FA
The identical favicon hash across four financial scam domains indicates a shared design template or cloned branding kit used to create a coordinated network of fraudulent investment and trading platforms. This forensic signal suggests the scams were either created by the same threat actor or utilize the same stolen/copied visual branding infrastructure to establish false legitimacy.
Fingerprint
fb5bdb9dbc4726a0- Detections
- 4
- Hash type
- Favicon hash
- Status
- Active
- Last scanned
- May 2026
12026-03
12026-04
22026-05
Detected domains
4btradeinvestlimited.ltd
OnlineTrust 41May 13, 2026codexpays.online
OnlineTrust 1Mar 19, 2026fx-pros.ltd
OnlineTrust 18May 9, 2026metrofinltd.com
OnlineTrust 1Apr 26, 2026