Known malicious kithighphishing
Gambling Rotation Kit (.win/.mom/.vip) — chunk-vendors
family: gambling-vip-win-kit-d0d844
Online-gambling/betting kit deployed across 43 brand-prefixed hostnames on .win/.mom/.vip TLDs. Includes 1xbet-style impersonation (1x-clz.vip, 1x-gzm.vip, 1x-xl.vip) and generic bet/win brands (0227bet.win, 107win.mom, 208win2.vip). All hosts graded "Low Risk" or "Medium Risk".
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 43 hosts, byte-identical build. TLSH body diverges from the random-domain template — distinct operator/template.
Sightings (110)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| 285win.mom | e947c255… | https://285win.mom/static/js/chunk-vendors.6859ceed.js | byte | 2026-05-24 11:48 |
| 285win.mom | e947c255… | https://285win.mom/static/js/chunk-vendors.6859ceed.js | byte | 2026-05-24 11:48 |
| aaddpg.win | 1d986bb0… | https://aaddpg.win/static/js/chunk-vendors.7eb7e004.js | byte | 2026-05-24 11:42 |
| aaddpg.win | 1d986bb0… | https://aaddpg.win/static/js/chunk-vendors.7eb7e004.js | byte | 2026-05-24 11:42 |
| wg-bmw.win | ff58bcff… | https://wg-bmw.win/static/js/chunk-vendors.e2026fcd.js | byte | 2026-05-24 11:38 |
| wg-bmw.win | ff58bcff… | https://wg-bmw.win/static/js/chunk-vendors.e2026fcd.js | byte | 2026-05-24 11:38 |
| 1x-clz.vip | ce268371… | https://1x-clz.vip/static/js/chunk-vendors.89fd2418.js | byte | 2026-05-24 11:32 |
| 1x-clz.vip | ce268371… | https://1x-clz.vip/static/js/chunk-vendors.89fd2418.js | byte | 2026-05-24 11:32 |
| andar-777.vip | 25a1ddd4… | https://andar-777.vip/static/js/chunk-vendors.979ed1a7.js | byte | 2026-05-24 11:12 |
| andar-777.vip | 25a1ddd4… | https://andar-777.vip/static/js/chunk-vendors.979ed1a7.js | byte | 2026-05-24 11:12 |
| 107win.mom | 4a4eee10… | https://107win.mom/static/js/chunk-vendors.d8687327.js | byte | 2026-05-24 11:00 |
| 107win.mom | 4a4eee10… | https://107win.mom/static/js/chunk-vendors.d8687327.js | byte | 2026-05-24 11:00 |
| 1x-gzm.vip | a8c1fb31… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-05-24 10:53 |
| 1x-gzm.vip | a8c1fb31… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-05-24 10:53 |
| 1x-gzm.vip | f69c3c3e… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-05-24 10:53 |
| 1x-gzm.vip | f69c3c3e… | https://1x-gzm.vip/static/js/chunk-vendors.4dd34dd6.js | byte | 2026-05-24 10:53 |
| 0227bet.win | 22c162c5… | https://0227bet.win/static/js/chunk-vendors.9be18ab2.js | byte | 2026-05-24 10:42 |
| 0227bet.win | 22c162c5… | https://0227bet.win/static/js/chunk-vendors.9be18ab2.js | byte | 2026-05-24 10:42 |
| wg-burgguer.vip | 7edfdd61… | https://wg-burgguer.vip/static/js/chunk-vendors.9b45689a.js | byte | 2026-05-24 10:06 |
| wg-burgguer.vip | 7edfdd61… | https://wg-burgguer.vip/static/js/chunk-vendors.9b45689a.js | byte | 2026-05-24 10:06 |
| estacao-777.vip | a74307c0… | https://estacao-777.vip/static/js/chunk-vendors.317375e0.js | byte | 2026-05-24 09:54 |
