providers.media

{
  "domain": "providers.media",
  "confidence": "high",
  "category": {
    "purpose": "potentially_malicious",
    "specialization": "Malvertising and Scareware"
  },
  "identity": {
    "headline": "Malicious domain used for malvertising and scareware campaigns",
    "summary": "This domain is used by malicious actors to intercept traffic intended for Android system package names. It redirects users to ad networks and scareware sites, exploiting the .media TLD to appear legitimate.",
    "operator": null,
    "parent_entity": null,
    "topics": [
      "malvertising",
      "scareware",
      "domain squatting",
      "android security"
    ]
  },
  "functions": {
    "is_ugc_platform": false,
    "is_file_host": false,
    "is_url_shortener": false,
    "is_public_idp": false,
    "is_crypto_platform": false,
    "allows_user_subdomains": true,
    "is_form_builder": false,
    "is_document_host": false
  },
  "facts": {
    "registered_date": "2020-06-14T01:52:47.385000Z",
    "rank": 3912578,
    "hosting_provider": "TRELLIAN-AS-AP Trellian Pty. Limited"
  }
}