GrizzlyGrizzly
Recent phishing
Phishing

Impersonating IRS

Intent: Credential collection

  • Domain is not operated by IRS
  • TLS certificate has no organization information
  • Mail servers do not match IRS's known infrastructure

login form with username and password fields and login button in Polish

Scanned 78 days ago · Jul 14, 2026, 13:10 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL