Phishing detection: security.m365-microsoft.com
Microsoft Screenshot
Investigate
Domain
security.m365-microsoft.com1 CT host on apex
urlscan
VirusTotal
Whois
IP
20.50.64.14
ipinfo
Greynoise
URL
http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7…
Phishunt analysis Beta
36
medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchBrand + login tokenHigh entropy
22 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Combosquat domain mimicking Microsoft 365 security infrastructure hosts a page with an active password input form. Registered via Dynadot and confirmed malicious by OpenPhish and urlscan. Uses a tokenised URL path typical of targeted credential phishing campaigns.
Password fieldBrand + login tokenOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 88%
Domain & Network
Whois
Registrar
Dynadot Inc
Network
IP
20.50.64.14
Country
Ireland
Ireland
Hosting
Microsoft Corporation
ASN
AS8075
TLS Cert
R13
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Report this phishing
Brand owner
Microsoft
Submit to blocklists