ScanMalware.com
Known malicious kitcriticalphishing

Telcel Mexico Brand Impersonation — index.js #1

family: latam-telcel-mx-phish-52aa

Brand-impersonation phishing kit targeting Telcel (Mexico's dominant mobile carrier). 23 hosts on .top/.vip with mx-prefixed names (mxstelcec.top, mxtecelah.top, mxtelelsuy.top, mxtelesvip.vip, …). URL path /apps/MX_PT_06/assets/index-*.js — the "MX_PT_06" naming matches the Tigo SV kit's "SV_PT_01", strong evidence of one operator running localized LATAM carrier kits.

Fingerprint anchors

content sha25612d9cc0136e05f8e9255690abbbe1f56b67fb2a22cd8e58e1dfbdb09f54c4076
canonical AST52aa5c54fed1ee67d88ea5ce5ea5d8b665f7fb9947868687011117f6764864c2
TLSHT125757D9CBA41B46A63B34199102F3405B23E3E69F508C0F0B6FDD9993EA4D59A177F38

Provenance

Added by: analyst
Added: 2026-05-26 18:41
Anchor #1 of 2. 23 hosts. /apps/MX_PT_06/assets/index-<hash>.js path.

Sightings (26)

HostScanScriptMatchWhen
mxtelesybb.topf005c307…https://mxtelesybb.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 02:55
mxtecelcd.topa86813e5…https://mxtecelcd.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 01:44
mxtelenysy.topd019041c…https://mxtelenysy.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 01:22
mxtelesynv.topacc22fee…https://mxtelesynv.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 01:08
mxtecelcn.top98b04e84…https://mxtecelcn.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 01:06
mxtelesyeo.top5b07d91a…https://mxtelesyeo.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 01:01
mxtecelcr.top47b96694…https://mxtecelcr.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:57
mxtelesyxs.topc46c946d…https://mxtelesyxs.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:53
mxtelesvip.top667ec27a…https://mxtelesvip.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:37
mxtelesyx.top144adfdd…https://mxtelesyx.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:32
mxtelespvip.vip5203f4ff…https://mxtelespvip.vip/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:22
mxtecelco.top14e0c8ac…https://mxtecelco.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:17
mxteleandy.top7d2d4339…https://mxteleandy.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:17
mxtecelcb.topea8b681b…https://mxtecelcb.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:15
mxtelesyeo.top4197142b…https://mxtelesyeo.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:11
tecelmxr.top89e24305…https://tecelmxr.top/apps/MX_PT_06/assets/index-CrkM4odk.jsbyte2026-05-24 00:03
mxtelesyb.top7b0af5c1…http://mxtelesyb.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-24 00:01
mxstelcex.top8ac45f64…https://mxstelcex.top/apps/MX_PT_06/assets/index-CrkM4odk.jsbyte2026-05-23 23:37
mxstelcex.topf43c556e…https://mxstelcex.top/apps/MX_PT_06/assets/index-CrkM4odk.jsbyte2026-05-23 23:36
mxtecelza.top74dfdd74…https://mxtecelza.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-23 23:36
mxtelesyh.top807724c7…https://mxtelesyh.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-23 23:26
mxtselces.top49cee056…https://mxtselces.top/apps/MX_PT_06/assets/index-CrkM4odk.jsbyte2026-05-23 22:16
mxstelcec.top916e5d77…https://mxstelcec.top/apps/MX_PT_06/assets/index-CrkM4odk.jsbyte2026-05-23 22:00
mxtecelah.top46595e67…https://mxtecelah.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-23 21:42
mxtelelsuy.topc0d6d860…http://mxtelelsuy.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-23 02:10
mxtelelsuy.top731c976f…https://mxtelelsuy.top/apps/MX_PT_06/assets/index-CMBSTj7j.jsstructure2026-05-23 01:40