Known malicious kitcriticalphishing
login-client/metasuite Phishing Kit — main.js
family: login-client-metasuite-54de
Short link:scanmalware.com/h/116
4-host operator: login-client-6i5.pages.dev, metasuite-business.com cohort. Numbered "login-client" Cloudflare Pages deployments paired with "metasuite-business" branding — textbook MS 365 / business-suite credential-harvest naming.
Anchors
Provenance
Added: 2026-05-27 07:09
4 hosts. login-client + metasuite-business branding.
Sightings (7)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| notcapcha-metasuite.com | 7dea7df4… | https://notcapcha-metasuite.com/static/js/main.16802086.js | structure | 2026-01-13 06:23 |
| notcapcha-metasuite.com | 3a51c692… | https://notcapcha-metasuite.com/static/js/main.16802086.js | structure | 2026-01-12 22:47 |
| notcapcha-metasuite.com | ae4ee90d… | https://notcapcha-metasuite.com/static/js/main.16802086.js | structure | 2026-01-09 17:59 |
| notcapcha-metasuite.com | 722fd29b… | https://notcapcha-metasuite.com/static/js/main.16802086.js | structure | 2026-01-09 15:11 |
| metasuite-business.com | 3634cfd4… | https://metasuite-business.com/static/js/main.6ab0f7d2.js | byte | 2026-01-06 21:07 |
| login-client-6i5.pages.dev | 9a13e150… | https://login-client-6i5.pages.dev/static/js/main.a15a2cd8.js | structure | 2025-12-11 15:03 |
| nocaptcha-metasuite.com | 9a984699… | https://nocaptcha-metasuite.com/static/js/main.6ab0f7d2.js | byte | 2025-12-11 03:28 |