Known malicious kithighphishing

bbq/carros/ty Portuguese Brand Rotation — chunk-vendors

family: bbq-carros-pt-03a5

9-host operator running Portuguese-language brand impersonation: bbq-kf.com, bbqkf.com, bbqkfpg.com, carros-ty.com, carrosty.com, okcarros.com, ty-carros.com, tycarros.com, vip-carros.com (BBQ + cars).

Sightings (14)

HostScanScriptMatchWhen
vip-carros.com65577695…https://vip-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:42
carrosty.com5ac60684…https://carrosty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:38
bbqkfpg.comf33c5f42…https://bbqkfpg.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
bbqkfpg.com0e2520aa…https://bbqkfpg.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
ty-carros.com0addcfd1…https://ty-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
bbqkf.comf7bca6df…https://bbqkf.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:30
carros-ty.com44a8f2f0…https://carros-ty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:29
vip-carros.com51d84e89…https://vip-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:26
carrosty.com1ccfe24e…https://carrosty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:13
okcarros.comb71dbea5…https://okcarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:07
tycarros.com72987bfe…https://tycarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:03
bbq-kf.com8b715ab1…https://bbq-kf.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:01
tycarros.com9486bbae…https://tycarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 05:59
carros-ty.comebf4b6f7…https://carros-ty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 05:57