ScanMalware.com
Known malicious kithighphishing

Random-Domain Vue Scam Kit (cyou/shop/sbs) — chunk-vendors

family: random-domain-kit-9f38c9

Vue.js webpack SPA deployed across 33 random-letter hostnames on .cyou/.shop/.sbs/.icu TLDs (oodjdfuigewjkfdssf.cyou, bcmnrjwyrishfdjdgf.shop, dsfjngfwisdjfoisdjs.shop, …). TLSH body identical to the 0e990c cluster — likely the same template, different operator cohort.

Fingerprint anchors

content sha256164eac04259ecb4e55325d45968be7fdb6e4dff0ecafd6855f1d7798df8a43d5
canonical AST9f38c99b21913bcd047492818636b27fb6d74f6efab6675b3b43d9f546df7354
TLSHT18E05F78DF282B0B607E760B5403F220BB2376959B40A84D8F675E4D4AD7894E6237F7D

Provenance

Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 33 hosts. TLSH body identical to 0e990c cluster except for the q-ratio byte.

Sightings (46)

HostScanScriptMatchWhen
meiououajsdmlsd.cfd0c9add13…https://meiououajsdmlsd.cfd/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:48
kouqonasjdk.icu49d3f945…https://kouqonasjdk.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:45
sduyiuwenjksdnzv.icucaf423ff…https://sduyiuwenjksdnzv.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:36
moouqyeitknazasgj.icudbb6a20a…https://moouqyeitknazasgj.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:33
kktwolertjksdlj1ask.shop22e4ac50…https://kktwolertjksdlj1ask.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:28
hubnwjohljkkskdlsz.cyou84e093c3…https://hubnwjohljkkskdlsz.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 12:25
uhznahsdkjgljalk.cyou03166d4b…https://uhznahsdkjgljalk.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 11:53
kowjekasndakg1a.sbs927f8eac…https://kowjekasndakg1a.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 11:40
mbjuoiwejrkasnd.shop95821ebe…https://mbjuoiwejrkasnd.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 11:22
nhwuedahqasdkk.icue1b1c036…https://nhwuedahqasdkk.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 11:15
yqihasndkbnaks.cyoua2670cfd…http://yqihasndkbnaks.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 07:18
nbbzvbvzbanzmd.shop1101e583…https://nbbzvbvzbanzmd.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 06:04
nbbzvbvzbanzmd.shop4a072ff2…http://nbbzvbvzbanzmd.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 06:04
sdfwygajzkdfjlkslkl.icu24da4c0c…http://sdfwygajzkdfjlkslkl.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 05:55
nzjjawjanskdjkslw.icu9701c3e5…https://nzjjawjanskdjkslw.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:52
nzjjawjanskdjkslw.cyoueef2889f…https://nzjjawjanskdjkslw.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:47
mnsjjwanksasw1m.icu3b46e4c3…https://mnsjjwanksasw1m.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:33
nzjjawjanskdjkslw.icu59db108d…https://nzjjawjanskdjkslw.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:32
jsknaknskwnkan1k.cyou4d785a2e…https://jsknaknskwnkan1k.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:30
nzjjawjanskdjkslw.cfdb6008806…https://nzjjawjanskdjkslw.cfd/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:26
msknwkhjaknwmk.shop7268382f…https://msknwkhjaknwmk.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:22
nbhanwmnbask1as.icu7e2c3beb…https://nbhanwmnbask1as.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:13
mnsjjwanksasw1m.icu9ca1dbb3…https://mnsjjwanksasw1m.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 02:01
nbhanwmnbask1as.cyou690425ff…https://nbhanwmnbask1as.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:56
nawjnalsndksdkwk.cyou3c1527db…https://nawjnalsndksdkwk.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:54
nzjjawjanskdjkslw.cfd51dde339…https://nzjjawjanskdjkslw.cfd/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:45
nzjjawjanskdjkslw.cyoue4dc23c6…https://nzjjawjanskdjkslw.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:34
nbhanwmnbask1as.cyouf2ad9945…https://nbhanwmnbask1as.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:23
nbhanwmnbask1as.icu3a3482a9…https://nbhanwmnbask1as.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:21
waehgf5dfihjozsisg.sbs7fd43609…https://waehgf5dfihjozsisg.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:10
bcmnrjwyrishfdjdgf.shop969df81f…https://bcmnrjwyrishfdjdgf.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:07
dncmfiwihfudffdgvs.icu738cbab7…https://dncmfiwihfudffdgvs.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:05
jsdfhiuefhgklzjidfsj.cyou0edcefa6…https://jsdfhiuefhgklzjidfsj.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:02
bcmnrjwyrishfdjdgf.shopcb22afc8…https://bcmnrjwyrishfdjdgf.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 01:00
nvchdiouytowejgn.icu9c10d599…https://nvchdiouytowejgn.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:50
waehgf5dfihjozsisg.sbs619ab8b3…https://waehgf5dfihjozsisg.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:48
yrutgophsklywpngk.icu285ad6ad…https://yrutgophsklywpngk.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:47
nvchdiouytowejgn.icu464dbe8b…https://nvchdiouytowejgn.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:40
yrutgophsklywpngk.icu72374a0c…https://yrutgophsklywpngk.icu/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:39
troiurkjfbyonvnzsaq.sbs93890710…https://troiurkjfbyonvnzsaq.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:36
troiurkjfbyonvnzsaq.sbs5756dd5e…https://troiurkjfbyonvnzsaq.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:36
dsfjngfwisdjfoisdjs.shop50a5b565…https://dsfjngfwisdjfoisdjs.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:32
dsfjngfwisdjfoisdjs.shop0673038b…https://dsfjngfwisdjfoisdjs.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:32
ihwqhhbxjnbzzsad.sbs02a5a1db…https://ihwqhhbxjnbzzsad.sbs/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:23
nhwbajhwnjjasjeeq.shopb9e5ba3b…https://nhwbajhwnjjasjeeq.shop/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:17
oodjdfuigewjkfdssf.cyou4cb357b9…https://oodjdfuigewjkfdssf.cyou/static/js/chunk-vendors.6fe6dfda.jsbyte2026-05-24 00:17