DOM

Genome Signature

DOM #57

signature profile

Multiple scam domains share identical HTML DOM structure, indicating they were generated from a common template or cloned codebase used to rapidly deploy phishing or fraud sites. This forensic signal reveals coordinated infrastructure where the same page layout and element hierarchy are being reused across different domain names to scale malicious operations.

Fingerprint4735bd6df3e0a6a4c1f1d687b4d0c5bdc65dabf0461c1b0c41c9496a83274d0f
Detections
5
Hash type
DOM structure
Status
Active
Last scanned
May 2026
detection timeline
5
2026-03

Detected domains

5