Domain Age
2 Weeks
Tranco Rank
Unranked
Hosting Provider
Cloudflare, Inc.
Threat History
Issues Found
Runi.surf is a domain that functions as a link-shortening service but is actively being used to redirect users to malicious Telegram bots for social engineering and potential account takeover.
This domain has limited reputation data. Combined with these platform capabilities, exercise caution.
Security Note: Exercise caution. Verify the legitimacy of all content and requests.
URLert analyzed recent scan activity for runi.surf and found 2 results.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Dangerous | https://runi.surf/xmini?invite=*** | 11h ago | |
| Safe | https://runi.surf/ | 12h ago |
Historical and current IP address mappings for this domain.
| IP Address / Hosting | Status | Subdomains | Last Seen |
|---|---|---|---|
Hosted by: Cloudflare, Inc. (AS13335) | Active | runi.surf | 12 hours ago |
Hosted by: Cloudflare, Inc. (AS13335) | Active | runi.surf | 12 hours ago |
Received a suspicious link? Paste the full link to investigate.
Access this classification data programmatically via our API.
{
"domain": "runi.surf",
"confidence": "medium",
"category": {
"purpose": "potentially_malicious",
"specialization": "social engineering funnel"
},
"identity": {
"headline": "Domain used for malicious redirect funnels",
"summary": "Runi.surf is a domain that functions as a link-shortening service but is actively being used to redirect users to malicious Telegram bots for social engineering and potential account takeover.",
"operator": null,
"parent_entity": null,
"topics": [
"scam",
"phishing",
"redirect",
"telegram-bot",
"social-engineering"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": true,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-06-21T13:33:22Z",
"rank": null,
"hosting_provider": "Cloudflare, Inc."
}
}