Indicators of a Synthetic Persona
From an OSINT (open-source intelligence) perspective, several red flags stand out:
Image reuse: The same facial image is reused across unrelated platforms and industries
Cross-industry identity collision: Political analysis, lifestyle influencing, gambling promotion, and corporate leadership are presented as if they belong to one person
Fragmented digital trails: Each profile exists in isolation, with no corroborating real-world footprint
Absence of verification: No independent evidence confirms the existence of a real person matching the claimed professional authority
Such patterns are inconsistent with how real individuals build digital identities, especially those claiming public or professional influence.
Is Emily Thompson a Real Person?
At present, there is no publicly verifiable evidence that “Emily Thompson,” as presented across these profiles, corresponds to a real, identifiable individual. This does not mean that a person does not exist behind one or more of the accounts; however, based strictly on publicly available information, the identity appears unverified and unsupported by independent confirmation.
Analysts note that this structure closely resembles synthetic persona deployment, a practice in which stock or scraped images are reused to create multiple online characters for narrative amplification, influence operations, marketing manipulation, or short-lived digital projects.
A Necessary Distinction
It is important to emphasize that this assessment:
Relies only on publicly available sources
Makes no allegation of criminal activity
Does not claim to identify a real individual
Documents observable digital inconsistencies and patterns
The conclusion is therefore descriptive, not accusatory.
Conclusion
The “Emily Thompson” identity, as it currently exists online, functions less like a coherent human profile and more like a modular digital construct—one image reused across multiple, incompatible roles without a verifiable real-world anchor. Until independent confirmation emerges, the persona should be treated as unverified.
In an era of increasing synthetic identities and online manipulation, such cases highlight the importance of critical evaluation, transparency, and verification before accepting digital personas at face value.
Investigating the Operational Link Between stratixsolutions.us and stratixwealth.com
How shared infrastructure, DNS behavior, and hosting patterns reveal a coordinated digital footprint
In an era where digital presence is often used to establish credibility—particularly in consulting and wealth-related services—the underlying technical infrastructure of websites can reveal relationships that are not immediately visible on the surface. A forensic analysis of stratixsolutions.us and stratixwealth.com shows multiple overlapping operational characteristics that strongly indicate affiliation or coordinated control.
This article summarizes the key technical findings that connect the two domains.
1. Shared Hosting Ecosystem (Hostinger)
Both domains resolve, directly or indirectly, within the Hostinger hosting ecosystem.
stratixwealth.com resolves to the IP address 141.136.33.240, which belongs to Hostinger International Limited(ASN AS47583).
stratixsolutions.us uses Hostinger mail servers (mx1.hostinger.com, mx2.hostinger.com) and Hostinger-specific CDN naming (hstgr), alongside IP rotation patterns consistent with Hostinger shared hosting.
Both domains use IPv6 addresses within the 2a02:4780:: allocation family, a range associated with Hostinger infrastructure.
Why this matters:
Independent companies can coincidentally use the same provider, but when combined with additional shared indicators (DNS strategy, mail behavior, and operational patterns), this becomes a strong affiliation signal.
2. DNS Workflow Parallels
Both domains exhibit the same DNS parking workflow:
Nameservers ns1.dns-parking.com and ns2.dns-parking.com appear in observed DNS data for both domains.
While stratixwealth.com is registered via GoDaddy and currently uses domaincontrol.com nameservers in WHOIS, historical and live DNS observations show dns-parking infrastructure in use.
Why this matters:
DNS parking is commonly used during development, migration, or controlled redirection. Seeing the same DNS parking pattern across multiple domains is a recognized indicator of coordinated administration.
3. WHOIS Transparency vs Privacy Shielding
The two domains differ in how ownership is presented—but this difference itself is telling.
stratixsolutions.us
WHOIS data identifies a named individual and company:
Registrant: Sandra Negrete
Organization: Strategyx LLC
Control email: info@pmconsultingsolutions.com
This establishes direct, attributable control.
stratixwealth.com
WHOIS uses Domains By Proxy (GoDaddy), fully masking the registrant.
