Security Scan Report: benlkctra.firebaseapp.com

Redirected to:
https://killbots.hys.cz/mrida/
Submitted: Sep 27, 2026, 5:52:02 PMCompleted: Sep 27, 2026, 5:52:36 PMpubliccompleted

This website contacted 4 IPs in 2 countries across 4 domains to perform 6 HTTP transactions. The main domain is killbots.hys.cz and was registered 18 years ago.

Submitted URL: https://benlkctra.firebaseapp.com/

Effective URL:

https://killbots.hys.cz/mrida/
Redirected

AI Security Verdict

Low Risk

Confidence: 60%

2
Risk Score

Empty placeholder page (title 'waiting') reached via a Firebase-to-killbots.hys.cz redirect. No forms, no impersonation, no threat-intel, YARA, or IDS hits. Unranked/unknown-age domain is a weak prior only — low risk.

Risk Factors (2)
Final domain (killbots.hys.cz) is unranked in Cisco Umbrella and its creation date is not published — a weak prior only
Cross-domain redirect from a free Firebase hosting subdomain to an unrelated registrable domain, a pattern sometimes used by throwaway/abandoned pages
Safety Factors (6)
No credential, login, or payment forms present anywhere on the page
No brand impersonation — no third-party brand is displayed or claimed
No Indicators of Compromise matches against the page or its loaded resources
No obfuscated or malicious JavaScript, no credential exfiltration, no DevTools-evasion behavior accompanying the content
External resources limited to standard Google Fonts endpoints and the final domain itself
Scanner-versus-client mismatch is consistent with ordinary bot protection, not with an evasion kit, given the empty legitimate-looking content
Domain age information unavailable

Details

Page Title

waiting

Scan Type

public

Domain Name Analysis

The domain 'benlkctra.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'benlkctra'. The second-level label 'firebaseapp' is 11 characters long split between 5 vowels and 6 consonants. Tokenizing the label suggests three words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://benlkctra.firebaseapp.com/

Page Load Overview

0.42s
Total Load Time
22 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1185.102.21.3Czech Republic
AS8648dogado GmbH
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
64--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16DE061C368E2544D1560C3210DD2F1485FC545D752859900FDCDD29A0F5576BCAF395C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqIY7Y03RfAbpli7vkO1EdxXmaXtVU0I7OFWmmHYLedNdKKqz:hRJOy7P4xZtVUiQxHFFKj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a1aa876ff1febcecdafa820daa9a31ec

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:007fffffffffff00
Perceptual Hash:a900290069fe7dff
Difference Hash:92c0120000120012
Wavelet Hash:003fccccf0f0ff00
Color Hash:#bfd279

Other Hashes

Crop Resistant:92c0120000120012

Scan History

Scan history not available

Unable to load historical scan data