FA
A single favicon hash appears identically across 88 distinct domains, indicating these sites share the same favicon image file or are using cloned website templates. This forensic signal suggests a coordinated scam operation where multiple fraudulent domains are deploying identical branding assets, likely from a shared malicious infrastructure or template kit.
Fingerprint
d632917a875981f1- Detections
- 88
- Hash type
- Favicon hash
- Status
- Active
- Last scanned
- May 2026
882026-03
Detected domains
88amolax.com
OnlineTrust 1Mar 21, 2026befonex.com
OnlineTrust 1Mar 21, 2026bigetex.org
OnlineTrust 1Mar 21, 2026bikitoken.com
OnlineTrust 6Mar 21, 2026binexes.com
OnlineTrust 1Mar 21, 2026bitcowox.com
OnlineTrust 2Mar 21, 2026bitnexo.us
OnlineTrust 1Mar 21, 2026blovas.com
OnlineTrust 1Mar 21, 2026bytradex.org
OnlineTrust 1Mar 21, 2026byzodex.com
OnlineTrust 2Mar 21, 2026
Related signals
9BU
Build #2
Nexus Syndicate
Active
- 78
- detections
DOM
DOM #66
Nexus Syndicate
Active
- 39
- detections
DOM
DOM #62
Nexus Syndicate
Active
- 16
- detections
DOM
DOM #28
Nexus Syndicate
Active
- 13
- detections
DOM
DOM #68
Nexus Syndicate
Active
- 12
- detections
BU
Build #57
Nexus Syndicate
Active
- 9
- detections
DOM
DOM #65
Nexus Syndicate
Active
- 9
- detections
DOM
DOM #67
Nexus Syndicate
Active
- 8
- detections
DOM
DOM #57
Nexus Syndicate
Active
- 5
- detections