Security Report: refundbill24.firebaseapp.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ae99a181-7c1d-47af-901c-acd53d911aec Domain and IP registration (RDAP)/api/v1/rdap/ae99a181-7c1d-47af-901c-acd53d911aecHow often this domain was scanned/api/v1/domain/stats/refundbill24.firebaseapp.com Scan history for this domain/api/v1/domain/history/refundbill24.firebaseapp.com?limit=15

This website contacted 9 IPs in 2 countries across 8 domains to perform 68 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://refundbill24.firebaseapp.com/

Effective URL:

https://citymall-saratov.ru/sw/

Redirected

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Redirect chain from an oddly named Firebase app lands on the City Mall Saratov 404 page: no forms collecting data, no impersonation, no threat-intel, YARA or IDS hits. Benign content; only the redirect funnel is odd.

Risk Factors (2)

Unrelated Firebase subdomain 'refundbill24' acts as a redirector into an e-commerce/mall domain — unusual funnel with no evident purpose

Destination domain is unranked with no published creation date

Safety Factors (5)

No credential, password or payment fields anywhere on the page

Self-branding matches the destination domain; no impersonation of a different brand

No Indicators of Compromise, YARA, Safe Browsing or IDS hits

Visible phone number (+7 (967) 501-24-59), daily hours and a physical-mall content structure

Only external resources are Yandex Maps/analytics and the mall's own domain

Domain age information unavailable

Details

Page Title

Сити Молл - Саратов

Scan Type

public

Favicon Hash

MMH3: 1701578176

MD5: 8abf4bfa80dcef344ae65238a9a6c47a

Domain Name Analysis

Domain 'refundbill24.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'refundbill24'. The registrable portion 'firebaseapp' spans 11 characters with five vowels and 6 consonants. Splitting it apart reveals 3 words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.29s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU

Text Length:582 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

99%

real estate property

28%

adult content

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	37.140.192.89	Russia	AS197695Domain names registrar REG.RU, Ltd
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
7	87.250.251.134Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	77.88.55.88Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
7	37.9.64.225Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	87.250.251.89Yandex · CLOUD	Russia	AS13238YANDEX LLC
68	9	-	-