ScanMalware.com

Threat Hunting

Tracked hunts and campaigns, each anchored to a script fingerprint, a YARA rule, a search query or a TLS certificate. Every scanned script and page is matched against them automatically.

299 hunts·35 hit in the last 24 hours·59,477 sightings

Add hunt

Last hit, across 299 hunts

Severity
Category
Matches by

Showing 211–240 of 299 hunts · sorted by last hit

  • Random-Domain Vue Scam Kit (cyou/shop/sbs) — chunk-vendors

    highrandom-domain-kit-9f38c9phishingmatches by scriptadded 2026-05-26
    sightings
    46
    hosts
    33
    last hit
    7 months ago

  • Whale Exchange Impersonation — chunk-vendors

    criticalwhale-exchange-impersonation-50a4phishingmatches by scriptadded 2026-05-26
    sightings
    1
    hosts
    1
    last hit
    7 months ago

  • DDEX DEX Impersonation — chunk-vendors

    highddex-impersonation-a692phishingmatches by scriptadded 2026-05-26
    sightings
    5
    hosts
    4
    last hit
    7 months ago

  • Medtronic Brand Impersonation — index.js

    criticalmedtronic-impersonationphishingmatches by scriptadded 2026-05-26
    sightings
    11
    hosts
    4
    last hit
    7 months ago

  • Medtronic Brand Impersonation — chunk-vendors.js

    criticalmedtronic-impersonationphishingmatches by scriptadded 2026-05-26
    sightings
    11
    hosts
    4
    last hit
    7 months ago

  • Medtronic Brand Impersonation — pages-welcome-welcome.js

    criticalmedtronic-impersonationphishingmatches by scriptadded 2026-05-26
    sightings
    11
    hosts
    4
    last hit
    7 months ago

  • Gambling Rotation Kit (.win/.mom/.vip) — chunk-vendors

    highgambling-vip-win-kit-d0d844phishingmatches by scriptadded 2026-05-26
    sightings
    110
    hosts
    43
    last hit
    7 months ago

  • TrustUcoin Crypto-Wallet Impersonation — chunk-vendors

    criticaltrustucoin-impersonation-cabaphishingmatches by scriptadded 2026-05-26
    sightings
    2
    hosts
    1
    last hit
    7 months ago

  • Brazilian Gambling Sister Cohort (7v-) — chunk-vendors

    highpt-brazil-gambling-sister-9e19phishingmatches by scriptadded 2026-05-26
    sightings
    12
    hosts
    5
    last hit
    7 months ago

  • Random-Domain Vue Sister Cohort (aec05b) — chunk-vendors

    highrandom-domain-sister-aec0phishingmatches by scriptadded 2026-05-26
    sightings
    3
    hosts
    3
    last hit
    7 months ago

  • Chinese WhatsApp Impersonation — main.js

    criticalwhatsapp-cn-bf71phishingmatches by scriptadded 2026-05-27
    sightings
    5
    hosts
    5
    last hit
    7 months ago

  • Random-Letter Multi-TLD Sister Cohort (3cdd1b) — chunk-vendors

    highrandom-letter-sister-3cddphishingmatches by scriptadded 2026-05-26
    sightings
    6
    hosts
    6
    last hit
    8 months ago

  • Minexus VIP Impersonation — chunk-vendors

    highminexus-impersonation-beb4phishingmatches by scriptadded 2026-05-26
    sightings
    1
    hosts
    1
    last hit
    8 months ago

  • bbq/carros/ty Portuguese Brand Rotation — chunk-vendors

    highbbq-carros-pt-03a5phishingmatches by scriptadded 2026-05-26
    sightings
    14
    hosts
    9
    last hit
    8 months ago

  • xt Prefix .com Rotation — chunk-vendors

    highxt-prefix-295ephishingmatches by scriptadded 2026-05-26
    sightings
    8
    hosts
    7
    last hit
    8 months ago

  • Deeply-Nested Random Subdomains — chunk-vendors

    highnested-subdomain-9003phishingmatches by scriptadded 2026-05-26
    sightings
    11
    hosts
    7
    last hit
    8 months ago

  • Indonesian Gambling Next.js Kit — pages/index #1

    highindonesian-gambling-nextjsphishingmatches by scriptadded 2026-05-26
    sightings
    133
    hosts
    37
    last hit
    8 months ago

  • Indonesian Gambling Next.js Kit — pages/_app

    highindonesian-gambling-nextjsphishingmatches by scriptadded 2026-05-26
    sightings
    57
    hosts
    30
    last hit
    8 months ago

  • acce* Prefix Rotation — chunk-vendors

    highacce-prefix-d0aephishingmatches by scriptadded 2026-05-26
    sightings
    14
    hosts
    12
    last hit
    9 months ago

  • Telcel Mexico Brand Impersonation — index.js #2

    criticallatam-telcel-mx-phish-52aaphishingmatches by scriptadded 2026-05-26
    sightings
    26
    hosts
    23
    last hit
    9 months ago

  • Telcel Mexico Brand Impersonation — index.js #1

    criticallatam-telcel-mx-phish-52aaphishingmatches by scriptadded 2026-05-26
    sightings
    26
    hosts
    23
    last hit
    9 months ago

  • Random-Letter Multi-TLD Kit (icu/cyou/qpon/sbs) — 21h

    highrandom-letter-multitld-9d69phishingmatches by scriptadded 2026-05-26
    sightings
    30
    hosts
    21
    last hit
    9 months ago

  • Random-Letter Multi-TLD Kit (icu/click/cfd) — 15h

    highrandom-letter-multitld-4ba7phishingmatches by scriptadded 2026-05-26
    sightings
    21
    hosts
    15
    last hit
    9 months ago

  • WhatsApp Brand Impersonation — chunk-vendors

    highwhatsapp-bd-771cphishingmatches by scriptadded 2026-05-26
    sightings
    7
    hosts
    7
    last hit
    9 months ago

  • zhesinc/zhesinr Sister Cohort #2 — chunk-vendors

    highzhesin-sister-f221phishingmatches by scriptadded 2026-05-26
    sightings
    2
    hosts
    2
    last hit
    9 months ago

  • zhesinc/zhesinr Sister Cohort #1 — chunk-vendors

    highzhesin-sister-f125phishingmatches by scriptadded 2026-05-26
    sightings
    2
    hosts
    2
    last hit
    9 months ago

  • login-client/metasuite Phishing Kit — main.js

    criticallogin-client-metasuite-54dephishingmatches by scriptadded 2026-05-27
    sightings
    7
    hosts
    4
    last hit
    9 months ago

  • andes* Prefix Rotation — chunk-vendors

    highandes-prefix-4556phishingmatches by scriptadded 2026-05-26
    sightings
    11
    hosts
    8
    last hit
    9 months ago

  • Random-Letter Multi-TLD Kit (cyou/shop/qpon/click) — 26h

    highrandom-letter-multitld-8c1cphishingmatches by scriptadded 2026-05-26
    sightings
    36
    hosts
    26
    last hit
    9 months ago

  • ldwebsync Numbered .top Series — chunk-vendors

    highldwebsync-numeric-ba2aphishingmatches by scriptadded 2026-05-26
    sightings
    4
    hosts
    4
    last hit
    9 months ago