Known malicious kithighphishing

htxnadf.top Operator — js/app

family: htxnadf-2503

5-host operator running random-named .top hostnames anchored on htxnadf.top.

Sightings (9)

HostScanScriptMatchWhen
htxnahc.vip681557ce…https://htxnahc.vip/js/app.2293bed1.jsstructure2026-05-24 16:29
htxnaf.top6519913d…https://htxnaf.top/js/app.2293bed1.jsstructure2026-05-24 16:20
htxnahc.vip6e375cab…https://htxnahc.vip/js/app.2293bed1.jsstructure2026-05-24 16:17
htxnaf.top3da689d3…https://htxnaf.top/js/app.2293bed1.jsstructure2026-05-24 16:16
htxnasc.vipa2d6d247…https://htxnasc.vip/js/app.891d4324.jsbyte2026-05-24 16:14
htxnag.com5e89114f…https://htxnag.com/js/app.891d4324.jsbyte2026-05-24 16:05
htxnadf.top35fcbb77…https://htxnadf.top/js/app.891d4324.jsbyte2026-05-24 16:05
htxnasc.vip76b6af47…https://htxnasc.vip/js/app.891d4324.jsbyte2026-05-24 15:56
htxnadf.topf6faa785…https://htxnadf.top/js/app.891d4324.jsbyte2026-05-24 15:35