Alertoscan
DOM

Genome Signature

DOM #63

Active Network: Nexus Syndicate
signature profile

Identical DOM structure hash detected across 9 domains indicates cloned website templates or a shared codebase used to rapidly deploy multiple scam sites. This forensic signal suggests coordinated infrastructure operation where the same HTML/CSS framework is being repurposed across different domain names to establish legitimacy through design consistency.

Fingerprint799d64f172d3bdc2e0dc70ed3e21fa5d1572ee4f50ede33f360f86c8825d698f
Detections
9
Hash type
DOM structure
Status
Active
Last scanned
May 2026
detection timeline
5
2026-03
3
2026-04
1
2026-05

Detected domains

9

Related signals

6
BU

Build #26

Nexus Syndicate

Active
118
detections
FA

Favicon #42

Nexus Syndicate

Active
81
detections
FA

Favicon #50

Nexus Syndicate

Active
55
detections
BU

Build #70

Nexus Syndicate

Active
36
detections
BU

Build #55

Nexus Syndicate

Active
16
detections
BU

Build #60

Nexus Syndicate

Active
10
detections