Known malicious kithighphishing

teje-rotating-domain kit — main.js

family: teje-rotating-domain

Webpack-bundled SPA deployed across an 8-host rotation that all share the `teje` prefix on cheap/suspicious TLDs (tejehqnfih.work, tejehqzjxt.club, tejeiviusk.asia, tejeiwdeow.cloud, tejeiycpyh.asia, tejeizzifa.wiki, …).

Provenance

Added: 2026-05-26 14:39
Anchor #1 of 3. main.74a858e950b3cb360b11.js — entry bundle, 85,463 nodes.

Sightings (13)

HostScanScriptMatchWhen
teiekloijp.clube05c815a…https://teiekloijp.club/main.40d8ebc74ec0078d080e.jsstructure2026-09-24 03:44
televerify.clickfe5d2c78…https://televerify.click/main.40d8ebc74ec0078d080e.jsstructure2026-08-30 04:57
teleoutlki.shop0ba7928d…https://teleoutlki.shop/main.40d8ebc74ec0078d080e.jsstructure2026-08-26 12:55
teleoutlki.shop2f8acaad…https://teleoutlki.shop/main.40d8ebc74ec0078d080e.jsstructure2026-08-19 00:00
tejeiycpyh.asia10cab597…https://tejeiycpyh.asia/main.74a858e950b3cb360b11.jsbyte2026-05-23 20:49
tejehqzjxt.clubce8f6e31…https://tejehqzjxt.club/main.74a858e950b3cb360b11.jsbyte2026-05-23 15:57
tejehqzjxt.club537500ad…https://tejehqzjxt.club/main.74a858e950b3cb360b11.jsbyte2026-05-23 08:51
tejeiwdeow.cloud1f6d6553…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2026-05-23 02:55
tejeiviusk.asia5a3ee199…https://tejeiviusk.asia/main.74a858e950b3cb360b11.jsbyte2026-05-23 02:15
tejeizzifa.wiki1d034446…https://tejeizzifa.wiki/main.74a858e950b3cb360b11.jsbyte2026-05-23 01:57
tejehqnfih.work645bfe7a…https://tejehqnfih.work/main.74a858e950b3cb360b11.jsbyte2026-05-23 01:42
tejeiwdeow.cloud2270b1f9…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2026-05-22 23:41
tejeiwdeow.cloud2270b1f9…https://tejeiwdeow.cloud/main.74a858e950b3cb360b11.jsbyte2026-05-22 23:41