Known malicious kithighphishing

Random-Domain Vue Scam Kit (sbs/qpon/cyou) — chunk-vendors

family: random-domain-kit-c73042

Vue.js webpack SPA deployed across 32 random-letter hostnames on .sbs/.qpon/.cyou/.click/.icu TLDs (iewyrgajdghfvdhdjs.sbs, jkahskdnzl6kajhmza.qpon, …). Includes the .qpon TLD which is rare and a strong scam-infrastructure marker.

Provenance

Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 32 hosts. The .qpon TLD is a distinctive marker.

Sightings (35)

HostScanScriptMatchWhen
uyuihasnnzkdflm.shop8d0878cchttps://uyuihasnnzkdflm.shop/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 14:21
jhgiasdjksd8asd.cyouc22f9707https://jhgiasdjksd8asd.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 13:43
nbujisdjkghlaks.icua861e241https://nbujisdjkghlaks.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 13:09
moippwqyiuajsd.sbs551c5692https://moippwqyiuajsd.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:59
kuowejouppsd.cyoud77b2800https://kuowejouppsd.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:57
uiopopspdjaks.sbsd027dea3https://uiopopspdjaks.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:54
vbyoyupjsadlksd.cfddbe884c3https://vbyoyupjsadlksd.cfd/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:43
ywiehregjadsldg.sbs4f842116https://ywiehregjadsldg.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:42
bhienmansdkngs.shop763670f4https://bhienmansdkngs.shop/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:33
jhutyijhasmdndgk.cyoua85cd06ehttps://jhutyijhasmdndgk.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 12:10
nnhuwhjaskdndkg.cyoua4df0472https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 09:15
nnhuwhjaskdndkg.cyou5fb10e55https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 09:15
haiwkjahnzkjaskd.cyou426f0c67http://haiwkjahnzkjaskd.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 07:24
mowakdwhkashda.icu5cfa924dhttp://mowakdwhkashda.icu/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 06:24
mdufaiweaksdakwj.cyouc08fb41chttps://mdufaiweaksdakwj.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 06:23
mzkahwknskdn6az.icu0bd0d817http://mzkahwknskdn6az.icu/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 06:11
msahjkwbkasdwqa.sbs02c90835http://msahjkwbkasdwqa.sbs/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 05:57
znahwjbskajsdksdh.shopa1454bfehttps://znahwjbskajsdksdh.shop/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 05:54
mskiwhkankzanwk.cyou11c0e59ehttp://mskiwhkankzanwk.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-05-24 05:53
iewyrgajdghfvdhdjs.sbs65092eb5https://iewyrgajdghfvdhdjs.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-24 01:37
mgbvkgjotjkdjlksmo.icu10ce0106https://mgbvkgjotjkdjlksmo.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 23:48
lifkrnksnhnakkeisld.cyou22dc618ahttps://lifkrnksnhnakkeisld.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 23:38
jskwaksksjekdlgax.icu0c29f70fhttps://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 23:23
lkfrknmnsdkgrttysf.icu3dacffd9https://lkfrknmnsdkgrttysf.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 23:12
logiptkikldjksjlflgskl.cyouc2c21861https://logiptkikldjksjlflgskl.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 21:36
jskwaksksjekdlgax.icufd0ee516https://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 21:36
njishaknzkank2qma.cyouac5e3b9ahttps://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 20:45
njishaknzkank2qma.cyouac5e3b9ahttps://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 20:45
mjhljosomnuiow3po.icu9abe46ddhttps://mjhljosomnuiow3po.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 17:20
jkahskdnzl6kajhmza.cyou83fc7b64https://jkahskdnzl6kajhmza.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 07:52
jkahskdnzl6kajhmza.qpon4857c7edhttps://jkahskdnzl6kajhmza.qpon/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 03:56
mjhljosomnuiow3po.click89a76ab0https://mjhljosomnuiow3po.click/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 01:49
mjhljosomnuiow3po.qpon7950bfcahttp://mjhljosomnuiow3po.qpon/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-23 00:37
jahkj15jahkj8ad.click93f4ff64https://jahkj15jahkj8ad.click/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-22 16:53
bing12jks05llj6.cyou2dac162bhttps://bing12jks05llj6.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-05-22 14:14