ScanMalware.com
Known malicious kithighphishing

Random-Letter .com Rotation Sister — js/app

family: random-letter-com-sister-a218
Short link:scanmalware.com/h/113

Sister cohort of random-letter-com-199c. 18 hosts with 10-letter random .com hostnames (2zrlupki.com, luckrfbyjg.com, …). Different bundler path (/js/app.<hash>.js) than the original 199c kit.

Anchors

content sha256e08ba4c5bb4b230751d2d7d70aa9ef5da73a4feba53fc3433898d565488a37e2
canonical ASTa218803fc5c5e5cc0223151c6e67d2bde6b45ee2b2385ddbeaffc1b52e385323
TLSHT145D2300BA5D424B99177B379AF2A8D09F931032F13454F037D7C82595F3642897A6F9C

Provenance

Added: 2026-05-27 07:09
18 hosts. Sister of random-letter-com-199c.

Sightings (28)Atom feed

HostScanScriptMatchScanned
2zrlupki.com1da91074…https://2zrlupki.com/js/app.493d94d2.jsbyte2026-04-03 08:23
wy026p8.comfda8d0c9…https://wy026p8.com/js/app.493d94d2.jsbyte2026-04-03 03:59
zd2029p8.com5a25d672…https://zd2029p8.com/js/app.493d94d2.jsbyte2026-04-03 03:35
ym611pkr8.comb27b4f6d…https://ym611pkr8.com/js/app.493d94d2.jsbyte2026-04-02 16:32
pvr17pkr8.com25cfd104…https://pvr17pkr8.com/js/app.493d94d2.jsbyte2026-04-02 03:22
luckrfbyjg.com59e44025…https://luckrfbyjg.com/js/app.493d94d2.jsbyte2026-03-31 21:36
rk816pkr8.com8a957db4…https://rk816pkr8.com/js/app.493d94d2.jsbyte2026-03-30 04:53
u4m20pkr8.comf2e1245b…https://u4m20pkr8.com/js/app.493d94d2.jsbyte2026-03-29 10:01
ual15pkr8.com7e1f202e…https://ual15pkr8.com/js/app.493d94d2.jsbyte2026-03-28 09:29
luckypkrfbp7x.comc20d90fb…https://luckypkrfbp7x.com/js/app.493d94d2.jsbyte2026-03-03 20:24
luckypkrfbywp.com77924d11…https://luckypkrfbywp.com/js/app.493d94d2.jsbyte2026-03-03 03:24
luckypkrfbdsq.com1a59e9d3…https://luckypkrfbdsq.com/js/app.493d94d2.jsbyte2026-03-02 23:18
luckypkrfbsuf.comf7991394…https://luckypkrfbsuf.com/js/app.493d94d2.jsbyte2026-03-02 09:19
luckypkrfbywd.com24939fbd…https://luckypkrfbywd.com/js/app.493d94d2.jsbyte2026-03-02 08:33
luckypkrfbn99.comb641aa33…https://luckypkrfbn99.com/js/app.493d94d2.jsbyte2026-03-01 21:22
luckypkrfb8g6.comb6032db5…https://luckypkrfb8g6.com/js/app.493d94d2.jsbyte2026-03-01 20:16
luckypkrfb5vg.com5d05e609…https://luckypkrfb5vg.com/js/app.493d94d2.jsbyte2026-03-01 19:25
luckypkrfb5vg.com93c9ef92…https://luckypkrfb5vg.com/js/app.493d94d2.jsbyte2026-03-01 17:49
luckypkrfb8g6.come190b120…https://luckypkrfb8g6.com/js/app.493d94d2.jsbyte2026-03-01 13:41
luckypkrfb7rb.comc7054ed9…https://luckypkrfb7rb.com/js/app.493d94d2.jsbyte2026-03-01 07:42
luckypkrfbn99.com3fc538f0…https://luckypkrfbn99.com/js/app.493d94d2.jsbyte2026-03-01 03:12
luckypkrfb5vg.com84b8dc75…https://luckypkrfb5vg.com/js/app.493d94d2.jsbyte2026-02-28 22:20
luckypkrfbywd.com47a1cffa…https://luckypkrfbywd.com/js/app.493d94d2.jsbyte2026-02-28 10:41
luckypkrfbywp.com0b5043eb…https://luckypkrfbywp.com/js/app.493d94d2.jsbyte2026-02-28 09:04
luckypkrfbywd.comf9b2bcd2…https://luckypkrfbywd.com/js/app.493d94d2.jsbyte2026-02-28 06:13
luckypkrfbdsq.com5e6bc23a…https://luckypkrfbdsq.com/js/app.493d94d2.jsbyte2026-02-28 05:50
luckypkrfbp7x.com3d61315c…https://luckypkrfbp7x.com/js/app.493d94d2.jsbyte2026-02-28 05:07
luckypkrfb8g6.comd1005f90…https://luckypkrfb8g6.com/js/app.493d94d2.jsbyte2026-02-28 02:26