Known malicious kitcriticalphishing
Fake-Telegram Phishing Kit — redirect.js
family: fake-telegram-dashan
Short link:scanmalware.com/h/117
Massive 139-host Telegram brand-impersonation operation. ONE operator running random-letter hostnames across .icu/.sbs/.xyz/.top/.lat/.homes/.shop/.cn/.com/.org/.love/.life TLDs (dashan.icu, danvato.icu, eldravox.icu, claw111a.xyz, ai123h.xyz, bot789c.xyz, euhe-tg.com, htrx-tg.com, hujli.shop, telegarm-jp.org, yfhmg.love, fdshfgjd.{lat,homes}, …). Pages titled "Telegram" or "Secure Messenger". Operator-built Vue.js SPA. The "-tg" suffix in domain names and Japan/JP brand hints suggest Telegram-Japan credential-harvest focus.
Anchors
Provenance
Added: 2026-05-27 07:26
Anchor #1 of 4. redirect.js — smallest, most diagnostic chunk (60 nodes). 139 hosts in cluster.
Sightings (159)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| telgaerm.com | 3cb65ee0… | https://telgaerm.com/ZH/redirect.js | byte | 2026-08-31 21:04 |
| telgaerm.com | 3cb65ee0… | https://telgaerm.com/redirect.js | byte | 2026-08-31 21:04 |
| telgacm.com | 68b34ba2… | https://telgacm.com/ZH/redirect.js | byte | 2026-08-27 17:48 |
| telgacm.com | 68b34ba2… | https://telgacm.com/redirect.js | byte | 2026-08-27 17:48 |
| telgnram.com | 0cba999d… | https://telgnram.com/ZH/redirect.js | byte | 2026-08-24 11:11 |
| telgnram.com | 0cba999d… | https://telgnram.com/redirect.js | byte | 2026-08-24 11:11 |
| telagcarm.com | a1821a1b… | https://telagcarm.com/ZH/redirect.js | byte | 2026-08-20 19:16 |
| telagcarm.com | a1821a1b… | https://telagcarm.com/redirect.js | byte | 2026-08-20 19:16 |
| telagcarm.com | e6e71890… | https://telagcarm.com/ZH/redirect.js | byte | 2026-08-19 23:40 |
| telagcarm.com | e6e71890… | https://telagcarm.com/redirect.js | byte | 2026-08-19 23:40 |
| tereagrm.com | 7ebc43a9… | https://tereagrm.com/ZH/redirect.js | byte | 2026-08-04 11:58 |
| tereagrm.com | 7ebc43a9… | https://tereagrm.com/redirect.js | byte | 2026-08-04 11:58 |
| telegccarm.cc | 0cb0bb8a… | https://telegccarm.cc/ZH/redirect.js | byte | 2026-07-31 00:24 |
| telegccarm.cc | 0cb0bb8a… | https://telegccarm.cc/redirect.js | byte | 2026-07-31 00:24 |
| telegccarm.cc | 254527ec… | https://telegccarm.cc/ZH/redirect.js | byte | 2026-07-26 08:20 |
| telegccarm.cc | 254527ec… | https://telegccarm.cc/redirect.js | byte | 2026-07-26 08:20 |
| telegocram.com | 565d4c6b… | https://telegocram.com/ZH/redirect.js | byte | 2026-07-22 21:28 |
| telegocram.com | 565d4c6b… | https://telegocram.com/redirect.js | byte | 2026-07-22 21:28 |
| teleqrem.com | 8aa66e83… | https://teleqrem.com/ZH/redirect.js | byte | 2026-07-18 10:33 |
| teleqrem.com | 8aa66e83… | https://teleqrem.com/redirect.js | byte | 2026-07-18 10:33 |
| telemanrm.com | 4208f146… | https://telemanrm.com/ZH/redirect.js | byte | 2026-07-16 03:29 |
| telemanrm.com | 4208f146… | https://telemanrm.com/redirect.js | byte | 2026-07-16 03:29 |
| telemgrn.com | 915bdaa7… | https://telemgrn.com/redirect.js | byte | 2026-07-14 05:27 |
| telemgrn.com | 915bdaa7… | https://telemgrn.com/ZH/redirect.js | byte | 2026-07-14 05:27 |
