Known malicious kithighphishing

.click TLD Rotation Kit (b) — chunk-vendors

family: click-tld-kit-1f93

Vue.js webpack SPA across 17 hostnames mostly on .click TLD (bpqsfyum.click, deddrvta.click, hxrygdhl.click, …) plus shakti.top and tea01.bahfn.cn. Different operator from a260ef.

Sightings (23)Atom feed

HostScanScriptMatchScanned
diwacore.com141e06dc…https://diwacore.com/static/js/chunk-vendors.70f07c4c.jsbyte2026-08-20 08:14
bcabank.topbbe1c972…https://bcabank.top/static/js/chunk-vendors.e952b980.js?fix=20260517T2328byte2026-05-21 01:34
bcabank.topba822383…https://bcabank.top/static/js/chunk-vendors.e952b980.js?fix=20260517T2328byte2026-05-20 22:29
mnxgavmn.click24aef686…https://mnxgavmn.click/static/js/chunk-vendors.e952b980.jsbyte2026-04-03 05:53
bpqsfyum.click4ebbba05…https://bpqsfyum.click/static/js/chunk-vendors.e952b980.jsbyte2026-04-02 21:48
deddrvta.click08094033…https://deddrvta.click/static/js/chunk-vendors.e952b980.jsbyte2026-04-02 20:57
hxrygdhl.clickd152cc1e…https://hxrygdhl.click/static/js/chunk-vendors.e952b980.jsbyte2026-04-02 18:58
shakti.tope4d0267d…https://shakti.top/static/js/chunk-vendors.70f07c4c.jsbyte2026-03-31 11:49
qtqelibp.clicka97f6d0e…https://qtqelibp.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 22:51
jddwhkcd.clicka9d01995…https://jddwhkcd.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 18:45
klaazbsc.clickbd18b7db…https://klaazbsc.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 18:02
niwfilzp.click3d238174…https://niwfilzp.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 17:45
zwraikki.click7d45d5e6…https://zwraikki.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 16:52
smlbgaub.click2c69aba1…https://smlbgaub.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 16:38
thndybgj.click9e0e3083…https://thndybgj.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-27 08:49
ztanwfoo.clicke9476ca6…https://ztanwfoo.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-21 18:24
tea01.bahfn.cn31a0ec32…https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.jsbyte2026-03-20 10:07
tea01.bahfn.cnccd4f5a7…https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.jsbyte2026-03-19 17:47
tea01.bahfn.cnc4f2a9c6…https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.jsbyte2026-03-19 12:39
tea01.bahfn.cn17a69feb…https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.jsbyte2026-03-17 00:54
xemxtwhs.clicke68dac90…https://xemxtwhs.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-16 23:12
raobmizs.click87bf963f…https://raobmizs.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-16 15:38
obcrpyrt.click3f7d35f9…https://obcrpyrt.click/static/js/chunk-vendors.e952b980.jsbyte2026-03-15 17:59