{ "type": "Domain", "indicator": "lobgem.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/lobgem.com", "alexa": "http://www.alexa.com/siteinfo/lobgem.com", "indicator": "lobgem.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 4272835231, "indicator": "lobgem.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 6, "pulses": [ { "id": "69cb1c9859187c911a7f4521", "name": "URLert Daily Threat Intel \u2014 2026-03-31", "description": "URLert Daily Threat Intel \u2014 2026-03-31\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 55 | Indicators: 98\nConfirmed: 15 | Likely: 35 | Domain intel: 5\nTop threats: Phishing (52), Malware Hosting (3)\nDomains: 143672.xin, accumulatedtokens.com, adgm-money.vip, bbpanad.com, canadamilksettlement.com, carziqo.com, carziqo.net, cracked-games.org, credviai.cfd, ct.ws, cxfilexplorer.online, derymilk72...\n\n55 unique threats producing 98 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-29T21:16:33.739000", "created": "2026-03-31T01:00:08.919000", "tags": [ "account-hijacking", "account-takeover", "adult-content-lure", "android-malware", "apk-distribution", "asset-recovery-scam", "automated-scan", "berlin-impersonation", "brand-impersonation", "brazil", "cadbury", "canada", "chatgpt", "cloaking", "cloudflare-bypass", "compromised-site", "consumer-targeting", "copyright-infringement", "credential-harvesting", "crypto-investment-scam", "cryptocurrency", "cryptocurrency-phishing", "cryptocurrency-scam", "daily-threat-intel", "data-harvesting", "deceptive-landing-page", "deceptive-site", "deceptive-tactic", "developer-platform-hosting", "domain-classification", "domain-masking", "e-commerce-fraud", "ecommerce-fraud", "electronics-scam", "email-collection", "email-validation-scam", "fake-discounts", "fake-game-generator", "fake-identity", "fake-login", "fake-login-page", "fake-traffic-citation", "financial-fraud", "financial-platform-impersonation", "financial-scam", "financial-services", "financial-services-impersonation", "fiverr", "fraud", "fraudulent-store", "free-hosting", "front-running", "game-cracking", "gaming", "government-impersonation", "healthcare-tourism", "highway-6-impersonation", "information-theft", "instagram", "intelcom-impersonation", "investment-fraud", "investment-scam", "job-scam", "lbank-impersonation", "lead-generation", "louisiana-omv", "mail-phishing", "maintenance-page-trick", "malicious-domain", "malicious-redirect", "malware-delivery", "malware-distribution", "malware-hosting", "mcdonalds-impersonation", "medical-data-harvesting", "microsoft", "nebula-x", "new-domain", "newly-registered-domain", "oklahoma", "online-fraud", "online-payment-solutions", "online-scam", "passive-income-scam", "payment-harvesting", "personal-information-theft", "phishing", "phishing-gateway", "phishing-site", "phishing-tactic", "pig-butchering", "pirated-software", "ponzi-scheme", "predatory-trading", "qr-code-service", "recently-registered-domain", "recruitment-scam", "referral-scam", "retail-sector", "riot-games", "sandwich-attacks", "scam", "scam-website", "security-awareness-training", "session-data", "short-lived-domain", "sms-verification-bypass", "social-engineering", "steam-impersonation", "suspicious-domain", "task-scam", "telecommunications", "telegram-impersonation", "toll-scam", "turkey", "typosquatting", "unverified-servers", "unwanted-programs", "url-shortener", "urlert", "valorant", "wallet-draining", "yahoo-impersonation", "youtube-downloader", "ytdown-to" ], "references": [ "https://urlert.com/domain/143672.xin", "https://urlert.com/domain/accumulatedtokens.com", "https://urlert.com/domain/adgm-money.vip", "https://urlert.com/domain/bbpanad.com", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/carziqo.com", "https://urlert.com/domain/carziqo.net", "https://urlert.com/domain/cracked-games.org", "https://urlert.com/domain/credviai.cfd", "https://urlert.com/domain/ct.ws", "https://urlert.com/domain/cxfilexplorer.online", "https://urlert.com/domain/derymilk72.com", "https://urlert.com/domain/dsj321.com", "https://urlert.com/domain/exvip001.cc", "https://urlert.com/domain/ey43.com", "https://urlert.com/domain/ffstyz.com", "https://urlert.com/domain/fgl.cc", "https://urlert.com/domain/friendlygoodshop.com", "https://urlert.com/domain/hzrid.life", "https://urlert.com/domain/is.gd" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Healthcare", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 34, "URL": 30, "hostname": 7 }, "indicator_count": 71, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "31 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c879b577a820f93cde5760", "name": "URLert Daily Threat Intel \u2014 2026-03-29", "description": "URLert Daily Threat Intel \u2014 2026-03-29\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 61 | Indicators: 90\nConfirmed: 15 | Likely: 46\nTop threats: Phishing (54), Malware Hosting (4), Dropper (2), Unknown (1)\nDomains: a2zapk.io, adescargar.net, ankergames.net, binancev7.com, bmblockchain.com, canadamilksettlement.com, casajoys.com, ct.ws, emcas.at, esportsbattlearena.com, ey43.com, find-enheder.com, flo...\n\n61 unique threats producing 90 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-28T00:11:25.123000", "created": "2026-03-29T01:00:37.518000", "tags": [ "advance-fee-scam", "adware", "african-development-bank", "aggressive-advertising", "android-malware", "apk-distribution", "apk-repository", "apple-impersonation", "automated-scan", "backdoor", "binance", "brand-impersonation", "clash-of-clans", "cloaking", "cloud-mining-scam", "cloudflare", "colombia", "credential-harvesting", "credit-card-phishing", "crypto-investment-scam", "crypto-scam", "cryptocurrency", "cryptocurrency-scam", "customer-portal", "daily-threat-intel", "deceptive-campaigns", "deceptive-content", "deceptive-marketing", "deceptive-redirection", "deceptive-site", "digital-asset-theft", "dpd-impersonation", "elon-musk-impersonation", "esports-scam", "fake-casino", "fake-grants", "fake-login", "fake-login-page", "fake-merchandise", "fake-promotion", "fake-rewards", "financial-fraud", "financial-scam", "fintech-impersonation", "fraud", "fraudulent-domain", "fraudulent-payment-gateway", "fraudulent-platform", "fraudulent-websites", "free-hosting", "french-government", "game-resources-scam", "gaming-platform", "gaming-scam", "gmail-impersonation", "google-impersonation", "government-impersonation", "grant-scam", "grayware", "harmful-links", "high-risk-domain", "high-risk-tld", "impersonation", "instagram", "investment-scam", "ip-logging", "malicious-distribution", "malicious-download", "malicious-redirect", "malicious-redirection", "malicious-redirects", "malvertising", "malware-distribution", "malware-download", "malware-hosting", "modified-app", "nebula-x", "new-domain", "newly-registered-domain", "payload-delivery", "payment-information-harvesting", "payment-information-theft", "payment-scam", "personal-information-theft", "phishing", "phishing-campaigns", "phishing-infrastructure", "phishing-site", "pig-butchering", "pirated-game-distribution", "privacy-risk", "pua", "pubg-mobile", "redirect-chain", "retail-scam", "retail-sector", "riskware", "roblox-impersonation", "scam", "scam-domain", "serial-scam-operation", "social-engineering", "social-media-scam", "social-media-scams", "spyware", "steam-impersonation", "supply-chain-risk", "survey-scam", "telecommunications", "telecommunications-sector", "throwaway-domain", "twitter-impersonation", "uk-government", "unauthorized-software", "unauthorized-tracking", "unknown-domain", "urgency-tactics", "url-shortener", "urlert", "usdt", "usdt-wallet-services", "vpn-service", "webcam-capture", "webcam-streaming", "x-twitter", "youtube-bots" ], "references": [ "https://urlert.com/domain/a2zapk.io", "https://urlert.com/domain/adescargar.net", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/binancev7.com", "https://urlert.com/domain/bmblockchain.com", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/ct.ws", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/esportsbattlearena.com", "https://urlert.com/domain/ey43.com", "https://urlert.com/domain/find-enheder.com", "https://urlert.com/domain/flowcode.com", "https://urlert.com/domain/fse.cc", "https://urlert.com/domain/govaxrs.help", "https://urlert.com/domain/great-site.net", "https://urlert.com/domain/hyi.cc", "https://urlert.com/domain/is.gd", "https://urlert.com/domain/itnet247.nl", "https://urlert.com/domain/ldwlzq.