Phishing detection: 393bet-facebook.sa.com
Facebook Screenshot
Investigate
Domain
393bet-facebook.sa.com1 CT host on apex
urlscan
VirusTotal
Whois
IP
188.114.97.3
ipinfo
Greynoise
URL
https://393bet-facebook.sa.com
Phishunt analysis Beta
28
low suspicionheuristic risk score · not a probability
Keyword matchurlscan.ioBrand in cert SAN
20 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Facebook while combining a gambling brand name in the domain, with login keywords detected in the page. Hosted on Cloudflare infrastructure and flagged by urlscan as malicious. Likely harvests Facebook credentials while redirecting victims toward a fraudulent betting platform.
urlscan.ioLogin text in screenshotKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 80%
Domain & Network
Whois
Registrar
Sav.com, LLC
Network
IP
188.114.97.3
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists