ScanMalware.com
Known malicious kithighphishing

Random-Letter Multi-TLD Kit (icu/cyou/qpon/sbs) — 21h

family: random-letter-multitld-9d69

Vue.js webpack SPA across 21 random-letter hostnames on .icu/.cyou/.qpon/.shop/.click/.sbs TLDs. Sister cohort of the kit-as-a-service template.

Anchors

content sha25659f2136c658bb9a0878106e63828b1b95914293166c6337c439d90952b68495b
canonical AST9d69598d7dc9c06f167124f3ac369a90d44799f4049dee905f21e6a31a0c220e
TLSHT11D05F78DF282B0B607E761B5403F220BB2376969B40A84D4F675E4D0AD7894E6237F7D

Provenance

Added: 2026-05-26 16:48
21 hosts

Sightings (30)

HostScanScriptMatchWhen
xiaowjmdfhkazw8l.shop9a83f521…https://xiaowjmdfhkazw8l.shop/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-24 01:19
njuwbjanbmzkakw.sbs7708b928…https://njuwbjanbmzkakw.sbs/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-24 00:50
fgkjrknknskdnmksn.icua59c2cc7…http://fgkjrknknskdnmksn.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 23:33
jshdjwhnkahnskdjm.icu69ab7b56…http://jshdjwhnkahnskdjm.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 23:22
yytuiejlfjoeoppykfddt.cyou68ab8906…http://yytuiejlfjoeoppykfddt.cyou/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 23:13
mdkfjekj8kaksksdk.icu5fe1227a…http://mdkfjekj8kaksksdk.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 22:23
mdkfnkwnmalnwkzx.shop36eda1bf…https://mdkfnkwnmalnwkzx.shop/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 22:10
mdkfnkwnmalnwkzx.shopd5fe4ec2…https://mdkfnkwnmalnwkzx.shop/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 22:08
mckdnmzxjalwmldf.cyoubd1aa375…https://mckdnmzxjalwmldf.cyou/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 21:54
mnsjkdnwknaksdnk.sbsfedd8154…https://mnsjkdnwknaksdnk.sbs/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 21:05
mmdoajlzjalasea.qpon0ef12e15…https://mmdoajlzjalasea.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 20:39
mmdoajlzjalasea.qponedfe0c7b…http://mmdoajlzjalasea.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 17:10
kshjkjanklzmnaljs.icuc88c142a…https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 17:03
kshjkjanklzmnaljs.icuc88c142a…http://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 17:03
kshjkjanklzmnaljs.icuc88c142a…https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 17:03
n8kahkzhalknzlalsh.qpon9f3bbeda…https://n8kahkzhalknzlalsh.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 16:47
kskjhlalzlaj8zkalkj.cyou84ac8d6d…https://kskjhlalzlaj8zkalkj.cyou/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 08:30
kskjhlalzlaj8zkalkj.cyou6d5ed319…https://kskjhlalzlaj8zkalkj.cyou/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 08:26
kskjhlalzlaj8zkalkj.clickefb37133…https://kskjhlalzlaj8zkalkj.click/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 08:11
kskjhlalzlaj8zkalkj.icu085ae890…https://kskjhlalzlaj8zkalkj.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 07:32
kshjkjanklzmnaljs.icu2821dd35…https://kshjkjanklzmnaljs.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 07:15
mmdoajlzjalasea.icu17a41369…https://mmdoajlzjalasea.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 07:12
kshjkjanklzmnaljs.cyoua73f12aa…https://kshjkjanklzmnaljs.cyou/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 06:57
kskjhlalzlaj8zkalkj.qpona4be7fc3…http://kskjhlalzlaj8zkalkj.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 01:50
kshjkjanklzmnaljs.qpon16c3f56a…https://kshjkjanklzmnaljs.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 01:49
kshjkjanklzmnaljs.qpon8f59afbe…https://kshjkjanklzmnaljs.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 01:43
kskjhlalzlaj8zkalkj.icua7cc64e6…https://kskjhlalzlaj8zkalkj.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 01:22
mmdoajlzjalasea.icua04f590d…https://mmdoajlzjalasea.icu/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-23 00:42
sadjsazazaaqj8cf.qpondf60a4d4…https://sadjsazazaaqj8cf.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-22 16:57
mzshkansj8zaqaz.qpon2e6c7ea6…https://mzshkansj8zaqaz.qpon/static/js/chunk-vendors.ddbf812c.jsbyte2026-05-22 16:46