ScanMalware.com
Known malicious kithighphishing

.click TLD Rotation Kit — chunk-vendors

family: click-tld-kit-a260ef

Vue.js webpack SPA deployed across 31 hostnames ALL on the .click TLD with 8-character random hostnames (aicjgkjk.click, cbcsljlc.click, pshhttokse.click, qhzelnxa.click, …). Uniform TLD + hostname pattern is a strong operator signal.

Fingerprint anchors

content sha256456b1a5957805e4a15e44a4554aaf87c624a5000dcb183466a225f8470134470
canonical ASTa260efe80f4a4801e6cfeedd78b4849e840b69aaadc86bf4a35ef452b8941db2
TLSHT14F05F78DF282B0B50BE761B5403F220BB2376969B40A84D4F675E4D0AD7894E6237F7D

Provenance

Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 31 hosts, all on .click TLD with 8-char hostnames.

Sightings (39)

HostScanScriptMatchWhen
csjf-app.wfchuanghui.cn66a13a1e…https://csjf-app.wfchuanghui.cn/static/js/chunk-vendors.ff628358.jsbyte2026-05-24 20:28
grjmgmew.clickddf0d0a8…https://grjmgmew.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 16:50
ghforobq.click0273f47e…https://ghforobq.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 16:39
vvniyaqz.click127c15b8…https://vvniyaqz.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:27
pshhttokse.click7fa139be…https://pshhttokse.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:24
fiogxkjx.click866c9105…https://fiogxkjx.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:19
uhzchimu.clickd623580b…https://uhzchimu.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:19
laqenvdu.click75b80938…https://laqenvdu.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:17
onpckmyo.click70d463be…https://onpckmyo.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:16
pshhttokse.clickc97409ea…https://pshhttokse.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:14
mxqunpyx.click0acba77c…https://mxqunpyx.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:14
xubxduid.clicke175e55c…https://xubxduid.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 15:13
veyvdvb.lolb92628c7…https://veyvdvb.lol/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 14:58
veyvdvb.lol164386bd…https://veyvdvb.lol/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 14:36
veyvdvb.lolfa77f53f…https://veyvdvb.lol/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 14:15
veyvdvb.lolf6cb15c1…https://veyvdvb.lol/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 14:14
zzmitcyi.click309be929…https://zzmitcyi.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 12:55
wgezvfzn.click2a31221a…https://wgezvfzn.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 12:52
wzimedfz.click973947f3…https://wzimedfz.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 12:51
zzmitcyi.clickeee13282…https://zzmitcyi.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 12:45
acbljniz.clickc81bf613…https://acbljniz.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 11:06
kbkabcay.click40d6cd19…https://kbkabcay.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 10:55
kbkabcay.click2e6ae962…https://kbkabcay.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 10:09
acbljniz.click45ed7095…https://acbljniz.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 10:08
udqrlypv.click5f65494a…https://udqrlypv.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 10:05
szbnhekl.clickfbd9e808…https://szbnhekl.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 10:00
kbuwcriu.clicka73dc781…http://kbuwcriu.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 05:59
zmhswsze.click5189b453…https://zmhswsze.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 05:57
smxrzymq.click962c40f0…http://smxrzymq.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 05:54
zmhswsze.clickcbdd5db4…http://zmhswsze.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 05:54
xlkjlcuk.click763d1d9c…https://xlkjlcuk.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 00:04
qhzelnxa.click924708d6…https://qhzelnxa.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-24 00:02
xcwqkcuy.click50444c48…https://xcwqkcuy.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-23 23:58
vtpjlceb.clickc0b674e2…https://vtpjlceb.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-23 21:40
aicjgkjk.clickf4feeb76…https://aicjgkjk.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-23 21:36
rnofmkfk.clickb253de36…https://rnofmkfk.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-23 21:34
cbcsljlc.click2923925c…https://cbcsljlc.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-23 21:33
asdjqryh.click6a4fa3e9…https://asdjqryh.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-22 17:08
jmtjfzlo.clickb43b0bdf…https://jmtjfzlo.click/static/js/chunk-vendors.b9cd8f7a.jsbyte2026-05-22 15:07