DOM
Identical DOM structure hash detected across 30 domains indicates a cloned website template or dynamically generated pages using the same codebase. This shared structural fingerprint suggests coordinated deployment of phishing or scam infrastructure leveraging a single website framework or builder.
Fingerprint
fb563382ee9d74bfd896ac6bdc1049d8bbc7e1f13b68ce03d27e702f6255dcc2- Detections
- 32
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
22026-03
232026-04
72026-05
Detected domains
32altegris.live
OnlineTrust 1May 13, 2026bestmining.top
OnlineTrust 1May 2, 2026coinallegro.org
OnlineTrust 1May 2, 2026coinbase-support.contact
OnlineTrust 1Apr 7, 2026eetxkk.com
OnlineTrust 1Apr 8, 2026frtec.com
OnlineTrust 1Apr 8, 2026gexertmax.com
OfflineTrust 1Apr 25, 2026globalmarketfx.com
OnlineTrust 1Apr 30, 2026globaltrustcoins.ltd
OnlineTrust 1May 1, 2026gradualsolutionsltd.com
OnlineTrust 1May 1, 2026
Related signals
10GTM
Tracking: GTM #5
Nexus Syndicate
Active
- 332
- detections
GA4
Tracking: GA4 #5
Nexus Syndicate
Active
- 332
- detections
UA
Tracking: UA #2
Nexus Syndicate
Active
- 332
- detections
CO
Content #9
Nexus Syndicate
Active
- 61
- detections
FA
Favicon #75
Nexus Syndicate
Active
- 55
- detections
DOM
DOM #83
Nexus Syndicate
Active
- 51
- detections
FA
Favicon #12
Nexus Syndicate
Active
- 34
- detections
CO
Content #3
Nexus Syndicate
Active
- 6
- detections
DOM
DOM #2
Nexus Syndicate
Active
- 6
- detections
FA
Favicon #52
Nexus Syndicate
Active
- 4
- detections