Known malicious kithighphishing

andes* Prefix Rotation — chunk-vendors

family: andes-prefix-4556

8-host operator running andes-prefixed brands: andekhu5, andesapply24, andesapply8k, andeshsk11, andesiodshuqian22, andesjhsh2, andessdf3, andsskli8 on .com.

Sightings (11)

HostScanScriptMatchWhen
andsskli8.com0c253e5chttps://andsskli8.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 23:52
andeshsk11.comff6906dahttps://andeshsk11.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 23:47
andessdf3.coma77ba0fahttps://andessdf3.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 23:40
andekhu5.com62d396b3https://andekhu5.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 23:23
andeshsk11.comf5fee4d2https://andeshsk11.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 23:17
andekhu5.com3005762ehttps://andekhu5.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 22:11
andessdf3.comd2adfc29https://andessdf3.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 21:51
andesjhsh2.com8545bd00https://andesjhsh2.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-23 21:28
andesapply8k.com50e57b61https://andesapply8k.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-22 14:17
andesiodshuqian22.comf3504011https://andesiodshuqian22.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-22 13:51
andesapply24.com92127cf8https://andesapply24.com/static/js/chunk-vendors.b6c39bfc.jsbyte2026-05-22 13:19