Alertoscan
CO

Genome Signature

Content #23

Active Network: Nexus Syndicate
signature profile

Identical page content (HTML/CSS/JavaScript) detected across three unrelated domains indicates a cloned phishing template or scam kit being reused. The content hash match shows these sites share the same codebase, suggesting a common malicious operator or distributed scam infrastructure.

Fingerprint28051d6fb7a69d206051c521a38126f7d16466e802c4abd8025cce4b4509991f
Detections
3
Hash type
Content hash
Status
Active
Last scanned
May 2026
detection timeline
3
2026-04

Detected domains

3

Related signals

8
CO

Content #9

Nexus Syndicate

Active
61
detections
FA

Favicon #75

Nexus Syndicate

Active
55
detections
DOM

DOM #83

Nexus Syndicate

Active
51
detections
FA

Favicon #12

Nexus Syndicate

Active
34
detections
DOM

DOM #84

Nexus Syndicate

Active
5
detections
CO

Content #22

Nexus Syndicate

Active
3
detections
DOM

DOM #85

Nexus Syndicate

Active
3
detections
FA

Favicon #74

Nexus Syndicate

Active
3
detections