FA
Four distinct scam domains share an identical favicon hash, indicating they use the cloned visual branding asset to present false legitimacy. This shared favicon across unrelated domain names suggests a coordinated operation or template reuse by the same threat actor.
Fingerprint
63263a900fd7d7fe- Detections
- 4
- Hash type
- Favicon hash
- Status
- Active
- Last scanned
- May 2026
12026-04
32026-05
Detected domains
4atlasstandardunion.org
OnlineTrust 1Apr 26, 2026nexaglobaltrade.com
OnlineTrust 1May 12, 2026rectabot.com
OnlineTrust 1May 12, 2026trevanaholdings.org
OnlineTrust 1May 14, 2026