| estacao-777.vip | a74307c0… | https://estacao-777.vip/static/js/chunk-vendors.317375e0.js | byte | 2026-05-24 09:54 |
| 550bet.mom | 5e503fa7… | https://550bet.mom/static/js/chunk-vendors.d83cff1c.js | byte | 2026-05-24 09:32 |
| 550bet.mom | 5e503fa7… | https://550bet.mom/static/js/chunk-vendors.d83cff1c.js | byte | 2026-05-24 09:32 |
| 280win.mom | 24011a37… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-05-24 09:28 |
| 280win.mom | 24011a37… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-05-24 09:28 |
| bolakf.win | 2502c791… | https://bolakf.win/static/js/chunk-vendors.c3d5ec73.js | byte | 2026-05-24 09:25 |
| bolakf.win | 2502c791… | https://bolakf.win/static/js/chunk-vendors.c3d5ec73.js | byte | 2026-05-24 09:25 |
| 208win2.vip | 403bcf5a… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-05-24 09:21 |
| 208win2.vip | 403bcf5a… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-05-24 09:21 |
| 280win.mom | 373568e1… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-05-24 09:16 |
| 280win.mom | 373568e1… | https://280win.mom/static/js/chunk-vendors.44ef9c19.js | byte | 2026-05-24 09:16 |
| 208win2.vip | 44122a96… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-05-24 09:07 |
| 208win2.vip | 44122a96… | https://208win2.vip/static/js/chunk-vendors.ec79e4bd.js | byte | 2026-05-24 09:07 |
| okok-yoga.vip | a1eb8947… | https://okok-yoga.vip/static/js/chunk-vendors.038aa6c1.js | byte | 2026-05-24 08:31 |
| okok-yoga.vip | a1eb8947… | https://okok-yoga.vip/static/js/chunk-vendors.038aa6c1.js | byte | 2026-05-24 08:31 |
| w1-trigo-pg.vip | a249c6c0… | https://w1-trigo-pg.vip/static/js/chunk-vendors.d6952f34.js | byte | 2026-05-24 08:20 |
| w1-trigo-pg.vip | a249c6c0… | https://w1-trigo-pg.vip/static/js/chunk-vendors.d6952f34.js | byte | 2026-05-24 08:20 |
| 91-ribbonpg.vip | 9e82dd8d… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-05-24 07:37 |
| 91-ribbonpg.vip | 9e82dd8d… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-05-24 07:37 |
| 91-ribbonpg.vip | a55f624f… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-05-24 07:33 |
| 91-ribbonpg.vip | a55f624f… | https://91-ribbonpg.vip/static/js/chunk-vendors.3dbcdc6c.js | byte | 2026-05-24 07:33 |
| aj-seupg.vip | 1c3afb15… | https://aj-seupg.vip/static/js/chunk-vendors.71bdad2f.js | byte | 2026-05-24 06:58 |
| aj-seupg.vip | 1c3afb15… | https://aj-seupg.vip/static/js/chunk-vendors.71bdad2f.js | byte | 2026-05-24 06:58 |
| gbpmk.mom | 0a2a74bc… | https://gbpmk.mom/static/js/chunk-vendors.a5053489.js | byte | 2026-05-24 06:09 |
| gbpmk.mom | 0a2a74bc… | https://gbpmk.mom/static/js/chunk-vendors.a5053489.js | byte | 2026-05-24 06:09 |
| cervejakf.win | c8d2defe… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-05-24 05:27 |
| cervejakf.win | c8d2defe… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-05-24 05:27 |
| xw-ficarpg.vip | 70dd5274… | https://xw-ficarpg.vip/static/js/chunk-vendors.898d9c76.js | byte | 2026-05-24 05:27 |
| xw-ficarpg.vip | 70dd5274… | https://xw-ficarpg.vip/static/js/chunk-vendors.898d9c76.js | byte | 2026-05-24 05:27 |
