FA
A single favicon hash appears identically across 16 distinct scam domains, indicating these sites use an identical or near-identical favicon image file. This shared visual asset suggests a common operator or coordinated deployment infrastructure, as legitimate competitors typically customize their branding rather than replicating the exact same favicon across multiple fraudulent domains.
Fingerprint
c6a528a6786d0b1b- Detections
- 17
- Hash type
- Favicon hash
- Status
- Active
- Last scanned
- May 2026
32026-03
12026-04
132026-05
Detected domains
17depofex.com
OnlineTrust 1May 12, 2026egamb.cc
OnlineTrust 1May 1, 2026eloncas.pro
OnlineTrust 15May 24, 2026fabodex.com
OnlineTrust 1May 4, 2026fezorex.com
OnlineTrust 1May 11, 2026furydex.com
OnlineTrust 1May 11, 2026kovadex.com
OnlineTrust 1Mar 20, 2026lagowex.com
OnlineTrust 1May 12, 2026marsodex.com
OnlineTrust 1May 11, 2026marsotex.com
OnlineTrust 1May 12, 2026
Related signals
9BU
Build #26
Nexus Syndicate
Active
- 118
- detections
DOM
DOM #47
Nexus Syndicate
Active
- 53
- detections
DOM
DOM #32
Nexus Syndicate
Active
- 40
- detections
BU
Build #70
Nexus Syndicate
Active
- 36
- detections
FA
Favicon #41
Nexus Syndicate
Active
- 23
- detections
BU
Build #66
Nexus Syndicate
Active
- 20
- detections
BU
Build #55
Nexus Syndicate
Active
- 16
- detections
CO
Content #14
Nexus Syndicate
Active
- 14
- detections
BU
Build #60
Nexus Syndicate
Active
- 10
- detections