com", "https://urlert.com/domain/izimuves.com", "https://urlert.com/domain/jylus.my.id", "https://urlert.com/domain/luluvid.com", "https://urlert.com/domain/lumenpick.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/newtv.site", "https://urlert.com/domain/nowplaytoc.com", "https://urlert.com/domain/pccompressed.blog" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 21, "URL": 21, "hostname": 6 }, "indicator_count": 48, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "19 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69d5a89569e0095158da2a9c", "name": "URLert Daily Threat Intel \u2014 2026-04-08", "description": "URLert Daily Threat Intel \u2014 2026-04-08\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 139 | Indicators: 264\nConfirmed: 43 | Likely: 94 | Domain intel: 2\nTop threats: Phishing (109), Malvertising (9), Unknown (8), Malware Hosting (7), Dropper (5)\nDomains: 472hico.lat, acccat.com, aipixelss.com, allerides.shop, alpiyd.help, ankergames.net, authpadi.com, awstrack.me, besowin.com, beyondclosetstore.com, bfhix.buzz, blogspot.com, bookscloud.net...\n\n139 unique threats producing 264 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-07T23:19:25.182000", "created": "2026-04-08T01:00:05.017000", "tags": [ "2fa-bypass", "4-72", "4-72-impersonation", "abuse-hosting", "account-checker", "account-reactivation", "activity-viewer", "adac", "adult-affiliate", "adult-scam", "affiliate-network", "aggressive-advertising", "ai-platform-abuse", "an-post", "android-malware", "anti-analysis", "apk-download", "apk-malware", "app-update-lure", "automated-scan", "automatic-download", "blank-landing-page", "blogspot", "booking-com", "booking-com-impersonation", "bpi-impersonation", "brand-impersonation", "browser-extension", "california-dmv", "california-government-impersonation", "celebrity-impersonation", "cloaking", "cloudflare-impersonation", "colombia", "combosquatting", "command-and-control-communication", "compromised-site", "content-gating", "content-locker-scam", "cracking", "credential-harvesting", "crypto-casino", "cryptocurrency-phishing", "cryptocurrency-scam", "cybercrime-tools", "daily-threat-intel", "dating-scam", "deceptive-content", "deceptive-domain", "deceptive-download", "deceptive-lure", "deceptive-overlay", "deceptive-practices", "deceptive-redirect", "deceptive-redirects", "deceptive-registration", "deceptive-tactics", "delivery-scam", "detection-evasion", "developer-tool-evasion", "dhl", "dhl-impersonation", "discord", "discord-bot-users", "disposable-infrastructure", "domain-classification", "download-link", "dpd", "dpd-impersonation", "dpd-local", "e-commerce-scam", "evasion", "evasion-technique", "evasion-techniques", "evasive-technique", "evasive-techniques", "facebook-impersonation", "fake-account-creation", "fake-cloudflare-challenge", "fake-domain", "fake-government-service", "fake-login-portal", "fake-payment", "fake-paywall", "fake-questionnaire", "fake-security-challenge", "fake-security-verification", "fake-service", "fake-toll-charge", "fake-toll-scam", "fake-voucher", "financial-harvesting", "financial-loss", "financial-theft", "fiverr", "fiverr-impersonation", "fortnite-impersonation", "fraudulent-activity", "fraudulent-gambling", "fraudulent-investment-platform", "fraudulent-platform", "fraudulent-store", "gambling-scam", "gamers", "generic-login-form", "georgia-dds", "germany", "gibberish-domain", "gmail-impersonation", "google", "government-impersonation", "grabify-logging", "grayware", "hamilton-fraser", "high-pressure-sales", "high-risk-subdomain", "high-risk-tld", "hookup-scam", "hr-block-impersonation", "identity-verification", "impersonation-scam", "inactive-infrastructure", "information-harvesting", "instagram", "invalid-certificate", "investment-scam", "invitation-code-required", "invite-code", "israel-post-impersonation", "javascript-delivery", "keyword-stuffing", "lead-generation", "link-shortener", "logistics", "logistics-impersonation", "logistics-scam", "logistics-sector", "lookalike-domain", "low-reputation-domain", "malicious-advertising-network", "malicious-extensions", "malicious-infrastructure", "malicious-redirection", "malicious-redirects", "malicious-site", "malvertising", "malware-bundling", "malware-delivery", "malware-distribution", "mercadopago", "microsoft-impersonation", "microsoft-sharepoint-impersonation", "misleading-ui", "mobile-phishing", "modded-applications", "monetized-url-shortener", "netlify-abuse", "nevada-dmv", "new-domain", "newly-registered-domain", "non-legitimate-site", "online-casino", "passport-data-theft", "payment-card-theft", "payment-harvesting", "payment-information-harvesting", "payment-information-theft", "payment-scam", "payroll-scam", "personal-information-harvesting", "phishing", "phishing-lure", "phishing-page", "phishing-site", "pig-butchering-scam", "pii-collection", "pirated-software", "ponzi-scheme", "pop-unders", "posta-kenya-impersonation", "potentially-malicious-domain", "privacy-risk", "profile-visitor-tracking", "pua", "random-subdomain", "recent-domain", "redirect-chain", "redirector", "refund-service", "retail-scam", "retail-sector", "roblox", "roblox-accounts", "roblox-impersonation", "scam", "scam-distribution", "scam-gateway", "scam-infrastructure", "scam-site", "scam-website", "script-hosting", "security-bypass", "seo-spam", "serviceontario", "shipping-protection-scam", "sms-verification-bypass", "social-engineering", "social-media-scam", "software-piracy", "spam-infrastructure", "spyware", "steam", "student-targeting", "surveillance-tools", "survey-scam", "suspicious-domain", "suspicious-file-type", "suspicious-pricing", "suspicious-subdomain", "template-based-storefront", "tiktok-impersonation", "tiktok-shop", "toll-charge", "toll-scam", "tracking", "traffic-citations", "traffic-direction-system", "traffic-distribution-system", "traffic-diversion", "traffic-redirection", "travel-scam", "travel-sector", "trojan", "trojanized-app", "twitter-impersonation", "txdmv", "txdmv-impersonation", "typosquatting", "uk-eta-visa", "unauthorized-tracking", "unofficial-app-distribution", "unreachable", "unverified-software-download", "unwanted-content", "unwanted-programs", "unwanted-software", "url-redirect", "url-redirector", "url-shortener", "urlert", "usdt", "usps", "vbucks-scam", "webcam-capture", "webcam360", "weebly-abuse", "wetransfer", "wetransfer-impersonation", "whatsapp-impersonation", "wisconsin-dot", "withdrawal-scam" ], "references": [ "https://urlert.com/domain/472hico.lat", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/aipixelss.com", "https://urlert.com/domain/allerides.shop", "https://urlert.com/domain/alpiyd.help", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/authpadi.com", "https://urlert.com/domain/awstrack.me", "https://urlert.com/domain/besowin.com", "https://urlert.com/domain/beyondclosetstore.com", "https://urlert.com/domain/bfhix.buzz", "https://urlert.com/domain/blogspot.com", "https://urlert.com/domain/bookscloud.net", "https://urlert.com/domain/boxstatusr.cfd", "https://urlert.com/domain/bpidirecto.top", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/ca-pagel.cyou", "https://urlert.com/domain/ca-pagel.icu", "https://urlert.com/domain/ca-pagel.sbs", "https://urlert.com/domain/ca-pages.biz.id" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Automotive", "Education", "Financial Services", "Government", "Hospitality", "Insurance", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 78, "URL": 80, "hostname": 42 }, "indicator_count": 200, "is_author": false, "is_subscribing": null, "subscriber_count": 33, "modified_text": "24 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69c1e21727bfc6fb3cacc6c1", "name": "URLert Daily Threat Intel \u2014 2026-03-24", "description": "URLert Daily Threat Intel \u2014 2026-03-24\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 77 | Indicators: 147\nConfirmed: 23 | Likely: 51 | Domain intel: 3\nTop threats: Phishing (64), Unknown (5), Dropper (4), Malware Hosting (2), Exploit Kit (1)\nDomains: 194872.xin, 370184.xin, acccat.com, amgaa.com, apkdone.co, banglachotikahinii.com, betsclub.top, binx.vip, casajoys.com, clickup.com, com-tjd.com, csvulcan.com, cute-love-site.lol, d893kl3...\n\n77 unique threats producing 147 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T00:45:38.797000", "created": "2026-03-24T01:00:07.920000", "tags": [ "account-takeover", "adult-content", "allegro-impersonation", "android-malware", "apk-malware", "automated-scan", "betting-impersonation", "brand-impersonation", "brightonseo", "browser-locking", "carding", "clickup-abuse", "cloaking", "cloud-storage-abuse", "combosquatting", "compromised-infrastructure", "compromised-site", "credential-harvesting", "credit-card-harvesting", "crypto-scam", "cryptocurrency", "cryptocurrency-payments", "cryptocurrency-scam", "cvv-shop", "daily-threat-intel", "deception", "deceptive-domain", "deceptive-download", "deceptive-interface", "deceptive-platform", "deceptive-practice", "deceptive-practices", "deceptive-redirects", "deceptive-site", "disney", "disneyplus", "domain-classification", "domain-shadowing", "e-commerce-fraud", "elon-musk-impersonation", "exit-scam", "fake-announcements", "fake-delivery-notification", "fake-document-preview", "fake-incentive", "fake-interface", "fake-notification", "fake-security-alert", "fake-security-check", "fake-shopping-site", "fake-toll-debt", "fake-toll-scam", "fedex-impersonation", "financial-fraud", "financial-impersonation", "financial-information-theft", "financial-misrepresentation", "financial-scam", "financial-services", "financial-theft", "flhsmv-impersonation", "forex-trading", "fortnite", "fraudulent-exchange", "fraudulent-indicators", "fraudulent-platform", "fraudulent-site", "fraudulent-website", "fund-harvesting", "fund-theft", "gambling-scam", "game-resource-generator", "gaming-scam", "gibberish-domain", "gibberish-text", "government-impersonation", "government-targeting", "high-risk-domain", "high-risk-tld", "illegal-pharmacy", "impersonation", "instagram-scam", "intelcom", "intelcom-impersonation", "investment-scam", "invitation-code", "ip-logger", "malicious-advertising", "malicious-infrastructure", "malicious-redirection", "malicious-script", "malvertising", "malware-delivery", "malware-distribution", "malware-dropper", "modified-android-apks", "nebula-x", "new-domain", "newly-registered-domain", "njmvc-impersonation", "olx", "onedrive-impersonation", "online-dating-scam", "onlyfans-impersonation", "outlook", "payment-fraud", "payment-harvesting", "payment-information-theft", "payment-scam", "phishing", "phishing-campaign", "phishing-site", "pig-butchering-scam", "pii-collection", "pop-up-scam", "power-mac-center", "predatory-billing", "prescription-drug-trafficking", "privacy-bypass", "privacy-risk", "problematic-transactions", "process-hacker", "qr-code-delivery", "recently-registered-domain", "redirect-chain", "redirect-cloaking", "redirector", "retail-scam", "risky-downloads", "roblox", "scam", "scam-site", "scam-store", "scareware", "sexually-explicit-content", "social-engineering", "social-media-scam", "social-media-scraping", "spam-distribution", "stolen-credit-cards", "subdomain-abuse", "suspicious-domain", "suspicious-redirection", "system-informer", "texas-dmv", "throwaway-domain", "ticketing-scam", "token-presale-scam", "toll-scam", "tracking", "typosquatting", "unauthorized-tracking", "underground-marketplace", "unofficial-app-store", "unregulated-platform", "unscanned-files", "unverified-software", "unverified-software-download", "unwanted-software", "urgency-scam", "url-shortener", "urlert", "usdc-impersonation", "vermont-dmv", "webcam-capture", "withdrawal-failure" ], "references": [ "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/fortfj.