GrizzlyGrizzly
Recent phishing
Phishing

Impersonating X

Intent: Credential collection

  • Domain is not operated by X
  • DNS nameservers do not match X's known infrastructure
  • Domain not registered through X's usual registrar

X sign-in page with phone, Google, Apple, or email/username login options

Scanned 6 days ago · Sep 24, 2026, 14:27 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: dev.dev-x-formerly-twitter.orkosi.app — Grizzly