Security Scan Report: www.sunwin1.bz

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is sunwin1.bz.

Submitted URL: https://www.sunwin1.bz

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Cloudflare challenge blocked content capture, but the primary domain carries a named-malware (Quasar RAT) threat-intel match, triggering the content-malware escalation rule. Single-source and unverified, but combined with an unranked gambling-brand domain and a circular redirect, treat as HIGH_RISK.

Risk Factors (4)
Named-malware threat-intelligence hit (Quasar RAT) on the primary domain — single-source and unverified, but a content-malware family indicator, not a generic abuse-reputation tag
Circular redirect in the redirect chain
Cloudflare challenge wall prevents any verification of page content or intent
Unranked domain using a recognizable gambling-brand name on an unofficial TLD
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

The domain 'www.sunwin1.bz' uses the Belizean country-code top-level domain (.bz), featuring subdomain 'www'. The core label 'sunwin1' covers 7 characters containing 2 vowels alongside 4 consonants, notching one digit. Splitting it apart reveals three words: sun, win, 1. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.sunwin1.bz

Page Load Overview

4.33s
Total Load Time
243 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:382 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7C129F3BC22C02553A51BE568BAB3D86314F214EF04A1D4E6A1C15C96E9F8F925A6CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNyqGvmXZzIEb0EpaW87S5lF3VL6340f3NtJ4pAqQM9+rXzjYzueh80mw:PNL2axaBolF3VO34Q94jwrD8yRw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6107:gBkZSQoEgJ4AhRQlZI2IVwgCIqAAMIRAlEAChBGACKBIFiSRAfAKgQBQAAoFYEgEAAAswKAAGQAzEoAVCAA1EUgpSwhYF48Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3c7ffffffffe7
Perceptual Hash:b03832cec6cfc6c6
Difference Hash:101e1c100000000c
Wavelet Hash:3f03073f0f0f2f03
Color Hash:#ac6553

Other Hashes

Crop Resistant:101e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data