CO
Identical page content hash detected across 60 domains including cryptocurrency trading, investment, and betting sites, indicating a cloned codebase or template reused across a coordinated scam network. This shared content infrastructure suggests centralized operation and management of multiple fraudulent properties despite different domain names and branding.
Fingerprint
a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e- Detections
- 61
- Hash type
- Content hash
- Status
- Active
- Last scanned
- May 2026
82026-03
452026-04
72026-05
Detected domains
601win.bet
OnlineTrust 18Mar 28, 2026advancedtradlab.com
OnlineTrust 1Apr 26, 2026agrolive.org
OnlineTrust 1Apr 29, 2026al-highexchangehub.com
OfflineTrust 1Apr 26, 2026alphaxtrade.live
OfflineTrust 1Apr 26, 2026ambitiousinvmt.com
OfflineTrust 1Apr 27, 2026bergev.org
OnlineTrust 1Apr 6, 2026bingex.vip
OnlineTrust 1Apr 6, 2026bitcodeprime.site
OfflineTrust 1Mar 10, 2026bitwiseunion.com
OnlineTrust 1Apr 26, 2026
Related signals
9FA
Favicon #75
Nexus Syndicate
Active
- 55
- detections
DOM
DOM #83
Nexus Syndicate
Active
- 51
- detections
FA
Favicon #12
Nexus Syndicate
Active
- 34
- detections
DOM
DOM #14
Nexus Syndicate
Active
- 32
- detections
CO
Content #3
Nexus Syndicate
Active
- 6
- detections
DOM
DOM #2
Nexus Syndicate
Active
- 6
- detections
DOM
DOM #84
Nexus Syndicate
Active
- 5
- detections
DOM
DOM #85
Nexus Syndicate
Active
- 3
- detections
CO
Content #23
Nexus Syndicate
Active
- 3
- detections