Known malicious kithighphishing

teje-rotating-domain kit — main.js

family: teje-rotating-domain

Webpack-bundled SPA deployed across an 8-host rotation that all share the `teje` prefix on cheap/suspicious TLDs (tejehqnfih.work, tejehqzjxt.club, tejeiviusk.asia, tejeiwdeow.cloud, tejeiycpyh.asia, tejeizzifa.wiki, …).

Provenance

Added: 2026-05-26 14:39
Anchor #1 of 3. main.74a858e950b3cb360b11.js — entry bundle, 85,463 nodes.

Sightings (13)Atom feed

HostScanScriptMatchScanned
teiekloijp.clube05c815a…https://teiekloijp.club/main.40d8ebc74ec0078d080e.jsstructure2026-09-24 03:43
televerify.clickfe5d2c78…https://televerify.click/main.40d8ebc74ec0078d080e.jsstructure2026-08-30 04:55
teleoutlki.shop0ba7928d…https://teleoutlki.shop/main.40d8ebc74ec0078d080e.jsstructure2026-08-26 12:53
teleoutlki.shop2f8acaad…https://teleoutlki.shop/main.40d8ebc74ec0078d080e.jsstructure2026-08-18 23:58
tejeiycpyh.asia10cab597…https://tejeiycpyh.asia/main.74a858e950b3cb360b11.jsbyte2026-01-05 01:29
tejehqzjxt.clubce8f6e31…https://tejehqzjxt.club/main.74a858e950b3cb360b11.jsbyte2026-01-03 02:24
tejehqzjxt.club537500ad…https://tejehqzjxt.club/main.74a858e950b3cb360b11.jsbyte2026-01-02 18:18
tejeiwdeow.cloud1f6d6553…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2025-12-28 22:05
tejeiviusk.asia5a3ee199…https://tejeiviusk.asia/main.74a858e950b3cb360b11.jsbyte2025-12-28 10:42
tejeizzifa.wiki1d034446…https://tejeizzifa.wiki/main.74a858e950b3cb360b11.jsbyte2025-12-28 01:03
tejehqnfih.work645bfe7a…https://tejehqnfih.work/main.74a858e950b3cb360b11.jsbyte2025-12-27 18:52
tejeiwdeow.cloud2270b1f9…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2025-12-26 09:19
tejeiwdeow.cloud2270b1f9…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2025-12-26 09:19