SafeMode - Analysis: cheyopt.net

Visual Capture

Detection Info

http://cheyopt.net/tapmad.com/IndiaTourOfAustralia2025/PK/MRECVideo10sec

Detected Brand

1xBet

Country

International

Confidence

100%

HTTP Status

200

Report ID

62117da5-e32…

Analyzed

2026-01-01 05:23

Final URL (after redirects)

https://cheyopt.net/tapmad.com/IndiaTourOfAustralia2025/PK/MRECVideo10sec/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T18911CC301172F63386C282E95267779F77E0421ECA830D49A2F8A39C0FCAC95FD65410
CONTENT ssdeep	12:nwMwB7dwUGvIEuzz+K6GieelwnsvvMuvvM8Xfvy0V2fHA8:n/47dQIEuv+KDoHvK0V2I8

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b0bd49420f3c4f1f
VISUAL aHash	00cf0f4f67e5c600
VISUAL dHash	949a9a8ecd8d9c6a
VISUAL wHash	00ef0fef67e5c600
VISUAL colorHash	30201008040
VISUAL cropResistant	f2961499b8b42c4e,6a7a6a6ad4d4d4d4,86a6969696aeaeae,949a9a8ecd8d9c6a

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing advertisement for a sports betting bonus.
• Target: Users interested in sports betting, particularly 1xBet customers.
• Method: Displaying a promotional banner with a call to action to 'Take Part', leading to a potentially malicious site.
• Exfil: Unknown; likely redirects to a phishing site or malware.
• Indicators: Brand impersonation (1xBet), domain mismatch, advertising a free bet.
• Risk: HIGH - Potentially leads to credential theft or malware infection if clicked.