Security Scan Report: t.co

Redirected to:
https://pub-50dfb4e7f45a40b28798b14ac0c2bf8c.r2.dev/bono.html
Submitted: Jul 21, 2026, 3:52:21 AMCompleted: Jul 21, 2026, 3:53:29 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is pub-50dfb4e7f45a40b28798b14ac0c2bf8c.r2.dev and was registered NaN years ago.

Submitted URL: https://t.co/WLqLVPDjaE

Effective URL: https://pub-50dfb4e7f45a40b28798b14ac0c2bf8c.r2.dev/bono.htmlRedirected

The Cisco Umbrella rank of the primary domain is #1,176 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 92%

3
Risk Score

The site is flagged by Cloudflare as a phishing page and ML analysis confirms phishing, warranting a high‑risk classification.

Risk Factors
Strong phishing indicator from Cloudflare
Phishing warning displayed to users
ML classifier high confidence in phishing category
Use of a redirect to an obscure subdomain
Safety Factors
Domain age is over 3 years
No malicious JavaScript YARA matches
No network IDS alerts
Established domain (1427 days old) with no strong malicious indicators — risk clamped from 8 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by Cloudflare bot protection. Our scanner was challenged or blocked during access.

Page Title

https://drmustafasaygin.com/wp-admin/miracle.html

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

phishing scam

(91%)

Domain Information

Domain 't.co' uses the Colombian country-code top-level domain (.co) without a subdomain. The registrable portion 't' spans 1 characters holding 0 vowels versus one consonant. Splitting it apart reveals one word: t. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://t.co/WLqLVPDjaE

Page Load Overview

0.87s
Total Load Time
8
HTTP Requests
4
Domains
51 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:373 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
91%
technology software
34%
documentation technical
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3162.159.140.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
131.186.11.154Turkey
AS197720TURKTICARET.NET YAZILIM HIZMETLERI SAN. ve TIC. A.S.
86--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138814267BAFD103E11A3917266BDB70A35A1C007CAA6499036BCC2750F4AF92AD132C1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:libDa/D+DMFBzLeiO/tjA2uUnRC3vaQxvb0:liPa/SoFnOV3uUnM3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4167:QIAAkrmwDCAAAEUAABAiAgA0gIAUUYQAQUcIACAIDcAAIBAQARAACAiFEAgkAQACIBBOAwIAAIAQASQBYRFgAACKAAAARQAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffc7ffffff
Perceptual Hash:b83898c3c3c7ce3c
Difference Hash:203c38040c000000
Wavelet Hash:9c8498c0c0fcfcfc
Color Hash:#d279a0

Other Hashes

Crop Resistant:203c38040c000000

Scan History

Scan history not available

Unable to load historical scan data