| telaeagem.com | 279aff08… | https://telaeagem.com/ZH/redirect.js | byte | 2026-07-13 05:01 |
| telaeagem.com | 279aff08… | https://telaeagem.com/redirect.js | byte | 2026-07-13 05:01 |
| telegarem.com | ccf2a78b… | https://telegarem.com/ZH/redirect.js | byte | 2026-07-12 14:44 |
| telegarem.com | ccf2a78b… | https://telegarem.com/redirect.js | byte | 2026-07-12 14:44 |
| tqrcltrm.com | fa8bdbeb… | https://tqrcltrm.com/ZH/redirect.js | byte | 2026-07-10 02:49 |
| tqrcltrm.com | fa8bdbeb… | https://tqrcltrm.com/redirect.js | byte | 2026-07-10 02:49 |
| telegmanren.com | 34199158… | https://telegmanren.com/ZH/redirect.js | byte | 2026-07-09 11:38 |
| telegmanren.com | 34199158… | https://telegmanren.com/redirect.js | byte | 2026-07-09 11:38 |
| tayeqrsn.com | fa323f6a… | https://tayeqrsn.com/ZH/redirect.js | byte | 2026-07-08 13:56 |
| tayeqrsn.com | fa323f6a… | https://tayeqrsn.com/redirect.js | byte | 2026-07-08 13:56 |
| tyelqnnam.com | 7d2d8f24… | https://tyelqnnam.com/ZH/redirect.js | byte | 2026-07-06 09:33 |
| tyelqnnam.com | 7d2d8f24… | https://tyelqnnam.com/redirect.js | byte | 2026-07-06 09:33 |
| toraplam.com | e341ca80… | https://toraplam.com/ZH/redirect.js | byte | 2026-07-05 18:45 |
| toraplam.com | e341ca80… | https://toraplam.com/redirect.js | byte | 2026-07-05 18:45 |
| tyelqnnam.com | 96968520… | https://tyelqnnam.com/ZH/redirect.js | byte | 2026-07-05 17:37 |
| tyelqnnam.com | 96968520… | https://tyelqnnam.com/redirect.js | byte | 2026-07-05 17:37 |
| teoqeknm.com | 53ff6587… | https://teoqeknm.com/ZH/redirect.js | byte | 2026-07-04 16:45 |
| teoqeknm.com | 53ff6587… | https://teoqeknm.com/redirect.js | byte | 2026-07-04 16:45 |
| telegmanren.com | ae5e64b0… | https://telegmanren.com/redirect.js | byte | 2026-07-02 09:11 |
| telegmanren.com | ae5e64b0… | https://telegmanren.com/ZH/redirect.js | byte | 2026-07-02 09:11 |
| tgleyfgm.com | 6155ba60… | https://tgleyfgm.com/ZH/redirect.js | byte | 2026-05-07 00:23 |
| tgleyfgm.com | 6155ba60… | https://tgleyfgm.com/redirect.js | byte | 2026-05-07 00:23 |
| tglegaim.com | 198137a2… | https://tglegaim.com/ZH/redirect.js | byte | 2026-05-06 18:01 |
| tglegaim.com | 198137a2… | https://tglegaim.com/redirect.js | byte | 2026-05-06 18:01 |
| tsvlgiam.com | 0e8035b5… | https://tsvlgiam.com/ZH/redirect.js | byte | 2026-05-01 19:38 |
| tsvlgiam.com | 0e8035b5… | https://tsvlgiam.com/redirect.js | byte | 2026-05-01 19:38 |
| telopucm.com | 69f2868e… | https://telopucm.com/ZH/redirect.js | byte | 2026-04-30 07:11 |
| telopucm.com | 69f2868e… | https://telopucm.com/redirect.js | byte | 2026-04-30 07:11 |
| teleadom.com | 519d7e6c… | https://teleadom.com/ZH/redirect.js | byte | 2026-04-28 01:33 |
| teleadom.com | 519d7e6c… | https://teleadom.com/redirect.js | byte | 2026-04-28 01:33 |
| tklegaim.com | 8fca73a4… | https://tklegaim.com/ZH/redirect.js | byte | 2026-04-27 23:13 |
| tklegaim.com | 8fca73a4… | https://tklegaim.com/redirect.js | byte | 2026-04-27 23:13 |
| txlegxam.com | ac851e56… | https://txlegxam.com/ZH/redirect.js | byte | 2026-04-27 17:23 |
