Known malicious kithighphishing
Random-Letter Multi-TLD Kit (icu/cyou/qpon/sbs) — 21h
family: random-letter-multitld-9d69
Vue.js webpack SPA across 21 random-letter hostnames on .icu/.cyou/.qpon/.shop/.click/.sbs TLDs. Sister cohort of the kit-as-a-service template.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
21 hosts
Sightings (30)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| xiaowjmdfhkazw8l.shop | 9a83f521… | https://xiaowjmdfhkazw8l.shop/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-24 01:19 |
| njuwbjanbmzkakw.sbs | 7708b928… | https://njuwbjanbmzkakw.sbs/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-24 00:50 |
| fgkjrknknskdnmksn.icu | a59c2cc7… | http://fgkjrknknskdnmksn.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 23:33 |
| jshdjwhnkahnskdjm.icu | 69ab7b56… | http://jshdjwhnkahnskdjm.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 23:22 |
| yytuiejlfjoeoppykfddt.cyou | 68ab8906… | http://yytuiejlfjoeoppykfddt.cyou/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 23:13 |
| mdkfjekj8kaksksdk.icu | 5fe1227a… | http://mdkfjekj8kaksksdk.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 22:23 |
| mdkfnkwnmalnwkzx.shop | 36eda1bf… | https://mdkfnkwnmalnwkzx.shop/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 22:10 |
| mdkfnkwnmalnwkzx.shop | d5fe4ec2… | https://mdkfnkwnmalnwkzx.shop/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 22:08 |
| mckdnmzxjalwmldf.cyou | bd1aa375… | https://mckdnmzxjalwmldf.cyou/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 21:54 |
| mnsjkdnwknaksdnk.sbs | fedd8154… | https://mnsjkdnwknaksdnk.sbs/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 21:05 |
| mmdoajlzjalasea.qpon | 0ef12e15… | https://mmdoajlzjalasea.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 20:39 |
| mmdoajlzjalasea.qpon | edfe0c7b… | http://mmdoajlzjalasea.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 17:10 |
| kshjkjanklzmnaljs.icu | c88c142a… | https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 17:03 |
| kshjkjanklzmnaljs.icu | c88c142a… | http://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 17:03 |
| kshjkjanklzmnaljs.icu | c88c142a… | https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 17:03 |
| n8kahkzhalknzlalsh.qpon | 9f3bbeda… | https://n8kahkzhalknzlalsh.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 16:47 |
| kskjhlalzlaj8zkalkj.cyou | 84ac8d6d… | https://kskjhlalzlaj8zkalkj.cyou/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 08:30 |
| kskjhlalzlaj8zkalkj.cyou | 6d5ed319… | https://kskjhlalzlaj8zkalkj.cyou/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 08:26 |
| kskjhlalzlaj8zkalkj.click | efb37133… | https://kskjhlalzlaj8zkalkj.click/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 08:11 |
| kskjhlalzlaj8zkalkj.icu | 085ae890… | https://kskjhlalzlaj8zkalkj.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 07:32 |
| kshjkjanklzmnaljs.icu | 2821dd35… | https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 07:15 |
| mmdoajlzjalasea.icu | 17a41369… | https://mmdoajlzjalasea.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 07:12 |
| kshjkjanklzmnaljs.cyou | a73f12aa… | https://kshjkjanklzmnaljs.cyou/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 06:57 |
| kskjhlalzlaj8zkalkj.qpon | a4be7fc3… | http://kskjhlalzlaj8zkalkj.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 01:50 |
| kshjkjanklzmnaljs.qpon | 16c3f56a… | https://kshjkjanklzmnaljs.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 01:49 |
| kshjkjanklzmnaljs.qpon | 8f59afbe… | https://kshjkjanklzmnaljs.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 01:43 |
| kskjhlalzlaj8zkalkj.icu | a7cc64e6… | https://kskjhlalzlaj8zkalkj.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 01:22 |
| mmdoajlzjalasea.icu | a04f590d… | https://mmdoajlzjalasea.icu/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-23 00:42 |
| sadjsazazaaqj8cf.qpon | df60a4d4… | https://sadjsazazaaqj8cf.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-22 16:57 |
| mzshkansj8zaqaz.qpon | 2e6c7ea6… | https://mzshkansj8zaqaz.qpon/static/js/chunk-vendors.ddbf812c.js | byte | 2026-05-22 16:46 |