Known malicious kithighphishing
Random-Domain Vue Scam Kit (sbs/qpon/cyou) — chunk-vendors
family: random-domain-kit-c73042
Vue.js webpack SPA deployed across 32 random-letter hostnames on .sbs/.qpon/.cyou/.click/.icu TLDs (iewyrgajdghfvdhdjs.sbs, jkahskdnzl6kajhmza.qpon, …). Includes the .qpon TLD which is rare and a strong scam-infrastructure marker.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:37
Single anchor — 32 hosts. The .qpon TLD is a distinctive marker.
Sightings (35)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| uyuihasnnzkdflm.shop | 8d0878cc… | https://uyuihasnnzkdflm.shop/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 14:21 |
| jhgiasdjksd8asd.cyou | c22f9707… | https://jhgiasdjksd8asd.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 13:43 |
| nbujisdjkghlaks.icu | a861e241… | https://nbujisdjkghlaks.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 13:09 |
| moippwqyiuajsd.sbs | 551c5692… | https://moippwqyiuajsd.sbs/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:59 |
| kuowejouppsd.cyou | d77b2800… | https://kuowejouppsd.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:57 |
| uiopopspdjaks.sbs | d027dea3… | https://uiopopspdjaks.sbs/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:54 |
| vbyoyupjsadlksd.cfd | dbe884c3… | https://vbyoyupjsadlksd.cfd/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:43 |
| ywiehregjadsldg.sbs | 4f842116… | https://ywiehregjadsldg.sbs/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:42 |
| bhienmansdkngs.shop | 763670f4… | https://bhienmansdkngs.shop/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:33 |
| jhutyijhasmdndgk.cyou | a85cd06e… | https://jhutyijhasmdndgk.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 12:10 |
| nnhuwhjaskdndkg.cyou | a4df0472… | https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 09:15 |
| nnhuwhjaskdndkg.cyou | 5fb10e55… | https://nnhuwhjaskdndkg.cyou/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 09:15 |
| haiwkjahnzkjaskd.cyou | 426f0c67… | http://haiwkjahnzkjaskd.cyou/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 07:24 |
| mowakdwhkashda.icu | 5cfa924d… | http://mowakdwhkashda.icu/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 06:24 |
| mdufaiweaksdakwj.cyou | c08fb41c… | https://mdufaiweaksdakwj.cyou/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 06:23 |
| mzkahwknskdn6az.icu | 0bd0d817… | http://mzkahwknskdn6az.icu/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 06:11 |
| msahjkwbkasdwqa.sbs | 02c90835… | http://msahjkwbkasdwqa.sbs/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 05:57 |
| znahwjbskajsdksdh.shop | a1454bfe… | https://znahwjbskajsdksdh.shop/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 05:54 |
| mskiwhkankzanwk.cyou | 11c0e59e… | http://mskiwhkankzanwk.cyou/static/js/chunk-vendors.cce63046.js | byte | 2026-05-24 05:53 |
| iewyrgajdghfvdhdjs.sbs | 65092eb5… | https://iewyrgajdghfvdhdjs.sbs/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-24 01:37 |
| mgbvkgjotjkdjlksmo.icu | 10ce0106… | https://mgbvkgjotjkdjlksmo.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 23:48 |
| lifkrnksnhnakkeisld.cyou | 22dc618a… | https://lifkrnksnhnakkeisld.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 23:38 |
| jskwaksksjekdlgax.icu | 0c29f70f… | https://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 23:23 |
| lkfrknmnsdkgrttysf.icu | 3dacffd9… | https://lkfrknmnsdkgrttysf.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 23:12 |
| logiptkikldjksjlflgskl.cyou | c2c21861… | https://logiptkikldjksjlflgskl.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 21:36 |
| jskwaksksjekdlgax.icu | fd0ee516… | https://jskwaksksjekdlgax.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 21:36 |
| njishaknzkank2qma.cyou | ac5e3b9a… | https://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 20:45 |
| njishaknzkank2qma.cyou | ac5e3b9a… | https://njishaknzkank2qma.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 20:45 |
| mjhljosomnuiow3po.icu | 9abe46dd… | https://mjhljosomnuiow3po.icu/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 17:20 |
| jkahskdnzl6kajhmza.cyou | 83fc7b64… | https://jkahskdnzl6kajhmza.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 07:52 |
| jkahskdnzl6kajhmza.qpon | 4857c7ed… | https://jkahskdnzl6kajhmza.qpon/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 03:56 |
| mjhljosomnuiow3po.click | 89a76ab0… | https://mjhljosomnuiow3po.click/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 01:49 |
| mjhljosomnuiow3po.qpon | 7950bfca… | http://mjhljosomnuiow3po.qpon/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-23 00:37 |
| jahkj15jahkj8ad.click | 93f4ff64… | https://jahkj15jahkj8ad.click/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-22 16:53 |
| bing12jks05llj6.cyou | 2dac162b… | https://bing12jks05llj6.cyou/static/js/chunk-vendors.70d2e6e8.js | byte | 2026-05-22 14:14 |