Security Scan Report: refundbill24.web.app

Redirected to:
https://citymall-saratov.ru/sw/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 9 domains to perform 83 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://refundbill24.web.app/

Effective URL:
https://citymall-saratov.ru/sw/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Redirect from a web.app subdomain lands on a Saratov mall site's 404 page. No credential/payment forms, no threat-intel, hunting rule or IDS hits, and the page shows its own brand. Odd redirect, but no malicious content.

Risk Factors (2)
Entry subdomain on a free hosting platform (refundbill24.web.app) with unknown creation date, redirecting to an unrelated domain
Final destination is a not-found page, so the scanned content does not represent the site's real offering
Safety Factors (4)
Business contact details published (phone +7 (967) 501-24-59, daily hours 9:00–23:00, physical mall branding)
No credential or payment collection anywhere on the page
Maps and analytics scripts served from well-known ranked Yandex domains
Final domain matches the displayed mall brand (self-branding, not impersonation)
Domain age information unavailable

Details

Page Title

Сити Молл - Саратов

Scan Type

public

Domain Name Analysis

Domain 'refundbill24.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'refundbill24'. Count 3 characters in 'web' split between one vowel and 2 consonants. Breaking it apart gives one word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

® лтендА ДД cxema СИТИ МОЛЛ +7 (967) 501-24-59 ежедневно с 9:00 до 23:00 Магазины Еда Развлечения Услуги Скидки и акции Мероприятия По данному адресу ничего не найдено. Попробуйте воспользоваться п...

Page Load Overview

6.01s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:582 chars
Detector Agreement:79%

All Detected Languages

🇷🇺ru(86%)🇧🇬bg(14%)

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%
real estate property
28%
adult content
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
1887.250.251.89Yandex · CLOUDRussia
AS13238YANDEX LLC
1537.140.192.89Russia
AS197695Domain names registrar REG.RU, Ltd
1077.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
877.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
187.250.251.134Yandex · CLOUDRussia
AS13238YANDEX LLC
8310--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1333343EB4BB8D0F41C9E2A9AEF366DCE2A0B60F9DB545CC4537CEC55C683DC49A48940

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:opG/0ghiWxIfefN3MGF39DHsX9vvr4mqeNPrJfcHLxs1OVzMJLhm:h0ghNxgefN3MU39DMgeNJf+wJLhm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:50844:PFEgBQKw4NATEiIUlzLACBSBdMoQkA1MuBkS1PYL6CqACiBQtpQIk6onAWGKAAUSmBQgSogQgViCAAMEYMGAtyBE6C5ngDE8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffbfffffff0000
Perceptual Hash:9e9c4be060bcbe1c
Difference Hash:327220328624c4c9
Wavelet Hash:df3fbf9e70f00000
Color Hash:06000038000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data