Known malicious kithighphishing
Random-Letter .com Rotation Sister — js/app
family: random-letter-com-sister-a218
Sister cohort of random-letter-com-199c. 18 hosts with 10-letter random .com hostnames (2zrlupki.com, luckrfbyjg.com, …). Different bundler path (/js/app.<hash>.js) than the original 199c kit.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-27 07:09
18 hosts. Sister of random-letter-com-199c.
Sightings (28)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| 2zrlupki.com | 1da91074… | https://2zrlupki.com/js/app.493d94d2.js | byte | 2026-05-24 16:43 |
| wy026p8.com | fda8d0c9… | https://wy026p8.com/js/app.493d94d2.js | byte | 2026-05-24 16:40 |
| zd2029p8.com | 5a25d672… | https://zd2029p8.com/js/app.493d94d2.js | byte | 2026-05-24 16:40 |
| ym611pkr8.com | b27b4f6d… | https://ym611pkr8.com/js/app.493d94d2.js | byte | 2026-05-24 16:33 |
| pvr17pkr8.com | 25cfd104… | https://pvr17pkr8.com/js/app.493d94d2.js | byte | 2026-05-24 16:25 |
| luckrfbyjg.com | 59e44025… | https://luckrfbyjg.com/js/app.493d94d2.js | byte | 2026-05-24 16:09 |
| rk816pkr8.com | 8a957db4… | https://rk816pkr8.com/js/app.493d94d2.js | byte | 2026-05-24 15:47 |
| u4m20pkr8.com | f2e1245b… | https://u4m20pkr8.com/js/app.493d94d2.js | byte | 2026-05-24 15:37 |
| ual15pkr8.com | 7e1f202e… | https://ual15pkr8.com/js/app.493d94d2.js | byte | 2026-05-24 15:25 |
| luckypkrfbp7x.com | c20d90fb… | https://luckypkrfbp7x.com/js/app.493d94d2.js | byte | 2026-05-24 11:07 |
| luckypkrfbywp.com | 77924d11… | https://luckypkrfbywp.com/js/app.493d94d2.js | byte | 2026-05-24 10:56 |
| luckypkrfbdsq.com | 1a59e9d3… | https://luckypkrfbdsq.com/js/app.493d94d2.js | byte | 2026-05-24 10:53 |
| luckypkrfbsuf.com | f7991394… | https://luckypkrfbsuf.com/js/app.493d94d2.js | byte | 2026-05-24 10:43 |
| luckypkrfbywd.com | 24939fbd… | https://luckypkrfbywd.com/js/app.493d94d2.js | byte | 2026-05-24 10:43 |
| luckypkrfbn99.com | b641aa33… | https://luckypkrfbn99.com/js/app.493d94d2.js | byte | 2026-05-24 10:09 |
| luckypkrfb8g6.com | b6032db5… | https://luckypkrfb8g6.com/js/app.493d94d2.js | byte | 2026-05-24 10:09 |
| luckypkrfb5vg.com | 5d05e609… | https://luckypkrfb5vg.com/js/app.493d94d2.js | byte | 2026-05-24 10:09 |
| luckypkrfb5vg.com | 93c9ef92… | https://luckypkrfb5vg.com/js/app.493d94d2.js | byte | 2026-05-24 10:08 |
| luckypkrfb8g6.com | e190b120… | https://luckypkrfb8g6.com/js/app.493d94d2.js | byte | 2026-05-24 10:06 |
| luckypkrfb7rb.com | c7054ed9… | https://luckypkrfb7rb.com/js/app.493d94d2.js | byte | 2026-05-24 10:01 |
| luckypkrfbn99.com | 3fc538f0… | https://luckypkrfbn99.com/js/app.493d94d2.js | byte | 2026-05-24 10:00 |
| luckypkrfb5vg.com | 84b8dc75… | https://luckypkrfb5vg.com/js/app.493d94d2.js | byte | 2026-05-24 09:57 |
| luckypkrfbywd.com | 47a1cffa… | https://luckypkrfbywd.com/js/app.493d94d2.js | byte | 2026-05-24 09:49 |
| luckypkrfbywp.com | 0b5043eb… | https://luckypkrfbywp.com/js/app.493d94d2.js | byte | 2026-05-24 09:48 |
| luckypkrfbywd.com | f9b2bcd2… | https://luckypkrfbywd.com/js/app.493d94d2.js | byte | 2026-05-24 09:47 |
| luckypkrfbdsq.com | 5e6bc23a… | https://luckypkrfbdsq.com/js/app.493d94d2.js | byte | 2026-05-24 09:47 |
| luckypkrfbp7x.com | 3d61315c… | https://luckypkrfbp7x.com/js/app.493d94d2.js | byte | 2026-05-24 09:45 |
| luckypkrfb8g6.com | d1005f90… | https://luckypkrfb8g6.com/js/app.493d94d2.js | byte | 2026-05-24 09:44 |