Known malicious kithighphishing

bbq/carros/ty Portuguese Brand Rotation — chunk-vendors

family: bbq-carros-pt-03a5

9-host operator running Portuguese-language brand impersonation: bbq-kf.com, bbqkf.com, bbqkfpg.com, carros-ty.com, carrosty.com, okcarros.com, ty-carros.com, tycarros.com, vip-carros.com (BBQ + cars).

Provenance

Added by: analyst
Added: 2026-05-26 16:48
9 hosts. Brazilian Portuguese-language brand rotation.

Sightings (14)

HostScanScriptMatchWhen
vip-carros.com65577695https://vip-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:42
carrosty.com5ac60684https://carrosty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:38
bbqkfpg.comf33c5f42https://bbqkfpg.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
bbqkfpg.com0e2520aahttps://bbqkfpg.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
ty-carros.com0addcfd1https://ty-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:31
bbqkf.comf7bca6dfhttps://bbqkf.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:30
carros-ty.com44a8f2f0https://carros-ty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:29
vip-carros.com51d84e89https://vip-carros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:26
carrosty.com1ccfe24ehttps://carrosty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:13
okcarros.comb71dbea5https://okcarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:07
tycarros.com72987bfehttps://tycarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:03
bbq-kf.com8b715ab1https://bbq-kf.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 06:01
tycarros.com9486bbaehttps://tycarros.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 05:59
carros-ty.comebf4b6f7https://carros-ty.com/static/js/chunk-vendors.1a9539a5.jsbyte2026-05-24 05:57