BU
A build hash matching across 118 domains indicates these sites share identical or near-identical codebase builds, likely deployed from the same source template or build pipeline. This pattern strongly suggests a coordinated scam operation using mass-deployed copies of the same malicious application, with only surface-level variations like domain names and branding.
Fingerprint
ad7506e6ce5b48e8- Detections
- 118
- Hash type
- Build artefact
- Status
- Active
- Last scanned
- May 2026
1182026-03
Detected domains
1181xjett.com
OfflineTrust 1Mar 8, 2026baxmot.com
OfflineTrust 1Mar 8, 2026belazbet.com
OfflineTrust 1Mar 8, 2026berogex.com
OfflineTrust 38Mar 5, 2026betaras.com
OnlineTrust 1Mar 5, 2026betkai.win
OnlineTrust 1Mar 22, 2026betmiqx.com
OnlineTrust 1Mar 23, 2026betrawin.com
OfflineTrust 1Mar 8, 2026bevexo.cc
OfflineTrust 1Mar 8, 2026bexrun.com
OnlineTrust 1Mar 23, 2026
Related signals
10FA
Favicon #42
Nexus Syndicate
Active
- 81
- detections
DOM
DOM #30
Nexus Syndicate
Active
- 77
- detections
BU
Build #18
Nexus Syndicate
Active
- 73
- detections
BU
Build #7
Nexus Syndicate
Active
- 72
- detections
BU
Build #15
Nexus Syndicate
Active
- 69
- detections
BU
Build #10
Nexus Syndicate
Active
- 69
- detections
BU
Build #17
Nexus Syndicate
Active
- 69
- detections
BU
Build #22
Nexus Syndicate
Active
- 69
- detections
BU
Build #25
Nexus Syndicate
Active
- 68
- detections
BU
Build #6
Nexus Syndicate
Active
- 67
- detections