Known malicious kithighphishing
.click TLD Rotation Kit (b) — chunk-vendors
family: click-tld-kit-1f93
Short link:scanmalware.com/h/34
Vue.js webpack SPA across 17 hostnames mostly on .click TLD (bpqsfyum.click, deddrvta.click, hxrygdhl.click, …) plus shakti.top and tea01.bahfn.cn. Different operator from a260ef.
Anchors
Provenance
Added: 2026-05-26 16:48
17 hosts
Sightings (23)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| diwacore.com | 141e06dc… | https://diwacore.com/static/js/chunk-vendors.70f07c4c.js | byte | 2026-08-20 08:16 |
| bcabank.top | bbe1c972… | https://bcabank.top/static/js/chunk-vendors.e952b980.js?fix=20260517T2328 | byte | 2026-05-25 02:11 |
| bcabank.top | ba822383… | https://bcabank.top/static/js/chunk-vendors.e952b980.js?fix=20260517T2328 | byte | 2026-05-25 02:10 |
| mnxgavmn.click | 24aef686… | https://mnxgavmn.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 16:42 |
| bpqsfyum.click | 4ebbba05… | https://bpqsfyum.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 16:37 |
| deddrvta.click | 08094033… | https://deddrvta.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 16:36 |
| hxrygdhl.click | d152cc1e… | https://hxrygdhl.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 16:35 |
| shakti.top | e4d0267d… | https://shakti.top/static/js/chunk-vendors.70f07c4c.js | byte | 2026-05-24 16:05 |
| qtqelibp.click | a97f6d0e… | https://qtqelibp.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:20 |
| jddwhkcd.click | a9d01995… | https://jddwhkcd.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:18 |
| klaazbsc.click | bd18b7db… | https://klaazbsc.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:17 |
| niwfilzp.click | 3d238174… | https://niwfilzp.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:17 |
| zwraikki.click | 7d45d5e6… | https://zwraikki.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:17 |
| smlbgaub.click | 2c69aba1… | https://smlbgaub.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:17 |
| thndybgj.click | 9e0e3083… | https://thndybgj.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 15:13 |
| ztanwfoo.click | e9476ca6… | https://ztanwfoo.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 14:03 |
| tea01.bahfn.cn | 31a0ec32… | https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.js | byte | 2026-05-24 13:47 |
| tea01.bahfn.cn | ccd4f5a7… | https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.js | byte | 2026-05-24 13:38 |
| tea01.bahfn.cn | c4f2a9c6… | https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.js | byte | 2026-05-24 13:34 |
| tea01.bahfn.cn | 17a69feb… | https://tea01.bahfn.cn/h5/static/js/chunk-vendors.4103ca2a.js | byte | 2026-05-24 13:02 |
| xemxtwhs.click | e68dac90… | https://xemxtwhs.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 13:01 |
| raobmizs.click | 87bf963f… | https://raobmizs.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 12:57 |
| obcrpyrt.click | 3f7d35f9… | https://obcrpyrt.click/static/js/chunk-vendors.e952b980.js | byte | 2026-05-24 12:46 |