DOM #53

Multiple scam domains share an identical DOM structure hash, indicating they were built from a cloned template or generated by the same automated phishing kit. This code-level duplication across 16 distinct domains is a strong signal of coordinated fraudulent infrastructure operated by the same threat actor.