Known malicious kithighphishing
.forum TLD Rotation Kit (b) — chunk-vendors
family: forum-tld-kit-6ed2
Vue.js webpack SPA across 17 .forum TLD hosts (bqetfpng.forum, bvgapqrm.forum, djtzmlwl.forum, …). Distinct operator from the migration-080 b86d1a cluster.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
17 hosts
Sightings (18)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| fybtsumy.forum | e6982eb4… | https://fybtsumy.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:23 |
| eptlmbzl.forum | 306db22e… | https://eptlmbzl.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:23 |
| hgkheslt.forum | a35eba57… | http://hgkheslt.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:19 |
| vqtkloge.forum | 7a77f58c… | http://vqtkloge.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:13 |
| vqtkloge.forum | 7a77f58c… | http://vqtkloge.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:13 |
| wayguezn.forum | cd59501e… | http://wayguezn.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 20:05 |
| gtojysrb.forum | beb8f9e6… | https://gtojysrb.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 18:49 |
| tbzvbqax.forum | e9fecd19… | https://tbzvbqax.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 18:47 |
| djtzmlwl.forum | e1212a3f… | http://djtzmlwl.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 18:25 |
| dwnwdbqw.forum | 2cd7d58e… | http://dwnwdbqw.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 18:06 |
| kbmvqmny.forum | 9ac7a08f… | https://kbmvqmny.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:57 |
| jisbhbvh.forum | b51aa33b… | https://jisbhbvh.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:57 |
| fohepagv.forum | f5fa286d… | https://fohepagv.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:50 |
| bqetfpng.forum | 9ad3e084… | https://bqetfpng.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:39 |
| rjrrmovj.forum | cd1a22a5… | https://rjrrmovj.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:27 |
| bvgapqrm.forum | 708a2e45… | https://bvgapqrm.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:25 |
| grhibzpf.forum | e62954ae… | https://grhibzpf.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 17:19 |
| pgbpkytm.forum | 1a7d7fe4… | https://pgbpkytm.forum/static/js/chunk-vendors.c47c2e6a.js | byte | 2026-05-22 16:59 |