DomainMediumSignal 50/100
servicos.ru
Location
BrazilFirst Seen
Apr 17, 2026
Last Seen
May 27, 2026
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
50%
Signal Score
50 / 100
IDS Rule
No
Threat Context
Tags
Feed Intelligence Summary
4 reports50% confidence
4
Source reports
50%
Confidence score
Category tags
account-takeoveractive scanad-fraudadult-contentadvance-fee-scamaged-domainamp-cacheanti-analysisasiaasset-theftautomated-scanbackdoorbonus-scambooking-com-impersonationbot-promotedbrand-impersonationbrazilbrowser-extensionbrute forcecelebrity-impersonationclick-to-unlockcloakingcloudflare-workerscpf-harvestingcredential stuffingcredential-harvestingcryptocurrencycryptocurrency-scamdaily-threat-inteldata-harvestingdeceptive-advertisingdeceptive-crypto-gamblingdeceptive-incentivesdeceptive-luredeceptive-platformdeceptive-pricingdeceptive-registrationdeceptive-schemedeceptive-tacticsdomain-classificationdomain-rotationdpdelon-muskemail-harvestingemployment-scameuropeevasionevasion-techniqueexploitation activityextortionfacebook-impersonationfake-financial-aidfake-giveawayfake-job-offerfake-messagefake-testimonialsfake-trust-badgefile-sharing-abusefinancial servicesfinancial-exploitationfinancial-fraudfinancial-impersonationfinancial-lurefinancial-scamfinancial-sectorfinancial-service-impersonationfinancial-services-impersonationfiverr-impersonationfraudfraudulent-platformgambling-scamgame-luregeneric-loginget-paid-to-scamget-rich-quickgovernment-impersonationhigh-risk-domainhigh-risk-tldidentity & access exploitationidentity-theftindicatorinformation-harvestinginvestment-scaminvitation-code-scamiot securityjava-malwarelogin-harvestingmalicious-activitymalicious-archivemalicious-domainmalicious-file-distributionmalicious-redirectmalicious-redirectsmalwaremalware-distributionmedia / entertainmentmercadolivremfa-interceptionmicrosoft-impersonationmonetization-schememoney-making-schememoney-scammusic-streaming-impersonationnebula-xnetherlandsnetworknew-domainnewly-registered-domainonline-gambling-scamontario-governmentpayment-information-harvestingphishingphishing-campaignplaceholder-contentponzi-schemepotentially-maliciousprize-scamransomwarerecent-domainrecruitment-fraudrecruitment-scamrecruitment-schemeredirect-chainredirect-facadereferral-schemeresearchedretail / e-commerceretail-e-commerceretail-scamretail-sectorrocket-league-impersonationru-domainscamscam-sitesscams & fraudsearch-engine-blockingshufersalshufersal-impersonationsoftware-piracysouth americaspamspam-promotionstreaming-service-impersonationsupply chain attacksurvey-scamsuspicious-domainsuspicious-redirectsuspicious-registrysuspicious-tldtaiwantargeting databasetask-based-scamtask-scamthreat actortiktok-impersonationtor nodetraffic-redirectiontyposquattingunsecured-filesunsolicited-messagesurl-cloakingurl-redirectionurl-shortenerurlertusdt-targetingwibo-baltic-uabwithdrawal-scamx-formerly-twitter
Activity Timeline
May 27May 27
Threat Activity Heatmap
· Peak: 2026-05-27LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
50
SIGNAL
Signal Score
50%
Confidence
4
Reports
First seenApr 17, 2026
Last seenMay 27, 2026
VirusTotal
Not checked
WHOIS
- description
- AI-DETECTED: DANGEROUS | Confidence: 80/100 | Type: Phishing
- domain rank
- -1
- raw
- Create date: 2026-04-02 00:00:00 Domain name: servicos.ru Expiry date: 2027-05-04 00:00:00 Name server 1: clarissa.ns.cloudflare.com Name server 2: chad.ns.cloudflare.com Query time: 2026-04-04 15:44:44
- references
- https://urlert.com/domain/acccat.com, https://urlert.com/domain/accountresourcecenter.xyz, https://urlert.com/domain/aceimg.com, https://urlert.com/domain/ampproject.org, https://urlert.com/domain/ankergames.net, https://urlert.com/domain/artinexia.com, https://urlert.com/domain/atlasjet.com.ng, https://urlert.com/domain/bexlorina.cfd, https://urlert.com/domain/blogspot.com, https://urlert.com/domain/blueberginternational.com, https://urlert.com/domain/br9f.bet, https://urlert.com/domain/bringitonmsg.com, https://urlert.com/domain/bunnyband.com, https://urlert.com/domain/calendarikymer.forum, https://urlert.com/domain/cgtsrb.vip, https://urlert.com/domain/clientproject.info, https://urlert.com/domain/create-road.my, https://urlert.com/domain/dandys1.xyz, https://urlert.com/domain/delta-executor.com, https://urlert.com/domain/doutf.cn
- subdomains count
- 0
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 months ago · Last seen 27 days ago
Appeared in 4 threat reports