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 25, "URL": 32, "hostname": 10 }, "indicator_count": 67, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c333aacf8fedcd36832138", "name": "URLert Daily Threat Intel \u2014 2026-03-25", "description": "URLert Daily Threat Intel \u2014 2026-03-25\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 79 | Indicators: 140\nConfirmed: 27 | Likely: 48 | Domain intel: 4\nTop threats: Phishing (66), Dropper (5), Unknown (4), Malware Hosting (3), C2 Infrastructure (1)\nDomains: 571084.xin, 9990.site, app.link, appwrite.network, arcworld.one, aviatorfine.com, beetrade.me, bit.ly, bonanza-gha.work, casajoys.com, compromisedblog.com, cryptor.plus, daily777ween666.co...\n\n79 unique threats producing 140 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T20:57:23.519000", "created": "2026-03-25T01:00:26.546000", "tags": [ ".cc-tld", "abuse-platform", "adult-content", "adult-scam", "affiliate-marketing", "aggressive-popups", "anti-analysis", "ar24-impersonation", "automated-scan", "blackmail-tool", "bonanza-impersonation", "brand-impersonation", "burn-site", "california-dmv", "certificate-mismatch", "chile", "cnn-impersonation", "combosquatting", "command-and-control", "compromised-site", "copec", "copec-impersonation", "credential-harvesting", "credit-card-theft", "crypto-investment-scam", "crypto-scam", "cryptocurrency", "cryptocurrency-fraud", "cryptocurrency-scam", "daily-threat-intel", "data-collection", "data-exfiltration", "data-harvesting", "data-theft", "deceptive-claims", "deceptive-content", "deceptive-landing-page", "deceptive-marketing", "deceptive-practices", "deceptive-reward-site", "deceptive-rewards", "deceptive-site", "deceptive-social-viewer", "deceptive-tactics", "digital-currency-theft", "dmv-impersonation", "document-sharing-impersonation", "domain-classification", "domain-rotation", "drive-by-download", "e-commerce-scam", "email-phishing", "evasion", "exit-scam", "facebook-messenger", "fake-login", "fake-login-portal", "fake-offer", "fake-phone-number", "fake-retail", "fake-toll-charge", "fake-verification", "financial-data-harvesting", "financial-fraud", "financial-scam", "financial-services-impersonation", "forced-download", "forepaas", "forepaas-impersonation", "fraudulent-deposits", "fraudulent-investment", "fraudulent-store", "fraudulent-website", "gambling-promotion", "gambling-scam", "gambling-site", "game-resource-generator", "gibberish-domain", "gmail-impersonation", "government-impersonation", "high-risk-gambling", "high-risk-tld", "high-traffic", "impersonation", "instagram-impersonation", "investment-scam", "kyc-fraud", "lead-generation", "litellm-malware", "login-page", "low-reputation-domain", "malicious-download", "malicious-redirect", "malicious-redirection", "malicious-redirects", "malicious-site", "malicious-url", "malware-distribution", "malware-download", "malware-dropper", "mfa-harvesting", "microsoft", "microsoft-defender-flagged", "myprotein", "nebula-x", "new-domain", "newly-registered-domain", "no-customer-support", "obscure-site", "online-casino-scam", "package-delivery-scam", "payment-information-theft", "payment-scam", "personal-information-theft", "phishing", "phishing-campaign", "phishing-gateway", "phishing-site", "phone-number-harvesting", "pii-collection", "pirated-games", "pop-mart-impersonation", "price-scam", "privacy-risk", "privacy-violation", "quickbooks", "redirect", "redirect-chain", "redirect-cloaking", "redirect-service", "redirection", "redirector", "redirects", "reverb-impersonation", "risky-url", "rug-pull", "sars-impersonation", "scam", "social-engineering", "social-media-abuse", "social-media-campaign", "social-media-scam", "social-media-scams", "south-africa", "spam-distribution", "spotify-impersonation", "streaming-service-scam", "subscription-scam", "supply-chain-attack", "support-scam", "surveillance", "suspicious-domain", "taplink-abuse", "task-scam", "tencent-hosting", "third-party-data-sharing", "throwaway-domain", "tracking", "tracking-url", "typosquatting", "unaccountable-infrastructure", "unauthorized-software", "undelivered-goods", "unlicensed-gambling", "unrealistic-pricing", "unreleased-products", "unsecured-file-sharing", "unwanted-software", "url-cloaking", "url-shortener", "urlert", "usdt", "usdt-scam", "user-manipulation", "vpn-impersonation", "webcam-capture", "webcam-tracking", "weebly-abuse", "xvideos-impersonation", "zero-day-registration" ], "references": [ "https://urlert.com/domain/571084.xin", "https://urlert.com/domain/9990.site", "https://urlert.com/domain/app.link", "https://urlert.com/domain/appwrite.network", "https://urlert.com/domain/arcworld.one", "https://urlert.com/domain/aviatorfine.com", "https://urlert.com/domain/beetrade.me", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/bonanza-gha.work", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/compromisedblog.com", "https://urlert.com/domain/cryptor.plus", "https://urlert.com/domain/daily777ween666.com", "https://urlert.com/domain/dpoiq.life", "https://urlert.com/domain/e.vg", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/explodely.com", "https://urlert.com/domain/extravagant-streaming.life", "https://urlert.com/domain/fedexredeliveryform.com", "https://urlert.com/domain/fgl.cc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Energy", "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 37, "hostname": 15, "URL": 36 }, "indicator_count": 88, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "37 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c1e21727bfc6fb3cacc6c1", "name": "URLert Daily Threat Intel \u2014 2026-03-24", "description": "URLert Daily Threat Intel \u2014 2026-03-24\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 77 | Indicators: 147\nConfirmed: 23 | Likely: 51 | Domain intel: 3\nTop threats: Phishing (64), Unknown (5), Dropper (4), Malware Hosting (2), Exploit Kit (1)\nDomains: 194872.xin, 370184.xin, acccat.com, amgaa.com, apkdone.co, banglachotikahinii.com, betsclub.top, binx.vip, casajoys.com, clickup.com, com-tjd.com, csvulcan.com, cute-love-site.lol, d893kl3...