Known malicious kithighphishing
xt Prefix .com Rotation — chunk-vendors
family: xt-prefix-295e
7-host operator: xtcuf.com, xtdli.com, xtfue.com, xtjvn.com, xtlwh.com, xtnmc.com, xtpxd.com. Uniform xt[CCC].com pattern.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
7 hosts
Sightings (8)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| xtpxd.com | e78faf62… | https://xtpxd.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-24 06:41 |
| xtjvn.com | c5cd98f7… | https://xtjvn.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-24 06:37 |
| xtcuf.com | 9663708d… | https://xtcuf.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-24 06:21 |
| xtcuf.com | 9413a6ec… | http://xtcuf.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-24 05:56 |
| xtlwh.com | 72b33c1e… | https://xtlwh.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-22 20:13 |
| xtfue.com | f425ac00… | https://xtfue.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-22 20:11 |
| xtnmc.com | a998bf5f… | https://xtnmc.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-22 17:41 |
| xtdli.com | 96c1cc44… | https://xtdli.com/static/js/chunk-vendors.8e218072.js | byte | 2026-05-22 17:34 |