Security Scan Report: www.sunwin28.bz

Redirected to:
https://fineboy.co/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 12 domains to perform 69 HTTP transactions. The main domain is sunwin28.bz and was registered 2 years 6 months ago.

Submitted URL: https://www.sunwin28.bz

Effective URL:
https://fineboy.co/
Redirected

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Unofficial 'Sunwin' gambling portal on fineboy.co impersonating the brand, instructing users to bypass network blocks; the entry domain also carries a single-source quasar RAT malware report. Avoid.

Risk Factors (5)
Content-malware threat-intelligence match on the scanned domain (quasar RAT, single-source unverified)
Brand impersonation of the Sunwin gambling brand on a non-official domain (fineboy.co)
Instructions for circumventing ISP/network blocks (DNS switching, VPN app, backup links)
Unlicensed offshore gambling operation soliciting deposits including USDT
Extensive use of throwaway/pages.dev and unrelated third-party hosts as infrastructure
Domain age information unavailable

Details

Page Title

SUNWIN FINEBOY🎖️LINK ĐĂNG NHẬP TRANG CHỦ SUNWIN CHÍNH HÃNG 2026

Scan Type

public

Domain Name Analysis

Within the Belizean country-code top-level domain (.bz), 'www.sunwin28.bz' is registered with subdomain 'www'. Count 8 characters in 'sunwin28' split between 2 vowels and four consonants; bonus characters include two digits. Word splitting yields three words: sun, win, 28. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.sunwin28.bz

Page Load Overview

11.29s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:21,442 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media98% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
98%
gambling betting
97%
adult content
42%
corporate
35%
cryptocurrency blockchain
29%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13104.21.68.99Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4206.206.126.55Singapore, Singapore
AS16276OVH SAS
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.52.154Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.138.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.44.184Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
6915--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17C84BF3222552537111E868D92657B2DA6E98C07D74ACAD8B7FE01FCDFC1DF4687320A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/vPLb3Q368FNOBXgcTlLza/c5GZc5G7RwAjVoQcdMGqPyfWfo0YPuGAyo4a60oSQ:llLzawAjVoQcgFq20o4aJoSu5F

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:394476:DQgiICiBAIXcbg0AEcORQRLQwCAGIA+qFoVjEBghCGACAEAwAdQQB9WYLcI0QujLBjghcQGiFRkAREByIoOPr80aAqiGo4Ek

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefeffffffffff
Perceptual Hash:d5555555aaaaaaa8
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0f0f0f0f0f
Color Hash:#97bf40

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data