Known malicious kithighphishing
Gambling Rotation Kit (.win/.mom/.vip) — chunk-vendors
family: gambling-vip-win-kit-d0d844
Short link:scanmalware.com/h/26
Online-gambling/betting kit deployed across 43 brand-prefixed hostnames on .win/.mom/.vip TLDs. Includes 1xbet-style impersonation (1x-clz.vip, 1x-gzm.vip, 1x-xl.vip) and generic bet/win brands (0227bet.win, 107win.mom, 208win2.vip).
Anchors
Provenance
Added: 2026-05-26 16:37
Single anchor — 43 hosts, byte-identical build. TLSH body diverges from the random-domain template — distinct operator/template.
Sightings (110)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| 285win.mom | e947c255… | https://285win.mom/static/js/chunk-vendors.6859ceed.js | byte | 2026-03-07 18:54 |
| 285win.mom | e947c255… | https://285win.mom/static/js/chunk-vendors.6859ceed.js | byte | 2026-03-07 18:54 |
| aaddpg.win | 1d986bb0… | https://aaddpg.win/static/js/chunk-vendors.7eb7e004.js | byte | 2026-03-06 23:12 |
| aaddpg.win | 1d986bb0… | https://aaddpg.win/static/js/chunk-vendors.7eb7e004.js | byte | 2026-03-06 23:12 |
| wg-bmw.win | ff58bcff… | https://wg-bmw.win/static/js/chunk-vendors.e2026fcd.js | byte | 2026-03-06 13:19 |
| wg-bmw.win | ff58bcff… | https://wg-bmw.win/static/js/chunk-vendors.e2026fcd.js | byte | 2026-03-06 13:19 |
| 1x-clz.vip | ce268371… | https://1x-clz.vip/static/js/chunk-vendors.89fd2418.js | byte | 2026-03-06 01:48 |
| 1x-clz.vip | ce268371… | https://1x-clz.vip/static/js/chunk-vendors.89fd2418.js | byte | 2026-03-06 01:48 |
| andar-777.vip | 25a1ddd4… | https://andar-777.vip/static/js/chunk-vendors.979ed1a7.js | byte | 2026-03-04 06:58 |
| andar-777.vip | 25a1ddd4… | https://andar-777.vip/static/js/chunk-vendors.979ed1a7.js | byte | 2026-03-04 06:58 |
| 107win.mom | 4a4eee10… | https://107win.mom/static/js/chunk-vendors.d8687327.js | byte | 2026-03-03 09:51 |
| 107win.mom | 4a4eee10… | https://107win.mom/static/js/chunk-vendors.d8687327.js | byte | 2026-03-03 09:51 |
| 1x-gzm.vip | a8c1fb31… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-03-02 22:22 |
| 1x-gzm.vip | a8c1fb31… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-03-02 22:22 |
| 1x-gzm.vip | f69c3c3e… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-03-02 21:27 |
| 1x-gzm.vip | f69c3c3e… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-03-02 21:27 |
| 0227bet.win | 22c162c5… | https://0227bet.win/static/js/chunk-vendors.9be18ab2.js | byte | 2026-03-02 07:34 |
| 0227bet.win | 22c162c5… | https://0227bet.win/static/js/chunk-vendors.9be18ab2.js | byte | 2026-03-02 07:34 |
| wg-burgguer.vip | 7edfdd61… | https://wg-burgguer.vip/static/js/chunk-vendors.9b45689a.js | byte | 2026-03-01 14:22 |
| wg-burgguer.vip | 7edfdd61… | https://wg-burgguer.vip/static/js/chunk-vendors.9b45689a.js | byte | 2026-03-01 14:22 |
| estacao-777.vip | a74307c0… | https://estacao-777.vip/static/js/chunk-vendors.317375e0.js | byte | 2026-02-28 15:00 |
| estacao-777.vip | a74307c0… | https://estacao-777.vip/static/js/chunk-vendors.317375e0.js | byte | 2026-02-28 15:00 |
| 550bet.mom | 5e503fa7… | https://550bet.mom/static/js/chunk-vendors.d83cff1c.js | byte | 2026-02-27 08:02 |
| 550bet.mom | 5e503fa7… | https://550bet.mom/static/js/chunk-vendors.d83cff1c.js | byte | 2026-02-27 08:02 |
| 280win.mom | 24011a37… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-02-26 23:51 |
| 280win.mom | 24011a37… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-02-26 23:51 |
| bolakf.win | 2502c791… | https://bolakf.win/static/js/chunk-vendors.c3d5ec73.js | byte | 2026-02-26 17:47 |
| bolakf.win | 2502c791… | https://bolakf.win/static/js/chunk-vendors.c3d5ec73.js | byte | 2026-02-26 17:47 |
| 208win2.vip | 403bcf5a… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-02-26 08:37 |
| 208win2.vip | 403bcf5a… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-02-26 08:37 |
| 280win.mom | 373568e1… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-02-25 23:32 |
