Known malicious kithighphishing

Random-Domain Vue Scam Kit (sbs/qpon/cyou) — chunk-vendors

family: random-domain-kit-c73042

Vue.js webpack SPA deployed across 32 random-letter hostnames on .sbs/.qpon/.cyou/.click/.icu TLDs (iewyrgajdghfvdhdjs.sbs, jkahskdnzl6kajhmza.qpon, …). Includes the .qpon TLD which is rare and a strong scam-infrastructure marker.

Provenance

Added: 2026-05-26 16:37
Single anchor — 32 hosts. The .qpon TLD is a distinctive marker.

Sightings (35)Atom feed

HostScanScriptMatchScanned
uyuihasnnzkdflm.shop8d0878cc…https://uyuihasnnzkdflm.shop/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-23 04:23
jhgiasdjksd8asd.cyouc22f9707…https://jhgiasdjksd8asd.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-20 05:11
nbujisdjkghlaks.icua861e241…https://nbujisdjkghlaks.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-17 14:48
moippwqyiuajsd.sbs551c5692…https://moippwqyiuajsd.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-16 18:58
kuowejouppsd.cyoud77b2800…https://kuowejouppsd.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-16 14:44
uiopopspdjaks.sbsd027dea3…https://uiopopspdjaks.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-16 09:35
vbyoyupjsadlksd.cfddbe884c3…https://vbyoyupjsadlksd.cfd/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-15 11:18
ywiehregjadsldg.sbs4f842116…https://ywiehregjadsldg.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-15 07:24
bhienmansdkngs.shop763670f4…https://bhienmansdkngs.shop/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-14 15:40
jhutyijhasmdndgk.cyoua85cd06e…https://jhutyijhasmdndgk.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-03-11 17:48
nnhuwhjaskdndkg.cyoua4df0472…https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-02-25 21:59
nnhuwhjaskdndkg.cyou5fb10e55…https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-02-25 21:27
haiwkjahnzkjaskd.cyou426f0c67…http://haiwkjahnzkjaskd.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-02-19 13:38
mowakdwhkashda.icu5cfa924d…http://mowakdwhkashda.icu/static/js/chunk-vendors.cce63046.jsbyte2026-02-07 06:48
mdufaiweaksdakwj.cyouc08fb41c…https://mdufaiweaksdakwj.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-02-07 03:55
mzkahwknskdn6az.icu0bd0d817…http://mzkahwknskdn6az.icu/static/js/chunk-vendors.cce63046.jsbyte2026-02-05 04:05
msahjkwbkasdwqa.sbs02c90835…http://msahjkwbkasdwqa.sbs/static/js/chunk-vendors.cce63046.jsbyte2026-02-03 11:03
znahwjbskajsdksdh.shopa1454bfe…https://znahwjbskajsdksdh.shop/static/js/chunk-vendors.cce63046.jsbyte2026-02-03 01:33
mskiwhkankzanwk.cyou11c0e59e…http://mskiwhkankzanwk.cyou/static/js/chunk-vendors.cce63046.jsbyte2026-02-02 22:01
iewyrgajdghfvdhdjs.sbs65092eb5…https://iewyrgajdghfvdhdjs.sbs/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-20 20:03
mgbvkgjotjkdjlksmo.icu10ce0106…https://mgbvkgjotjkdjlksmo.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-12 18:57
lifkrnksnhnakkeisld.cyou22dc618a…https://lifkrnksnhnakkeisld.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-11 19:58
jskwaksksjekdlgax.icu0c29f70f…https://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-10 07:21
lkfrknmnsdkgrttysf.icu3dacffd9…https://lkfrknmnsdkgrttysf.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-09 13:08
logiptkikldjksjlflgskl.cyouc2c21861…https://logiptkikldjksjlflgskl.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-06 12:48
jskwaksksjekdlgax.icufd0ee516…https://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-06 12:20
njishaknzkank2qma.cyouac5e3b9a…https://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-04 21:17
njishaknzkank2qma.cyouac5e3b9a…https://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-04 21:17
mjhljosomnuiow3po.icu9abe46dd…https://mjhljosomnuiow3po.icu/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-04 09:10
jkahskdnzl6kajhmza.cyou83fc7b64…https://jkahskdnzl6kajhmza.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2026-01-01 17:46
jkahskdnzl6kajhmza.qpon4857c7ed…https://jkahskdnzl6kajhmza.qpon/static/js/chunk-vendors.70d2e6e8.jsbyte2025-12-29 15:47
mjhljosomnuiow3po.click89a76ab0…https://mjhljosomnuiow3po.click/static/js/chunk-vendors.70d2e6e8.jsbyte2025-12-27 21:08
mjhljosomnuiow3po.qpon7950bfca…http://mjhljosomnuiow3po.qpon/static/js/chunk-vendors.70d2e6e8.jsbyte2025-12-26 22:27
jahkj15jahkj8ad.click93f4ff64…https://jahkj15jahkj8ad.click/static/js/chunk-vendors.70d2e6e8.jsbyte2025-12-16 18:22
bing12jks05llj6.cyou2dac162b…https://bing12jks05llj6.cyou/static/js/chunk-vendors.70d2e6e8.jsbyte2025-12-12 09:25