Known malicious kitcriticalphishing

AMP Futures Brand Impersonation — index.js

family: amp-futures-phish-a637

Brand-impersonation phishing kit targeting AMP Futures (US futures broker, ampfutures.com). Deployed across 62 random-letter .xyz hostnames matching pattern [a-z][0-9][a-z][0-9][a-z].xyz (a2q6w.xyz, a4k7n.xyz, b2k9t.xyz, …). All 62 hosts serve the page title "AMP Futures"; all were graded Low Risk or Medium Risk by the verdict layer.

Provenance

Added by: analyst
Added: 2026-05-26 18:41
Single anchor — 62 hosts. Largest Vite-SPA cluster found so far. Brand: AMP Futures (real US futures broker).

Sightings (68)

HostScanScriptMatchWhen
u1m8w.xyz2b06a276https://u1m8w.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:28
m4d7k.xyzbd8df749https://m4d7k.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:13
v9p2d.xyz097c3f9chttps://v9p2d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:12
b8u4k.xyz3e4a5cdahttps://b8u4k.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:11
b2k9t.xyz24ba2db4https://b2k9t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:06
b7n4t.xyzabd9a80bhttps://b7n4t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:05
j7k4p.xyza93a3432https://j7k4p.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:05
l6p8m.xyz62b8ff73https://l6p8m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 16:05
b7n4t.xyzef336a1ahttps://b7n4t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:46
f9q3p.xyz99bf4a14https://f9q3p.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:44
v9p2d.xyz4a21b794https://v9p2d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:41
n5x2m.xyz7ae8bebehttps://n5x2m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:38
t5q0n.xyz8313bdafhttps://t5q0n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:33
u5d8m.xyz78780f06https://u5d8m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:28
b2k9t.xyzb2784d32https://b2k9t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:25
a4k7n.xyzcd99068fhttps://a4k7n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:25
d7u1n.xyz876eda77https://d7u1n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:23
z2m8q.xyz1cb1c136https://z2m8q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:23
l4h0r.xyzfd78bd36https://l4h0r.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:23
a2q6w.xyz7a18f373https://a2q6w.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:22
z8w3q.xyzf9e5ec9fhttps://z8w3q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:22
k9r5c.xyz1e4ae1e2https://k9r5c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:22
m1k9c.xyz4cf7e30ehttps://m1k9c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:21
e1r9k.xyzd077b66dhttps://e1r9k.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:21
w3t9b.xyz0096f8b3https://w3t9b.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:21
n1q6j.xyz0b3ce185https://n1q6j.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:21
g9t1c.xyzae5de5fchttps://g9t1c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:20
l1x8q.xyzd1e2da7ehttps://l1x8q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:20
h4x7u.xyz68aef50ehttps://h4x7u.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:17
j1p7x.xyzf9ca30b0https://j1p7x.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:16
e3p9h.xyz3be10f3bhttps://e3p9h.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:15
g2n7m.xyz32c30146https://g2n7m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:14
j5r0n.xyzd5e98f48https://j5r0n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:14
k8r0t.xyz3c4eb8a0https://k8r0t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:14
y0d7u.xyz9c1324a1https://y0d7u.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:13
j2w0q.xyzb7966c04https://j2w0q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 15:13
y9v2d.xyz526ca8cfhttps://y9v2d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 12:00
b7p0n.xyz93308b4ehttps://b7p0n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 12:00
f0v2h.xyz1ba6ffcbhttps://f0v2h.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:56
s7g1x.xyzba70072bhttps://s7g1x.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:55
d6p4t.xyzeced4ffbhttps://d6p4t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:54
s3y7d.xyzfc92766bhttps://s3y7d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:53
r4a2q.xyz2b8077d4https://r4a2q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:53
g7x0m.xyzceb8d8d3https://g7x0m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:50
a4t8v.xyz752ed25fhttps://a4t8v.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:50
u9r1k.xyz2cfa895dhttps://u9r1k.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:45
b7p0n.xyzce514b96https://b7p0n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:45
q1s4u.xyz70c717a6https://q1s4u.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:44
w1n5j.xyz2b9d1ae2https://w1n5j.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:43
s3y7d.xyz07c7deaehttps://s3y7d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:41
r2a5c.xyz03c8707fhttps://r2a5c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:40
v2w9t.xyz95fef566https://v2w9t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:37
e9d3n.xyz8a4088e0https://e9d3n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:36
a5s1x.xyzd8077b7chttps://a5s1x.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:34
v8l2q.xyz18e44e60https://v8l2q.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:32
x3d7r.xyzfa0994edhttps://x3d7r.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:32
k0z6c.xyz1e09112ehttps://k0z6c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:24
h5l8k.xyz061ac784https://h5l8k.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:23
j2x7m.xyzd3d0e417https://j2x7m.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:15
g8q2h.xyze358656chttps://g8q2h.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:14
v7q3d.xyz05d73202https://v7q3d.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 11:12
z2t7d9.xyzf94b8467https://z2t7d9.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 08:24
s1x4p.xyz2c9717c0https://s1x4p.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 06:40
b6m9t.xyze86ae61chttps://b6m9t.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 06:39
x2h7c.xyz7558e764https://x2h7c.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 06:23
s1x4p.xyzdbc54fa6https://s1x4p.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 06:04
r8v1n.xyz23d93634https://r8v1n.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 06:03
v9c2r.xyz99596991https://v9c2r.xyz/assets/index-Dse9XNyD.jsbyte2026-05-24 05:56