| 280win.mom | 373568e1… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-02-25 23:32 |
| 208win2.vip | 44122a96… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-02-25 09:55 |
| 208win2.vip | 44122a96… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-02-25 09:55 |
| okok-yoga.vip | a1eb8947… | https://okok-yoga.vip/static/js/chunk-vendors.038aa6c1.js | byte | 2026-02-22 20:14 |
| okok-yoga.vip | a1eb8947… | https://okok-yoga.vip/static/js/chunk-vendors.038aa6c1.js | byte | 2026-02-22 20:14 |
| w1-trigo-pg.vip | a249c6c0… | https://w1-trigo-pg.vip/static/js/chunk-vendors.d6952f34.js | byte | 2026-02-22 03:52 |
| w1-trigo-pg.vip | a249c6c0… | https://w1-trigo-pg.vip/static/js/chunk-vendors.d6952f34.js | byte | 2026-02-22 03:52 |
| 91-ribbonpg.vip | 9e82dd8d… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-02-21 07:39 |
| 91-ribbonpg.vip | 9e82dd8d… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-02-21 07:39 |
| 91-ribbonpg.vip | a55f624f… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-02-20 22:47 |
| 91-ribbonpg.vip | a55f624f… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-02-20 22:47 |
| aj-seupg.vip | 1c3afb15… | https://aj-seupg.vip/static/js/chunk-vendors.71bdad2f.js | byte | 2026-02-14 00:33 |
| aj-seupg.vip | 1c3afb15… | https://aj-seupg.vip/static/js/chunk-vendors.71bdad2f.js | byte | 2026-02-14 00:33 |
| gbpmk.mom | 0a2a74bc… | https://gbpmk.mom/static/js/chunk-vendors.a5053489.js | byte | 2026-02-04 19:29 |
| gbpmk.mom | 0a2a74bc… | https://gbpmk.mom/static/js/chunk-vendors.a5053489.js | byte | 2026-02-04 19:29 |
| cervejakf.win | c8d2defe… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-01-31 23:38 |
| cervejakf.win | c8d2defe… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-01-31 23:38 |
| xw-ficarpg.vip | 70dd5274… | https://xw-ficarpg.vip/static/js/chunk-vendors.898d9c76.js | byte | 2026-01-31 23:10 |
| xw-ficarpg.vip | 70dd5274… | https://xw-ficarpg.vip/static/js/chunk-vendors.898d9c76.js | byte | 2026-01-31 23:10 |
| dy-reuniaopg.vip | 5f8bb802… | https://dy-reuniaopg.vip/static/js/chunk-vendors.f6e8d588.js | byte | 2026-01-30 02:44 |
| dy-reuniaopg.vip | 5f8bb802… | https://dy-reuniaopg.vip/static/js/chunk-vendors.f6e8d588.js | byte | 2026-01-30 02:44 |
| cad-mk.vip | eda4d0c4… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-01-27 02:26 |
| cad-mk.vip | eda4d0c4… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-01-27 02:26 |
| cervejakf.win | 04882500… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-01-26 14:01 |
| cervejakf.win | 04882500… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-01-26 14:01 |
| cad-mk.vip | c2c0c5bc… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-01-26 11:46 |
| cad-mk.vip | c2c0c5bc… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-01-26 11:46 |
| 777-passeio777.vip | c710cab4… | https://777-passeio777.vip/static/js/chunk-vendors.e7a026af.js | byte | 2026-01-24 12:10 |
| 777-passeio777.vip | c710cab4… | https://777-passeio777.vip/static/js/chunk-vendors.e7a026af.js | byte | 2026-01-24 12:10 |
| xicara777.vip | bc45dbe1… | https://xicara777.vip/static/js/chunk-vendors.c1e64a20.js | byte | 2026-01-22 03:48 |
| xicara777.vip | bc45dbe1… | https://xicara777.vip/static/js/chunk-vendors.c1e64a20.js | byte | 2026-01-22 03:48 |
| 773-win.vip | 99fc3abe… | https://773-win.vip/static/js/chunk-vendors.a7655798.js | byte | 2026-01-18 21:36 |
| 773-win.vip | 99fc3abe… | https://773-win.vip/static/js/chunk-vendors.a7655798.js | byte | 2026-01-18 21:36 |
| lllipg.win | faf74b6e… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-01-18 05:39 |
| lllipg.win | faf74b6e… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-01-18 05:39 |
| 1x-xl.vip | 2c40898c… | https://1x-xl.vip/static/js/chunk-vendors.bb0a82e0.js | byte | 2026-01-17 09:51 |
| 1x-xl.vip | 2c40898c… | https://1x-xl.vip/static/js/chunk-vendors.bb0a82e0.js | byte | 2026-01-17 09:51 |
