20.50.64.14

IP address · suspicious phishing activity

URLs

Brands targeted

TLS issuers

Country: Ireland
Hosting: Microsoft Corporation
ASN: AS8075
Investigate: urlscan VirusTotal ipinfo Greynoise

A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-07-19 07:30	2026-06-17 01:06	https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3…	OpenPhish	Details
2026-07-19 07:30	2026-06-08 13:01	https://programme-hup.m365-microsoft.com/i/d721e212eb3094bfd99c9d047a…	OpenPhish urlscan	Details
2026-07-19 07:30	2026-06-06 01:02	http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7c9307051d1d	OpenPhish urlscan	Details
2026-07-19 07:30	2026-03-28 13:01	http://support.m365-microsoft.com/i/ab041e84e499243eca3e98fb328201632	OpenPhish	Details
2026-07-19 07:30	2026-03-28 01:01	https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d36…	OpenPhish urlscan	Details

Info

Country: Ireland
Hosting provider: Microsoft Corporation
ASN: AS8075

Analyze IP

urlscan.io VirusTotal ipinfo

Greynoise

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Flags	Details
https://office365.rricrosoft-…	OpenPhish	Details
https://programme-hup.m365-mi…	OpenPhish urlscan	Details
http://security.m365-microsof…	OpenPhish urlscan	Details
http://support.m365-microsoft…	OpenPhish	Details
https://office365.internal-al…	OpenPhish urlscan	Details