Known malicious kithighphishing

zhesinc/zhesinr Sister Cohort #1 — chunk-vendors

family: zhesin-sister-f125

2-host operator: zhesinc.com, zhesinr.com (variants of "zhesin" brand prefix). Surfaced via cosine pivot.

Sightings (2)

HostScanScriptMatchWhen
zhesinr.com8afd24bchttps://zhesinr.com/static/js/index.b00cf37d.jsbyte2026-05-23 23:58
zhesinc.com1cbc90a7https://zhesinc.com/static/js/index.b00cf37d.jsbyte2026-05-23 22:02