ScanMalware.com
Known malicious kithighphishing

Random-Letter Multi-TLD Kit (cyou/shop/qpon/click) — 26h

family: random-letter-multitld-8c1c
Short link:scanmalware.com/h/31

Vue.js webpack SPA across 26 random-letter hostnames on .cyou/.shop/.qpon/.click/.icu TLDs (huwhnkjahksjwnak.cyou, klajlkza12jasdjk131.click, mblgfkltkllpuoprfltp.icu, …). Same kit-as-a-service template as the random-domain Vue scam kits.

Anchors

content sha256e724905a3b4202763ea3ac589a739a9030244050172a0cc7d2b531bef2edd125
canonical AST8c1c86c077f2e1c0fc9f8826ff13abf2e087148a7462f0a258545fccc1444689
TLSHT15505F78DF282B0B607E760B5403F220BB2376959B40A84D8F675E4D4AD7894E6237F7D

Provenance

Added: 2026-05-26 16:48
26 hosts

Sightings (36)Atom feed

HostScanScriptMatchScanned
huwhnkjahksjwnak.shop70e43e8f…http://huwhnkjahksjwnak.shop/static/js/chunk-vendors.41d308fc.jsbyte2026-01-12 22:21
mblgfkltkllpuoprfltp.cyoud0ac43ee…https://mblgfkltkllpuoprfltp.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-11 04:54
mblgfkltkllpuoprfltp.icu8479b545…http://mblgfkltkllpuoprfltp.icu/static/js/chunk-vendors.41d308fc.jsbyte2026-01-10 00:29
mblgfkltkllpuoprfltp.icu428958b9…https://mblgfkltkllpuoprfltp.icu/static/js/chunk-vendors.41d308fc.jsbyte2026-01-07 20:45
huwhnkjahksjwnak.cyou57b84808…https://huwhnkjahksjwnak.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-07 06:42
mblgfkltkllpuoprfltp.cyou7ac7b7fd…http://mblgfkltkllpuoprfltp.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-06 04:40
mkldxjkalzmajllzme.click8faa6599…https://mkldxjkalzmajllzme.click/static/js/chunk-vendors.41d308fc.jsbyte2026-01-05 03:02
mivjdniwjahwusax.cyou25b14cc2…https://mivjdniwjahwusax.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 21:43
tiwjsnjuioogkwsa.cyouc72a76ad…https://tiwjsnjuioogkwsa.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 18:00
shaoplzalzla1zklsl.icud6ba68c8…https://shaoplzalzla1zklsl.icu/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 09:27
ksajhdklnal1kajkz.clickf0268f11…https://ksajhdklnal1kajkz.click/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 05:42
tiwjsnjuioogkwsa.cyou8c55785d…https://tiwjsnjuioogkwsa.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 05:40
liopajzlkaolljaozla.icuae270898…https://liopajzlkaolljaozla.icu/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 02:19
liopajzlkaolljaozla.icuae270898…https://liopajzlkaolljaozla.icu/static/js/chunk-vendors.41d308fc.jsbyte2026-01-04 02:19
ksajhdklnal1kajkz.cyou74198e83…https://ksajhdklnal1kajkz.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-02 02:49
liopajzlkaolljaozla.cyou9d4ae4f7…https://liopajzlkaolljaozla.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-02 01:15
iwjnsjwasskwnas.cyou817224ac…https://iwjnsjwasskwnas.cyou/static/js/chunk-vendors.41d308fc.jsbyte2026-01-01 14:39
mivjdniwjahwusax.qpon956ceb75…https://mivjdniwjahwusax.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-31 16:44
ksajhdklnal1kajkz.cyoud96420ba…https://ksajhdklnal1kajkz.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-31 00:24
tiwjsnjuioogkwsa.icu399c588b…http://tiwjsnjuioogkwsa.icu/static/js/chunk-vendors.41d308fc.jsbyte2025-12-30 11:54
mivjdniwjahwusax.clickab0b2dab…https://mivjdniwjahwusax.click/static/js/chunk-vendors.41d308fc.jsbyte2025-12-29 01:38
mivjdniwjahwusax.cyou2ddf1025…https://mivjdniwjahwusax.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-28 05:51
mivjdniwjahwusax.click8a5555f3…https://mivjdniwjahwusax.click/static/js/chunk-vendors.41d308fc.jsbyte2025-12-28 03:01
liopajzlkaolljaozla.qpon4702c974…https://liopajzlkaolljaozla.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-28 02:33
tiwjsnjuioogkwsa.icuac9fe04a…https://tiwjsnjuioogkwsa.icu/static/js/chunk-vendors.41d308fc.jsbyte2025-12-27 20:37
iwjnsjwasskwnas.qpon4c59e0d8…https://iwjnsjwasskwnas.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-27 20:08
ksajhdklnal1kajkz.qpon03dd1934…https://ksajhdklnal1kajkz.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-25 17:40
oneksjzlaq.cyou239cbf03…https://oneksjzlaq.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-16 06:15
mz1jak12ln.cyou6b9e7d45…http://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 23:54
klajlkza12jasdjk131.click67687fee…https://klajlkza12jasdjk131.click/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 19:51
oneksjzlaq.qponf301b232…https://oneksjzlaq.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 18:09
j1jhakjshd13nzaa.icu1fc716ee…https://j1jhakjshd13nzaa.icu/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 16:21
mz1jak12ln.qpon5c856e81…http://mz1jak12ln.qpon/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 15:59
klajlkza12jasdjk131.cyoud3201c29…http://klajlkza12jasdjk131.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-15 14:49
mz1jak12ln.cyou1b0b17c4…https://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-14 20:11
mz1jak12ln.cyou1b0b17c4…https://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.jsbyte2025-12-14 20:11