Known malicious kithighphishing
.forum TLD Rotation Sister Cohort (cc0aeb) — js/app
family: forum-tld-sister-cc0a
Short link:scanmalware.com/h/112
Sister cohort #2 of the .forum-TLD rotation family. 17 hosts with random 10-char hostnames (hvwvwvjwso.forum, nbilrwodrt.forum, …). Different build hash from f969.
Anchors
Provenance
Added: 2026-05-27 07:09
17 hosts on .forum TLD. Sister of forum-tld-sister-f969.
Sightings (17)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| nbxtlzhvri.forum | e8ff1559… | https://nbxtlzhvri.forum/js/app.80f7ca91.js | structure | 2026-01-04 01:14 |
| nbilrwodrt.forum | 16ba38a6… | https://nbilrwodrt.forum/js/app.80f7ca91.js | structure | 2026-01-03 19:42 |
| hvwvwvjwso.forum | 87d4bb7d… | https://hvwvwvjwso.forum/js/app.80f7ca91.js | structure | 2026-01-03 12:32 |
| vceenecazd.forum | b6882f5c… | https://vceenecazd.forum/js/app.ad8fc5c0.js | structure | 2026-01-03 03:59 |
| zvxnncqybb.forum | 421922eb… | https://zvxnncqybb.forum/js/app.a0d3d755.js | structure | 2026-01-01 20:30 |
| nbkprkfzpg.forum | e78e75a1… | https://nbkprkfzpg.forum/js/app.a0d3d755.js | structure | 2026-01-01 16:12 |
| ychamllivr.forum | c2314e3c… | https://ychamllivr.forum/js/app.0c347c84.js | byte | 2025-12-30 06:01 |
| yzgdpgjgcb.forum | 5b407662… | https://yzgdpgjgcb.forum/js/app.0c347c84.js | byte | 2025-12-29 23:16 |
| xsfyoqgwvr.forum | 2571b286… | https://xsfyoqgwvr.forum/js/app.0c347c84.js | byte | 2025-12-29 21:29 |
| xdgmsnkibj.forum | ab185fb2… | https://xdgmsnkibj.forum/js/app.0c347c84.js | byte | 2025-12-29 18:56 |
| yqlhugudho.forum | 82454e6f… | https://yqlhugudho.forum/js/app.0c347c84.js | byte | 2025-12-29 17:38 |
| yfphwnbwlh.forum | aa9a870d… | https://yfphwnbwlh.forum/js/app.0c347c84.js | byte | 2025-12-29 11:47 |
| xvbewyrydi.forum | befbbb4a… | https://xvbewyrydi.forum/js/app.0c347c84.js | byte | 2025-12-28 21:11 |
| yyyvavhrmg.forum | 11f6929f… | https://yyyvavhrmg.forum/js/app.a0d3d755.js | structure | 2025-12-27 22:24 |
| xjczmiouyb.forum | 20e4bd33… | https://xjczmiouyb.forum/js/app.0c347c84.js | byte | 2025-12-27 15:09 |
| xjmroitofl.forum | 945977f3… | https://xjmroitofl.forum/js/app.0c347c84.js | byte | 2025-12-27 13:06 |
| zvulycesha.forum | 70400c93… | https://zvulycesha.forum/js/app.0c347c84.js | byte | 2025-12-27 12:57 |