Known malicious kithighphishing
Meituan Brand Impersonation + Chinese Names — chunk-vendors
family: meituan-impersonation-c171
Operator across 16 hosts impersonating Meituan (Chinese super-app): qiqimeituan.xyz, shengmeituan.xyz, plus generic Chinese-themed names (songsong123.xyz, tangtang123.asia, zhanxupeng6.asia) and qazwsxNNN.asia placeholders.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
16 hosts. Includes Meituan brand impersonation.
Sightings (22)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| qazwsx003.asia | e82e70a9… | https://qazwsx003.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-25 00:03 |
| mtuy8.top | 3b07388f… | https://mtuy8.top/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 23:21 |
| qazwsxoo1.asia | 850dbe4c… | https://qazwsxoo1.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 23:12 |
| qazwsx004.asia | fd92652a… | https://qazwsx004.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 22:57 |
| qazwsx004.asia | a270a297… | https://qazwsx004.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 22:54 |
| qazwsx002.asia | 30fd42e7… | https://qazwsx002.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 22:29 |
| ttwqer1.top | 75e8b417… | https://ttwqer1.top/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 22:08 |
| qazwsxoo1.asia | 7f79683a… | https://qazwsxoo1.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 21:59 |
| lelelkkk.asia | 716e0d9f… | https://lelelkkk.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 21:11 |
| zhanxupeng6.asia | 5bf27399… | https://zhanxupeng6.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 20:50 |
| lelelkkk.asia | 8c73ced6… | https://lelelkkk.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 20:49 |
| zhanxupeng6.asia | b111894d… | https://zhanxupeng6.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 20:35 |
| tangtang123.asia | 56b0aeb5… | https://tangtang123.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 20:20 |
| feiefieif123.asia | dfdc6672… | https://feiefieif123.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 18:38 |
| feiefieif123.asia | 19aa158b… | https://feiefieif123.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 18:33 |
| songsong123.xyz | 2eaa6c53… | https://songsong123.xyz/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 17:32 |
| feiefiefi123.xyz | 2a3829e8… | https://feiefiefi123.xyz/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 16:47 |
| mo1e1.top | 8956fca4… | https://mo1e1.top/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 16:19 |
| mo1e1.top | a1bc204f… | https://mo1e1.top/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 15:56 |
| shengmeituan.xyz | 3f20142f… | https://shengmeituan.xyz/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 06:11 |
| timsr.asia | 0e89ddaa… | https://timsr.asia/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 06:00 |
| qiqimeituan.xyz | be85ef10… | https://qiqimeituan.xyz/mobile/static/js/chunk-vendors.30f89da2.js | byte | 2026-05-24 05:58 |