Known malicious kithighphishing

Auto-Word-Pair Brand Rotation (shop/com) — chunk-vendors

family: wordpair-shop-0d56

10-host operator running auto-generated word-pair brand names: deeply-marketsearch.com, deeps-datastudy.com, finely-stylecraft.com, quicks-cdbuild.com on .com + findraregive/getfastrun/grabfreshsell/keepgoodsave/makesweetbake/picksmartubuy on .shop. Lure: looks like quick-build / market-research / save-money brand.

Provenance

Added by: analyst
Added: 2026-05-26 16:48
10 hosts. One was graded Malicious; the rest were Low Risk.

Sightings (13)

HostScanScriptMatchWhen
finely-stylecraft.com7681945chttps://finely-stylecraft.com/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-25 02:19
deeps-datastudy.comdd712e2dhttps://deeps-datastudy.com/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 21:37
quicks-cdbuild.com2db05b77https://quicks-cdbuild.com/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 21:32
deeply-marketsearch.com79f11c6chttps://deeply-marketsearch.com/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 21:29
deeply-marketsearch.com3ffa695chttps://deeply-marketsearch.com/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 21:24
grabfreshsell.shopba10f929https://grabfreshsell.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 17:42
keepgoodsave.shope2bdb368https://keepgoodsave.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 17:23
makesweetbake.shopea760d59https://makesweetbake.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 17:22
getfastrun.shop27ea5548https://getfastrun.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 17:13
findraregive.shop4ff0924bhttps://findraregive.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 17:01
getfastrun.shop7738078fhttps://getfastrun.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 16:51
picksmartubuy.shop5d41df10https://picksmartubuy.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 16:45
picksmartubuy.shop8362c8d1https://picksmartubuy.shop/h5/static/js/chunk-vendors.4bc3115f.jsbyte2026-05-24 16:41