Known malicious kithighphishing
Random-Letter Multi-TLD Kit (cyou/shop/qpon/click) — 26h
family: random-letter-multitld-8c1c
Vue.js webpack SPA across 26 random-letter hostnames on .cyou/.shop/.qpon/.click/.icu TLDs (huwhnkjahksjwnak.cyou, klajlkza12jasdjk131.click, mblgfkltkllpuoprfltp.icu, …). Same kit-as-a-service template as the random-domain Vue scam kits.
Anchors
Provenance
Added: 2026-05-26 16:48
26 hosts
Sightings (36)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| huwhnkjahksjwnak.shop | 70e43e8f… | http://huwhnkjahksjwnak.shop/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 23:50 |
| mblgfkltkllpuoprfltp.cyou | d0ac43ee… | https://mblgfkltkllpuoprfltp.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 23:31 |
| mblgfkltkllpuoprfltp.icu | 8479b545… | http://mblgfkltkllpuoprfltp.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 23:20 |
| mblgfkltkllpuoprfltp.icu | 428958b9… | https://mblgfkltkllpuoprfltp.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 22:04 |
| huwhnkjahksjwnak.cyou | 57b84808… | https://huwhnkjahksjwnak.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 21:50 |
| mblgfkltkllpuoprfltp.cyou | 7ac7b7fd… | http://mblgfkltkllpuoprfltp.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 21:25 |
| mkldxjkalzmajllzme.click | 8faa6599… | https://mkldxjkalzmajllzme.click/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 20:50 |
| mivjdniwjahwusax.cyou | 25b14cc2… | https://mivjdniwjahwusax.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 20:46 |
| tiwjsnjuioogkwsa.cyou | c72a76ad… | https://tiwjsnjuioogkwsa.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 20:42 |
| shaoplzalzla1zklsl.icu | d6ba68c8… | https://shaoplzalzla1zklsl.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 17:20 |
| ksajhdklnal1kajkz.click | f0268f11… | https://ksajhdklnal1kajkz.click/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 17:15 |
| tiwjsnjuioogkwsa.cyou | 8c55785d… | https://tiwjsnjuioogkwsa.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 17:15 |
| liopajzlkaolljaozla.icu | ae270898… | https://liopajzlkaolljaozla.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 17:10 |
| liopajzlkaolljaozla.icu | ae270898… | https://liopajzlkaolljaozla.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 17:10 |
| ksajhdklnal1kajkz.cyou | 74198e83… | https://ksajhdklnal1kajkz.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 08:17 |
| liopajzlkaolljaozla.cyou | 9d4ae4f7… | https://liopajzlkaolljaozla.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 08:13 |
| iwjnsjwasskwnas.cyou | 817224ac… | https://iwjnsjwasskwnas.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 07:44 |
| mivjdniwjahwusax.qpon | 956ceb75… | https://mivjdniwjahwusax.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 06:33 |
| ksajhdklnal1kajkz.cyou | d96420ba… | https://ksajhdklnal1kajkz.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 06:05 |
| tiwjsnjuioogkwsa.icu | 399c588b… | http://tiwjsnjuioogkwsa.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 05:21 |
| mivjdniwjahwusax.click | ab0b2dab… | https://mivjdniwjahwusax.click/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 03:09 |
| mivjdniwjahwusax.cyou | 2ddf1025… | https://mivjdniwjahwusax.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 02:07 |
| mivjdniwjahwusax.click | 8a5555f3… | https://mivjdniwjahwusax.click/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 02:01 |
| liopajzlkaolljaozla.qpon | 4702c974… | https://liopajzlkaolljaozla.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 02:00 |
| tiwjsnjuioogkwsa.icu | ac9fe04a… | https://tiwjsnjuioogkwsa.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 01:48 |
| iwjnsjwasskwnas.qpon | 4c59e0d8… | https://iwjnsjwasskwnas.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-23 01:46 |
| ksajhdklnal1kajkz.qpon | 03dd1934… | https://ksajhdklnal1kajkz.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 22:48 |
| oneksjzlaq.cyou | 239cbf03… | https://oneksjzlaq.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:40 |
| mz1jak12ln.cyou | 6b9e7d45… | http://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:25 |
| klajlkza12jasdjk131.click | 67687fee… | https://klajlkza12jasdjk131.click/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:20 |
| oneksjzlaq.qpon | f301b232… | https://oneksjzlaq.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:18 |
| j1jhakjshd13nzaa.icu | 1fc716ee… | https://j1jhakjshd13nzaa.icu/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:15 |
| mz1jak12ln.qpon | 5c856e81… | http://mz1jak12ln.qpon/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:14 |
| klajlkza12jasdjk131.cyou | d3201c29… | http://klajlkza12jasdjk131.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:13 |
| mz1jak12ln.cyou | 1b0b17c4… | https://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:10 |
| mz1jak12ln.cyou | 1b0b17c4… | https://mz1jak12ln.cyou/static/js/chunk-vendors.41d308fc.js | byte | 2026-05-22 16:10 |