Known malicious kitcriticalphishing

Tokyo Financial Exchange Impersonation #1 — chunk-vendors

family: tokyo-financial-exchange-bd76

1 host so far (tokyofinancialexchange.work) impersonating Tokyo Financial Exchange (real Japanese exchange). Operator-built anchor — canonical_ast_hash trigger will catch any future cohort rebuilds.

Sightings (2)

HostScanScriptMatchWhen
tokyofinancialexchange.info05a69896https://tokyofinancialexchange.info/static/js/pages-welcome-welcome.3c196672.jsbyte2026-06-29 01:08
tokyofinancialexchange.work0652570fhttps://tokyofinancialexchange.work/static/js/pages-welcome-welcome.3c196672.jsbyte2026-05-24 18:18