Known malicious kitcriticalphishing
COMEX/Ortex Trading Impersonation — chunk-vendors
family: comex-ortex-impersonation-61ea
6-host operator: comex-ex.com, comex-glob.com, comex-next.com, comex-next-desk.com, ortexlabs.com, ortexportal.com. COMEX + Ortex (real institutional trading-research firm) impersonation. Sister of the d7a2 cluster.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 18:58
6 hosts. COMEX + Ortex brand impersonation.
Sightings (6)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| ortexportal.com | 2a95490a… | https://ortexportal.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 13:41 |
| ortexlabs.com | 6c9fe908… | https://ortexlabs.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 13:32 |
| comex-ex.com | 188f675d… | https://comex-ex.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 05:32 |
| comex-next.com | 59129e08… | https://comex-next.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 05:19 |
| comex-next-desk.com | c826d2a7… | https://comex-next-desk.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 03:41 |
| comex-glob.com | b2620573… | https://comex-glob.com/static/js/chunk-vendors.d38ae58a.js | byte | 2026-05-24 03:30 |