\n\n77 unique threats producing 147 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T00:45:38.797000", "created": "2026-03-24T01:00:07.920000", "tags": [ "account-takeover", "adult-content", "allegro-impersonation", "android-malware", "apk-malware", "automated-scan", "betting-impersonation", "brand-impersonation", "brightonseo", "browser-locking", "carding", "clickup-abuse", "cloaking", "cloud-storage-abuse", "combosquatting", "compromised-infrastructure", "compromised-site", "credential-harvesting", "credit-card-harvesting", "crypto-scam", "cryptocurrency", "cryptocurrency-payments", "cryptocurrency-scam", "cvv-shop", "daily-threat-intel", "deception", "deceptive-domain", "deceptive-download", "deceptive-interface", "deceptive-platform", "deceptive-practice", "deceptive-practices", "deceptive-redirects", "deceptive-site", "disney", "disneyplus", "domain-classification", "domain-shadowing", "e-commerce-fraud", "elon-musk-impersonation", "exit-scam", "fake-announcements", "fake-delivery-notification", "fake-document-preview", "fake-incentive", "fake-interface", "fake-notification", "fake-security-alert", "fake-security-check", "fake-shopping-site", "fake-toll-debt", "fake-toll-scam", "fedex-impersonation", "financial-fraud", "financial-impersonation", "financial-information-theft", "financial-misrepresentation", "financial-scam", "financial-services", "financial-theft", "flhsmv-impersonation", "forex-trading", "fortnite", "fraudulent-exchange", "fraudulent-indicators", "fraudulent-platform", "fraudulent-site", "fraudulent-website", "fund-harvesting", "fund-theft", "gambling-scam", "game-resource-generator", "gaming-scam", "gibberish-domain", "gibberish-text", "government-impersonation", "government-targeting", "high-risk-domain", "high-risk-tld", "illegal-pharmacy", "impersonation", "instagram-scam", "intelcom", "intelcom-impersonation", "investment-scam", "invitation-code", "ip-logger", "malicious-advertising", "malicious-infrastructure", "malicious-redirection", "malicious-script", "malvertising", "malware-delivery", "malware-distribution", "malware-dropper", "modified-android-apks", "nebula-x", "new-domain", "newly-registered-domain", "njmvc-impersonation", "olx", "onedrive-impersonation", "online-dating-scam", "onlyfans-impersonation", "outlook", "payment-fraud", "payment-harvesting", "payment-information-theft", "payment-scam", "phishing", "phishing-campaign", "phishing-site", "pig-butchering-scam", "pii-collection", "pop-up-scam", "power-mac-center", "predatory-billing", "prescription-drug-trafficking", "privacy-bypass", "privacy-risk", "problematic-transactions", "process-hacker", "qr-code-delivery", "recently-registered-domain", "redirect-chain", "redirect-cloaking", "redirector", "retail-scam", "risky-downloads", "roblox", "scam", "scam-site", "scam-store", "scareware", "sexually-explicit-content", "social-engineering", "social-media-scam", "social-media-scraping", "spam-distribution", "stolen-credit-cards", "subdomain-abuse", "suspicious-domain", "suspicious-redirection", "system-informer", "texas-dmv", "throwaway-domain", "ticketing-scam", "token-presale-scam", "toll-scam", "tracking", "typosquatting", "unauthorized-tracking", "underground-marketplace", "unofficial-app-store", "unregulated-platform", "unscanned-files", "unverified-software", "unverified-software-download", "unwanted-software", "urgency-scam", "url-shortener", "urlert", "usdc-impersonation", "vermont-dmv", "webcam-capture", "withdrawal-failure" ], "references": [ "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/fortfj.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 48, "hostname": 15 }, "indicator_count": 112, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "38 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bdedaa781647cafa200ff2", "name": "URLert Daily Threat Intel \u2014 2026-03-21", "description": "URLert Daily Threat Intel \u2014 2026-03-21\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 61 | Indicators: 106\nConfirmed: 16 | Likely: 38 | Domain intel: 6 | Manual: 1\nTop threats: Phishing (46), Malware Hosting (6), Malvertising (3), Dropper (3), Scanning Host (1)\nDomains: 4waes.xyz, 713482.xin, africa.com, altbu.life, any.run, anytimesbook.com, appinjects.site, badbunny-livenation.com, besttell.shop, bit.ly, bookingil.com, camperstoreeu.com, cliqforms.com, ...\n\n61 unique threats producing 106 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-20T01:13:34.420000", "created": "2026-03-21T01:00:26.974000", "tags": [ "adult-content-impersonation", "advance-fee-scam", "adware-distribution", "ai-content", "altbu-life", "anonymous-hosting", "apk-malware", "app-scam", "apple-icloud", "ar24-impersonation", "automated-scan", "bad-bunny", "booking-com-impersonation", "brand-impersonation", "business-proposal-scam", "camper", "cash-prize-scam", "cliqforms", "cloaking", "combosquatting", "coordinated-spamming", "credential-harvesting", "cryptocurrency", "cryptocurrency-fraud", "cryptocurrency-scam", "daily-threat-intel", "dana", "data-harvesting", "deceptive-domain", "deceptive-download", "deceptive-practices", "deceptive-redirect", "deceptive-subscription-trap", "deceptive-warnings", "domain-classification", "dropper", "e-commerce-scam", "ecco-impersonation", "eid-al-fitr-scam", "email-credentials", "emulator-impersonation", "evasion", "evasive-tactics", "exit-scam", "fake-apk", "fake-browser-alert", "fake-giveaway", "fake-government-impersonation", "fake-security-alert", "fake-security-check", "fake-store", "fake-toll-charge", "fake-urgency", "fake-verification", "financial-fraud", "financial-impersonation", "financial-loss", "financial-scam", "fraudulent-content", "fraudulent-ecommerce", "fraudulent-platform", "game-exploits", "game-mod-scam", "gaming", "google-impersonation", "google-sites", "google-sites-abuse", "government-impersonation", "healthcare-sector", "high-risk-domain", "high-risk-tld", "hospitality", "icici-bank", "impersonation", "impersonation-credit-union", "information-harvesting", "instagram-impersonation", "intelcom", "intellectual-property-abuse", "investment-scam", "lead-generation", "live-nation", "local-network-scanning", "malicious-domain", "malicious-download", "malicious-redirect", "malicious-redirector", "malvertising", "malware-delivery-tactic", "malware-distribution", "malware-hosting", "malware-risk", "manual-entry", "microsoft-account", "microsoft-sharepoint", "mobile-data-scam", "money-mule-scheme", "msi-malware", "multi-stage-redirect", "nebula-x", "new-domain", "newly-registered-domain", "non-delivery-scam", "nytimes-impersonation", "offer-scam", "payment-gateway-scam", "payment-harvesting", "payment-information-theft", "payment-scam", "personal-information-harvesting", "phishing", "phishing-site", "phone-number-harvesting", "pig-butchering", "pirated-software", "prize-scam", "pump-fun-impersonation", "reconnaissance", "recruitment-fraud", "redirect", "redirect-chain", "redirector", "scam", "scam-domain", "scam-page", "scam-site", "sharepoint", "short-lived-operation", "social-engineering", "social-media-campaigns", "software-piracy", "spoofer", "survey-scam", "suspicious-domain", "suspicious-redirection", "task-scam", "texas-dmv", "texas-roadhouse-impersonation", "ticket-scam", "typosquat", "typosquatting", "uncensored-ai", "unrelated-domain", "unverified-file-sharing", "unwanted-software", "url-shortener", "url-shortening", "urlert", "usdt", "vercel-subdomain", "virtual-systems", "vulnerability-scanning", "youtube-bots", "zimbra", "zimbra-impersonation" ], "references": [ "https://urlert.com/domain/4waes.xyz", "https://urlert.com/domain/713482.xin", "https://urlert.com/domain/africa.com", "https://urlert.com/domain/altbu.life", "https://urlert.com/domain/any.run", "https://urlert.com/domain/anytimesbook.com", "https://urlert.com/domain/appinjects.site", "https://urlert.com/domain/badbunny-livenation.com", "https://urlert.com/domain/besttell.shop", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/bookingil.com", "https://urlert.com/domain/camperstoreeu.com", "https://urlert.com/domain/cliqforms.com", "https://urlert.com/domain/connect-alert.support", "https://urlert.com/domain/crn77.com", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/deltaexploits.gg", "https://urlert.com/domain/eccodleuvip.click", "https://urlert.com/domain/extranetpulsereservation.help", "https://urlert.com/domain/fkg.cc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Healthcare", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 34, "URL": 29, "hostname": 10 }, "indicator_count": 73, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "41 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bb4aadb88b551afddc4bb3", "name": "URLert Daily Threat Intel \u2014 2026-03-19", "description": "URLert Daily Threat Intel \u2014 2026-03-19\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 44 | Indicators: 89\nConfirmed: 23 | Likely: 21\nTop threats: Phishing (39), Dropper (3), Malware Hosting (1), Unknown (1)\nDomains: aidleyy.live, bemii.cn, bit.ly, canadianbread.top, careers-international-scheduleallianz-apply.com, comp-tech.co, deliveryreschedulecanadapost.com, desertcards.com, effectivegatecpm.com, g...\n\n44 unique threats producing 89 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-17T23:52:51.892000", "created": "2026-03-19T01:00:29.115000", "tags": [ "adult-scam", "adult-themed-lure", "advance-fee-scam", "allianz-impersonation", "australia", "automated-promotion", "automated-scan", "betting-scam", "brand-impersonation", "clash-of-clans", "cloaking", "coles-impersonation", "combosquatting", "coordinated-spam", "coordinated-spamming", "credential-harvesting", "cryptocurrency-scam", "daily-threat-intel", "dangerous-site", "deceptive-domain", "deceptive-practices", "deceptive-redirects", "deceptive-scam", "deceptive-tactics", "deceptive-url", "defi-scam", "delivery-service-impersonation", "denmark", "docusign-impersonation", "domain-abuse", "donation-scam", "engie-impersonation", "fake-app-store", "fake-survey", "fake-toll-scam", "financial-data-theft", "financial-fraud", "financial-information-collection", "financial-scam", "game-resource-generator", "giveaway-scam", "google", "government-impersonation", "high-risk-domain", "illinois-government", "information-harvesting", "ip-logger", "lack-of-transparency", "location-tracking", "login-form", "login-page", "malicious-domain", "malicious-link-distribution", "malicious-redirection", "malvertising", "malware-delivery", "malware-distribution", "michigan-government", "microsoft-impersonation", "misspelled-domain", "new-domain", "newly-registered-domain", "obscured-destination", "ohio-bureau-of-motor-vehicles", "okta-impersonation", "payload-delivery", "payment-gateway-impersonation", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "prize-scam", "qr-code-scam", "recently-registered-domain", "redirect", "redirect-cloaking", "reputation-hijacking", "roblox", "roblox-users", "scam", "settlement-scam", "social-engineering", "social-media-campaign", "social-media-campaigns", "social-media-manipulation", "spam-distribution", "spotify", "survey-scam", "suspicious-app-download", "suspicious-domain", "suspicious-traffic", "tarte-impersonation", "telstra-impersonation", "throwaway-domain", "tiktok-scam", "toll-scam", "travel-industry", "typosquatting", "unaccountable-infrastructure", "unauthorized-vibration", "unregistered-infrastructure", "url-shortener", "urlert", "vercel-hosting", "wallet-draining", "withdrawal-scam", "xiaomi-impersonation", "youtube-bots" ], "references": [ "https://urlert.com/domain/aidleyy.live", "https://urlert.com/domain/bemii.cn", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/canadianbread.top", "https://urlert.com/domain/careers-international-scheduleallianz-apply.com", "https://urlert.com/domain/comp-tech.co", "https://urlert.com/domain/deliveryreschedulecanadapost.com", "https://urlert.com/domain/desertcards.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/goo.su", "https://urlert.com/domain/gov-penh.bike", "https://urlert.com/domain/gov-tvsd.bond", "https://urlert.com/domain/j82k.site", "https://urlert.com/domain/jogjamuslim.com", "https://urlert.com/domain/juniorake.com", "https://urlert.com/domain/kec.az", "https://urlert.com/domain/ln.run", "https://urlert.com/domain/lobgem.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/mrbeastsgifts.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Energy", "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 27, "URL": 27, "hostname": 11 }, "indicator_count": 65, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "43 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://urlert.com/domain/bmblockchain.com", "https://urlert.com/domain/binancev7.com", "https://urlert.com/domain/great-site.net", "https://urlert.com/domain/deliveryreschedulecanadapost.com", "https://urlert.com/domain/cracked-games.org", "https://urlert.com/domain/find-enheder.com", "https://urlert.com/domain/bbpanad.com", "https://urlert.com/domain/adgm-money.vip", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/gov-penh.bike", "https://urlert.com/domain/juniorake.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/e.vg", "https://urlert.com/domain/cxfilexplorer.online", "https://urlert.com/domain/aidleyy.live", "https://urlert.com/domain/adescargar.net", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/canadianbread.top", "https://urlert.com/domain/daily777ween666.com", "https://urlert.com/domain/extravagant-streaming.life", "https://urlert.com/domain/dpoiq.life", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/fortfj.com", "https://urlert.com/domain/connect-alert.support", "https://urlert.com/domain/kec.az", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/9990.site", "https://urlert.com/domain/appinjects.site", "https://urlert.com/domain/besttell.shop", "https://urlert.com/domain/dsj321.com", "https://urlert.com/domain/4waes.xyz", "https://urlert.com/domain/accumulatedtokens.com", "https://urlert.com/domain/desertcards.com", "https://urlert.com/domain/badbunny-livenation.com", "https://urlert.com/domain/crn77.com", "https://urlert.com/domain/cliqforms.com", "https://urlert.com/domain/comp-tech.co", "https://urlert.com/domain/app.link", "https://urlert.com/domain/flowcode.com", "https://urlert.com/domain/is.gd", "https://urlert.com/domain/143672.xin", "https://urlert.com/domain/carziqo.net", "https://urlert.com/domain/a2zapk.io", "https://urlert.com/domain/eccodleuvip.click", "https://urlert.com/domain/camperstoreeu.com", "https://urlert.com/domain/exvip001.cc", "https://urlert.com/domain/aviatorfine.com", "https://urlert.com/domain/derymilk72.com", "https://urlert.com/domain/ey43.com", "https://urlert.com/domain/esportsbattlearena.com", "https://urlert.com/domain/fedexredeliveryform.com", "https://urlert.com/domain/cryptor.plus", "https://urlert.com/domain/hyi.cc", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/713482.xin", "https://urlert.com/domain/lobgem.com", "https://urlert.com/domain/extranetpulsereservation.help", "https://urlert.com/domain/itnet247.nl", "https://urlert.com/domain/appwrite.network", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/j82k.site", "https://urlert.com/domain/571084.xin", "https://urlert.com/domain/credviai.cfd", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/explodely.com", "https://urlert.com/domain/gov-tvsd.bond", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/jogjamuslim.