Known malicious kithighphishing
Random-Domain Vue Scam Kit (icu/sbs/shop/cyou) — chunk-vendors
family: random-domain-kit-0e990c
Short link:scanmalware.com/h/25
Vue.js webpack SPA deployed across 63 random-letter hostnames on .icu/.sbs/.cyou/.shop TLDs. Hostnames are keyboard-mash strings (e.g. baiiwerogkasdfg.sbs, bbqupospdkgkaj.shop, bjioqjksdjkskzx.cyou).
Anchors
Provenance
Added: 2026-05-26 16:37
Single anchor — same byte-identical chunk-vendors deployed across all 63 hosts. Largest single-build fan-out in the corpus.
Sightings (76)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| wiqvucsaihoiww.sbs | a6c2d37a… | https://wiqvucsaihoiww.sbs/static/js/chunk-vendors.067e08ba.js | byte | 2026-06-12 02:26 |
| opiuuwuhjqhfg.sbs | e2654e0c… | http://opiuuwuhjqhfg.sbs/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 02:12 |
| congyqwiehgjka.shop | 58a5e28a… | https://congyqwiehgjka.shop/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 01:33 |
| haihnsuitjskdkg.sbs | 893fced9… | https://haihnsuitjskdkg.sbs/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 01:28 |
| zhsutknsdjkgaz.icu | 0df26053… | https://zhsutknsdjkgaz.icu/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 01:14 |
| haihnsuitjskdkg.sbs | 857bd456… | https://haihnsuitjskdkg.sbs/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 00:54 |
| opoierwrjhgajjz.icu | 771eb012… | https://opoierwrjhgajjz.icu/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 00:36 |
| uyjdhfjhkansdgs.shop | dd16f19d… | https://uyjdhfjhkansdgs.shop/static/js/chunk-vendors.067e08ba.js | byte | 2026-05-25 00:34 |
| mbiaowkjmhasd.shop | 174a5f1e… | https://mbiaowkjmhasd.shop/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 23:38 |
| iyoqjukwjskdaks.cyou | 64afda7f… | https://iyoqjukwjskdaks.cyou/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 21:32 |
| mbiaowejasmdaj.sbs | 36da014d… | https://mbiaowejasmdaj.sbs/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 21:26 |
| suditjqkdfjskdkza.icu | af0d3530… | https://suditjqkdfjskdkza.icu/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 21:08 |
| baiiwerogkasdfg.sbs | 29cd9a39… | https://baiiwerogkasdfg.sbs/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 20:48 |
| fulingsdhgjtnajsd.shop | 36252f01… | https://fulingsdhgjtnajsd.shop/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 20:41 |
| uipopwejmaskdl.icu | 310ff0e9… | https://uipopwejmaskdl.icu/static/js/chunk-vendors.b876d689.js | byte | 2026-05-24 20:22 |
| oppqwiejnasdjgk.shop | faba3c57… | https://oppqwiejnasdjgk.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 20:19 |
| uqhhgbjaj1majsk.icu | a4b58386… | https://uqhhgbjaj1majsk.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 20:15 |
| buqiwjeotjamskd.cyou | 92bd9008… | https://buqiwjeotjamskd.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 19:35 |
| buqiwuekjgaksdk.sbs | 42b620c4… | https://buqiwuekjgaksdk.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 19:33 |
| oppqwiejnasdjgk.shop | 1bc3d94c… | https://oppqwiejnasdjgk.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 19:16 |
| huiwojksdklglalx.icu | 2d4d4876… | https://huiwojksdklglalx.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 19:04 |
| buiquwoejsdkfz.cyou | e7977db4… | https://buiquwoejsdkfz.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:56 |
| vnjwknsdkjgkas.cyou | 6f5e6824… | https://vnjwknsdkjgkas.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:54 |
| ngjksdksdwkss.cyou | f9f5e14e… | https://ngjksdksdwkss.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:54 |
| uiowjjsdhgdasd.icu | 47bf5f39… | https://uiowjjsdhgdasd.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:42 |
| mnnipoqjrkasd.icu | d754004d… | https://mnnipoqjrkasd.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:32 |
| kojgwuqhskdjga.sbs | a3fa5223… | https://kojgwuqhskdjga.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:26 |
| nmsdjkgjak1asf.cyou | 251e098d… | https://nmsdjkgjak1asf.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:20 |
| nkosidkasdjgza.cyou | e869a756… | https://nkosidkasdjgza.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:13 |
| xiaoyuwhjkasdn.shop | 74d6ef9d… | https://xiaoyuwhjkasdn.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:08 |
| jbiqwoejhdkasjg.shop | 52fa8d5e… | https://jbiqwoejhdkasjg.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:07 |
| piansdhifkgjsdg.icu | bd176b15… | https://piansdhifkgjsdg.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 18:06 |
| mnuoqwejkasdj.icu | 034800f9… | https://mnuoqwejkasdj.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:55 |
| piansdhifkgjsdg.icu | 9aada1c5… | https://piansdhifkgjsdg.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:52 |
| wanmeioyoasjd.shop | 6e6b517c… | https://wanmeioyoasjd.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:42 |
