Known malicious kithighphishing

[X][N].cn Random-Pattern Kit — chunk-vendors

family: letterhex-cn-25f3

7-host operator on .cn TLD with letter+digit random pattern: j3h1k9.cn, m9u6y0.cn, n4c6v5.cn, p4i6o3.cn, q4x9v6.cn, q7e2r6.cn, q8t4y7.cn.

Anchors

Added: 2026-05-26 16:48

7 hosts on .cn

Host	Scan	Script	Match	Scanned
p4i6o3.cn	55ef662c…	https://p4i6o3.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-09 18:36
p4i6o3.cn	55ef662c…	https://p4i6o3.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-09 18:36
q8t4y7.cn	cd28a4a1…	https://q8t4y7.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-07 21:42
q8t4y7.cn	cd28a4a1…	https://q8t4y7.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-07 21:42
q4x9v6.cn	eb59fb3e…	https://q4x9v6.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-07 09:48
q4x9v6.cn	eb59fb3e…	https://q4x9v6.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-07 09:48
j3h1k9.cn	8370e70e…	https://j3h1k9.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-06 09:41
j3h1k9.cn	8370e70e…	https://j3h1k9.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-06 09:41
q7e2r6.cn	b67a349f…	https://q7e2r6.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-06 06:23
q7e2r6.cn	b67a349f…	https://q7e2r6.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-06 06:23
m9u6y0.cn	0cc9f574…	https://m9u6y0.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-05 13:55
m9u6y0.cn	0cc9f574…	https://m9u6y0.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-05 13:55
n4c6v5.cn	3fd545ba…	https://n4c6v5.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-05 05:28
n4c6v5.cn	3fd545ba…	https://n4c6v5.cn/static/js/chunk-vendors.3f56995a.js	byte	2026-05-05 05:28