| txlegxam.com | ac851e56… | https://txlegxam.com/redirect.js | byte | 2026-04-27 17:23 |
| tsleglam.com | e355d308… | https://tsleglam.com/ZH/redirect.js | byte | 2026-04-26 13:38 |
| tsleglam.com | e355d308… | https://tsleglam.com/redirect.js | byte | 2026-04-26 13:38 |
| teleqtnvbed.com | 7c5073f9… | https://teleqtnvbed.com/redirect.js | byte | 2026-04-24 17:17 |
| teleqtnvbnet.com | 57dfdd68… | https://teleqtnvbnet.com/redirect.js | byte | 2026-04-23 06:36 |
| trtegiam.com | a4427d64… | https://trtegiam.com/ZH/redirect.js | byte | 2026-04-22 01:22 |
| trtegiam.com | a4427d64… | https://trtegiam.com/redirect.js | byte | 2026-04-22 01:22 |
| titegalm.com | 0b66937c… | https://titegalm.com/ZH/redirect.js | byte | 2026-04-20 08:32 |
| titegalm.com | 0b66937c… | https://titegalm.com/redirect.js | byte | 2026-04-20 08:32 |
| ttlegiam.com | 193613ba… | https://ttlegiam.com/ZH/redirect.js | byte | 2026-04-20 04:19 |
| ttlegiam.com | 193613ba… | https://ttlegiam.com/redirect.js | byte | 2026-04-20 04:19 |
| teluadrm.com | 8dcae2f5… | https://teluadrm.com/ZH/redirect.js | byte | 2026-04-18 21:05 |
| teluadrm.com | 8dcae2f5… | https://teluadrm.com/redirect.js | byte | 2026-04-18 21:05 |
| triegvam.com | dcd909a4… | https://triegvam.com/ZH/redirect.js | byte | 2026-04-18 16:53 |
| triegvam.com | dcd909a4… | https://triegvam.com/redirect.js | byte | 2026-04-18 16:53 |
| triegvam.com | efb27d49… | https://triegvam.com/ZH/redirect.js | byte | 2026-04-18 15:33 |
| triegvam.com | efb27d49… | https://triegvam.com/redirect.js | byte | 2026-04-18 15:33 |
| ttlegiam.com | dde94a19… | https://ttlegiam.com/redirect.js | byte | 2026-04-18 01:54 |
| ttlegiam.com | dde94a19… | https://ttlegiam.com/ZH/redirect.js | byte | 2026-04-18 01:54 |
| tleigiam.com | e579ca23… | https://tleigiam.com/ZH/redirect.js | byte | 2026-04-17 13:47 |
| tleigiam.com | e579ca23… | https://tleigiam.com/redirect.js | byte | 2026-04-17 13:47 |
| telegarm-jp.org | 5f77026c… | https://telegarm-jp.org/redirect.js | byte | 2026-04-16 01:39 |
| telogykm.com | 67e92e91… | https://telogykm.com/ZH/redirect.js | byte | 2026-04-10 02:57 |
| telogykm.com | 67e92e91… | https://telogykm.com/redirect.js | byte | 2026-04-10 02:57 |
| telegge.club | 3b035e1f… | https://telegge.club/redirect.js | byte | 2026-04-08 16:17 |
| tege.club | 8131e581… | https://tege.club/redirect.js | byte | 2026-04-07 10:01 |
| telanigm.com | 42e54b1c… | https://telanigm.com/redirect.js | byte | 2026-04-07 02:17 |
| telanigm.com | 581cc9ea… | https://telanigm.com/redirect.js | byte | 2026-04-06 12:56 |
| tege.club | 18d16c05… | https://tege.club/redirect.js | byte | 2026-04-05 18:54 |
| teielrom.com | a28372f7… | https://teielrom.com/ZH/redirect.js | byte | 2026-04-05 15:59 |
| teielrom.com | a28372f7… | https://teielrom.com/redirect.js | byte | 2026-04-05 15:59 |
| telrotgm.com | 4dc63ae0… | https://telrotgm.com/ZH/redirect.js | byte | 2026-04-05 11:17 |
| telrotgm.com | 4dc63ae0… | https://telrotgm.com/redirect.js | byte | 2026-04-05 11:17 |
| telqging.com | c897d45f… | https://telqging.com/ZH/redirect.js | byte | 2026-04-05 10:58 |
