Known malicious kithighphishing

.forum TLD Rotation Kit (b) — chunk-vendors

family: forum-tld-kit-6ed2

Vue.js webpack SPA across 17 .forum TLD hosts (bqetfpng.forum, bvgapqrm.forum, djtzmlwl.forum, …). Distinct operator from the forum-tld-kit-b86d1a cluster.

Sightings (18)

HostScanScriptMatchWhen
fybtsumy.forume6982eb4…https://fybtsumy.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:23
eptlmbzl.forum306db22e…https://eptlmbzl.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:23
hgkheslt.foruma35eba57…http://hgkheslt.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:19
vqtkloge.forum7a77f58c…http://vqtkloge.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:13
vqtkloge.forum7a77f58c…http://vqtkloge.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:13
wayguezn.forumcd59501e…http://wayguezn.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 20:05
gtojysrb.forumbeb8f9e6…https://gtojysrb.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 18:49
tbzvbqax.forume9fecd19…https://tbzvbqax.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 18:47
djtzmlwl.forume1212a3f…http://djtzmlwl.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 18:25
dwnwdbqw.forum2cd7d58e…http://dwnwdbqw.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 18:06
kbmvqmny.forum9ac7a08f…https://kbmvqmny.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:57
jisbhbvh.forumb51aa33b…https://jisbhbvh.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:57
fohepagv.forumf5fa286d…https://fohepagv.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:50
bqetfpng.forum9ad3e084…https://bqetfpng.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:39
rjrrmovj.forumcd1a22a5…https://rjrrmovj.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:27
bvgapqrm.forum708a2e45…https://bvgapqrm.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:25
grhibzpf.forume62954ae…https://grhibzpf.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 17:19
pgbpkytm.forum1a7d7fe4…https://pgbpkytm.forum/static/js/chunk-vendors.c47c2e6a.jsbyte2026-05-22 16:59