https://betboo.v24s.net/
104.21.20.183 · Cloudflare, Inc.
Toronto, Canada
1865 days
200 · 22.6s
Valid· WE1, Google Trust Services, US
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
betboo.v24s.net ( Betboo Turkish-language page )
Vendors
30/31
Status
partial
Registered-domain escalation
Submit v24s.net as the primary IOC, enriched with evidence from hostile subdomains like betboo.v24s.net.
No KB/IOK detections were recorded for this scan.
gambling · 6/3/2026
The page appears to be a Turkish-language review/news style site hosted on betboo.v24s.net. URL path and page title do not clearly indicate a credential-phishing flow. Static HTML contains zero login forms, and the page is served via Cloudflare-proxied infrastructure. Visual cues in the screenshot suggest generic content, with no explicit impersonation of a known brand detected from the provided data. Based on the evidence, there is no conclusive phishing or credential harvesting visible in the scan data itself.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 17
Hosts: 6
Domains: 6
The scan indicates a hosted page with potential branding confusion: Betboo appears on a domain that is not the official Betboo site, and assets are pulled from unrelated domains (podbex.com, AMP CDN). While there is no direct credential harvesting form detected in the static HTML, the SPA pattern means credentials could be captured via dynamic JS if impersonation of a brand occurs. The presence of generic content and images from third-party casinos, plus the off-brand subdomain, suggests potential brand impersonation risk rather than confirmed first-party abuse. Recommend monitoring and further manual review of dynamic payloads and form rendering to rule out credential collection.
Monitor