Alertoscan
DOM

Genome Signature

DOM #65

Active Network: Nexus Syndicate
signature profile

Nine distinct cryptocurrency exchange scam domains share an identical DOM structure hash, indicating they were built from a cloned HTML/CSS template or codebase. This structural duplication across unrelated domain names strongly suggests coordinated operation by the same threat actor or scam network using a single fraudulent exchange framework.

Fingerprint60ec9d312475de41437bd67d77c68f7c579250559b2e3426a1aad17ddce4beeb
Detections
9
Hash type
DOM structure
Status
Active
Last scanned
May 2026
detection timeline
9
2026-03

Detected domains

9

Related signals

5
FA

Favicon #62

Nexus Syndicate

Active
88
detections
BU

Build #2

Nexus Syndicate

Active
78
detections
DOM

DOM #66

Nexus Syndicate

Active
39
detections
DOM

DOM #62

Nexus Syndicate

Active
16
detections
BU

Build #57

Nexus Syndicate

Active
9
detections