CO

Genome Signature

Content #12

signature profile

Identical page content hash detected across 24 domains indicates a cloned codebase or mass-deployed phishing template, suggesting centralized content management or automated site generation by a single threat actor. This forensic signal demonstrates coordinated infrastructure abuse where the same HTML/CSS structure and messaging are repurposed across multiple domains to evade detection and maximize phishing campaign reach.

Fingerprintc15632e953b5d53854719f4ac169ca2b34820833dda5c23516315faa60ed6cd3
Detections
24
Hash type
Content hash
Status
Active
Last scanned
May 2026
detection timeline
2
2026-03
22
2026-05

Detected domains

24