Alertoscan
FA

Genome Signature

Favicon #69

Active Network: Nexus Syndicate
signature profile

A single favicon hash appears identically across 38 domains, primarily variations of the 'dobibo' brand name with different TLDs and numeric suffixes. This identical favicon across multiple domains indicates a coordinated scam operation using cloned or templated website infrastructure to create numerous fraudulent properties.

Fingerprint8c1afee286f4727b
Detections
38
Hash type
Favicon hash
Status
Active
Last scanned
May 2026
detection timeline
1
2026-03
37
2026-04

Detected domains

38

Related signals

6
DOM

DOM #29

Nexus Syndicate

Active
115
detections
DOM

DOM #56

Nexus Syndicate

Active
29
detections
DOM

DOM #49

Nexus Syndicate

Active
17
detections
DOM

DOM #53

Nexus Syndicate

Active
17
detections
DOM

DOM #80

Nexus Syndicate

Active
6
detections
DOM

DOM #82

Nexus Syndicate

Active
3
detections