Security Scan Report: etrgjnrethdkjnjekfv.firebaseapp.com

Redirected to:
https://support.microsoft.com/en-us/excel/why-can-t-i-open-my-excel-fi...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 5 countries across 12 domains to perform 55 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://etrgjnrethdkjnjekfv.firebaseapp.com/

Effective URL:
https://support.microsoft.com/en-us/excel/why-can-t-i-open-my-excel-fi...
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Users are funneled from a random, unranked firebaseapp.com subdomain with an unverified phishing report through cross-domain redirects to a genuine Microsoft support page. Rendered content is authentic, but the anonymous redirector chain is suspicious staging.

Risk Factors (4)
Anonymous, unranked subdomain on a free instant-publishing platform used solely as a redirector (no legitimate Microsoft content is served from it)
Threat-intel phishing report on the entry domain (single-source, unverified)
Cross-domain redirect funnel from an unrelated random hostname into a trusted brand's site, characteristic of phishing-chain staging
Noindex absent and no content of its own — the page exists only to forward visitors
Domain age information unavailable

Details

Page Title

Why can't I open my Excel file? | Microsoft Support

Scan Type

public

Domain Name Analysis

The domain name 'etrgjnrethdkjnjekfv.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'etrgjnrethdkjnjekfv'. The core label 'firebaseapp' covers 11 characters holding 5 vowels versus 6 consonants. It segments into 3 words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Support Microsoft365 Office. «Products » Devices v Account & billing Resources v Buy Microsoft 365 Why can't | open my Excel file? » Applies To Having trouble opening a file on a m...

Page Load Overview

1.19s
Total Load Time
834 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,048 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(93%)🇩🇰da(3%)🇳🇱nl(2%)🇪🇸ca(2%)

Website Classification

Primary Category

technology software45% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
45%
documentation technical
39%
forum
35%
entertainment media
25%
social_media
25%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24150.171.109.100Azure · CLOUDUnited States
AS8075Microsoft Corporation
613.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
3150.171.109.107Azure · CLOUDUnited States
AS8075Microsoft Corporation
313.107.246.45Azure · CLOUDUnited States
AS8075Microsoft Corporation
3150.171.109.99Azure · CLOUDUnited States
AS8075Microsoft Corporation
320.190.160.14Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
320.190.160.67Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
323.207.210.136Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
320.190.160.2Office365 · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
320.190.159.129Office365 · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
5515--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E44B5A0A9F2953F409F745AF93E5B28017B9307A78097FAF07F422C9B453849E4375A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:bkXvnHMk5YyAW9WPNWmWJoWhW0eWwtL/iyuLybIZveFoceBkUq6L0z4KjPJXzzZf:WoBVhH5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:265591:4IZN0AQlCnwvIkEnADo1ToHQB7qQcQUKhhsElAAUwQkQLGSiCIjKXSiYCSCQlAIG7CIQgI0AGEAcksFJQAT4XoSCSkByepwC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc7c3c3c3c3c3
Perceptual Hash:bcd793822f669a82
Difference Hash:0c0e162636363636
Wavelet Hash:86c7c6c2c3c3c3c3
Color Hash:07000032080

Other Hashes

Crop Resistant:0c0e162636363636

Scan History

Scan history not available

Unable to load historical scan data