Mirror address or clone? Reading the records of a betting site that moved

Offshore betting sites move to fresh addresses from time to time, often the same name with a number tacked on. Fraudsters know the pattern, so they build copies on lookalike addresses and push them through ads and chat groups. The design tells you nothing, because a clone copies the design first. What separates the two is the paper behind the page: the terms, the contact addresses, the licence line and the payee name at the cashier. Compare those, and a mirror usually matches while a clone slips somewhere.

Why mirror addresses exist at all

Offshore operators move the same site to a new address when the old one stops loading for users. When we examined 4rabet in October 2026, it loaded from an address carrying a number rather than from its plain name.

That a site needs mirrors is a record in itself: 4rabet's licence claim is offshore, with nothing issued in India. A mirror is not a safer edition of the site, only a reachable one.

What a clone usually gets wrong

A clone exists to collect one thing fast: your password, your OTP or your first deposit. It rarely bothers with the dull pages, and that is where it gives itself away:

• Terms and Conditions that are missing, one screen long, or lifted from another brand with a different name left inside.
• A contact e-mail on a free mail service, or on a domain with no relation to the brand.
• A cashier showing only a QR code or a personal UPI ID, with an individual's name as payee.
• A support button that opens WhatsApp or Telegram instead of a chat inside the site.
• Pressure to deposit before you can look around, or a bonus far bigger than the one on the operator's own bonus page.

No single item proves fraud. Two or three together are reason enough to close the tab.

Five records to compare between the old and new address

If you used a site before and it now opens somewhere new, set the new address against what you saved from the old one. Screenshots from your first visit are the reference copy, which is a good reason to take them on day one.

1. Footer licence line: same regulator, same wording, same number if one was printed.
2. Terms and Conditions: same section numbering and the same clauses, for instance the bonus-abuse clause and the withdrawal rules.
3. Contact e-mails given in the terms and in the responsible-gaming policy.
4. Cashier: the same deposit methods and the same withdrawal routes.
5. Your account: the same balance and bet history once signed in. A clone cannot show your real history.

The fifth check is the strongest, but it means typing your password into the new address. Run the first four before it, and stop at the first mismatch.

One operator's records, as we filed them

The 4rabet file shows why the comparison needs care even on a genuine site, because its own paperwork is not fully consistent. The T&C give one support e-mail address, while the Responsible Gaming Policy sends self-exclusion requests to a different address on a different domain. The T&C also still carried a "#Casino Name" placeholder, and the footer link labelled Terms opened an unrelated page.

The licence line named the Curaçao Gaming Commission without a number, so there was no number to compare between addresses either. The cashier made a steadier reference point: UPI, PhonePe, Paytm, Google Pay and icash.one plus crypto for deposits, and only IMPS or crypto for withdrawals. A copy offering card payouts or withdrawals to UPI would not match that record.

The app icons there led to an external page, not to the App Store or Google Play; we tested the mobile site in the browser. A link that claims to be the app and asks for anything more is one more record that does not match.

Where a new address should come from

The safest source for a new address is one you already trust: a message the operator sends to the e-mail on your account, or a notice on the site itself before the move. The riskiest sources are the ones that come looking for you: a paid search ad, a link from a Telegram "agent", a comment under a video, a forwarded "working link". Each of those is also how clones spread.

Keep the address that works as a bookmark and open the site only from there. If a link arrives that differs from your bookmark, treat it as a brand-new site and start the record check from the top.

When the records do not match

If the terms, e-mails or cashier differ from your saved copy, do not sign in and do not pay. Close the page. If you already typed a password, change it on the address you trust and anywhere else you reused it. If money went to an unfamiliar payee, ring 1930 that same day or file on cybercrime.gov.in, with the transaction reference and screenshots.

A matching set of records tells you the site belongs to the same operator, and nothing more. It does not change the licence position or the odds of losing. We are not lawyers, so check for yourself which rules apply to you. These case notes are written for readers 18 and over.