Security Report: refundbill24.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8838a723-8fbc-468c-a585-3d9de48d181b Domain and IP registration (RDAP)/api/v1/rdap/8838a723-8fbc-468c-a585-3d9de48d181bHow often this domain was scanned/api/v1/domain/stats/refundbill24.web.app Scan history for this domain/api/v1/domain/history/refundbill24.web.app?limit=15

This website contacted 97 IPs in 7 countries across 74 domains to perform 228 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://refundbill24.web.app/

Effective URL:

https://citymall-saratov.ru/sw/

Redirected

AI Security Verdict

Low Risk

Confidence: 55%

Risk Score

Landing page is a benign 404/search page of a Saratov mall, but it was reached via 73 redirects through ad exchanges from an unrelated web.app host; no forms, no impersonation, no malware signals.

Risk Factors (3)

Excessive redirect chain (73 hops, 61 across domains) routed through advertising/RTB exchanges from an unrelated entry host

Entry domain (refundbill24.web.app) has no relation to the final destination, a pattern used by redirect-monetisation and traffic-broker chains

No verifiable reputation data for the final domain

Safety Factors (5)

Page self-brands as the mall matching the final domain; no third-party brand impersonation

No credential, login or payment form on the page

No Indicators of Compromise, hunting rule or IDS hits

Visible physical presence indicators: phone number +7 (967) 501-24-59, opening hours and a Yandex Maps link

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Сити Молл - Саратов

Scan Type

public

Favicon Hash

MMH3: 1701578176

MD5: 8abf4bfa80dcef344ae65238a9a6c47a

Domain Name Analysis

The domain 'refundbill24.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'refundbill24'. Count 3 characters in 'web' with one vowel and 2 consonants. Segmentation suggests 1 word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.26s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU

Text Length:582 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

99%

real estate property

28%

adult content

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
36	37.140.192.89	Russia	AS197695Domain names registrar REG.RU, Ltd
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	87.250.251.134Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
2	77.88.55.88Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	5.255.255.77Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
2	37.9.64.225Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	87.250.251.89Yandex · CLOUD	Russia	AS13238YANDEX LLC
228	97	-	-