Security Scan: Pending File-SharePoint Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4ce4c291-3561-4460-9ae7-d9c27a6e0352 Domain and IP registration (RDAP)/api/v1/rdap/4ce4c291-3561-4460-9ae7-d9c27a6e0352How often this domain was scanned/api/v1/domain/stats/etrgjnrethdkjnjekfv.web.app Scan history for this domain/api/v1/domain/history/etrgjnrethdkjnjekfv.web.app?limit=15

This website contacted 14 IPs in 4 countries across 12 domains to perform 56 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://etrgjnrethdkjnjekfv.web.app/

Effective URL:

https://support.microsoft.com/en-us/excel/why-can-t-i-open-my-excel-fi...

Redirected

AI Security Verdict

High Risk

Confidence: 62%

Risk Score

Final destination is genuine Microsoft Support content reached via an unexplained random Firebase subdomain flagged once (unverified) as phishing; no credential or payment harvesting on the suspicious host. Suspicious routing, but no concrete malicious payload observed.

Risk Factors (4)

Opaque random-string subdomain on a free shared hosting platform (Firebase) used as the entry point for the capture

Single-source, unverified threat-intel report labelling the entry host as phishing

Cross-domain redirect funnel from an unrelated throwaway hostname into Microsoft authentication endpoints (OAuth/device-auth activity noted by IDS at MEDIUM severity)

Datacenter-IP scanner and residential client received different content, indicating conditional serving or bot protection

Domain age information unavailable

Details

Page Title

Pending File-SharePoint Online

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain 'etrgjnrethdkjnjekfv.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'etrgjnrethdkjnjekfv'. The core label 'web' covers 3 characters with one vowel and 2 consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.58s

Total Load Time

835 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:100%

Script:Latin

Direction:ltr

Detection Details

Text Length:30 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

49%

documentation technical

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	150.171.109.107Azure · CLOUD	United States	AS8075Microsoft Corporation
4	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
4	23.56.203.142Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
4	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
4	150.171.109.98Azure · CLOUD	United States	AS8075Microsoft Corporation
4	20.190.159.71Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
4	104.46.162.229Azure · CLOUD	Melbourne, Victoria, Australia	AS8075Microsoft Corporation
4	20.190.159.128Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
4	40.126.31.71Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
56	14	-	-