DOM
Identical DOM structure hash detected across 3 domains indicates cloned website templates or shared codebase infrastructure used to build these scam sites. This forensic signal shows the scammers replicated the same HTML structure and layout framework across multiple domains for consistent fraudulent user experience.
Fingerprint
b0d97dc9bd895b7cbb0789f4f98fe4ec742543b5e4442da7ec19540fd238b05c- Detections
- 3
- Hash type
- DOM structure
- Status
- Active
- Last scanned
- May 2026
32026-04
Detected domains
3hhhe.fyi
OnlineTrust 1Apr 8, 2026hhhexp.com
OnlineTrust 1Apr 8, 2026txexykf.com
OfflineTrust 1Apr 10, 2026
Related signals
8CO
Content #9
Nexus Syndicate
Active
- 61
- detections
FA
Favicon #75
Nexus Syndicate
Active
- 55
- detections
DOM
DOM #83
Nexus Syndicate
Active
- 51
- detections
FA
Favicon #12
Nexus Syndicate
Active
- 34
- detections
DOM
DOM #84
Nexus Syndicate
Active
- 5
- detections
CO
Content #22
Nexus Syndicate
Active
- 3
- detections
FA
Favicon #74
Nexus Syndicate
Active
- 3
- detections
CO
Content #23
Nexus Syndicate
Active
- 3
- detections