| dy-reuniaopg.vip | 5f8bb802… | https://dy-reuniaopg.vip/static/js/chunk-vendors.f6e8d588.js | byte | 2026-05-24 04:55 |
| dy-reuniaopg.vip | 5f8bb802… | https://dy-reuniaopg.vip/static/js/chunk-vendors.f6e8d588.js | byte | 2026-05-24 04:55 |
| cad-mk.vip | eda4d0c4… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-05-24 03:38 |
| cad-mk.vip | eda4d0c4… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-05-24 03:38 |
| cervejakf.win | 04882500… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-05-24 03:28 |
| cervejakf.win | 04882500… | https://cervejakf.win/static/js/chunk-vendors.898ad612.js | byte | 2026-05-24 03:28 |
| cad-mk.vip | c2c0c5bc… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-05-24 03:27 |
| cad-mk.vip | c2c0c5bc… | https://cad-mk.vip/static/js/chunk-vendors.410bfacd.js | byte | 2026-05-24 03:27 |
| 777-passeio777.vip | c710cab4… | https://777-passeio777.vip/static/js/chunk-vendors.e7a026af.js | byte | 2026-05-24 02:52 |
| 777-passeio777.vip | c710cab4… | https://777-passeio777.vip/static/js/chunk-vendors.e7a026af.js | byte | 2026-05-24 02:52 |
| xicara777.vip | bc45dbe1… | https://xicara777.vip/static/js/chunk-vendors.c1e64a20.js | byte | 2026-05-24 02:05 |
| xicara777.vip | bc45dbe1… | https://xicara777.vip/static/js/chunk-vendors.c1e64a20.js | byte | 2026-05-24 02:05 |
| 773-win.vip | 99fc3abe… | https://773-win.vip/static/js/chunk-vendors.a7655798.js | byte | 2026-05-24 00:58 |
| 773-win.vip | 99fc3abe… | https://773-win.vip/static/js/chunk-vendors.a7655798.js | byte | 2026-05-24 00:58 |
| lllipg.win | faf74b6e… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-05-24 00:48 |
| lllipg.win | faf74b6e… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-05-24 00:48 |
| 1x-xl.vip | 2c40898c… | https://1x-xl.vip/static/js/chunk-vendors.bb0a82e0.js | byte | 2026-05-24 00:36 |
| 1x-xl.vip | 2c40898c… | https://1x-xl.vip/static/js/chunk-vendors.bb0a82e0.js | byte | 2026-05-24 00:36 |
| vaso-777.vip | 672529bb… | https://vaso-777.vip/static/js/chunk-vendors.5f3b53ec.js | byte | 2026-05-24 00:17 |
| vaso-777.vip | 672529bb… | https://vaso-777.vip/static/js/chunk-vendors.5f3b53ec.js | byte | 2026-05-24 00:17 |
| veilpg.vip | d90b17cd… | https://veilpg.vip/static/js/chunk-vendors.e1bb747e.js | byte | 2026-05-24 00:10 |
| veilpg.vip | d90b17cd… | https://veilpg.vip/static/js/chunk-vendors.e1bb747e.js | byte | 2026-05-24 00:10 |
| lllipg.win | 8ec4baf1… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-05-24 00:01 |
| lllipg.win | 8ec4baf1… | https://lllipg.win/static/js/chunk-vendors.cdfff299.js | byte | 2026-05-24 00:01 |
| 57ll.win | 7314aad3… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-05-23 23:45 |
| 57ll.win | 7314aad3… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-05-23 23:45 |
| fantamk.cc | d9d8a5fd… | https://fantamk.cc/static/js/chunk-vendors.d299ea43.js | byte | 2026-05-23 23:45 |
| fantamk.cc | d9d8a5fd… | https://fantamk.cc/static/js/chunk-vendors.d299ea43.js | byte | 2026-05-23 23:45 |
