Known malicious kithighother
Crypto task-scam (刷单) app — b516ab02 module (content anchor)
family: crypto-task-scam-appflow
Short link:scanmalware.com/h/162
Client-rendered uni-app/Vue H5 crypto task-order scam (刷单): deposit USDT (TRC20), earn commissions on tasks, invite-code pyramid. Renders BLANK, so screenshots, page text and form analysis see nothing. Anchored on the rebuild-stable canonical AST hash: Vite content-hashed filenames and bundle hashes rotate per deploy, but the code structure survives. Each anchored module has only been seen on webapp-run.us.
Anchors
Provenance
Added: 2026-07-17 21:33
Only non-trivial modules are used as anchors, so generic helper code shared with other apps does not match.
Sightings (3)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| webapp-run.us | a306f270… | https://webapp-run.us/assets/index-BKJUIWv9.js#webpack-module:overview | structure | 2026-07-17 22:25 |
| webapp-run.us | 993bbf29… | https://webapp-run.us/assets/index-BKJUIWv9.js#webpack-module:overview | structure | 2026-07-17 21:47 |
| webapp-run.us | 5785c102… | https://webapp-run.us/assets/index-BKJUIWv9.js#webpack-module:overview | structure | 2026-07-17 21:39 |