Known malicious kithighphishing
Portuguese/Brazilian Gambling Rotation — chunk-vendors
family: pt-brazil-gambling-80be
8-host operator running Portuguese/Brazilian-language gambling brands: 54rr.win, 91-earring-pg.vip, muito-777.win ("777" + Portuguese for "a lot"), okokflash.mom, voy-brow-pg.vip, we-operapg.mom ("opera-pg"), wgbetkk.win, wg-relogio.win ("relogio" = watch).
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 16:48
8 hosts. Brazilian/Portuguese-language gambling.
Sightings (24)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| we-operapg.mom | 97660d36… | https://we-operapg.mom/static/js/chunk-vendors.eefdd3cb.js | byte | 2026-05-24 13:44 |
| we-operapg.mom | 97660d36… | https://we-operapg.mom/static/js/chunk-vendors.eefdd3cb.js | byte | 2026-05-24 13:44 |
| wg-relogio.win | 0b5483a7… | https://wg-relogio.win/static/js/chunk-vendors.b5ae0e55.js | byte | 2026-05-24 13:30 |
| wg-relogio.win | 0b5483a7… | https://wg-relogio.win/static/js/chunk-vendors.b5ae0e55.js | byte | 2026-05-24 13:30 |
| voy-brow-pg.vip | bd6d1454… | https://voy-brow-pg.vip/static/js/chunk-vendors.b3699d86.js | byte | 2026-05-24 13:23 |
| voy-brow-pg.vip | bd6d1454… | https://voy-brow-pg.vip/static/js/chunk-vendors.b3699d86.js | byte | 2026-05-24 13:23 |
| 91-earring-pg.vip | 4ed64759… | https://91-earring-pg.vip/static/js/chunk-vendors.cf7f8bb2.js | byte | 2026-05-24 13:11 |
| 91-earring-pg.vip | 4ed64759… | https://91-earring-pg.vip/static/js/chunk-vendors.cf7f8bb2.js | byte | 2026-05-24 13:11 |
| okokflash.mom | 1fab5582… | https://okokflash.mom/static/js/chunk-vendors.2c151179.js | byte | 2026-05-24 13:07 |
| okokflash.mom | 1fab5582… | https://okokflash.mom/static/js/chunk-vendors.2c151179.js | byte | 2026-05-24 13:07 |
| 54rr.win | f835fc1d… | https://54rr.win/static/js/chunk-vendors.8cfa11f7.js | byte | 2026-05-24 13:05 |
| 54rr.win | f835fc1d… | https://54rr.win/static/js/chunk-vendors.8cfa11f7.js | byte | 2026-05-24 13:05 |
| okokflash.mom | 997cb9fb… | https://okokflash.mom/static/js/chunk-vendors.2c151179.js | byte | 2026-05-24 13:02 |
| okokflash.mom | 997cb9fb… | https://okokflash.mom/static/js/chunk-vendors.2c151179.js | byte | 2026-05-24 13:02 |
| voy-brow-pg.vip | 40aa3d88… | https://voy-brow-pg.vip/static/js/chunk-vendors.b3699d86.js | byte | 2026-05-24 12:53 |
| voy-brow-pg.vip | 40aa3d88… | https://voy-brow-pg.vip/static/js/chunk-vendors.b3699d86.js | byte | 2026-05-24 12:53 |
| wgbetkk.win | 7544e694… | https://wgbetkk.win/static/js/chunk-vendors.c0893094.js | byte | 2026-05-24 12:51 |
| wgbetkk.win | 7544e694… | https://wgbetkk.win/static/js/chunk-vendors.c0893094.js | byte | 2026-05-24 12:51 |
| wgbetkk.win | 6868d1b8… | https://wgbetkk.win/static/js/chunk-vendors.c0893094.js | byte | 2026-05-24 12:50 |
| wgbetkk.win | 6868d1b8… | https://wgbetkk.win/static/js/chunk-vendors.c0893094.js | byte | 2026-05-24 12:50 |
| we-operapg.mom | df64487e… | https://we-operapg.mom/static/js/chunk-vendors.eefdd3cb.js | byte | 2026-05-24 12:49 |
| we-operapg.mom | df64487e… | https://we-operapg.mom/static/js/chunk-vendors.eefdd3cb.js | byte | 2026-05-24 12:49 |
| muito-777.win | 7a2e72ff… | https://muito-777.win/static/js/chunk-vendors.71ffcdc3.js | byte | 2026-05-24 12:13 |
| muito-777.win | 7a2e72ff… | https://muito-777.win/static/js/chunk-vendors.71ffcdc3.js | byte | 2026-05-24 12:13 |