GrizzlyGrizzly
Recent phishing
Phishing

Impersonating AR24

Intent: Credential collection

  • Domain is not operated by AR24
  • DNS nameservers do not match AR24's known infrastructure
  • Mail servers do not match AR24's known infrastructure
  • SPF record does not reference AR24's infrastructure

AR24 email verification login page for document sending service

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 31 days ago · Oct 11, 2026, 08:12 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL