Phishing detection: microsoftpl.biz.pl
Microsoft Screenshot
Investigate
Domain
microsoftpl.biz.pl1 CT host on apex
urlscan
VirusTotal
Whois
IP
64.238.34.20
ipinfo
Greynoise
URL
https://microsoftpl.biz.pl
Phishunt analysis Beta
29
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +2.4 ASN reputation
- +2.2 Country mismatch
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.4 Long domain
- +0.3 Free CA
- +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
A lookalike domain on the biz.pl suffix uses the Microsoft name in its apex label, and its certificate and page screenshot text also reference the brand. Likely harvests Microsoft credentials. Flagged by urlscan, hosted in Germany.
Brand in domain labelBrand in cert SANurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-12 · confidence 80%
Domain & Network
Whois
Registrar
1API GmbH
Network
IP
64.238.34.20
Country
Germany
Germany
Hosting
HIVELOCITY, Inc.
ASN
AS29802
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Microsoft
Submit to blocklists