Security Scan Report: refundbill24.firebaseapp.com

Redirected to:
https://citymall-saratov.ru/sw/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 9 domains to perform 83 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://refundbill24.firebaseapp.com/

Effective URL:
https://citymall-saratov.ru/sw/
Redirected

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Final page is a City Mall Saratov site 404/search page with no credential, payment, malware, or threat-intel evidence. The cross-domain redirect alone is not a malicious signal.

Safety Factors (5)
Self-branding: page title and final domain both refer to City Mall Saratov
No credential or payment collection forms present
Only a site search form is present
No Indicators of Compromise, hunting rule, IDS, or kit-roster detections
Standard regional shopping-center content with visible contact details
Domain age information unavailable

Details

Page Title

Сити Молл - Саратов

Scan Type

public

Domain Name Analysis

You're looking at domain 'refundbill24.firebaseapp.com' on the commercial generic top-level domain (.com) with subdomain 'refundbill24'. The registrable portion 'firebaseapp' spans 11 characters holding five vowels versus six consonants. Word splitting yields 3 words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

> Q srcnaa [YQ cxema +7 (967) 501-24-59 СИТИ МОЛЛ ежедневно с 9:00 до 23:00 Магазины Еда Развлечения Услуги Скидки и акции Мероприятия По данному адресу ничего не найдено. Попробуйте воспользовать...

Page Load Overview

4.88s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:582 chars
Detector Agreement:79%

All Detected Languages

🇷🇺ru(86%)🇧🇬bg(14%)

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%
real estate property
28%
adult content
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
1887.250.251.89Yandex · CLOUDRussia
AS13238YANDEX LLC
1537.140.192.89Russia
AS197695Domain names registrar REG.RU, Ltd
1287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
877.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
877.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
877.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
187.250.251.134Yandex · CLOUDRussia
AS13238YANDEX LLC
8310--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A03343EB4BB8D0F41C9E2A9AEF366DCE2A0B20F9DB545CC4537CEC55C683DC49A48940

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:opC/0ghiWxIfefN3MGF39DHsX9vvr4mqeNPrJfcHLxs1OVzMJLhm:d0ghNxgefN3MU39DMgeNJf+wJLhm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:50844:KPAZIyIIIsibwCFEwgivaqTpAnpNwSKeiKFIAAAALAEQ4lwxwqGsIgeKygjCokQmCypRAWEDRNOgMkYEACSwc4BjkJYDWhhO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbfffffff0000
Perceptual Hash:9e9c4be060bcbe1c
Difference Hash:327220328624d0c9
Wavelet Hash:df3f9f9e70f40000
Color Hash:06000038000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data