ScanMalware.com
Known malicious kithighphishing

Chinese Kaiyun Gambling Kit — js/app

family: cn-kaiyun-gambling-7460
Short link:scanmalware.com/h/110

42-host Chinese gambling operator running "Kaiyun" brand impersonation across cn-kaiyunapp.vip, zh-kaiyuntiyu.vip, danti4833.com subdomains with random hostname prefixes. Path pattern /js/app.<hash>.js. Kaiyun (开云) is a known Chinese gambling brand frequently impersonated; "kaiyun" naming + Chinese-numeric subdomains is a strong operator signature.

Anchors

content sha25684782284c7ec7fbfa08f93128ffc2d8d3db0a08a70bf3e5e8772b63aef0f290b
canonical AST746038d26798d27a48718a2c6c6b35323eb8d7fc3da6cf3febf3990a3dd52b78
TLSHT139E2B910E6D0B1B86B570BF7732B60D6E41B056EB95D084BF5242C7036F871BDAE9A38

Provenance

Added: 2026-05-27 07:09
42 hosts. Single anchor. Largest single-build kit in this batch.

Sightings (42)Atom feed

HostScanScriptMatchScanned
h3rg75zs.cn-kaiyunapp.vip96841b4a…https://h3rg75zs.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-10 00:59
wwjho0lhg6y88bn.cn-kaiyunapp.vip48e8a18a…https://wwjho0lhg6y88bn.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-09 15:02
3vx9n5ynvic.cn-kaiyunapp.vipfcda6cd8…https://3vx9n5ynvic.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-09 01:52
ieuqnbkqkllwa.cn-kaiyunapp.vip7f3d65b9…https://ieuqnbkqkllwa.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-09 00:37
kvutdavspglizjtconly.cn-kaiyunapp.vip7b32250f…https://kvutdavspglizjtconly.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-08 10:56
71my8nl9c0c4pw70lh.cn-kaiyunapp.vip7fd78457…https://71my8nl9c0c4pw70lh.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-07 20:59
sfmmk154lf0q26.cn-kaiyunapp.vipf5eb2c71…https://sfmmk154lf0q26.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-06 20:59
gd767atf42dc5brxf.cn-kaiyunapp.vip5cc83228…https://gd767atf42dc5brxf.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-06 18:33
gf5kfkfva6ghe88.cn-kaiyunapp.vip3a098fb5…https://gf5kfkfva6ghe88.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-06 15:35
hyoaj2fzuoyuce.cn-kaiyunapp.vipd43a76bb…https://hyoaj2fzuoyuce.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-06 08:43
xv61p71y4b35.cn-kaiyunapp.vip72cec0d5…https://xv61p71y4b35.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-06 01:51
hidhmm.cn-kaiyunapp.vip75073a44…https://hidhmm.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-05 18:39
313r6ur.cn-kaiyunapp.vip3e5df2f9…https://313r6ur.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-05 00:21
03ujeew3m9c7f4fam43y.cn-kaiyunapp.vipe1c7373d…https://03ujeew3m9c7f4fam43y.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-04 21:02
ubipi51nizex.cn-kaiyunapp.vip0a464a39…https://ubipi51nizex.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-04 16:08
z9v8ezqqdm0rs6xhpe.cn-kaiyunapp.vip1e92065f…https://z9v8ezqqdm0rs6xhpe.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-04 00:25
8v3za452rj.cn-kaiyunapp.vip0f6da7b1…https://8v3za452rj.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-03 18:08
e860a73joatv87pg.cn-kaiyunapp.vip38749e12…https://e860a73joatv87pg.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-03 17:39
tx70esyvg.cn-kaiyunapp.vip131dd26e…https://tx70esyvg.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-03 11:07
ukrjb7nl1hw.cn-kaiyunapp.viped157e77…https://ukrjb7nl1hw.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-03 08:26
57a10j7jhmupuui.cn-kaiyunapp.vip7ded28cf…https://57a10j7jhmupuui.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-02 20:05
1otv801.cn-kaiyunapp.vip007e9104…https://1otv801.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-02 18:29
4l8nu3cv4eh2tbpf9q6.cn-kaiyunapp.vip8be974b2…https://4l8nu3cv4eh2tbpf9q6.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-02 10:10
0018a1pyp5xa.cn-kaiyunapp.vip9751d167…https://0018a1pyp5xa.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-02 07:50
mcpnlv1j.cn-kaiyunapp.vip78ee9ddc…https://mcpnlv1j.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-05-02 00:31
8b92jc1xdm.cn-kaiyunapp.vip51e2e924…https://8b92jc1xdm.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-22 20:02
az0cy876jretx4a.cn-kaiyunapp.vipafbc302f…https://az0cy876jretx4a.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-22 12:49
h7uczpt.cn-kaiyunapp.vip6c36e1cc…https://h7uczpt.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-21 02:50
4pt7qj.cn-kaiyunapp.vip25ae2843…https://4pt7qj.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-20 06:38
5l9a9cp4vna7oml8rir.cn-kaiyunapp.vip58b96a54…https://5l9a9cp4vna7oml8rir.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-18 23:27
yfpwtf8hffubm3x39e.cn-kaiyunapp.vip2d2e241a…https://yfpwtf8hffubm3x39e.cn-kaiyunapp.vip/js/app.26836e23.jsbyte2026-04-17 04:31
zrx51ead3zwu23.rod947321.com4a717b4e…https://zrx51ead3zwu23.rod947321.com/js/app.26836e23.jsstructure2026-04-13 08:00
gwq552mioa0qeybj59n.rod947321.come1012d9d…https://gwq552mioa0qeybj59n.rod947321.com/js/app.26836e23.jsstructure2026-04-11 07:57
7y9uv59mdio2ml8pthz.rod947321.com4df82cca…https://7y9uv59mdio2ml8pthz.rod947321.com/js/app.26836e23.jsstructure2026-04-10 23:28
nzurrzta.zh-kaiyuntiyu.vipad1a1a47…https://nzurrzta.zh-kaiyuntiyu.vip/js/app.26836e23.jsbyte2026-03-25 14:54
2z8lz9wn.zh-kaiyuntiyu.vip07c3ec54…https://2z8lz9wn.zh-kaiyuntiyu.vip/js/app.26836e23.jsbyte2026-03-23 07:31
scny8sxt0tw3netx5cz.wdfr5432.com482df1ae…https://scny8sxt0tw3netx5cz.wdfr5432.com/js/app.26836e23.jsstructure2026-03-17 12:51
w7md7vj1mcr2k3.wdfr5432.com729c4d6e…https://w7md7vj1mcr2k3.wdfr5432.com/js/app.26836e23.jsstructure2026-03-07 16:28
zp8hayjzta6w2gc.abei53434.com4ce0ed83…https://zp8hayjzta6w2gc.abei53434.com/js/app.26836e23.jsbyte2026-01-16 02:25
tojagdrjakcm5h.danti4833.com1d5a0c5a…https://tojagdrjakcm5h.danti4833.com/js/app.26836e23.jsbyte2025-12-21 14:10
pugw1a.danti4833.com8bb8da75…https://pugw1a.danti4833.com/js/app.26836e23.jsbyte2025-12-20 04:46
0pmfml59vs7.danti4833.com6bf1b020…https://0pmfml59vs7.danti4833.com/js/app.26836e23.jsbyte2025-12-20 03:37