| klpooakjnequw1z.shop | cadb7b2f… | https://klpooakjnequw1z.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:33 |
| nipuijsdjkdfnfka.icu | ff8dc078… | https://nipuijsdjkdfnfka.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:31 |
| bbqupospdkgkaj.shop | d035c348… | https://bbqupospdkgkaj.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:26 |
| bbqupospdkgkaj.shop | 800f7e7d… | https://bbqupospdkgkaj.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 17:13 |
| jsdugkjasdlgza.cyou | c49bf6eb… | https://jsdugkjasdlgza.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:54 |
| jsdugkjasdlgza.cyou | 5dffc183… | https://jsdugkjasdlgza.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:48 |
| bvyyqjhdfkjaskd.shop | f4c77901… | https://bvyyqjhdfkjaskd.shop/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:33 |
| sjjgkjjaksndgkns.cyou | 839bf012… | https://sjjgkjjaksndgkns.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:28 |
| bjioqjksdjkskzx.cyou | 7852b139… | https://bjioqjksdjkskzx.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:24 |
| nbhjanwdnjskdl.icu | 4ff99b18… | https://nbhjanwdnjskdl.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:14 |
| tiokalskdgjllsdv.sbs | 76e7fc26… | https://tiokalskdgjllsdv.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:13 |
| buiqjasdkkgl1kal.icu | 8f571a67… | https://buiqjasdkkgl1kal.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:10 |
| nbbhiwjhkhjkasjd.icu | 8bda9d05… | https://nbbhiwjhkhjkasjd.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:07 |
| bjioqjksdjkskzx.cyou | 550bb003… | https://bjioqjksdjkskzx.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 16:02 |
| swopioerkkgkka.icu | 30a16722… | https://swopioerkkgkka.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:53 |
| nnhsdhjgkjam.cyou | ae1c3850… | https://nnhsdhjgkjam.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:50 |
| byuqihhkajsdkkg.cyou | f107142f… | https://byuqihhkajsdkkg.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:28 |
| nasjdkajgaksdk.icu | 4e28d965… | https://nasjdkajgaksdk.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:24 |
| bikojsdllgjlsdkga.sbs | 6048bd20… | https://bikojsdllgjlsdkga.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:00 |
| bssdhjwkjsdklglak.icu | b964c997… | https://bssdhjwkjsdklglak.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 15:00 |
| poqwiejnsdjgnks.icu | 8157d930… | https://poqwiejnsdjgnks.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:46 |
| bbaj1asdjjgksndk.icu | fbb4926e… | https://bbaj1asdjjgksndk.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:45 |
| bikojsdllgjlsdkga.sbs | d6825bb5… | https://bikojsdllgjlsdkga.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:35 |
| vjaksdjngaksmdg.sbs | 9576d0f4… | https://vjaksdjngaksmdg.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:26 |
| hsdjhgjansdkjjgk.cyou | 6faf2a91… | https://hsdjhgjansdkjjgk.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:07 |
| poqwiejnsdjgnks.icu | 2a8f63e8… | https://poqwiejnsdjgnks.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 14:06 |
| jsdjkgjksdkksdlg.cyou | 749fa067… | https://jsdjkgjksdkksdlg.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:58 |
| miowjejjsakdjak.cyou | 3dede3f9… | https://miowjejjsakdjak.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:58 |
| nbuqhnaskd.sbs | 2d173cdb… | https://nbuqhnaskd.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:43 |
| zuqowejjsnkg.cyou | 730e3465… | https://zuqowejjsnkg.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:43 |
| nuioqjlsjdkgz.cfd | d8dd3124… | https://nuioqjlsjdkgz.cfd/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:42 |
| nbuoj1jaskdk.icu | a574767e… | https://nbuoj1jaskdk.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:40 |
| zuqowejjsnkg.cyou | f4db59a9… | https://zuqowejjsnkg.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:26 |
| opqiwjasnkd1asd.cyou | 9cfe9b85… | https://opqiwjasnkd1asd.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:24 |
| nbuqhnaskd.sbs | f4953d51… | https://nbuqhnaskd.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:19 |
| nbuoj1jaskdk.icu | b3c56b86… | https://nbuoj1jaskdk.icu/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:15 |
| kipiwjksdkfa.sbs | a2f4a77f… | https://kipiwjksdkfa.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:11 |
| nbuieqnmas.sbs | 60ab9a29… | https://nbuieqnmas.sbs/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:05 |
| nuioqjlsjdkgz.cfd | c2b099b9… | https://nuioqjlsjdkgz.cfd/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:02 |
| nbuiqn1map.cyou | 12f5e175… | https://nbuiqn1map.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 13:02 |
| yusdjglasdkks.cyou | aca484e7… | https://yusdjglasdkks.cyou/static/js/chunk-vendors.8ef4ffaa.js | byte | 2026-05-24 12:58 |