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/mrbeastsgifts.com", "https://urlert.com/domain/compromisedblog.com", "https://urlert.com/domain/fse.cc", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/carziqo.com", "https://urlert.com/domain/beetrade.me", "https://urlert.com/domain/govaxrs.help", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/ln.run", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/fkg.cc", "https://urlert.com/domain/deltaexploits.gg", "https://urlert.com/domain/altbu.life", "https://urlert.com/domain/bookingil.com", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/anytimesbook.com", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/africa.com", "https://urlert.com/domain/ldwlzq.com", "https://urlert.com/domain/any.run", "https://urlert.com/domain/goo.su", "https://urlert.com/domain/friendlygoodshop.com", "https://urlert.com/domain/hzrid.life", "https://urlert.com/domain/fgl.cc", "https://urlert.com/domain/ffstyz.com", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/careers-international-scheduleallianz-apply.com", "https://urlert.com/domain/bonanza-gha.work", "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/ct.ws", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/arcworld.one", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/bemii.cn" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Government", "Hospitality", "Healthcare", "Technology", "Logistics / supply chain", "Financial services", "Media / entertainment", "Retail / e-commerce", "Energy", "Telecommunications" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 6, "pulses": [ { "id": "69cb1c9859187c911a7f4521", "name": "URLert Daily Threat Intel \u2014 2026-03-31", "description": "URLert Daily Threat Intel \u2014 2026-03-31\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 55 | Indicators: 98\nConfirmed: 15 | Likely: 35 | Domain intel: 5\nTop threats: Phishing (52), Malware Hosting (3)\nDomains: 143672.xin, accumulatedtokens.com, adgm-money.vip, bbpanad.com, canadamilksettlement.com, carziqo.com, carziqo.net, cracked-games.org, credviai.cfd, ct.ws, cxfilexplorer.online, derymilk72...\n\n55 unique threats producing 98 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-29T21:16:33.739000", "created": "2026-03-31T01:00:08.919000", "tags": [ "account-hijacking", "account-takeover", "adult-content-lure", "android-malware", "apk-distribution", "asset-recovery-scam", "automated-scan", "berlin-impersonation", "brand-impersonation", "brazil", "cadbury", "canada", "chatgpt", "cloaking", "cloudflare-bypass", "compromised-site", "consumer-targeting", "copyright-infringement", "credential-harvesting", "crypto-investment-scam", "cryptocurrency", "cryptocurrency-phishing", "cryptocurrency-scam", "daily-threat-intel", "data-harvesting", "deceptive-landing-page", "deceptive-site", "deceptive-tactic", "developer-platform-hosting", "domain-classification", "domain-masking", "e-commerce-fraud", "ecommerce-fraud", "electronics-scam", "email-collection", "email-validation-scam", "fake-discounts", "fake-game-generator", "fake-identity", "fake-login", "fake-login-page", "fake-traffic-citation", "financial-fraud", "financial-platform-impersonation", "financial-scam", "financial-services", "financial-services-impersonation", "fiverr", "fraud", "fraudulent-store", "free-hosting", "front-running", "game-cracking", "gaming", "government-impersonation", "healthcare-tourism", "highway-6-impersonation", "information-theft", "instagram", "intelcom-impersonation", "investment-fraud", "investment-scam", "job-scam", "lbank-impersonation", "lead-generation", "louisiana-omv", "mail-phishing", "maintenance-page-trick", "malicious-domain", "malicious-redirect", "malware-delivery", "malware-distribution", "malware-hosting", "mcdonalds-impersonation", "medical-data-harvesting", "microsoft", "nebula-x", "new-domain", "newly-registered-domain", "oklahoma", "online-fraud", "online-payment-solutions", "online-scam", "passive-income-scam", "payment-harvesting", "personal-information-theft", "phishing", "phishing-gateway", "phishing-site", "phishing-tactic", "pig-butchering", "pirated-software", "ponzi-scheme", "predatory-trading", "qr-code-service", "recently-registered-domain", "recruitment-scam", "referral-scam", "retail-sector", "riot-games", "sandwich-attacks", "scam", "scam-website", "security-awareness-training", "session-data", "short-lived-domain", "sms-verification-bypass", "social-engineering", "steam-impersonation", "suspicious-domain", "task-scam", "telecommunications", "telegram-impersonation", "toll-scam", "turkey", "typosquatting", "unverified-servers", "unwanted-programs", "url-shortener", "urlert", "valorant", "wallet-draining", "yahoo-impersonation", "youtube-downloader", "ytdown-to" ], "references": [ "https://urlert.com/domain/143672.xin", "https://urlert.com/domain/accumulatedtokens.com", "https://urlert.com/domain/adgm-money.vip", "https://urlert.com/domain/bbpanad.com", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/carziqo.com", "https://urlert.com/domain/carziqo.net", "https://urlert.com/domain/cracked-games.org", "https://urlert.com/domain/credviai.cfd", "https://urlert.com/domain/ct.ws", "https://urlert.com/domain/cxfilexplorer.online", "https://urlert.com/domain/derymilk72.com", "https://urlert.com/domain/dsj321.com", "https://urlert.com/domain/exvip001.cc", "https://urlert.com/domain/ey43.com", "https://urlert.com/domain/ffstyz.com", "https://urlert.com/domain/fgl.cc", "https://urlert.com/domain/friendlygoodshop.com", "https://urlert.com/domain/hzrid.life", "https://urlert.com/domain/is.gd" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Healthcare", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 34, "URL": 30, "hostname": 7 }, "indicator_count": 71, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "31 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c879b577a820f93cde5760", "name": "URLert Daily Threat Intel \u2014 2026-03-29", "description": "URLert Daily Threat Intel \u2014 2026-03-29\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 61 | Indicators: 90\nConfirmed: 15 | Likely: 46\nTop threats: Phishing (54), Malware Hosting (4), Dropper (2), Unknown (1)\nDomains: a2zapk.io, adescargar.net, ankergames.net, binancev7.com, bmblockchain.com, canadamilksettlement.com, casajoys.com, ct.ws, emcas.at, esportsbattlearena.com, ey43.com, find-enheder.com, flo...