| telqging.com | c897d45f… | https://telqging.com/redirect.js | byte | 2026-04-05 10:58 |
| tileganm.com | 6d6091cc… | https://tileganm.com/ZH/redirect.js | byte | 2026-04-01 04:08 |
| tileganm.com | 6d6091cc… | https://tileganm.com/redirect.js | byte | 2026-04-01 04:08 |
| bztgtest.top | 51483c00… | https://bztgtest.top/ZH/redirect.js | byte | 2026-03-29 07:27 |
| bztgtest.top | 51483c00… | https://bztgtest.top/redirect.js | byte | 2026-03-29 07:27 |
| trlegaim.com | 8031c543… | https://trlegaim.com/ZH/redirect.js | byte | 2026-03-28 22:35 |
| trlegaim.com | 8031c543… | https://trlegaim.com/redirect.js | byte | 2026-03-28 22:35 |
| telrogdm.com | 3dfeb702… | https://telrogdm.com/redirect.js | byte | 2026-03-25 15:52 |
| telrogdm.com | 3dfeb702… | https://telrogdm.com/ZH/redirect.js | byte | 2026-03-25 15:52 |
| tielrglm.com | 2cd1959f… | https://tielrglm.com/redirect.js | byte | 2026-03-25 02:47 |
| tielrglm.com | 2cd1959f… | https://tielrglm.com/ZH/redirect.js | byte | 2026-03-25 02:47 |
| tielrglm.com | 20f7078b… | https://tielrglm.com/redirect.js | byte | 2026-03-24 20:55 |
| tielrglm.com | 20f7078b… | https://tielrglm.com/ZH/redirect.js | byte | 2026-03-24 20:55 |
| telrougm.com | e46c320a… | https://telrougm.com/redirect.js | byte | 2026-03-24 15:58 |
| telrougm.com | e46c320a… | https://telrougm.com/ZH/redirect.js | byte | 2026-03-24 15:58 |
| telrougm.com | 43cbd373… | https://telrougm.com/ZH/redirect.js | byte | 2026-03-22 15:49 |
| telrougm.com | 43cbd373… | https://telrougm.com/redirect.js | byte | 2026-03-22 15:49 |
| euhe-tg.com | c64b5a99… | https://euhe-tg.com/redirect.js | byte | 2026-03-22 13:15 |
| tg-tnnr.com | b9e32ec7… | https://tg-tnnr.com/redirect.js | byte | 2026-03-21 17:46 |
| telagirm.com | 7d2b688f… | https://telagirm.com/ZH/redirect.js | byte | 2026-03-20 06:12 |
| telagirm.com | 7d2b688f… | https://telagirm.com/redirect.js | byte | 2026-03-20 06:12 |
| telrohlg.com | 57737401… | https://telrohlg.com/ZH/redirect.js | byte | 2026-03-18 22:22 |
| telrohlg.com | 57737401… | https://telrohlg.com/redirect.js | byte | 2026-03-18 22:22 |
| teleglvm.com | 1f1610ee… | https://teleglvm.com/ZH/redirect.js | byte | 2026-03-18 15:27 |
| teleglvm.com | 1f1610ee… | https://teleglvm.com/redirect.js | byte | 2026-03-18 15:27 |
| teleglom.com | bffc5ac7… | http://teleglom.com/ZH/redirect.js | byte | 2026-03-18 03:10 |
| teleglom.com | bffc5ac7… | http://teleglom.com/redirect.js | byte | 2026-03-18 03:10 |
| teidqglm.com | cb42409e… | https://teidqglm.com/ZH/redirect.js | byte | 2026-03-18 02:52 |
| teidqglm.com | cb42409e… | https://teidqglm.com/redirect.js | byte | 2026-03-18 02:52 |
| telopymg.com | 465ae762… | https://telopymg.com/redirect.js | byte | 2026-03-17 02:09 |
| telopymg.com | 465ae762… | https://telopymg.com/ZH/redirect.js | byte | 2026-03-17 02:09 |
| govlexta.one | ad34edc0… | https://govlexta.one/redirect.js | byte | 2026-03-16 02:34 |
| teliagivg.com | 5fef05ac… | https://teliagivg.com/ZH/redirect.js | byte | 2026-03-15 12:32 |
| teliagivg.com | 5fef05ac… | https://teliagivg.com/redirect.js | byte | 2026-03-15 12:32 |
