Favicon #116

Three domains (vstsa7.com, vstsa8.com, vstsa9.com) share an identical favicon hash, indicating they use the same visual branding asset across sequentially-numbered domain variants. This shared favicon is a strong signal of coordinated infrastructure deployment, typical of phishing or scam campaigns that rapidly spin up multiple similar domains for redundancy and evasion.