Domain status flags (clientTransferProhibited, clientUpdateProhibited, etc.) are set, limiting visibility and changes.
Screenshot of the page from 2023 of stratixwealth.com
Why this matters:
It is common in multi-asset operations for one domain to be openly registered while another—often the more sensitive or higher-risk brand—is privacy-shielded. This asymmetry increases, rather than reduces, the likelihood of common control.
4. Mail Infrastructure: Selective Hardening
Email configuration further differentiates the domains while reinforcing the affiliation hypothesis.
stratixsolutions.us
Uses Hostinger mail servers
DMARC policy set to p=none
No MTA-STS enforcement
→ Higher susceptibility to email spoofing
stratixwealth.com
Uses ProtonMail
DMARC policy set to p=quarantine
Privacy-focused mail posture
Why this matters:
This pattern, basic mail configuration on one domain and hardened, privacy-focused email on another, is consistent with selective risk management by a single operator or closely coordinated entities.
5. Shared Hosting Neighborhood Risk
Reverse-IP analysis of 141.136.33.240 (used by stratixwealth.com) shows it is co-hosted with dozens of unrelated domains, including:
Financial-themed sites
Crypto and trading portals
Temporary email services
Generic consulting and e-commerce brands
Why this matters:
Shared hosting environments with high domain churn are incompatible with claims of strong operational independence or institutional-grade infrastructure, particularly for wealth or finance-branded entities.
6. Certificate and Platform Change Timeline
Certificate Transparency (CRT) logs show:
Multiple certificate issuers over time (Let’s Encrypt, Google Trust Services, GoDaddy G2)
Frequent renewals and changes between 2023–2026
Why this matters:
This indicates active management and platform adjustments, not dormant or abandoned domains, supporting the conclusion of ongoing coordinated operation.
Conclusion: A High-Confidence Operational Link
While stratixsolutions.us and stratixwealth.com do not publicly declare a relationship, forensic evidence shows:
Shared hosting ecosystem (Hostinger / AS47583)
Overlapping DNS parking workflows
Coordinated infrastructure behavior
Asymmetric transparency (open WHOIS vs privacy proxy)
Selective security hardening
Shared hosting risk profile
Taken together, these findings cannot be explained by coincidence alone.
From a technical, investigative, and due diligence perspective, the two domains should be treated as affiliated or operationally coordinated unless proven otherwise by independent infrastructure, ownership disclosure, and security segregation.
Editorial Note
All findings in this article are derived from publicly available technical data (DNS, WHOIS, Certificate Transparency logs, and mail security records). No inference is made beyond what the evidence supports.
Same Face, Hundreds of Profiles: How Two “Stratix” Sites Share a Synthetic Executive Persona
A growing body of open-source intelligence (OSINT) evidence indicates that the websites StratixSolutions.us and beratung.vamtam.com rely on the same fabricated executive persona— a figure presented as “Franklin Grant whose profile image has now been traced to more than 700 unrelated websites and profiles worldwide, according to cyber-forensic analysis conducted by CyberDeleteme.
The “Franklin Grant” Pattern
On StratixSolutions.us, “Franklin Grant” is introduced as a senior executive or founder, complete with a professional portrait and corporate biography. However, reverse-image correlation and persona-tracking tools reveal that the exact same photograph appears across hundreds of unrelated consulting, finance, lifestyle, demo, and template websites — each time under different names, titles, and jurisdictions.
Investigators describe this as a textbook case of synthetic leadership: a non-existent executive identity constructed using stock imagery and generic biographies to create the appearance of corporate legitimacy.
Notably, the same image appears within theBeratung demo ecosystem of the VamTam WordPress theme, hosted at beratung.vamtam.com — a public template showcase intended to demonstrate how a consulting firm websitemightlook. While VamTam is not accused of owning or operating StratixSolutions.us, the overlap strongly suggeststemplate-driven site construction combined with recycled persona assets.