| vaso-777.vip | 672529bb… | https://vaso-777.vip/static/js/chunk-vendors.5f3b53ec.js | byte | 2026-01-16 04:10 |
| vaso-777.vip | 672529bb… | https://vaso-777.vip/static/js/chunk-vendors.5f3b53ec.js | byte | 2026-01-16 04:10 |
| veilpg.vip | d90b17cd… | https://veilpg.vip/static/js/chunk-vendors.e1bb747e.js | byte | 2026-01-15 07:38 |
| veilpg.vip | d90b17cd… | https://veilpg.vip/static/js/chunk-vendors.e1bb747e.js | byte | 2026-01-15 07:38 |
| lllipg.win | 8ec4baf1… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-01-14 03:31 |
| lllipg.win | 8ec4baf1… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-01-14 03:31 |
| 57ll.win | 7314aad3… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-01-12 12:23 |
| 57ll.win | 7314aad3… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-01-12 12:23 |
| fantamk.cc | d9d8a5fd… | https://fantamk.cc/static/js/chunk-vendors.d299ea43.js | byte | 2026-01-12 11:33 |
| fantamk.cc | d9d8a5fd… | https://fantamk.cc/static/js/chunk-vendors.d299ea43.js | byte | 2026-01-12 11:33 |
| 57ll.win | 5194eaa7… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-01-06 18:53 |
| 57ll.win | 5194eaa7… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-01-06 18:53 |
| dy-batidopg.vip | e9cc8f71… | https://dy-batidopg.vip/static/js/chunk-vendors.ba419bf1.js | byte | 2026-01-06 15:17 |
| dy-batidopg.vip | e9cc8f71… | https://dy-batidopg.vip/static/js/chunk-vendors.ba419bf1.js | byte | 2026-01-06 15:17 |
| 91-apronpg.vip | 29bf482e… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-01-04 20:31 |
| 91-apronpg.vip | 29bf482e… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-01-04 20:31 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-04 19:53 |
| w1-popeyepg.mom | 5edc179e… | https://w1-popeyepg.mom/static/js/chunk-vendors.d65106cf.js | byte | 2026-01-04 09:31 |
| w1-popeyepg.mom | 5edc179e… | https://w1-popeyepg.mom/static/js/chunk-vendors.d65106cf.js | byte | 2026-01-04 09:31 |
| wg-cidade.mom | f033c4f3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-02 20:32 |
| wg-cidade.mom | f033c4f3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-01-02 20:32 |
| presentesdenatalkk.mom | 8c1072a2… | https://presentesdenatalkk.mom/static/js/chunk-vendors.3d1d6802.js | byte | 2026-01-02 07:12 |
| presentesdenatalkk.mom | 8c1072a2… | https://presentesdenatalkk.mom/static/js/chunk-vendors.3d1d6802.js | byte | 2026-01-02 07:12 |
| bet-567.vip | a7ff372f… | https://bet-567.vip/static/js/chunk-vendors.dd39d98f.js | byte | 2026-01-01 11:32 |
| bet-567.vip | a7ff372f… | https://bet-567.vip/static/js/chunk-vendors.dd39d98f.js | byte | 2026-01-01 11:32 |
| lf-natal.mom | 5e6459b9… | https://lf-natal.mom/static/js/chunk-vendors.3d16fd07.js | byte | 2026-01-01 02:14 |
| lf-natal.mom | 5e6459b9… | https://lf-natal.mom/static/js/chunk-vendors.3d16fd07.js | byte | 2026-01-01 02:14 |
| 91-apronpg.vip | 211e41c5… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2025-12-29 15:57 |
| 91-apronpg.vip | 211e41c5… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2025-12-29 15:57 |
| 0k0kjqk.com | 5aa52e0d… | https://0k0kjqk.com/static/js/chunk-vendors.a0cd655a.js | byte | 2025-12-21 02:14 |
| 0k0kjqk.com | 5aa52e0d… | https://0k0kjqk.com/static/js/chunk-vendors.a0cd655a.js | byte | 2025-12-21 02:14 |
| 888vlw.fun | c587c112… | https://888vlw.fun/static/js/chunk-vendors.4918d6c2.js | byte | 2025-12-12 13:36 |
| 888vlw.fun | c587c112… | https://888vlw.fun/static/js/chunk-vendors.4918d6c2.js | byte | 2025-12-12 13:36 |
| w1-bmxpg.win | 4aa783b5… | https://w1-bmxpg.win/static/js/chunk-vendors.6ea62ee3.js | byte | 2025-12-12 00:03 |
| w1-bmxpg.win | 4aa783b5… | https://w1-bmxpg.win/static/js/chunk-vendors.6ea62ee3.js | byte | 2025-12-12 00:03 |
| 878bet.mom | 8c22351a… | https://878bet.mom/static/js/chunk-vendors.eb4b6296.js | byte | 2025-12-11 18:52 |
| 878bet.mom | 8c22351a… | https://878bet.mom/static/js/chunk-vendors.eb4b6296.js | byte | 2025-12-11 18:52 |