Prolific Puma provides an underground link shortening service to criminals. Infoblox states that during analysis, no legitimate content was observed being served through their shortener. For operation they use a registered domain generation algorithm (RDGA), based upon which they registered between 35k-75k domain names.
There are currently no families associated with this actor.
Prolific Puma: Shadowy Link Shortening Service Enables Cybercrime