DOM
Identical DOM structure hash detected across 10 domains indicates a cloned website template or shared codebase used to create multiple cryptocurrency exchange scam sites. This forensic signal demonstrates coordinated infrastructure abuse where the same HTML/JavaScript skeleton was replicated across phishing domains to maximize campaign reach and evasion of detection systems.
Fingerprint
89f379b9ced5fe1cd156f09fee92221cd8285a35493717fd1425d4aeca70b8cc- Detections
- 10
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
42026-04
62026-05
Detected domains
10benacoin.com
OnlineTrust 1May 5, 2026bitnare.com
OnlineTrust 12Apr 29, 2026coinshx.com
OnlineTrust 1May 5, 2026malodex.com
OnlineTrust 36Apr 6, 2026nocadex.com
OnlineTrust 22Apr 6, 2026ovandex.com
OnlineTrust 1May 5, 2026pyebit.com
OnlineTrust 1May 5, 2026ranedex.com
OnlineTrust 50Apr 1, 2026upex-crypto.com
OnlineTrust 1May 5, 2026vekbit.com
OnlineTrust 1May 5, 2026