Security Scan: Pending File-SharePoint Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/53b83c27-f1bf-4dac-b368-381706ecaed7 Domain and IP registration (RDAP)/api/v1/rdap/53b83c27-f1bf-4dac-b368-381706ecaed7How often this domain was scanned/api/v1/domain/stats/etrgjnrethdkjnjekfv.firebaseapp.com Scan history for this domain/api/v1/domain/history/etrgjnrethdkjnjekfv.firebaseapp.com?limit=15

This website contacted 15 IPs in 3 countries across 12 domains to perform 55 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://etrgjnrethdkjnjekfv.firebaseapp.com/

Effective URL:

https://support.microsoft.com/en-us/excel/why-can-t-i-open-my-excel-fi...

Redirected

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Throwaway Firebase host serving a 'Pending File-SharePoint Online' Microsoft lure and reported as phishing, funnelling through Microsoft OAuth sign-in endpoints; avoid, do not enter credentials from links received.

Risk Factors (5)

Randomly named free Firebase subdomain of unknown age acting as the entry point for a Microsoft-branded lure

Single-source phishing report against the entry host (PhishDestroy)

SharePoint/Excel file-share lure title on a non-Microsoft domain

OAuth device-authorization activity observed during the redirect chain

Bot-protection/conditional content mismatch between scanner and residential client

Domain age information unavailable

Details

Page Title

Pending File-SharePoint Online

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain 'etrgjnrethdkjnjekfv.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'etrgjnrethdkjnjekfv'. The core label 'firebaseapp' covers 11 characters split between 5 vowels and 6 consonants. Word splitting yields 3 words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.38s

Total Load Time

834 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:100%

Script:Latin

Direction:ltr

Detection Details

Text Length:30 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

49%

documentation technical

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	150.171.109.100Azure · CLOUD	United States	AS8075Microsoft Corporation
3	2.23.246.101Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	23.56.203.142Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
3	150.171.109.99Azure · CLOUD	United States	AS8075Microsoft Corporation
3	20.190.159.71Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	52.168.117.173Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
3	20.190.159.0Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
55	15	-	-