DOM
Identical DOM structure hash detected across 19 domains indicates these sites share a cloned HTML template or codebase, suggesting coordinated deployment of a phishing or scam network. The presence of this forensic signal across financial-themed domains (fake options trading, fake exchange, and investment platforms) demonstrates systematic reuse of the same malicious website infrastructure.
Fingerprint
38b7eead7ff4dcb018a4adb7b05352f8debc48c71913708910c24a82c0beaf08- Detections
- 19
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
12026-03
102026-04
82026-05
Detected domains
19alphaoptions.live
OnlineTrust 1May 13, 2026blinancetrades.com
OnlineTrust 1Apr 26, 2026crystalglobalholding.com
OnlineTrust 1Mar 13, 2026evotrd.live
OnlineTrust 1May 12, 2026experts247exchange.com
OnlineTrust 1Apr 26, 2026exponentialstock.com
OnlineTrust 1Apr 26, 2026guarrantystockcapitalpro.com
OnlineTrust 1Apr 27, 2026jifumarkettrades.info
OnlineTrust 1Apr 29, 2026klyvoratrade.com
OnlineTrust 1Apr 27, 2026marketflows.icu
OnlineTrust 1Apr 22, 2026
Related signals
6GTM
Tracking: GTM #5
Nexus Syndicate
Active
- 332
- detections
GA4
Tracking: GA4 #5
Nexus Syndicate
Active
- 332
- detections
UA
Tracking: UA #2
Nexus Syndicate
Active
- 332
- detections
GA4
Tracking: GA4 #9
Nexus Syndicate
Active
- 294
- detections
FA
Favicon #91
Nexus Syndicate
Active
- 4
- detections
FA
Favicon #88
Nexus Syndicate
Active
- 4
- detections