DOM
Five domains share identical DOM structure signatures, indicating they are built from the same website template or cloned codebase. This structural duplication across unrelated domain names is a strong signal of coordinated scam infrastructure operated by the same threat actor.
Fingerprint
9a56572cf8155d05e01693e94aee392ae4287382e1e966b642fdc4cea2acd2d2- Detections
- 5
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
32026-03
12026-04
12026-05
Detected domains
5spin-rush.com
OnlineTrust 1May 4, 2026veag.bet
OnlineTrust 1Apr 15, 2026wildsatz.com
OnlineTrust 1Mar 23, 2026xgood.bet
OnlineTrust 1Mar 21, 2026xmaxe.bet
OnlineTrust 1Mar 23, 2026
Related signals
7BU
Build #26
Nexus Syndicate
Active
- 118
- detections
FA
Favicon #42
Nexus Syndicate
Active
- 81
- detections
BU
Build #7
Nexus Syndicate
Active
- 72
- detections
FA
Favicon #50
Nexus Syndicate
Active
- 55
- detections
BU
Build #66
Nexus Syndicate
Active
- 20
- detections
CO
Content #14
Nexus Syndicate
Active
- 14
- detections
BU
Build #60
Nexus Syndicate
Active
- 10
- detections