Why this matters:
It is common in multi-asset operations for one domain to be openly registered while another—often the more sensitive or higher-risk brand—is privacy-shielded. This asymmetry increases, rather than reduces, the likelihood of common control.
4. Mail Infrastructure: Selective Hardening
Email configuration further differentiates the domains while reinforcing the affiliation hypothesis.
stratixsolutions.us
Uses Hostinger mail servers
DMARC policy set to p=none
No MTA-STS enforcement
→ Higher susceptibility to email spoofing
stratixwealth.com
Uses ProtonMail
DMARC policy set to p=quarantine
Privacy-focused mail posture
Why this matters:
This pattern, basic mail configuration on one domain and hardened, privacy-focused email on another, is consistent with selective risk management by a single operator or closely coordinated entities.
5. Shared Hosting Neighborhood Risk
Reverse-IP analysis of 141.136.33.240 (used by stratixwealth.com) shows it is co-hosted with dozens of unrelated domains, including:
Financial-themed sites
Crypto and trading portals
Temporary email services
Generic consulting and e-commerce brands
Why this matters:
Shared hosting environments with high domain churn are incompatible with claims of strong operational independence or institutional-grade infrastructure, particularly for wealth or finance-branded entities.
6. Certificate and Platform Change Timeline
Certificate Transparency (CRT) logs show:
Multiple certificate issuers over time (Let’s Encrypt, Google Trust Services, GoDaddy G2)
Frequent renewals and changes between 2023–2026
Why this matters:
This indicates active management and platform adjustments, not dormant or abandoned domains, supporting the conclusion of ongoing coordinated operation.
Conclusion: A High-Confidence Operational Link
While stratixsolutions.us and stratixwealth.com do not publicly declare a relationship, forensic evidence shows:
Shared hosting ecosystem (Hostinger / AS47583)
Overlapping DNS parking workflows
Coordinated infrastructure behavior
Asymmetric transparency (open WHOIS vs privacy proxy)
Selective security hardening
Shared hosting risk profile
Taken together, these findings cannot be explained by coincidence alone.
From a technical, investigative, and due diligence perspective, the two domains should be treated as affiliated or operationally coordinated unless proven otherwise by independent infrastructure, ownership disclosure, and security segregation.
Editorial Note
All findings in this article are derived from publicly available technical data (DNS, WHOIS, Certificate Transparency logs, and mail security records). No inference is made beyond what the evidence supports.
Same Face, Hundreds of Profiles: How Two “Stratix” Sites Share a Synthetic Executive Persona
A growing body of open-source intelligence (OSINT) evidence indicates that the websites StratixSolutions.us and beratung.vamtam.com rely on the same fabricated executive persona— a figure presented as “Franklin Grant whose profile image has now been traced to more than 700 unrelated websites and profiles worldwide, according to cyber-forensic analysis conducted by CyberDeleteme.
The “Franklin Grant” Pattern
On StratixSolutions.us, “Franklin Grant” is introduced as a senior executive or founder, complete with a professional portrait and corporate biography. However, reverse-image correlation and persona-tracking tools reveal that the exact same photograph appears across hundreds of unrelated consulting, finance, lifestyle, demo, and template websites — each time under different names, titles, and jurisdictions.
Investigators describe this as a textbook case of synthetic leadership: a non-existent executive identity constructed using stock imagery and generic biographies to create the appearance of corporate legitimacy.
Notably, the same image appears within theBeratung demo ecosystem of the VamTam WordPress theme, hosted at beratung.vamtam.com — a public template showcase intended to demonstrate how a consulting firm websitemightlook. While VamTam is not accused of owning or operating StratixSolutions.us, the overlap strongly suggeststemplate-driven site construction combined with recycled persona assets.
Who Owns StratixSolutions.us?
Public WHOIS and registrar records show that:
Domain: stratixsolutions.us
Registrant name: Sandra Viviana Negrete
Listed organization: Strategyx LLC
Registrant/admin contact email: info@pmconsultingsolutions.com
Registrar: Registrar.eu
Nameservers: dns-parking.com
The use of a parked DNS configuration, combined with heavy IP churn and lack of verifiable business operations, is inconsistent with the public image of a functioning consulting or advisory firm, according to analysts.
