Known malicious kithighphishing

Random-Domain Vue Sister Cohort (3ed975) — chunk-vendors

family: random-domain-sister-3ed9

Sister cohort of the existing random-letter-multitld-4ba7 kit. 6 hosts: klajlzmopkiak9kanz.{icu,qpon}, myj9qlcd05jj.qpon, nhgijgskjmriaks.icu, yjksnolkdjhikakr.{click,cyou}. Cosine-pivoted at sim=1.0000.

Provenance

Added by: analyst
Added: 2026-05-26 19:23
6 hosts. Cosine sister of 4ba7a0589a34.

Sightings (11)

HostScanScriptMatchWhen
yjksnolkdjhikakr.click36eea922https://yjksnolkdjhikakr.click/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 02:28
yjksnolkdjhikakr.click36eea922https://yjksnolkdjhikakr.click/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 02:28
klajlzmopkiak9kanz.icua5ba00ddhttps://klajlzmopkiak9kanz.icu/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 01:57
klajlzmopkiak9kanz.icua5ba00ddhttp://klajlzmopkiak9kanz.icu/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 01:57
klajlzmopkiak9kanz.qpon14244263https://klajlzmopkiak9kanz.qpon/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 01:51
klajlzmopkiak9kanz.qpon14244263https://klajlzmopkiak9kanz.qpon/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 01:51
yjksnolkdjhikakr.cyoue3d673a4https://yjksnolkdjhikakr.cyou/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 00:04
yjksnolkdjhikakr.cyoue3d673a4https://yjksnolkdjhikakr.cyou/static/js/chunk-vendors.8dc14757.jsbyte2026-05-23 00:04
nhgijgskjmriaks.icu3e2b2252https://nhgijgskjmriaks.icu/static/js/chunk-vendors.8dc14757.jsbyte2026-05-22 22:38
nhgijgskjmriaks.icu3e2b2252https://nhgijgskjmriaks.icu/static/js/chunk-vendors.8dc14757.jsbyte2026-05-22 22:38
myj9qlcd05jj.qpone9a58309https://myj9qlcd05jj.qpon/static/js/chunk-vendors.8dc14757.jsbyte2026-05-22 13:04