Known malicious kithighphishing

.forum TLD Rotation Kit — chunk-vendors

family: forum-tld-kit-b86d1a

Vue.js webpack SPA deployed across 40 hostnames ALL on the .forum TLD with 8-character random hostnames (cmkpxlpv.forum, lhivtxfx.forum, ruxkxjyybs.forum, …). The uniformity of TLD + filename-length is a strong operator signal.

Provenance

Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 40 hosts, all on .forum TLD with uniform 8-char hostnames.

Sightings (44)

HostScanScriptMatchWhen
ybhzxtgmpw.forumd5ba2397http://ybhzxtgmpw.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 16:38
ruxkxjyybs.forumc7e715e7http://ruxkxjyybs.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 07:29
viqobbhoce.forum9964d47chttp://viqobbhoce.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 07:26
xvwpyptwkl.forumfb9058behttp://xvwpyptwkl.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 05:32
xgndwfpyjn.forumb05faa4fhttp://xgndwfpyjn.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 03:20
xyiappkjpk.forum7b5a69f5http://xyiappkjpk.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 02:55
vfzzlqyaun.forumfdc9c8e9http://vfzzlqyaun.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-23 01:35
xvtcjfrt.forum3945fae1http://xvtcjfrt.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:24
fnkjzliv.forumd8266978http://fnkjzliv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:23
hclanjfx.forumcee1bc89http://hclanjfx.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:23
mgkiunpv.forum282662a1http://mgkiunpv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:22
kevzrkbv.forumc26597ffhttp://kevzrkbv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:21
neihanuo.forume64cdcb5http://neihanuo.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:21
neihanuo.forume64cdcb5http://neihanuo.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:21
uijramme.forum49497a82http://uijramme.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:21
kbtenjha.forum1f564324http://kbtenjha.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:19
kbtenjha.forum1f564324http://kbtenjha.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:19
kfneevqh.foruma72ca39dhttp://kfneevqh.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:18
nwppbrzr.forumd592fb0fhttp://nwppbrzr.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:18
pxcnmppg.forumf093cff8http://pxcnmppg.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:16
ndijtlon.forum55f1eba0http://ndijtlon.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:11
ieeovycv.forum37bc6de1http://ieeovycv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:09
ubwtjgbv.forumc312f7e2http://ubwtjgbv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:06
zzmjiedy.forumf2d6ddcchttp://zzmjiedy.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:06
vofcknxf.forumeb77de57http://vofcknxf.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:06
eyhgvbrg.forumb453ae8chttp://eyhgvbrg.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:05
eyhgvbrg.forumb453ae8chttp://eyhgvbrg.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:05
jdzbxcry.forumfa1b0c84http://jdzbxcry.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:05
iyiecfvq.forumb8284c6chttp://iyiecfvq.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:05
iyiecfvq.forumb8284c6chttp://iyiecfvq.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:05
vfadhkyw.forum2c1e023fhttp://vfadhkyw.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:04
waxueeqq.forumbfa3f548http://waxueeqq.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:03
esqeugok.forumb5594de9http://esqeugok.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:03
ockijsxv.forum0c1009d5http://ockijsxv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:03
uckktlrh.forum55448558http://uckktlrh.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:02
jnsvfpge.forum5a5f6983http://jnsvfpge.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 20:01
lzkdzplw.forumf48884a0http://lzkdzplw.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 19:56
zgqydvye.forum01565256http://zgqydvye.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 19:54
pxfegkqp.forum4eeb1476http://pxfegkqp.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 19:53
yviwunbf.forumdd47ca5fhttp://yviwunbf.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 18:48
tpbahqhy.forumbc95b94dhttp://tpbahqhy.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 18:46
cmkpxlpv.forumcae0d936http://cmkpxlpv.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 18:28
lhivtxfx.forum475532eahttp://lhivtxfx.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 18:22
dmakyueu.forumec80b988http://dmakyueu.forum/static/js/chunk-vendors.9833cef5.jsbyte2026-05-22 17:31