Known malicious kithighphishing
status-account-NNN.pages.dev Scam Kit — index.js
family: status-account-pagesdev-4455
19-host operator running numbered Cloudflare Pages deployments: status-account-{8,10,13,14,16-21,43,53,70,71,75,122,123,124,125}.pages.dev. Hostnames are textbook account-suspended phishing pattern (Microsoft/Google "your account has been suspended" credential harvest).
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 18:41
Single anchor — 19 numbered Cloudflare Pages hosts.
Sightings (26)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| status-account-53.pages.dev | abcb174a… | https://status-account-53.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-25 01:25 |
| status-account-123.pages.dev | f5d818e9… | https://status-account-123.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 21:12 |
| status-account-124.pages.dev | 66db3ec2… | https://status-account-124.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 21:12 |
| status-account-123.pages.dev | 233a27de… | https://status-account-123.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 20:57 |
| status-account-122.pages.dev | 1712ab06… | https://status-account-122.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 20:57 |
| status-account-125.pages.dev | 3dba167a… | https://status-account-125.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 20:40 |
| status-account-75.pages.dev | 29ca0aea… | https://status-account-75.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 20:29 |
| status-account-71.pages.dev | f4e2e9c7… | https://status-account-71.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 20:04 |
| status-account-70.pages.dev | 5f75db65… | https://status-account-70.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:46 |
| status-account-43.pages.dev | 5af99c40… | https://status-account-43.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:29 |
| status-account-10.pages.dev | 3da53270… | https://status-account-10.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:07 |
| status-account-14.pages.dev | 50cd175a… | https://status-account-14.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:03 |
| status-account-17.pages.dev | 2b112613… | https://status-account-17.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:01 |
| status-account-20.pages.dev | 9cebafdd… | https://status-account-20.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 19:00 |
| status-account-21.pages.dev | e5aa3e74… | https://status-account-21.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:58 |
| status-account-19.pages.dev | 1017e861… | https://status-account-19.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:56 |
| status-account-18.pages.dev | a7fb4b00… | https://status-account-18.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:53 |
| status-account-17.pages.dev | f90de253… | https://status-account-17.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:34 |
| status-account-20.pages.dev | 78b60626… | https://status-account-20.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:27 |
| status-account-19.pages.dev | 9dc67a9b… | https://status-account-19.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:21 |
| status-account-21.pages.dev | 53dcf926… | https://status-account-21.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:16 |
| status-account-16.pages.dev | 64c6a06c… | https://status-account-16.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:10 |
| status-account-14.pages.dev | 365e0b00… | https://status-account-14.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:08 |
| status-account-13.pages.dev | 5543a6ba… | https://status-account-13.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 18:07 |
| status-account-16.pages.dev | d14fbdea… | https://status-account-16.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 17:59 |
| status-account-8.pages.dev | 6e991e00… | https://status-account-8.pages.dev/assets/index-_PEp2Jgn.js | byte | 2026-05-24 17:53 |