ScanMalware.com
Known malicious kithighphishing

htxnadf.top Operator — js/app

family: htxnadf-2503

5-host operator running random-named .top hostnames anchored on htxnadf.top.

Fingerprint anchors

content sha25669fcb27026b08ca4113450e6f6e152ca7abf9560afb7c560bfa452aaf39f5fd5
canonical AST2503627a0bf781f70c6fb86931cf8deac86f423eea3f9039c83c3432e8b3de48
TLSHT16B35AF1F63D6B18904F5F202B04F3E3625E868B6F7C680D15FAC4B6E12E0D59D327A69

Provenance

Added by: analyst
Added: 2026-05-27 07:09
5 hosts.

Sightings (9)

HostScanScriptMatchWhen
htxnahc.vip681557ce…https://htxnahc.vip/js/app.2293bed1.jsstructure2026-05-24 16:29
htxnaf.top6519913d…https://htxnaf.top/js/app.2293bed1.jsstructure2026-05-24 16:20
htxnahc.vip6e375cab…https://htxnahc.vip/js/app.2293bed1.jsstructure2026-05-24 16:17
htxnaf.top3da689d3…https://htxnaf.top/js/app.2293bed1.jsstructure2026-05-24 16:16
htxnasc.vipa2d6d247…https://htxnasc.vip/js/app.891d4324.jsbyte2026-05-24 16:14
htxnag.com5e89114f…https://htxnag.com/js/app.891d4324.jsbyte2026-05-24 16:05
htxnadf.top35fcbb77…https://htxnadf.top/js/app.891d4324.jsbyte2026-05-24 16:05
htxnasc.vip76b6af47…https://htxnasc.vip/js/app.891d4324.jsbyte2026-05-24 15:56
htxnadf.topf6faa785…https://htxnadf.top/js/app.891d4324.jsbyte2026-05-24 15:35