SafeMode - Analysis: cheyopt.net

Visual Capture

Detection Info

https://cheyopt.net/tapmad.com/WomensCricketWorldCup2025/PK/970x250/

Detected Brand

1xBet

Country

International

Confidence

95%

HTTP Status

200

Report ID

bba9bf43-761…

Analyzed

2026-01-01 05:21

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T160218B2454C7A9B7D18262D89B7FEB483BC85291D67F050566F4A3882FEFD16ED0E200
CONTENT ssdeep	12:nwMwrdHC9t7dwt0uEuba00xOQeZyKMzFTP+4T1vagKnLvXqLvDyL4f1DGWU2NDQj:n/3/7dEEubaVBtvagoDXqTm8UW1gS8

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	911a1e995d457e4d
VISUAL aHash	0c0e666effcf7e04
VISUAL dHash	b898cc8abaabd2dc
VISUAL wHash	0c4f666e7e0f7604
VISUAL colorHash	100000081c0
VISUAL cropResistant	00a1e322385a0c39,65656a80c3e8713d,87deebca8c70071a,cecd5950a0a3e141,0892b2e47972e1e3,a2d42b979696e8a2,b898cc8abaabd2dc

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing campaign impersonating 1xBet.
• Target: Users of 1xBet platform.
• Method: Misleading users with a fake promotion to steal user data or redirect them to malicious sites.
• Exfil: Unknown, likely designed for credential harvesting or malicious redirection.
• Indicators: Domain name mismatch (cheyopt.net vs 1xbet.com), brand impersonation.
• Risk: HIGH - Risk of user data theft or malware infection through redirection.