| 57ll.win | 5194eaa7… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-05-23 21:41 |
| 57ll.win | 5194eaa7… | https://57ll.win/static/js/chunk-vendors.779ea0e9.js | byte | 2026-05-23 21:41 |
| dy-batidopg.vip | e9cc8f71… | https://dy-batidopg.vip/static/js/chunk-vendors.ba419bf1.js | byte | 2026-05-23 21:38 |
| dy-batidopg.vip | e9cc8f71… | https://dy-batidopg.vip/static/js/chunk-vendors.ba419bf1.js | byte | 2026-05-23 21:38 |
| 91-apronpg.vip | 29bf482e… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-05-23 20:44 |
| 91-apronpg.vip | 29bf482e… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| wg-cidade.mom | 7c9dcce3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 20:44 |
| w1-popeyepg.mom | 5edc179e… | https://w1-popeyepg.mom/static/js/chunk-vendors.d65106cf.js | byte | 2026-05-23 17:22 |
| w1-popeyepg.mom | 5edc179e… | https://w1-popeyepg.mom/static/js/chunk-vendors.d65106cf.js | byte | 2026-05-23 17:22 |
| wg-cidade.mom | f033c4f3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 08:55 |
| wg-cidade.mom | f033c4f3… | https://wg-cidade.mom/static/js/chunk-vendors.0701606b.js | byte | 2026-05-23 08:55 |
| presentesdenatalkk.mom | 8c1072a2… | https://presentesdenatalkk.mom/static/js/chunk-vendors.3d1d6802.js | byte | 2026-05-23 08:31 |
| presentesdenatalkk.mom | 8c1072a2… | https://presentesdenatalkk.mom/static/js/chunk-vendors.3d1d6802.js | byte | 2026-05-23 08:31 |
| bet-567.vip | a7ff372f… | https://bet-567.vip/static/js/chunk-vendors.dd39d98f.js | byte | 2026-05-23 07:30 |
| bet-567.vip | a7ff372f… | https://bet-567.vip/static/js/chunk-vendors.dd39d98f.js | byte | 2026-05-23 07:30 |
| lf-natal.mom | 5e6459b9… | https://lf-natal.mom/static/js/chunk-vendors.3d16fd07.js | byte | 2026-05-23 07:04 |
| lf-natal.mom | 5e6459b9… | https://lf-natal.mom/static/js/chunk-vendors.3d16fd07.js | byte | 2026-05-23 07:04 |
| 91-apronpg.vip | 211e41c5… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-05-23 03:57 |
| 91-apronpg.vip | 211e41c5… | https://91-apronpg.vip/static/js/chunk-vendors.52a678c4.js | byte | 2026-05-23 03:57 |
| 0k0kjqk.com | 5aa52e0d… | https://0k0kjqk.com/static/js/chunk-vendors.a0cd655a.js | byte | 2026-05-22 19:45 |
| 0k0kjqk.com | 5aa52e0d… | https://0k0kjqk.com/static/js/chunk-vendors.a0cd655a.js | byte | 2026-05-22 19:45 |
| 888vlw.fun | c587c112… | https://888vlw.fun/static/js/chunk-vendors.4918d6c2.js | byte | 2026-05-22 14:19 |
| 888vlw.fun | c587c112… | https://888vlw.fun/static/js/chunk-vendors.4918d6c2.js | byte | 2026-05-22 14:19 |
| w1-bmxpg.win | 4aa783b5… | https://w1-bmxpg.win/static/js/chunk-vendors.6ea62ee3.js | byte | 2026-05-22 14:12 |
| w1-bmxpg.win | 4aa783b5… | https://w1-bmxpg.win/static/js/chunk-vendors.6ea62ee3.js | byte | 2026-05-22 14:12 |
| 878bet.mom | 8c22351a… | https://878bet.mom/static/js/chunk-vendors.eb4b6296.js | byte | 2026-05-22 14:03 |
| 878bet.mom | 8c22351a… | https://878bet.mom/static/js/chunk-vendors.eb4b6296.js | byte | 2026-05-22 14:03 |