Community Intel & Discussions
🚨 High-Risk Alert: Active Phishing Campaign Detected
Risk Category: Confirmed Phishing & Credential Theft
URLert.com has classified shorturl.promo as a dangerous domain following the detection of active phishing vectors and deceptive practices designed to harvest sensitive user information. This domain is currently being used to facilitate fraudulent schemes by masquerading as legitimate corporate entities.
Key Findings:
- Brand Impersonation: The domain utilizes misleading subdirectories and page titles, such as "amazon.mystery.pokemon.box," to trick users into believing they are interacting with official Amazon services.
- Extreme Recency: Registered only 28 days ago, the domain lacks any established reputation and follows the "disposable" infrastructure patterns typical of modern cybercriminal operations.
- Anonymized Infrastructure: The site operates without clear ownership or a legitimate business presence, utilizing Cloudflare to obfuscate its origin while targeting unsuspecting victims.
Recommendation: Do not visit this domain or enter any information into its forms. If you have already provided credentials on a page hosted by this domain, change your passwords immediately on the legitimate services being impersonated and enable multi-factor authentication (MFA) to secure your accounts.
URL: https://shorturl.promo/amazon.mystery.pokemon.box
User Assessment: Dangerous
AI Verdict: SUSPICIOUS (60% confidence)
Analysis: This website uses a domain that is very new and tries to look like Amazon, but it is not actually Amazon. The page title also says "amazon.com" which is misleading.
Key Findings:
- The website's domain is only 27 days old.
- The domain name "shorturl.promo/amazon.mystery.pokemon.box" attempts to impersonate Amazon.
- The page title is "amazon.com", further attempting to impersonate Amazon.