Known malicious kithighphishing
.forum TLD Rotation Sister Cohort (f96966) — js/app
family: forum-tld-sister-f969
Sister cohort of forum-tld-kit-b86d1a / forum-tld-kit-6ed2. 39 .forum hosts with uniform 8-char random hostnames (bgvwaihj.forum, bosmehqu.forum, …). Path pattern /js/app.<hash>.js — different chunk path than the earlier forum kits.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-27 07:09
39 hosts on .forum TLD.
Sightings (39)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| jrvhrvro.forum | 6b754163… | https://jrvhrvro.forum/js/app.d4c817e5.js | structure | 2026-05-22 20:22 |
| ofkisamw.forum | 85c7aa8f… | https://ofkisamw.forum/js/app.d6df3384.js | structure | 2026-05-22 20:17 |
| twtaclzj.forum | 31d00d9f… | https://twtaclzj.forum/js/app.d6df3384.js | structure | 2026-05-22 20:15 |
| gbcbphhw.forum | 41d3b090… | https://gbcbphhw.forum/js/app.d6df3384.js | structure | 2026-05-22 19:57 |
| tiimrzpq.forum | 0866ad21… | https://tiimrzpq.forum/js/app.d6df3384.js | structure | 2026-05-22 18:50 |
| tqoblcsx.forum | ad149d80… | https://tqoblcsx.forum/js/app.d6df3384.js | structure | 2026-05-22 18:49 |
| bylawypx.forum | 48494345… | https://bylawypx.forum/js/app.d6df3384.js | structure | 2026-05-22 18:49 |
| bgvwaihj.forum | 562c9589… | https://bgvwaihj.forum/js/app.d6df3384.js | structure | 2026-05-22 18:48 |
| knocjolt.forum | aad2273e… | https://knocjolt.forum/js/app.d6df3384.js | structure | 2026-05-22 18:44 |
| ptsbbhgd.forum | dd2af100… | https://ptsbbhgd.forum/js/app.d6df3384.js | structure | 2026-05-22 18:44 |
| guzjyabe.forum | 2f7a4db2… | https://guzjyabe.forum/js/app.d6df3384.js | structure | 2026-05-22 18:31 |
| cbkmxiiy.forum | 03dad6d7… | https://cbkmxiiy.forum/js/app.d6df3384.js | structure | 2026-05-22 18:27 |
| udddhphq.forum | 1bcddcc5… | https://udddhphq.forum/js/app.d6df3384.js | structure | 2026-05-22 18:20 |
| bosmehqu.forum | 7c8a9a14… | https://bosmehqu.forum/js/app.d6df3384.js | structure | 2026-05-22 18:18 |
| rssruspy.forum | e1c632db… | https://rssruspy.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:16 |
| wcvhmxrh.forum | a93c7ae9… | https://wcvhmxrh.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:14 |
| nvxffnvy.forum | 29c0696f… | https://nvxffnvy.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:14 |
| roxlfksi.forum | 4cf77d4f… | https://roxlfksi.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:14 |
| eekdkcdn.forum | a6e178ee… | https://eekdkcdn.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:05 |
| mlnkiwpd.forum | be3b8ba6… | https://mlnkiwpd.forum/js/app.d1fcc13e.js | byte | 2026-05-22 18:00 |
| wcftwhqn.forum | ddb1cc3c… | https://wcftwhqn.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:49 |
| ofeersgo.forum | 97b37a58… | https://ofeersgo.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:48 |
| xjzsunqp.forum | c41edbab… | https://xjzsunqp.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:48 |
| edoihilr.forum | 1dbd1e5a… | https://edoihilr.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:45 |
| prirdxxm.forum | 4835bb80… | https://prirdxxm.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:37 |
| oycoqhdu.forum | 5ea5b154… | https://oycoqhdu.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:34 |
| veoaydig.forum | 2768a225… | https://veoaydig.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:33 |
| vrnehyor.forum | 84e44cfc… | https://vrnehyor.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:25 |
| qcakbpvy.forum | b96020e7… | https://qcakbpvy.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:23 |
| jdbhalsx.forum | 4e514b1f… | https://jdbhalsx.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:22 |
| nrxhnnmv.forum | b468fdbd… | https://nrxhnnmv.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:14 |
| mneuygpb.forum | 539aaf3c… | https://mneuygpb.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:12 |
| rgcrwuoc.forum | 630e25c0… | https://rgcrwuoc.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:12 |
| ulrnkopi.forum | 41e37e01… | https://ulrnkopi.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:11 |
| jucnulji.forum | 2f35a78e… | https://jucnulji.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:10 |
| nrpcfxuz.forum | 5c535291… | https://nrpcfxuz.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:10 |
| hursgrou.forum | 73a75184… | https://hursgrou.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:07 |
| yanzpiam.forum | 0468ea98… | https://yanzpiam.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:07 |
| rqkocybx.forum | 35e17b4e… | https://rqkocybx.forum/js/app.d1fcc13e.js | byte | 2026-05-22 17:05 |