DOM
Three scam domains share identical DOM structure hashing, indicating they use cloned HTML layouts and page organization copied from a common template. This structural replication across ewuhzwbe.com, hhhees.com, and hhheyy.com strongly suggests coordinated scam infrastructure operated by the same threat actor.
Fingerprint
a2cf4f339125d464c2907feb8631e1c8b85978ab46ddb7c216489c2153db943f- Detections
- 3
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
32026-04
Detected domains
3ewuhzwbe.com
OnlineTrust 26Apr 29, 2026hhhees.com
OfflineTrust 1Apr 8, 2026hhheyy.com
OfflineTrust 1Apr 8, 2026