SafeMode - Analysis: cheyopt.net

Visual Capture

Detection Info

http://cheyopt.net/tapmad.com/WomensCricketWorldCup2025/PK/320x100

Detected Brand

1XBET

Country

International

Confidence

100%

HTTP Status

200

Report ID

ef052608-88c…

Analyzed

2026-01-02 02:20

Final URL (after redirects)

https://cheyopt.net/tapmad.com/WomensCricketWorldCup2025/PK/320x100/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T196216B1454C7A9B7D18251D89B7FEB483AC85291D67F050516F4A7881FAFD16ED0E210
CONTENT ssdeep	12:nwMwrdHC9t7dwS5Euba00xOQeZyKMzFTP+4T1vagKnLvXqLvDyL4f1DGWU2NDQ2I:n/3/7dB5EubaVBtvagoDXqTm8UW1gS8

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	911a1e995d457e4d
VISUAL aHash	0c0e666effcf7e04
VISUAL dHash	b898cc8abaabd2dc
VISUAL wHash	0c4f666e7e0f7604
VISUAL colorHash	100000081c0
VISUAL cropResistant	00a1e322385a0c39,65656a80c3e8713d,87deebca8c70071a,cecd5950a0a3e141,0892b2e47972e1e3,a2d42b979696e8a2,b898cc8abaabd2dc

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing scam impersonating 1XBET.
• Target: Users interested in 1XBET's promotions and World Cup Queens 2025.
• Method: The scammer uses a fake website with the 1XBET logo to trick users into providing personal information or clicking on malicious links.
• Exfil: The purpose is likely to steal credentials or redirect users to affiliate links or other scams.
• Indicators: Domain mismatch (cheyopt.net vs. 1xbet.com), use of 1XBET's logo without authorization.
• Risk: HIGH - The website poses a risk of credential theft or redirection to other malicious websites.