Further reverse-WHOIS analysis links the same control email (info@pmconsultingsolutions.com) to dozens of other unrelated domains, spanning multiple industries and branding styles — a
pattern commonly associated with site-factory networks, lead-capture shells, or reputation-farming infrastructures, rather than a single coherent business.
Why It Matters
Regulators and fraud-prevention bodies such as the FTC, SEC, and FINRA have repeatedly warned that fake executives and impersonated firms are a common feature of online investment and consulting fraud. Synthetic personas are used to build trust quickly, reduce scrutiny, and obscure accountability.
While this investigation does not allege criminal conduct, experts emphasize that the absence of verifiable leadership, transparent ownership, and operational continuity should prompt heightened caution from clients, partners, and platforms.
Bottom Line
Publicly available evidence shows that:
“Franklin Grant” is a fabricated persona, not a verifiable executive.
StratixSolutions.us relies on this persona while operating under opaque ownership and infrastructure.
The same image appears in template demo environments and hundreds of unrelated sites, confirming stock-image reuse.
For investigators, journalists, and regulators, the case illustrates how modern synthetic identities can easily scale across the web and why visual credibility alone is no longer evidence of authenticity.
Sources & Methodology
All findings are based exclusively on lawful open-source intelligence, domain registration records, reverse-image correlation, and the uploaded CyberDeleteme forensic report.
LEGAL DISCLAIMER & LIMITATION OF LIABILITY
1. Nature of the Report
This report is provided for informational, analytical, and due-diligence purposes only. It does not constitute legal advice, financial advice, investment advice, or regulatory determination.
All findings are descriptive, not accusatory.
2. Source of Information
All data, images, technical records, and observations referenced in this report were obtained from:
Publicly available internet sources
Open DNS, WHOIS, and Certificate Transparency records
Publicly accessible social-media content
Lawful OSINT tools and methodologies
No private, confidential, hacked, leaked, or non-public data sources were accessed or used.
3. No Allegation of Criminal Conduct
Nothing in this report should be interpreted as:
An allegation of criminal activity
An assertion of fraud, deception, or illegality
An identification of any real individual behind the examined accounts
The report does not claim to establish intent, motive, or wrongdoing. It documents technical indicators, inconsistencies, and risk signals commonly assessed in digital verification and cyber-intelligence contexts.
4. Identity & Persona Disclaimer
References to online personas, names, images, or profiles:
Do not assert that a real person exists or does not exist
Do not identify or accuse any natural person
Reflect only the online representations observed
Where terms such as “synthetic persona,” “misattributed identity,” or “unverified profile” are used, they describe observable digital patterns, not personal attributes or intent.
5. Accuracy & Temporal Limitations
Digital data is inherently dynamic.
While Deleteme.com and CyberDeleteme take reasonable steps to ensure accuracy at the time of analysis:
Infrastructure, ownership, or content may change after publication
Findings reflect the state of publicly available information at the time of investigation
No guarantee is made that the findings will remain current indefinitely.
6. Use, Reliance & Third-Party Decisions
Any reliance on this report by third parties is at their own discretion and risk.
Deleteme.com and CyberDeleteme disclaim liability for:
Decisions made by readers or third parties
Actions taken based on interpretations of this report
Losses, damages, or consequences arising from its use
7. Neutrality & Independence
This investigation was conducted independently and without instruction, influence, or compensation from any party referenced in the report.
No conflict of interest is declared.
CONTACT & FURTHER INFORMATION
This report represents a summary of findings.
For:
Full technical annexes
Expanded source listings
Visual forensic diagrams
Underlying OSINT correlation data
Professional verification or follow-up investigations
You may contact:
Deleteme.com / CyberDeleteme Intelligence Unit
📧 Contact: support@deleteme.com
🌐 Website: https://www.deleteme.com
All additional disclosures are provided in accordance with applicable data-protection, privacy, and ethical standards.








