GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Microsoft

Intent: Persuasion

  • Domain is not operated by Microsoft
  • Domain name closely resembles Microsoft's real domain
  • Page text contains hidden characters used to evade detection
  • TLS certificate has no organization information
  • Domain not registered through Microsoft's usual registrar

OneDrive-branded protected file access page prompting Microsoft verification code retrieval

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 27 days ago · Oct 14, 2026, 21:32 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL