Known malicious kitcriticalphishing
Tigo El Salvador Brand Impersonation — index.js #1
family: latam-tigo-sv-phish-1b7d
Short link:scanmalware.com/h/65
Brand-impersonation phishing kit targeting Tigo El Salvador (major LATAM telecom). 19 hosts on .cc/.help/.click/.art/.sbs/.top with tigo-prefixed names (sv-tigo.cc, tigoboss.help, tigosrwvp.help, tigovseop.click, tigovspom.help, …). Page title: "La primera Red 5G de El Salvador | Tigo El Salvador" (direct quote from real Tigo SV marketing). URL path /apps/SV_PT_01/assets/index-*.js — sister to the Telcel MX MX_PT_06 kit, same operator.
Anchors
Provenance
Added: 2026-05-26 18:41
Anchor #1 of 2. 19 hosts. /apps/SV_PT_01/assets/index-<hash>.js path.
Sightings (25)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| tigosvspt.help | f3c4ab5a… | https://tigosvspt.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-25 11:08 |
| tigoboss.help | d9b3c62c… | https://tigoboss.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-23 13:37 |
| tigovseop.sbs | 0de1c6ed… | https://tigovseop.sbs/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-08 09:37 |
| tigovseop.top | 285311b7… | https://tigovseop.top/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-06 08:34 |
| tigovseop.sbs | 6cadf62d… | https://tigovseop.sbs/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-06 07:56 |
| tigovseop.art | 4a7118d7… | https://tigovseop.art/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-05 16:41 |
| tigovseop.click | 84cea537… | https://tigovseop.click/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-03 00:45 |
| tigovseop.top | 8f78a216… | https://tigovseop.top/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-02 19:13 |
| tigovsopa.click | 29bb916c… | https://tigovsopa.click/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-02 03:25 |
| tigosrtvp.help | f27a488b… | https://tigosrtvp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-01 11:53 |
| tigovsopa.help | 8bd012c9… | https://tigovsopa.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-04-01 07:20 |
| tigosnvrp.help | fc751d3e… | https://tigosnvrp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-31 13:34 |
| tigosvopas.click | 4d24374b… | https://tigosvopas.click/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-30 00:38 |
| tigosdvtp.help | 58a4f460… | https://tigosdvtp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-29 11:59 |
| tigosdvtp.help | 1e1e4e1a… | https://tigosdvtp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-29 01:04 |
| tigovsopa.help | ea406cb5… | https://tigovsopa.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-28 21:47 |
| tigosvopas.help | d44ac900… | https://tigosvopas.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-28 16:17 |
| tigosvopas.help | ddf7898d… | https://tigosvopas.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-28 03:33 |
| tigosrwvp.help | 90f41fe7… | https://tigosrwvp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-28 00:01 |
| tigosrevp.help | fc5516e0… | https://tigosrevp.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-27 11:52 |
| tigosvopas.click | 3f16a14e… | https://tigosvopas.click/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-27 09:19 |
| tigonosep.click | 95ab036b… | https://tigonosep.click/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-19 18:19 |
| tigovspom.help | 8446e720… | https://tigovspom.help/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-03-14 22:53 |
| sv-tigo.cc | 12708a47… | http://sv-tigo.cc/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-02-07 16:11 |
| tigo-sv.cc | 68a06f13… | https://tigo-sv.cc/apps/SV_PT_01/assets/index-DutFSlu3.js | byte | 2026-02-03 08:00 |