Security Report: refundbill24.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa50597b-b062-41ae-830d-883dafe3dd67 Domain and IP registration (RDAP)/api/v1/rdap/fa50597b-b062-41ae-830d-883dafe3dd67How often this domain was scanned/api/v1/domain/stats/refundbill24.web.app Scan history for this domain/api/v1/domain/history/refundbill24.web.app?limit=15

This website contacted 11 IPs in 2 countries across 9 domains to perform 83 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://refundbill24.web.app/

Effective URL:

https://citymall-saratov.ru/sw/

Redirected

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Final page is a harmless-looking 404/search page of a Saratov mall with no credential or payment forms and no threat-intel hits; only oddity is an unexplained redirect from a Firebase subdomain.

Risk Factors (3)

Unexplained cross-domain redirect chain from an unrelated Firebase subdomain (refundbill24.web.app) to the mall site, with no visible relationship between the two names.

Entry host is on a shared hosting platform (.web.app) where the actual tenant creation date is unknown.

Final domain is unranked in Cisco Umbrella and the final page served is an error/404 page.

Safety Factors (4)

No credential, login or payment form on the page — only a site search field.

No impersonation of a different organisation: page title matches the final domain and no other brand is claimed.

No Indicators of Compromise, no malware signatures, no IDS alerts and no obfuscated or exfiltrating JavaScript.

Only mainstream third-party services (Yandex Maps, Yandex Metrica) are loaded.

Domain age information unavailable

Details

Page Title

Сити Молл - Саратов

Scan Type

public

Favicon Hash

MMH3: 1701578176

MD5: 8abf4bfa80dcef344ae65238a9a6c47a

Domain Name Analysis

The domain name 'refundbill24.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'refundbill24'. The core label 'web' covers 3 characters holding 1 vowel versus two consonants. Splitting it apart reveals one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.33s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU

Text Length:582 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

99%

real estate property

28%

adult content

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	37.140.192.89	Russia	AS197695Domain names registrar REG.RU, Ltd
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
7	87.250.251.134Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
7	77.88.55.88Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	5.255.255.77Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
7	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	37.9.64.225Yandex · CLOUD	Russia	AS13238YANDEX LLC
7	77.88.44.55Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
83	11	-	-