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 48, "hostname": 15 }, "indicator_count": 112, "is_author": false, "is_subscribing": null, "subscriber_count": 31, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69acca3692ba71ce9792362f", "name": "URLert Daily Threat Intel \u2014 2026-03-08", "description": "URLert Daily Threat Intel \u2014 2026-03-08\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 43 | Indicators: 83\nConfirmed: 5 | Likely: 35 | Domain intel: 3\nTop threats: Phishing (36), Malware Hosting (3), Malvertising (2), Dropper (1), Unknown (1)\nDomains: beb6.com, bitly.cx, cat-mxn.com, clipsexsub3x.net, cutt.ly, datess.one, donutstake.com, ebay.com, eph.cc, fesfo.cn, firstlook.gg, gepiu.cn, google.com, hrblocks.download, it.com, kittyescr...\n\n43 unique threats producing 83 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-06T22:05:40.567000", "created": "2026-03-08T01:00:35.927000", "tags": [ "account-management-impersonation", "adult-content", "ai-content", "amazon-impersonation", "atacadao", "automated-scan", "beb6", "booking-com", "booking-com-impersonation", "brand-impersonation", "cacau-show", "cacau-show-impersonation", "caterpillar-impersonation", "combosquatting", "compromised-site", "credential-harvesting", "cryptocurrency-scam", "daily-threat-intel", "data-harvesting", "deceptive-buttons", "deceptive-claims", "deceptive-pop-up", "deceptive-redirects", "deceptive-rewards", "deceptive-sign-up", "deceptive-site", "deceptive-url", "discord-scam", "disposable-infrastructure", "domain-age-misrepresentation", "domain-classification", "ebay", "evasive-tactics", "facesmsmart-com", "fake-banking-service", "fake-form", "fake-login-portal", "fake-promotion", "fake-reward", "financial-sector", "financial-services", "financial-services-targeting", "free-game-lure", "game-exploitation", "game-exploitation-tool", "game-hacks", "gift-card-scam", "giveaway-scam", "google-docs-abuse", "government-impersonation", "hello-kitty", "high-risk", "high-risk-tld", "impersonation", "information-stealer", "information-theft", "instagram-impersonation", "inventory-stealer", "investment-scam", "key-less-executor", "malicious-redirects", "malicious-registry", "malvertising", "malware-delivery", "malware-distribution", "malware-reports", "minecraft", "mobile-interface", "netflix-impersonation", "new-domain", "newly-registered-domain", "nigeria", "phishing", "phishing-infrastructure", "phishing-site", "phishing-technique", "playstation-impersonation", "potential-fraud", "potentially-harmful-software", "poundstretcher-impersonation", "prize-scam", "questionnaire-scam", "retail-e-commerce", "retail-ecommerce", "roblox", "scam", "scam-pages", "scareware", "sfi-mall", "social-engineering", "software-download", "spam-distribution", "subnautica-impersonation", "survey-scam", "suspicious-platform", "suspicious-redirection", "suspicious-tld", "telegram-bot", "telegram-impersonation", "tienda-mass", "trojan-horse", "typosquatting", "unregulated-gambling", "unwanted-software", "unwanted-software-download", "url-shortener", "urlert", "usdt-scam", "user-deception", "virus-warning", "vpn-lure", "wi-fi-password-scam" ], "references": [ "https://urlert.com/domain/beb6.com", "https://urlert.com/domain/bitly.cx", "https://urlert.com/domain/cat-mxn.com", "https://urlert.com/domain/clipsexsub3x.net", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/datess.one", "https://urlert.com/domain/donutstake.com", "https://urlert.com/domain/ebay.com", "https://urlert.com/domain/eph.cc", "https://urlert.com/domain/fesfo.cn", "https://urlert.com/domain/firstlook.gg", "https://urlert.com/domain/gepiu.cn", "https://urlert.com/domain/google.com", "https://urlert.com/domain/hrblocks.download", "https://urlert.com/domain/it.com", "https://urlert.com/domain/kittyescraft.com", "https://urlert.com/domain/kkinstagram.com", "https://urlert.com/domain/ko2bot.com", "https://urlert.com/domain/ngcpx.vip", "https://urlert.com/domain/nkfinanse.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Hospitality", "Manufacturing", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 31, "hostname": 8, "URL": 29 }, "indicator_count": 68, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "55 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://urlert.com/domain/gepiu.cn", "https://urlert.com/domain/bpidirecto.top", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/mandrillapp.com", "https://urlert.com/domain/bmz.cc", "https://urlert.com/domain/authpadi.com", "https://urlert.com/domain/inssupplier.com", "https://urlert.com/domain/clipsexsub3x.net", "https://urlert.com/domain/blizzstafix.com", "https://urlert.com/domain/beb6.com", "https://urlert.com/domain/it.com", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/lejio.cn", "https://urlert.com/domain/albb.mom", "https://urlert.com/domain/cxr.cc", "https://urlert.com/domain/koyeb.app", "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/ca-pagel.icu", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/472hico.lat", "https://urlert.com/domain/bfhix.buzz", "https://urlert.com/domain/nkfinanse.com", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/newtv.site", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/ca-pagel.cyou", "https://urlert.com/domain/izimuves.com", "https://urlert.com/domain/issuu.com", "https://urlert.com/domain/fesfo.cn", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/ko2bot.com", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/ca-pagel.sbs", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/ca-pages.biz.id", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/luluvid.com", "https://urlert.com/domain/bnb556.com", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/fast-links.org", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/getzofr.com", "https://urlert.com/domain/comon1.cc", "https://urlert.com/domain/illgmouk.com", "https://urlert.com/domain/hustlemancapital.com", "https://urlert.com/domain/cat-mxn.com", "https://urlert.com/domain/beyondclosetstore.com", "https://urlert.com/domain/ebay.com", "https://urlert.com/domain/bookscloud.net", "https://urlert.com/domain/google.com", "https://urlert.com/domain/besowin.