| mornvex.lol | 7b370d83… | https://mornvex.lol/redirect.js | byte | 2026-03-07 08:51 |
| sylvornex.sbs | 1ba6eddf… | https://sylvornex.sbs/redirect.js | byte | 2026-03-05 12:10 |
| eldravox.icu | 03b394a3… | https://eldravox.icu/redirect.js | byte | 2026-03-05 05:15 |
| mornvex.lol | 73a0a3f1… | https://mornvex.lol/redirect.js | byte | 2026-03-04 22:05 |
| treantboz.cfd | 2c920261… | https://treantboz.cfd/redirect.js | byte | 2026-03-04 17:19 |
| teleqarnn.com | f2b1e965… | https://teleqarnn.com/redirect.js | byte | 2026-01-18 04:23 |
| teleqarnn.com | a5f9878a… | https://teleqarnn.com/redirect.js | byte | 2026-01-16 22:56 |
| ufhsmijgfkjbk.lol | af1e0d4b… | http://ufhsmijgfkjbk.lol/redirect.js | byte | 2026-01-12 14:58 |
| gsdrtkllkjln.xyz | 36bfddd8… | https://gsdrtkllkjln.xyz/redirect.js | byte | 2026-01-08 20:49 |
| gsdrtkllkjln.xyz | 8aea3ccf… | https://gsdrtkllkjln.xyz/redirect.js | byte | 2026-01-07 07:42 |
| gsdrtkllkjln.buzz | b6330be2… | https://gsdrtkllkjln.buzz/redirect.js | byte | 2026-01-07 06:01 |
| fdshfgjd.homes | aca97805… | https://fdshfgjd.homes/redirect.js | byte | 2026-01-07 00:14 |
| fdshdfjghkf.lat | b5710354… | https://fdshdfjghkf.lat/redirect.js | byte | 2026-01-06 19:25 |
| fdshfgjd.lat | 9e3d4162… | https://fdshfgjd.lat/redirect.js | byte | 2026-01-06 16:34 |
| fdshfsjd.lat | ce801f24… | https://fdshfsjd.lat/redirect.js | byte | 2026-01-06 02:17 |
| hujli.shop | 7bb75002… | https://hujli.shop/redirect.js | byte | 2026-01-02 06:11 |
| sdfc-tg.com | 1ce2befd… | https://sdfc-tg.com/redirect.js | byte | 2025-12-31 19:16 |
| yfhmg.love | 6fa48a57… | https://yfhmg.love/redirect.js | byte | 2025-12-30 18:00 |
| yfhmg.love | 61d25463… | https://yfhmg.love/redirect.js | byte | 2025-12-29 12:51 |
| wulpg.help | e465ecc8… | https://wulpg.help/redirect.js | byte | 2025-12-28 14:28 |
| hudf.qpon | d92d2630… | http://hudf.qpon/redirect.js | byte | 2025-12-27 23:13 |
| usjgf.click | 4bb685d7… | https://usjgf.click/redirect.js | byte | 2025-12-27 22:13 |
| wulpg.help | 353d31ba… | https://wulpg.help/redirect.js | byte | 2025-12-27 18:00 |
| kdgaj.love | d81e4af2… | https://kdgaj.love/redirect.js | byte | 2025-12-27 15:53 |
| zhongwen.love | 6439699c… | https://zhongwen.love/redirect.js | byte | 2025-12-21 18:24 |
| zhongwen.love | 6439699c… | https://zhongwen.love/redirect.js | byte | 2025-12-21 18:24 |
| wanghaha.click | 7e5ab7bd… | https://wanghaha.click/redirect.js | byte | 2025-12-20 12:12 |
| htrx-tg.com | 47736ef0… | https://htrx-tg.com/redirect.js | byte | 2025-12-20 11:29 |
| zhongwen.love | d69f4d92… | https://zhongwen.love/redirect.js | byte | 2025-12-20 06:25 |
| yangguang.my.id | ecad07f3… | https://yangguang.my.id/redirect.js | byte | 2025-12-20 01:35 |
| wangghj.club | aa6156ef… | https://wangghj.club/redirect.js | byte | 2025-12-14 05:35 |
| dashan.icu | a659ca5f… | https://dashan.icu/redirect.js | byte | 2025-12-12 19:34 |
| hkaiyinn.my.id | c45292d6… | https://hkaiyinn.my.id/redirect.js | byte | 2025-12-11 12:57 |
| hujiang.me | 2e247b97… | https://hujiang.me/redirect.js | byte | 2025-12-10 22:04 |