DOM
Identical DOM structure hash detected across 77 domains indicates a cloned HTML/JavaScript codebase, suggesting these sites were generated from a common template or framework. This widespread structural duplication is characteristic of a coordinated phishing or scam operation using automated site generation tools to rapidly deploy functionally identical fraudulent platforms.
Fingerprint
d12135fc857517a9b1eedbc6bc7dcf4df941907fee601c1a542d66e4a2f3f65a- Detections
- 77
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
162026-03
422026-04
182026-05
Detected domains
76alcart.pro
OfflineTrust 1Apr 26, 2026alphadogeusdt.vip
OfflineTrust 1May 1, 2026aslfx.com
OfflineTrust 1Apr 30, 2026aurora-trade.io
OfflineTrust 1May 1, 2026barakion.com
OfflineTrust 1Apr 28, 2026baxful.com
OfflineTrust 1Apr 6, 2026bgol.pro
OfflineTrust 1Apr 6, 2026bitbalmy.com
OfflineTrust 1May 1, 2026bitphinx.com
OfflineTrust 1Apr 29, 2026bitpinnaclegroup.com
OfflineTrust 1Apr 30, 2026
Related signals
10BU
Build #26
Nexus Syndicate
Active
- 118
- detections
FA
Favicon #50
Nexus Syndicate
Active
- 55
- detections
DOM
DOM #32
Nexus Syndicate
Active
- 40
- detections
DOM
DOM #3
Nexus Syndicate
Active
- 17
- detections
CO
Content #4
Nexus Syndicate
Active
- 14
- detections
CO
Content #14
Nexus Syndicate
Active
- 14
- detections
FA
Favicon #51
Nexus Syndicate
Active
- 10
- detections
DOM
DOM #19
Nexus Syndicate
Defunct
- 7
- detections
BU
Build #47
Nexus Syndicate
Defunct
- 3
- detections
BU
Build #46
Nexus Syndicate
Defunct
- 3
- detections