Known malicious kithighphishing

mailNNN.com Credits Scam — pages-login-login.js

family: mail-credits-scam

Login page chunk for the mailNNN.com fake-credits Vue SPA. Renders the credential-harvesting form.

Provenance

Added: 2026-05-26 13:35
Anchor #2 of 3. Strongest behavioural signal — the login chunk itself, 2,217 nodes.

Sightings (5)Atom feed

HostScanScriptMatchScanned
mail238.com269ee6c7…https://mail238.com/static/js/pages-login-login.fffed63e.jsbyte2026-01-11 11:42
mail279.com4ae65998…https://mail279.com/static/js/pages-login-login.fffed63e.jsbyte2026-01-10 17:59
mail799.com34f4e927…https://mail799.com/static/js/pages-login-login.fffed63e.jsbyte2026-01-10 05:57
mail799.com99a68785…https://mail799.com/static/js/pages-login-login.fffed63e.jsbyte2026-01-07 12:09
mail279.com36a59f71…https://mail279.com/static/js/pages-login-login.fffed63e.jsbyte2026-01-07 11:13