\n\n61 unique threats producing 90 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-28T00:11:25.123000", "created": "2026-03-29T01:00:37.518000", "tags": [ "advance-fee-scam", "adware", "african-development-bank", "aggressive-advertising", "android-malware", "apk-distribution", "apk-repository", "apple-impersonation", "automated-scan", "backdoor", "binance", "brand-impersonation", "clash-of-clans", "cloaking", "cloud-mining-scam", "cloudflare", "colombia", "credential-harvesting", "credit-card-phishing", "crypto-investment-scam", "crypto-scam", "cryptocurrency", "cryptocurrency-scam", "customer-portal", "daily-threat-intel", "deceptive-campaigns", "deceptive-content", "deceptive-marketing", "deceptive-redirection", "deceptive-site", "digital-asset-theft", "dpd-impersonation", "elon-musk-impersonation", "esports-scam", "fake-casino", "fake-grants", "fake-login", "fake-login-page", "fake-merchandise", "fake-promotion", "fake-rewards", "financial-fraud", "financial-scam", "fintech-impersonation", "fraud", "fraudulent-domain", "fraudulent-payment-gateway", "fraudulent-platform", "fraudulent-websites", "free-hosting", "french-government", "game-resources-scam", "gaming-platform", "gaming-scam", "gmail-impersonation", "google-impersonation", "government-impersonation", "grant-scam", "grayware", "harmful-links", "high-risk-domain", "high-risk-tld", "impersonation", "instagram", "investment-scam", "ip-logging", "malicious-distribution", "malicious-download", "malicious-redirect", "malicious-redirection", "malicious-redirects", "malvertising", "malware-distribution", "malware-download", "malware-hosting", "modified-app", "nebula-x", "new-domain", "newly-registered-domain", "payload-delivery", "payment-information-harvesting", "payment-information-theft", "payment-scam", "personal-information-theft", "phishing", "phishing-campaigns", "phishing-infrastructure", "phishing-site", "pig-butchering", "pirated-game-distribution", "privacy-risk", "pua", "pubg-mobile", "redirect-chain", "retail-scam", "retail-sector", "riskware", "roblox-impersonation", "scam", "scam-domain", "serial-scam-operation", "social-engineering", "social-media-scam", "social-media-scams", "spyware", "steam-impersonation", "supply-chain-risk", "survey-scam", "telecommunications", "telecommunications-sector", "throwaway-domain", "twitter-impersonation", "uk-government", "unauthorized-software", "unauthorized-tracking", "unknown-domain", "urgency-tactics", "url-shortener", "urlert", "usdt", "usdt-wallet-services", "vpn-service", "webcam-capture", "webcam-streaming", "x-twitter", "youtube-bots" ], "references": [ "https://urlert.com/domain/a2zapk.io", "https://urlert.com/domain/adescargar.net", "https://urlert.com/domain/ankergames.net", "https://urlert.com/domain/binancev7.com", "https://urlert.com/domain/bmblockchain.com", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/ct.ws", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/esportsbattlearena.com", "https://urlert.com/domain/ey43.com", "https://urlert.com/domain/find-enheder.com", "https://urlert.com/domain/flowcode.com", "https://urlert.com/domain/fse.cc", "https://urlert.com/domain/govaxrs.help", "https://urlert.com/domain/great-site.net", "https://urlert.com/domain/hyi.cc", "https://urlert.com/domain/is.gd", "https://urlert.com/domain/itnet247.nl", "https://urlert.com/domain/ldwlzq.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 25, "URL": 32, "hostname": 10 }, "indicator_count": 67, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c333aacf8fedcd36832138", "name": "URLert Daily Threat Intel \u2014 2026-03-25", "description": "URLert Daily Threat Intel \u2014 2026-03-25\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 79 | Indicators: 140\nConfirmed: 27 | Likely: 48 | Domain intel: 4\nTop threats: Phishing (66), Dropper (5), Unknown (4), Malware Hosting (3), C2 Infrastructure (1)\nDomains: 571084.xin, 9990.site, app.link, appwrite.network, arcworld.one, aviatorfine.com, beetrade.me, bit.ly, bonanza-gha.work, casajoys.com, compromisedblog.com, cryptor.plus, daily777ween666.co...\n\n79 unique threats producing 140 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T20:57:23.519000", "created": "2026-03-25T01:00:26.546000", "tags": [ ".cc-tld", "abuse-platform", "adult-content", "adult-scam", "affiliate-marketing", "aggressive-popups", "anti-analysis", "ar24-impersonation", "automated-scan", "blackmail-tool", "bonanza-impersonation", "brand-impersonation", "burn-site", "california-dmv", "certificate-mismatch", "chile", "cnn-impersonation", "combosquatting", "command-and-control", "compromised-site", "copec", "copec-impersonation", "credential-harvesting", "credit-card-theft", "crypto-investment-scam", "crypto-scam", "cryptocurrency", "cryptocurrency-fraud", "cryptocurrency-scam", "daily-threat-intel", "data-collection", "data-exfiltration", "data-harvesting", "data-theft", "deceptive-claims", "deceptive-content", "deceptive-landing-page", "deceptive-marketing", "deceptive-practices", "deceptive-reward-site", "deceptive-rewards", "deceptive-site", "deceptive-social-viewer", "deceptive-tactics", "digital-currency-theft", "dmv-impersonation", "document-sharing-impersonation", "domain-classification", "domain-rotation", "drive-by-download", "e-commerce-scam", "email-phishing", "evasion", "exit-scam", "facebook-messenger", "fake-login", "fake-login-portal", "fake-offer", "fake-phone-number", "fake-retail", "fake-toll-charge", "fake-verification", "financial-data-harvesting", "financial-fraud", "financial-scam", "financial-services-impersonation", "forced-download", "forepaas", "forepaas-impersonation", "fraudulent-deposits", "fraudulent-investment", "fraudulent-store", "fraudulent-website", "gambling-promotion", "gambling-scam", "gambling-site", "game-resource-generator", "gibberish-domain", "gmail-impersonation", "government-impersonation", "high-risk-gambling", "high-risk-tld", "high-traffic", "impersonation", "instagram-impersonation", "investment-scam", "kyc-fraud", "lead-generation", "litellm-malware", "login-page", "low-reputation-domain", "malicious-download", "malicious-redirect", "malicious-redirection", "malicious-redirects", "malicious-site", "malicious-url", "malware-distribution", "malware-download", "malware-dropper", "mfa-harvesting", "microsoft", "microsoft-defender-flagged", "myprotein", "nebula-x", "new-domain", "newly-registered-domain", "no-customer-support", "obscure-site", "online-casino-scam", "package-delivery-scam", "payment-information-theft", "payment-scam", "personal-information-theft", "phishing", "phishing-campaign", "phishing-gateway", "phishing-site", "phone-number-harvesting", "pii-collection", "pirated-games", "pop-mart-impersonation", "price-scam", "privacy-risk", "privacy-violation", "quickbooks", "redirect", "redirect-chain", "redirect-cloaking", "redirect-service", "redirection", "redirector", "redirects", "reverb-impersonation", "risky-url", "rug-pull", "sars-impersonation", "scam", "social-engineering", "social-media-abuse", "social-media-campaign", "social-media-scam", "social-media-scams", "south-africa", "spam-distribution", "spotify-impersonation", "streaming-service-scam", "subscription-scam", "supply-chain-attack", "support-scam", "surveillance", "suspicious-domain", "taplink-abuse", "task-scam", "tencent-hosting", "third-party-data-sharing", "throwaway-domain", "tracking", "tracking-url", "typosquatting", "unaccountable-infrastructure", "unauthorized-software", "undelivered-goods", "unlicensed-gambling", "unrealistic-pricing", "unreleased-products", "unsecured-file-sharing", "unwanted-software", "url-cloaking", "url-shortener", "urlert", "usdt", "usdt-scam", "user-manipulation", "vpn-impersonation", "webcam-capture", "webcam-tracking", "weebly-abuse", "xvideos-impersonation", "zero-day-registration" ], "references": [ "https://urlert.com/domain/571084.xin", "https://urlert.com/domain/9990.site", "https://urlert.com/domain/app.link", "https://urlert.com/domain/appwrite.network", "https://urlert.com/domain/arcworld.one", "https://urlert.com/domain/aviatorfine.com", "https://urlert.com/domain/beetrade.me", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/bonanza-gha.work", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/compromisedblog.com", "https://urlert.com/domain/cryptor.plus", "https://urlert.com/domain/daily777ween666.com", "https://urlert.com/domain/dpoiq.life", "https://urlert.com/domain/e.vg", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/explodely.com", "https://urlert.com/domain/extravagant-streaming.life", "https://urlert.com/domain/fedexredeliveryform.com", "https://urlert.com/domain/fgl.cc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Energy", "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 37, "hostname": 15, "URL": 36 }, "indicator_count": 88, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "37 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c1e21727bfc6fb3cacc6c1", "name": "URLert Daily Threat Intel \u2014 2026-03-24", "description": "URLert Daily Threat Intel \u2014 2026-03-24\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 77 | Indicators: 147\nConfirmed: 23 | Likely: 51 | Domain intel: 3\nTop threats: Phishing (64), Unknown (5), Dropper (4), Malware Hosting (2), Exploit Kit (1)\nDomains: 194872.xin, 370184.xin, acccat.com, amgaa.com, apkdone.co, banglachotikahinii.com, betsclub.top, binx.vip, casajoys.com, clickup.com, com-tjd.com, csvulcan.com, cute-love-site.lol, d893kl3...\n\n77 unique threats producing 147 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-23T00:45:38.797000", "created": "2026-03-24T01:00:07.920000", "tags": [ "account-takeover", "adult-content", "allegro-impersonation", "android-malware", "apk-malware", "automated-scan", "betting-impersonation", "brand-impersonation", "brightonseo", "browser-locking", "carding", "clickup-abuse", "cloaking", "cloud-storage-abuse", "combosquatting", "compromised-infrastructure", "compromised-site", "credential-harvesting", "credit-card-harvesting", "crypto-scam", "cryptocurrency", "cryptocurrency-payments", "cryptocurrency-scam", "cvv-shop", "daily-threat-intel", "deception", "deceptive-domain", "deceptive-download", "deceptive-interface", "deceptive-platform", "deceptive-practice", "deceptive-practices", "deceptive-redirects", "deceptive-site", "disney", "disneyplus", "domain-classification", "domain-shadowing", "e-commerce-fraud", "elon-musk-impersonation", "exit-scam", "fake-announcements", "fake-delivery-notification", "fake-document-preview", "fake-incentive", "fake-interface", "fake-notification", "fake-security-alert", "fake-security-check", "fake-shopping-site", "fake-toll-debt", "fake-toll-scam", "fedex-impersonation", "financial-fraud", "financial-impersonation", "financial-information-theft", "financial-misrepresentation", "financial-scam", "financial-services", "financial-theft", "flhsmv-impersonation", "forex-trading", "fortnite", "fraudulent-exchange", "fraudulent-indicators", "fraudulent-platform", "fraudulent-site", "fraudulent-website", "fund-harvesting", "fund-theft", "gambling-scam", "game-resource-generator", "gaming-scam", "gibberish-domain", "gibberish-text", "government-impersonation", "government-targeting", "high-risk-domain", "high-risk-tld", "illegal-pharmacy", "impersonation", "instagram-scam", "intelcom", "intelcom-impersonation", "investment-scam", "invitation-code", "ip-logger", "malicious-advertising", "malicious-infrastructure", "malicious-redirection", "malicious-script", "malvertising", "malware-delivery", "malware-distribution", "malware-dropper", "modified-android-apks", "nebula-x", "new-domain", "newly-registered-domain", "njmvc-impersonation", "olx", "onedrive-impersonation", "online-dating-scam", "onlyfans-impersonation", "outlook", "payment-fraud", "payment-harvesting", "payment-information-theft", "payment-scam", "phishing", "phishing-campaign", "phishing-site", "pig-butchering-scam", "pii-collection", "pop-up-scam", "power-mac-center", "predatory-billing", "prescription-drug-trafficking", "privacy-bypass", "privacy-risk", "problematic-transactions", "process-hacker", "qr-code-delivery", "recently-registered-domain", "redirect-chain", "redirect-cloaking", "redirector", "retail-scam", "risky-downloads", "roblox", "scam", "scam-site", "scam-store", "scareware", "sexually-explicit-content", "social-engineering", "social-media-scam", "social-media-scraping", "spam-distribution", "stolen-credit-cards", "subdomain-abuse", "suspicious-domain", "suspicious-redirection", "system-informer", "texas-dmv", "throwaway-domain", "ticketing-scam", "token-presale-scam", "toll-scam", "tracking", "typosquatting", "unauthorized-tracking", "underground-marketplace", "unofficial-app-store", "unregulated-platform", "unscanned-files", "unverified-software", "unverified-software-download", "unwanted-software", "urgency-scam", "url-shortener", "urlert", "usdc-impersonation", "vermont-dmv", "webcam-capture", "withdrawal-failure" ], "references": [ "https://urlert.com/domain/194872.xin", "https://urlert.com/domain/370184.xin", "https://urlert.com/domain/acccat.com", "https://urlert.com/domain/amgaa.com", "https://urlert.com/domain/apkdone.co", "https://urlert.com/domain/banglachotikahinii.com", "https://urlert.com/domain/betsclub.top", "https://urlert.com/domain/binx.vip", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/clickup.com", "https://urlert.com/domain/com-tjd.com", "https://urlert.com/domain/csvulcan.com", "https://urlert.com/domain/cute-love-site.lol", "https://urlert.com/domain/d893kl32.sbs", "https://urlert.com/domain/div-idy.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/emcas.at", "https://urlert.com/domain/faphouse.com", "https://urlert.com/domain/fnudprime.com", "https://urlert.com/domain/fortfj.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 48, "hostname": 15 }, "indicator_count": 112, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "38 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bdedaa781647cafa200ff2", "name": "URLert Daily Threat Intel \u2014 2026-03-21", "description": "URLert Daily Threat Intel \u2014 2026-03-21\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 61 | Indicators: 106\nConfirmed: 16 | Likely: 38 | Domain intel: 6 | Manual: 1\nTop threats: Phishing (46), Malware Hosting (6), Malvertising (3), Dropper (3), Scanning Host (1)\nDomains: 4waes.xyz, 713482.xin, africa.com, altbu.life, any.run, anytimesbook.com, appinjects.site, badbunny-livenation.com, besttell.shop, bit.ly, bookingil.com, camperstoreeu.com, cliqforms.com, ...\n\n61 unique threats producing 106 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-20T01:13:34.420000", "created": "2026-03-21T01:00:26.974000", "tags": [ "adult-content-impersonation", "advance-fee-scam", "adware-distribution", "ai-content", "altbu-life", "anonymous-hosting", "apk-malware", "app-scam", "apple-icloud", "ar24-impersonation", "automated-scan", "bad-bunny", "booking-com-impersonation", "brand-impersonation", "business-proposal-scam", "camper", "cash-prize-scam", "cliqforms", "cloaking", "combosquatting", "coordinated-spamming", "credential-harvesting", "cryptocurrency", "cryptocurrency-fraud", "cryptocurrency-scam", "daily-threat-intel", "dana", "data-harvesting", "deceptive-domain", "deceptive-download", "deceptive-practices", "deceptive-redirect", "deceptive-subscription-trap", "deceptive-warnings", "domain-classification", "dropper", "e-commerce-scam", "ecco-impersonation", "eid-al-fitr-scam", "email-credentials", "emulator-impersonation", "evasion", "evasive-tactics", "exit-scam", "fake-apk", "fake-browser-alert", "fake-giveaway", "fake-government-impersonation", "fake-security-alert", "fake-security-check", "fake-store", "fake-toll-charge", "fake-urgency", "fake-verification", "financial-fraud", "financial-impersonation", "financial-loss", "financial-scam", "fraudulent-content", "fraudulent-ecommerce", "fraudulent-platform", "game-exploits", "game-mod-scam", "gaming", "google-impersonation", "google-sites", "google-sites-abuse", "government-impersonation", "healthcare-sector", "high-risk-domain", "high-risk-tld", "hospitality", "icici-bank", "impersonation", "impersonation-credit-union", "information-harvesting", "instagram-impersonation", "intelcom", "intellectual-property-abuse", "investment-scam", "lead-generation", "live-nation", "local-network-scanning", "malicious-domain", "malicious-download", "malicious-redirect", "malicious-redirector", "malvertising", "malware-delivery-tactic", "malware-distribution", "malware-hosting", "malware-risk", "manual-entry", "microsoft-account", "microsoft-sharepoint", "mobile-data-scam", "money-mule-scheme", "msi-malware", "multi-stage-redirect", "nebula-x", "new-domain", "newly-registered-domain", "non-delivery-scam", "nytimes-impersonation", "offer-scam", "payment-gateway-scam", "payment-harvesting", "payment-information-theft", "payment-scam", "personal-information-harvesting", "phishing", "phishing-site", "phone-number-harvesting", "pig-butchering", "pirated-software", "prize-scam", "pump-fun-impersonation", "reconnaissance", "recruitment-fraud", "redirect", "redirect-chain", "redirector", "scam", "scam-domain", "scam-page", "scam-site", "sharepoint", "short-lived-operation", "social-engineering", "social-media-campaigns", "software-piracy", "spoofer", "survey-scam", "suspicious-domain", "suspicious-redirection", "task-scam", "texas-dmv", "texas-roadhouse-impersonation", "ticket-scam", "typosquat", "typosquatting", "uncensored-ai", "unrelated-domain", "unverified-file-sharing", "unwanted-software", "url-shortener", "url-shortening", "urlert", "usdt", "vercel-subdomain", "virtual-systems", "vulnerability-scanning", "youtube-bots", "zimbra", "zimbra-impersonation" ], "references": [ "https://urlert.com/domain/4waes.xyz", "https://urlert.com/domain/713482.xin", "https://urlert.com/domain/africa.com", "https://urlert.com/domain/altbu.life", "https://urlert.com/domain/any.run", "https://urlert.com/domain/anytimesbook.com", "https://urlert.com/domain/appinjects.site", "https://urlert.com/domain/badbunny-livenation.com", "https://urlert.com/domain/besttell.shop", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/bookingil.com", "https://urlert.com/domain/camperstoreeu.com", "https://urlert.com/domain/cliqforms.com", "https://urlert.com/domain/connect-alert.support", "https://urlert.com/domain/crn77.com", "https://urlert.com/domain/cutt.ly", "https://urlert.com/domain/deltaexploits.gg", "https://urlert.com/domain/eccodleuvip.click", "https://urlert.com/domain/extranetpulsereservation.help", "https://urlert.com/domain/fkg.cc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Financial Services", "Government", "Healthcare", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 34, "URL": 29, "hostname": 10 }, "indicator_count": 73, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "41 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bb4aadb88b551afddc4bb3", "name": "URLert Daily Threat Intel \u2014 2026-03-19", "description": "URLert Daily Threat Intel \u2014 2026-03-19\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 44 | Indicators: 89\nConfirmed: 23 | Likely: 21\nTop threats: Phishing (39), Dropper (3), Malware Hosting (1), Unknown (1)\nDomains: aidleyy.live, bemii.cn, bit.ly, canadianbread.top, careers-international-scheduleallianz-apply.com, comp-tech.co, deliveryreschedulecanadapost.com, desertcards.com, effectivegatecpm.com, g...\n\n44 unique threats producing 89 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-17T23:52:51.892000", "created": "2026-03-19T01:00:29.115000", "tags": [ "adult-scam", "adult-themed-lure", "advance-fee-scam", "allianz-impersonation", "australia", "automated-promotion", "automated-scan", "betting-scam", "brand-impersonation", "clash-of-clans", "cloaking", "coles-impersonation", "combosquatting", "coordinated-spam", "coordinated-spamming", "credential-harvesting", "cryptocurrency-scam", "daily-threat-intel", "dangerous-site", "deceptive-domain", "deceptive-practices", "deceptive-redirects", "deceptive-scam", "deceptive-tactics", "deceptive-url", "defi-scam", "delivery-service-impersonation", "denmark", "docusign-impersonation", "domain-abuse", "donation-scam", "engie-impersonation", "fake-app-store", "fake-survey", "fake-toll-scam", "financial-data-theft", "financial-fraud", "financial-information-collection", "financial-scam", "game-resource-generator", "giveaway-scam", "google", "government-impersonation", "high-risk-domain", "illinois-government", "information-harvesting", "ip-logger", "lack-of-transparency", "location-tracking", "login-form", "login-page", "malicious-domain", "malicious-link-distribution", "malicious-redirection", "malvertising", "malware-delivery", "malware-distribution", "michigan-government", "microsoft-impersonation", "misspelled-domain", "new-domain", "newly-registered-domain", "obscured-destination", "ohio-bureau-of-motor-vehicles", "okta-impersonation", "payload-delivery", "payment-gateway-impersonation", "payment-scam", "personal-information-collection", "phishing", "phishing-site", "prize-scam", "qr-code-scam", "recently-registered-domain", "redirect", "redirect-cloaking", "reputation-hijacking", "roblox", "roblox-users", "scam", "settlement-scam", "social-engineering", "social-media-campaign", "social-media-campaigns", "social-media-manipulation", "spam-distribution", "spotify", "survey-scam", "suspicious-app-download", "suspicious-domain", "suspicious-traffic", "tarte-impersonation", "telstra-impersonation", "throwaway-domain", "tiktok-scam", "toll-scam", "travel-industry", "typosquatting", "unaccountable-infrastructure", "unauthorized-vibration", "unregistered-infrastructure", "url-shortener", "urlert", "vercel-hosting", "wallet-draining", "withdrawal-scam", "xiaomi-impersonation", "youtube-bots" ], "references": [ "https://urlert.com/domain/aidleyy.live", "https://urlert.com/domain/bemii.cn", "https://urlert.com/domain/bit.ly", "https://urlert.com/domain/canadianbread.top", "https://urlert.com/domain/careers-international-scheduleallianz-apply.com", "https://urlert.com/domain/comp-tech.co", "https://urlert.com/domain/deliveryreschedulecanadapost.com", "https://urlert.com/domain/desertcards.com", "https://urlert.com/domain/effectivegatecpm.com", "https://urlert.com/domain/goo.su", "https://urlert.com/domain/gov-penh.bike", "https://urlert.com/domain/gov-tvsd.bond", "https://urlert.com/domain/j82k.site", "https://urlert.com/domain/jogjamuslim.com", "https://urlert.com/domain/juniorake.com", "https://urlert.com/domain/kec.az", "https://urlert.com/domain/ln.run", "https://urlert.com/domain/lobgem.com", "https://urlert.com/domain/maddixi.me", "https://urlert.com/domain/mrbeastsgifts.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Energy", "Financial Services", "Government", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 27, "URL": 27, "hostname": 11 }, "indicator_count": 65, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "43 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "lobgem.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "lobgem.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780205815.9013517 }