Phishing detection: programme-hup.m365-microsoft.com
Microsoft Investigate
Domain
programme-hup.m365-microsoft.com1 CT host on apex
IP
20.50.64.14
URL
https://programme-hup.m365-microsoft.com/i/d721e212eb3094bf…
Cert
R13
Phishunt analysis Beta
23
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +3.0 OpenPhish
- +2.2 Country mismatch
- +2.0 Site cluster
- +1.5 ASN reputation
- +1.1 No HSTS header
- +0.7 Brand in cert SAN
- +0.6 Brand impersonation in path
- +0.6 Long domain
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Hyphens
- +0.2 Suspicious TLD
- +0.1 Deep subdomain
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Microsoft M365 by placing the brand in a subdomain of a lookalike apex domain. Flagged by both OpenPhish and urlscan as malicious, with a country mismatch placing the server in Ireland. The long hyphenated domain with unique path tokens is consistent with targeted credential phishing.
Brand impersonation in pathOpenPhishurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 88%
Domain & Network
Whois
Registrar
Dynadot Inc
Network
IP
20.50.64.14
Country
Ireland
Hosting
Microsoft Corporation
ASN
AS8075
TLS Cert
R13
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Campaign
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise