The way this operation was exposed is rather different. Researchers who were studying DNS queries spotted an RDGA that was generating bulk domains for URL shortening services. The rate at which these domains are being created is actually scary. Studied indicate that in 2023, the operation was churning out 800 unique domains in a day. The domain names in question have 4-7 characters only, and as far as circulation is concerned, although there is no hard evidence, researchers believe that these cybercriminals are resorting to the tried and tested methods such as social media ads, text messages, etc.