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/lumenpick.com", "https://urlert.com/domain/awstrack.me", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/jylus.my.id", "https://urlert.com/domain/bitly.cx", "https://urlert.com/domain/kkinstagram.com", "https://urlert.com/domain/clarissaflorence.com", "https://urlert.com/domain/cpuup.com", "https://urlert.com/domain/d4qb.click", "https://urlert.com/domain/brak.cc", "https://urlert.com/domain/blogspot.com", "https://urlert.com/domain/dynlora.cfd", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/pccompressed.blog", "https://urlert.com/domain/firstlook.gg", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/link-target.net", "https://urlert.com/domain/alpiyd.help", "https://urlert.com/domain/fortfj.com", "https://urlert.com/domain/dfxecha.com", "https://urlert.com/domain/kittyescraft.com", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/gb-tracking.help", "https://urlert.com/domain/ngcpx.vip", "https://urlert.com/domain/mub.me", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/google.it", "https://urlert.com/domain/hrblocks.download", "https://urlert.com/domain/donutstake.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/mixpanel.com", "https://urlert.com/domain/nowplaytoc.com", "https://urlert.com/domain/iceiy.com", "https://urlert.com/domain/allerides.shop", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/aipixelss.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/eph.cc", "https://urlert.com/domain/boxstatusr.cfd", "https://urlert.com/domain/lhr.life", "https://urlert.com/domain/datess.one" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [ "Financial services", "Insurance", "Retail / e-commerce", "Manufacturing", "Hospitality", "Media / entertainment", "Logistics / supply chain", "Technology", "Education", "Automotive", "Government" ], "unique_indicators": 626 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/rbxmod.st", "whois": "http://whois.domaintools.com/rbxmod.st", "domain": "rbxmod.st", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 6, "pulses": [ { "id": "69e6cc14ab26b4d10965ad84", "name": "URLert Daily Threat Intel \u2014 2026-04-21", "description": "URLert Daily Threat Intel \u2014 2026-04-21\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 65 | Indicators: 101\nConfirmed: 24 | Likely: 41\nTop threats: Phishing (51), Malvertising (9), Malware Hosting (2), Dropper (2), Web Attack (1)\nDomains: albb.mom, blizzstafix.com, bnb556.com, bunnyband.com, clarissaflorence.com, comon1.cc, cpuup.com, d4qb.click, dynlora.cfd, google.com, google.it, hustlemancapital.com, issuu.com, koyeb.app...\n\n65 unique threats producing 101 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-21T00:04:31.159000", "created": "2026-04-21T01:00:04.470000", "tags": [ "abused-platform", "account-verification-scam", "adult-content-lure", "aggressive-advertising", "android-malware", "apple-impersonation", "auto-generated-domain", "automated-scan", "blizzard", "bot-driven", "brand-impersonation", "cafe-greg", "cc-domain", "clickbait", "cloud-hosting", "cloudflare", "cold-wallet-impersonation", "combosquatting", "compromised-site", "connection-interception", "content-locker", "credential-harvesting", "cryptocurrency-scam", "cryptocurrency-theme", "daily-threat-intel", "data-harvesting", "data-theft", "deceptive-ads", "deceptive-practices", "deceptive-redirects", "deceptive-site", "deceptive-url", "delivery-failure-scam", "dpd", "dpd-impersonation", "earning-scam", "education-sector", "engagement-trap", "evasion-tactic", "evasion-technique", "fake-app", "fake-delivery-notification", "fake-login", "fake-sale-scam", "fake-testimonials", "financial-fraud", "financial-scam", "financial-scheme", "fiverr", "fraudulent-advertising", "generic-domain", "get-paid-to-scheme", "get-rich-quick-scam", "gibberish-domain", "giveaway-scam", "google-docs", "government-impersonation", "government-services", "impersonation", "information-harvesting", "information-theft", "invalid-certificate", "investment-scam", "jordan-post", "linkvertise", "logistics-impersonation", "low-reputation-sites", "malicious-campaign", "malicious-hosting", "malicious-redirects", "malicious-tunneling", "malvertising", "malware-delivery", "malware-distribution", "mfa-interception", "microsoft-impersonation", "misconfiguration", "monetized-link-shortener", "monetized-redirector", "new-domain", "newly-registered-domain", "nintendo-switch-piracy", "nsp-download", "obfuscation", "offer-scam", "otp-bypass", "pages-dev", "payment-information-harvesting", "personal-data-harvesting", "personal-information-collection", "personal-information-harvesting", "phishing", "phishing-campaign", "phishing-kit", "phishing-site", "pornographic-promotion", "proxy-blocking", "pua", "recruitment-scam", "redirect-chain", "redirect-gateway", "registration-scam", "riskware", "roblox", "roblox-impersonation", "scam", "scam-allegations", "scam-service", "scam-site", "scam-tactics", "search-engine-blocking", "serviceontario", "social-engineering", "sports-betting-scam", "survey-platform", "survey-scam", "suspicious-domain", "suspicious-email", "targeted-phishing", "task-based-scam", "task-scam", "tech-support-scam", "tiktok-impersonation", "tinfoil-installer", "tld-squatting", "traffic-distribution-system", "traffic-redirection", "twitter-impersonation", "typosquatting", "unauthorized-game-distribution", "unrealistic-returns", "unwanted-software", "url-shortener", "urlert", "usps", "vinted-impersonation" ], "references": [ "https://urlert.com/domain/albb.mom", "https://urlert.com/domain/blizzstafix.com", "https://urlert.com/domain/bnb556.