Known malicious kithighphishing

zhesinc/zhesinr Sister Cohort #1 — chunk-vendors

family: zhesin-sister-f125

2-host operator: zhesinc.com, zhesinr.com (variants of "zhesin" brand prefix). Surfaced via cosine pivot.

Sightings (2)Atom feed

HostScanScriptMatchScanned
zhesinr.com8afd24bc…https://zhesinr.com/static/js/index.b00cf37d.jsbyte2026-01-13 13:55
zhesinc.com1cbc90a7…https://zhesinc.com/static/js/index.b00cf37d.jsbyte2026-01-07 18:36