Known malicious kithighphishing

Deeply-Nested Random Subdomains — chunk-vendors

family: nested-subdomain-9003

7-host operator using DEEPLY-NESTED random subdomains (4+ labels): cccys.zokide.6x1qko1.com, ccyy.xmsck.jluoo8h.com, cuiu.yw9u2e.esh536.com, cyppt.apxpiff.ztlcsqwf.com, cyqqt.x01jjex.ay9fc.com, cyttp.cokpa.lyaj69w.com, hue.oaiweu.6o99od.com. Wildcard-DNS abuse pattern.

Provenance

Added by: analyst
Added: 2026-05-26 16:48
7 hosts. Wildcard-DNS abuse with 4+ subdomain labels.

Sightings (11)

HostScanScriptMatchWhen
cyppt.apxpiff.ztlcsqwf.com6256dcbfhttps://cyppt.apxpiff.ztlcsqwf.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 06:14
cyppt.apxpiff.ztlcsqwf.comfb858cf5https://cyppt.apxpiff.ztlcsqwf.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 06:01
cyttp.cokpa.lyaj69w.com4b0c54f6https://cyttp.cokpa.lyaj69w.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 05:52
cccys.zokide.6x1qko1.com7bee4607https://cccys.zokide.6x1qko1.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 05:07
cccys.zokide.6x1qko1.comc26cd906https://cccys.zokide.6x1qko1.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 04:50
cccys.zokide.6x1qko1.coma2eeadc8https://cccys.zokide.6x1qko1.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 03:34
cuiu.yw9u2e.esh536.com7e6a66f4https://cuiu.yw9u2e.esh536.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 02:45
ccyy.xmsck.jluoo8h.com2c6203c5https://ccyy.xmsck.jluoo8h.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 01:32
cuiu.yw9u2e.esh536.comc53826b0https://cuiu.yw9u2e.esh536.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 01:20
hue.oaiweu.6o99od.com92a180f9https://hue.oaiweu.6o99od.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-24 00:35
cyqqt.x01jjex.ay9fc.com4594f314https://cyqqt.x01jjex.ay9fc.com/cangyuan/static/js/chunk-vendors.9aa84517.jsbyte2026-05-23 22:00