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/clarissaflorence.com", "https://urlert.com/domain/comon1.cc", "https://urlert.com/domain/cpuup.com", "https://urlert.com/domain/d4qb.click", "https://urlert.com/domain/dynlora.cfd", "https://urlert.com/domain/google.com", "https://urlert.com/domain/google.it", "https://urlert.com/domain/hustlemancapital.com", "https://urlert.com/domain/issuu.com", "https://urlert.com/domain/koyeb.app", "https://urlert.com/domain/lejio.cn", "https://urlert.com/domain/lhr.life", "https://urlert.com/domain/link-target.net", "https://urlert.com/domain/mandrillapp.com", "https://urlert.com/domain/mixpanel.com", "https://urlert.com/domain/mub.me" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Financial Services", "Government", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 29, "URL": 34, "hostname": 6 }, "indicator_count": 69, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "11 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69dc409f0305b15d39f0d7f2", "name": "URLert Daily Threat Intel \u2014 2026-04-13", "description": "URLert Daily Threat Intel \u2014 2026-04-13\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 40 | Indicators: 71\nConfirmed: 14 | Likely: 25 | Domain intel: 1\nTop threats: Phishing (32), Malware Hosting (3), Dropper (2), Malvertising (2), Unknown (1)\nDomains: bmz.cc, brak.cc, bringitonmsg.com, bunnyband.com, cxr.cc, dfxecha.com, fast-links.org, gb-tracking.help, getzofr.com, iceiy.com, illgmouk.com, inssupplier.com, izimuves.com, jylus.my.id, l...\n\n40 unique threats producing 71 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-12T23:08:04.035000", "created": "2026-04-13T01:02:23.579000", "tags": [ ".click-tld", "ad-fraud", "adobe-photoshop", "aggressive-advertising", "anti-analysis", "anydesk", "assistance-loans", "automated-scan", "brand-impersonation", "browser-extension", "content-locker", "counterfeit-goods", "credential-harvesting", "crypto-scam", "cryptocurrency-scam", "daily-threat-intel", "data-breach-lookup", "data-collection", "deception", "deceptive-domain", "deceptive-interface", "deceptive-platform", "deceptive-practices", "deceptive-site", "deceptive-subdomain", "deceptive-tactics", "disposable-domain", "domain-classification", "domain-hopping", "e-commerce-scam", "ecommerce", "evasion", "evasion-technique", "fake-exchange", "fake-login", "fake-reviews", "fake-store", "file-sharing", "financial-fraud", "fordeal", "fraudulent-ecommerce", "fraudulent-financial-platform", "fraudulent-gambling", "fraudulent-platform", "fraudulent-retailer", "fund-harvesting", "generic-impersonation", "gibberish-domain", "high-risk-tld", "insecure-redirect", "leak-scam", "logitech", "low-reputation-domain", "luxury-goods", "malicious-infrastructure", "malicious-redirect", "malicious-redirection", "malvertising", "malware", "malware-distribution", "marketplace", "microsoft-account", "money-making-scheme", "nebula-x", "netflix", "new-domain", "newly-registered-domain", "onlyfans", "payload-delivery", "payment-information-harvesting", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "pirated-software", "pledge-mining", "rakuten", "recently-registered-domain", "redirect-chain", "redirect-facade", "redirector", "retail-e-commerce", "retail-scam", "roblox", "roblox-impersonation", "royal-mail-impersonation", "scam", "scam-operation", "scam-operations", "scam-shop", "social-engineering", "social-media-campaigns", "social-media-lure", "software-cracks", "spam-promotion", "stolen-accounts", "streaming-service-impersonation", "survey-scam", "task-scam", "tryst-link-impersonation", "twitter", "typosquatting", "unexpected-file-type", "unsecured-hosting", "unvetted-content", "urlert", "whatsapp-scam" ], "references": [ "https://urlert.com/domain/bmz.cc", "https://urlert.com/domain/brak.cc", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/cxr.cc", "https://urlert.com/domain/dfxecha.com", "https://urlert.com/domain/fast-links.org", "https://urlert.com/domain/gb-tracking.help", "https://urlert.com/domain/getzofr.com", "https://urlert.com/domain/iceiy.com", "https://urlert.com/domain/illgmouk.com", "https://urlert.com/domain/inssupplier.com", "https://urlert.com/domain/izimuves.com", "https://urlert.com/domain/jylus.my.id", "https://urlert.com/domain/luluvid.com", "https://urlert.com/domain/lumenpick.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/newtv.site", "https://urlert.com/domain/nowplaytoc.com", "https://urlert.com/domain/pccompressed.blog" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 21, "URL": 21, "hostname": 6 }, "indicator_count": 48, "is_author": false, "is_subscribing": null, "subscriber_count": 31, "modified_text": "19 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69dee993357e7b6f29b213a7", "name": "URLert Daily Threat Intel \u2014 2026-04-13", "description": "URLert Daily Threat Intel \u2014 2026-04-13\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 40 | Indicators: 71\nConfirmed: 14 | Likely: 25 | Domain intel: 1\nTop threats: Phishing (32), Malware Hosting (3), Dropper (2), Malvertising (2), Unknown (1)\nDomains: bmz.cc, brak.cc, bringitonmsg.com, bunnyband.com, cxr.cc, dfxecha.com, fast-links.org, gb-tracking.help, getzofr.com, iceiy.com, illgmouk.com, inssupplier.com, izimuves.com, jylus.my.id, l...\n\n40 unique threats producing 71 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-12T23:08:04.035000", "created": "2026-04-15T01:27:47.408000", "tags": [ ".click-tld", "ad-fraud", "adobe-photoshop", "aggressive-advertising", "anti-analysis", "anydesk", "assistance-loans", "automated-scan", "brand-impersonation", "browser-extension", "content-locker", "counterfeit-goods", "credential-harvesting", "crypto-scam", "cryptocurrency-scam", "daily-threat-intel", "data-breach-lookup", "data-collection", "deception", "deceptive-domain", "deceptive-interface", "deceptive-platform", "deceptive-practices", "deceptive-site", "deceptive-subdomain", "deceptive-tactics", "disposable-domain", "domain-classification", "domain-hopping", "e-commerce-scam", "ecommerce", "evasion", "evasion-technique", "fake-exchange", "fake-login", "fake-reviews", "fake-store", "file-sharing", "financial-fraud", "fordeal", "fraudulent-ecommerce", "fraudulent-financial-platform", "fraudulent-gambling", "fraudulent-platform", "fraudulent-retailer", "fund-harvesting", "generic-impersonation", "gibberish-domain", "high-risk-tld", "insecure-redirect", "leak-scam", "logitech", "low-reputation-domain", "luxury-goods", "malicious-infrastructure", "malicious-redirect", "malicious-redirection", "malvertising", "malware", "malware-distribution", "marketplace", "microsoft-account", "money-making-scheme", "nebula-x", "netflix", "new-domain", "newly-registered-domain", "onlyfans", "payload-delivery", "payment-information-harvesting", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "pirated-software", "pledge-mining", "rakuten", "recently-registered-domain", "redirect-chain", "redirect-facade", "redirector", "retail-e-commerce", "retail-scam", "roblox", "roblox-impersonation", "royal-mail-impersonation", "scam", "scam-operation", "scam-operations", "scam-shop", "social-engineering", "social-media-campaigns", "social-media-lure", "software-cracks", "spam-promotion", "stolen-accounts", "streaming-service-impersonation", "survey-scam", "task-scam", "tryst-link-impersonation", "twitter", "typosquatting", "unexpected-file-type", "unsecured-hosting", "unvetted-content", "urlert", "whatsapp-scam" ], "references": [ "https://urlert.com/domain/bmz.cc", "https://urlert.com/domain/brak.cc", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/bunnyband.com", "https://urlert.com/domain/cxr.cc", "https://urlert.com/domain/dfxecha.com", "https://urlert.com/domain/fast-links.org", "https://urlert.com/domain/gb-tracking.help", "https://urlert.com/domain/getzofr.com", "https://urlert.com/domain/iceiy.com", "https://urlert.com/domain/illgmouk.com", "https://urlert.com/domain/inssupplier.com", "https://urlert.com/domain/izimuves.com", "https://urlert.com/domain/jylus.my.id", "https://urlert.com/domain/luluvid.com", "https://urlert.com/domain/lumenpick.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/newtv.site", "https://urlert.com/domain/nowplaytoc.com", "https://urlert.com/domain/pccompressed.blog" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 21, "URL": 21, "hostname": 6 }, "indicator_count": 48, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "19 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69d5a89569e0095158da2a9c", "name": "URLert Daily Threat Intel \u2014 2026-04-08", "description": "URLert Daily Threat Intel \u2014 2026-04-08\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 139 | Indicators: 264\nConfirmed: 43 | Likely: 94 | Domain intel: 2\nTop threats: Phishing (109), Malvertising (9), Unknown (8), Malware Hosting (7), Dropper (5)\nDomains: 472hico.lat, acccat.com, aipixelss.com, allerides.shop, alpiyd.help, ankergames.net, authpadi.com, awstrack.me, besowin.com, beyondclosetstore.com, bfhix.buzz, blogspot.com, bookscloud.net...\n\n139 unique threats producing 264 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-05-07T23:19:25.182000", "created": "2026-04-08T01:00:05.017000", "tags": [ "2fa-bypass", "4-72", "4-72-impersonation", "abuse-hosting", "account-checker", "account-reactivation", "activity-viewer", "adac", "adult-affiliate", "adult-scam", "affiliate-network", "aggressive-advertising", "ai-platform-abuse", "an-post", "android-malware", "anti-analysis", "apk-download", "apk-malware", "app-update-lure", "automated-scan", "automatic-download", "blank-landing-page", "blogspot", "booking-com", "booking-com-impersonation", "bpi-impersonation", "brand-impersonation", "browser-extension", "california-dmv", "california-government-impersonation", "celebrity-impersonation", "cloaking", "cloudflare-impersonation", "colombia", "combosquatting", "command-and-control-communication", "compromised-site", "content-gating", "content-locker-scam", "cracking", "credential-harvesting", "crypto-casino", "cryptocurrency-phishing", "cryptocurrency-scam", "cybercrime-tools", "daily-threat-intel", "dating-scam", "deceptive-content", "deceptive-domain", "deceptive-download", "deceptive-lure", "deceptive-overlay", "deceptive-practices", "deceptive-redirect", "deceptive-redirects", "deceptive-registration", "deceptive-tactics", "delivery-scam", "detection-evasion", "developer-tool-evasion", "dhl", "dhl-impersonation", "discord", "discord-bot-users", "disposable-infrastructure", "domain-classification", "download-link", "dpd", "dpd-impersonation", "dpd-local", "e-commerce-scam", "evasion", "evasion-technique", "evasion-techniques", "evasive-technique", "evasive-techniques", "facebook-impersonation", "fake-account-creation", "fake-cloudflare-challenge", "fake-domain", "fake-government-service", "fake-login-portal", "fake-payment", "fake-paywall", "fake-questionnaire", "fake-security-challenge", "fake-security-verification", "fake-service", "fake-toll-charge", "fake-toll-scam", "fake-voucher", "financial-harvesting", "financial-loss", "financial-theft", "fiverr", "fiverr-impersonation", "fortnite-impersonation", "fraudulent-activity", "fraudulent-gambling", "fraudulent-investment-platform", "fraudulent-platform", "fraudulent-store", "gambling-scam", "gamers", "generic-login-form", "georgia-dds", "germany", "gibberish-domain", "gmail-impersonation", "google", "government-impersonation", "grabify-logging", "grayware", "hamilton-fraser", "high-pressure-sales", "high-risk-subdomain", "high-risk-tld", "hookup-scam", "hr-block-impersonation", "identity-verification", "impersonation-scam", "inactive-infrastructure", "information-harvesting", "instagram", "invalid-certificate", "investment-scam", "invitation-code-required", "invite-code", "israel-post-impersonation", "javascript-delivery", "keyword-stuffing", "lead-generation", "link-shortener", "logistics", "logistics-impersonation", "logistics-scam", "logistics-sector", "lookalike-domain", "low-reputation-domain", "malicious-advertising-network", "malicious-extensions", "malicious-infrastructure", "malicious-redirection", "malicious-redirects", "malicious-site", "malvertising", "malware-bundling", "malware-delivery", "malware-distribution", "mercadopago", "microsoft-impersonation", "microsoft-sharepoint-impersonation", "misleading-ui", "mobile-phishing", "modded-applications", "monetized-url-shortener", "netlify-abuse", "nevada-dmv", "new-domain", "newly-registered-domain", "non-legitimate-site", "online-casino", "passport-data-theft", "payment-card-theft", "payment-harvesting", "payment-information-harvesting", "payment-information-theft", "payment-scam", "payroll-scam", "personal-information-harvesting", "phishing", "phishing-lure", "phishing-page", "phishing-site", "pig-butchering-scam", "pii-collection", "pirated-software", "ponzi-scheme", "pop-unders", "posta-kenya-impersonation", "potentially-malicious-domain", "privacy-risk", "profile-visitor-tracking", "pua", "random-subdomain", "recent-domain", "redirect-chain", "redirector", "refund-service", "retail-scam", "retail-sector", "roblox", "roblox-accounts", "roblox-impersonation", "scam", "scam-distribution", "scam-gateway", "scam-infrastructure", "scam-site", "scam-website", "script-hosting", "security-bypass", "seo-spam", "serviceontario", "shipping-protection-scam", "sms-verification-bypass", "social-engineering", "social-media-scam", "software-piracy", "spam-infrastructure", "spyware", "steam", "student-targeting", "surveillance-tools", "survey-scam", "suspicious-domain", "suspicious-file-type", "suspicious-pricing", "suspicious-subdomain", "template-based-storefront", "tiktok-impersonation", "tiktok-shop", "toll-charge", "toll-scam", "tracking", "traffic-citations", "traffic-direction-system", "traffic-distribution-system", "traffic-diversion", "traffic-redirection", "travel-scam", "travel-sector", "trojan", "trojanized-app", "twitter-impersonation", "txdmv", "txdmv-impersonation", "typosquatting", "uk-eta-visa", "unauthorized-tracking", "unofficial-app-distribution", "unreachable", "unverified-software-download", "unwanted-content", "unwanted-programs", "unwanted-software", "url-redirect", "url-redirector", "url-shortener", "urlert", "usdt", "usps", "vbucks-scam", "webcam-capture", "webcam360", "weebly-abuse", "wetransfer", "wetransfer-impersonation", "whatsapp-impersonation", "wisconsin-dot", "withdrawal-scam" ], "references": [ "https://urlert.com/domain/472hico.lat", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/aipixelss.com", "https://urlert.com/domain/allerides.shop", "https://urlert.com/domain/alpiyd.help", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/authpadi.com", "https://urlert.com/domain/awstrack.me", "https://urlert.com/domain/besowin.com", "https://urlert.com/domain/beyondclosetstore.com", "https://urlert.com/domain/bfhix.buzz", "https://urlert.com/domain/blogspot.com", "https://urlert.com/domain/bookscloud.net", "https://urlert.com/domain/boxstatusr.cfd", "https://urlert.com/domain/bpidirecto.top", "https://urlert.com/domain/bringitonmsg.com", "https://urlert.com/domain/ca-pagel.cyou", "https://urlert.com/domain/ca-pagel.icu", "https://urlert.com/domain/ca-pagel.sbs", "https://urlert.com/domain/ca-pages.biz.id" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Automotive", "Education", "Financial Services", "Government", "Hospitality", "Insurance", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 78, "URL": 80, "hostname": 42 }, "indicator_count": 200, "is_author": false, "is_subscribing": null, "subscriber_count": 33, "modified_text": "24 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69c1e21727bfc6fb3cacc6c1", "name": "URLert Daily Threat Intel \u2014 2026-03-24", "description": "URLert Daily Threat Intel \u2014 2026-03-24\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 77 | Indicators: 147\nConfirmed: 23 | Likely: 51 | Domain intel: 3\nTop threats: Phishing (64), Unknown (5), Dropper (4), Malware Hosting (2), Exploit Kit (1)\nDomains: 194872.xin, 370184.xin, acccat.com, amgaa.com, apkdone.co, banglachotikahinii.com, betsclub.top, binx.vip, casajoys.com, clickup.com, com-tjd.com, csvulcan.com, cute-love-site.lol, d893kl3...\n\n77 unique threats producing 147 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T00:45:38.797000", "created": "2026-03-24T01:00:07.920000", "tags": [ "account-takeover", "adult-content", "allegro-impersonation", "android-malware", "apk-malware", "automated-scan", "betting-impersonation", "brand-impersonation", "brightonseo", "browser-locking", "carding", "clickup-abuse", "cloaking", "cloud-storage-abuse", "combosquatting", "compromised-infrastructure", "compromised-site", "credential-harvesting", "credit-card-harvesting", "crypto-scam", "cryptocurrency", "cryptocurrency-payments", "cryptocurrency-scam", "cvv-shop", "daily-threat-intel", "deception", "deceptive-domain", "deceptive-download", "deceptive-interface", "deceptive-platform", "deceptive-practice", "deceptive-practices", "deceptive-redirects", "deceptive-site", "disney", "disneyplus", "domain-classification", "domain-shadowing", "e-commerce-fraud", "elon-musk-impersonation", "exit-scam", "fake-announcements", "fake-delivery-notification", "fake-document-preview", "fake-incentive", "fake-interface", "fake-notification", "fake-security-alert", "fake-security-check", "fake-shopping-site", "fake-toll-debt", "fake-toll-scam", "fedex-impersonation", "financial-fraud", "financial-impersonation", "financial-information-theft", "financial-misrepresentation", "financial-scam", "financial-services", "financial-theft", "flhsmv-impersonation", "forex-trading", "fortnite", "fraudulent-exchange", "fraudulent-indicators", "fraudulent-platform", "fraudulent-site", "fraudulent-website", "fund-harvesting", "fund-theft", "gambling-scam", "game-resource-generator", "gaming-scam", "gibberish-domain", "gibberish-text", "government-impersonation", "government-targeting", "high-risk-domain", "high-risk-tld", "illegal-pharmacy", "impersonation", "instagram-scam", "intelcom", "intelcom-impersonation", "investment-scam", "invitation-code", "ip-logger", "malicious-advertising", "malicious-infrastructure", "malicious-redirection", "malicious-script", "malvertising", "malware-delivery", "malware-distribution", "malware-dropper", "modified-android-apks", "nebula-x", "new-domain", "newly-registered-domain", "njmvc-impersonation", "olx", "onedrive-impersonation", "online-dating-scam", "onlyfans-impersonation", "outlook", "payment-fraud", "payment-harvesting", "payment-information-theft", "payment-scam", "phishing", "phishing-campaign", "phishing-site", "pig-butchering-scam", "pii-collection", "pop-up-scam", "power-mac-center", "predatory-billing", "prescription-drug-trafficking", "privacy-bypass", "privacy-risk", "problematic-transactions", "process-hacker", "qr-code-delivery", "recently-registered-domain", "redirect-chain", "redirect-cloaking", "redirector", "retail-scam", "risky-downloads", "roblox", "scam", "scam-site", "scam-store", "scareware", "sexually-explicit-content", "social-engineering", "social-media-scam", "social-media-scraping", "spam-distribution", "stolen-credit-cards", "subdomain-abuse", "suspicious-domain", "suspicious-redirection", "system-informer", "texas-dmv", "throwaway-domain", "ticketing-scam", "token-presale-scam", "toll-scam", "tracking", "typosquatting", "unauthorized-tracking", "underground-marketplace", "unofficial-app-store", "unregulated-platform", "unscanned-files", "unverified-software", "unverified-software-download", "unwanted-software", "urgency-scam", "url-shortener", "urlert", "usdc-impersonation", "vermont-dmv", "webcam-capture", "withdrawal-failure" ], "references": [ "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/fortfj.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 48, "hostname": 15 }, "indicator_count": 112, "is_author": false, "is_subscribing": null, "subscriber_count": 31, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69acca3692ba71ce9792362f", "name": "URLert Daily Threat Intel \u2014 2026-03-08", "description": "URLert Daily Threat Intel \u2014 2026-03-08\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 43 | Indicators: 83\nConfirmed: 5 | Likely: 35 | Domain intel: 3\nTop threats: Phishing (36), Malware Hosting (3), Malvertising (2), Dropper (1), Unknown (1)\nDomains: beb6.com, bitly.cx, cat-mxn.com, clipsexsub3x.net, cutt.ly, datess.one, donutstake.com, ebay.com, eph.cc, fesfo.cn, firstlook.gg, gepiu.cn, google.com, hrblocks.download, it.com, kittyescr...\n\n43 unique threats producing 83 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-06T22:05:40.567000", "created": "2026-03-08T01:00:35.927000", "tags": [ "account-management-impersonation", "adult-content", "ai-content", "amazon-impersonation", "atacadao", "automated-scan", "beb6", "booking-com", "booking-com-impersonation", "brand-impersonation", "cacau-show", "cacau-show-impersonation", "caterpillar-impersonation", "combosquatting", "compromised-site", "credential-harvesting", "cryptocurrency-scam", "daily-threat-intel", "data-harvesting", "deceptive-buttons", "deceptive-claims", "deceptive-pop-up", "deceptive-redirects", "deceptive-rewards", "deceptive-sign-up", "deceptive-site", "deceptive-url", "discord-scam", "disposable-infrastructure", "domain-age-misrepresentation", "domain-classification", "ebay", "evasive-tactics", "facesmsmart-com", "fake-banking-service", "fake-form", "fake-login-portal", "fake-promotion", "fake-reward", "financial-sector", "financial-services", "financial-services-targeting", "free-game-lure", "game-exploitation", "game-exploitation-tool", "game-hacks", "gift-card-scam", "giveaway-scam", "google-docs-abuse", "government-impersonation", "hello-kitty", "high-risk", "high-risk-tld", "impersonation", "information-stealer", "information-theft", "instagram-impersonation", "inventory-stealer", "investment-scam", "key-less-executor", "malicious-redirects", "malicious-registry", "malvertising", "malware-delivery", "malware-distribution", "malware-reports", "minecraft", "mobile-interface", "netflix-impersonation", "new-domain", "newly-registered-domain", "nigeria", "phishing", "phishing-infrastructure", "phishing-site", "phishing-technique", "playstation-impersonation", "potential-fraud", "potentially-harmful-software", "poundstretcher-impersonation", "prize-scam", "questionnaire-scam", "retail-e-commerce", "retail-ecommerce", "roblox", "scam", "scam-pages", "scareware", "sfi-mall", "social-engineering", "software-download", "spam-distribution", "subnautica-impersonation", "survey-scam", "suspicious-platform", "suspicious-redirection", "suspicious-tld", "telegram-bot", "telegram-impersonation", "tienda-mass", "trojan-horse", "typosquatting", "unregulated-gambling", "unwanted-software", "unwanted-software-download", "url-shortener", "urlert", "usdt-scam", "user-deception", "virus-warning", "vpn-lure", "wi-fi-password-scam" ], "references": [ "https://urlert.com/domain/beb6.com", "https://urlert.com/domain/bitly.cx", "https://urlert.com/domain/cat-mxn.com", "https://urlert.com/domain/clipsexsub3x.net", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/datess.one", "https://urlert.com/domain/donutstake.com", "https://urlert.com/domain/ebay.com", "https://urlert.com/domain/eph.cc", "https://urlert.com/domain/fesfo.cn", "https://urlert.com/domain/firstlook.gg", "https://urlert.com/domain/gepiu.cn", "https://urlert.com/domain/google.com", "https://urlert.com/domain/hrblocks.download", "https://urlert.com/domain/it.com", "https://urlert.com/domain/kittyescraft.com", "https://urlert.com/domain/kkinstagram.com", "https://urlert.com/domain/ko2bot.com", "https://urlert.com/domain/ngcpx.vip", "https://urlert.com/domain/nkfinanse.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Hospitality", "Manufacturing", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 31, "hostname": 8, "URL": 29 }, "indicator_count": 68, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "55 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://rbxmod.st/r/tools", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://rbxmod.st/r/tools", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780298737.942593 }