Known malicious kithighphishing
aaoopg/eejjkf Multi-TLD Same-Prefix Kit — chunk-vendors
family: aaoopg-eejjkf-02d6
9-host operator running aaoopg.{app,cc,net,one,vip} + eejjkf.{app,com,net,one}. Same prefix across multiple TLDs — characteristic of bulk-domain phishing.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
9 hosts. Same prefix, multiple TLDs.
Sightings (9)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| eejjkf.net | 50ad44a4… | https://eejjkf.net/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:47 |
| aaoopg.vip | 77fa53bb… | https://aaoopg.vip/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:38 |
| eejjkf.com | 2c37cd93… | https://eejjkf.com/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:22 |
| aaoopg.net | a5e5c312… | https://aaoopg.net/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:21 |
| eejjkf.one | 137374a7… | https://eejjkf.one/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:08 |
| aaoopg.app | a0f25903… | https://aaoopg.app/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 17:01 |
| aaoopg.cc | df5b9a65… | https://aaoopg.cc/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 16:57 |
| eejjkf.app | a0f1b50d… | https://eejjkf.app/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 16:49 |
| aaoopg.one | fb76d499… | https://aaoopg.one/static/js/chunk-vendors.feaf449b.js | byte | 2026-05-24 16:45 |