Recent phishing
Phishing
Impersonating IRS
Intent: Sensitive personal information collection
- Domain is not operated by IRS
- TLS certificate has no organization information
- Mail servers do not match IRS's known infrastructure
IRS refund status lookup form for Social Security number, tax year, and filing status
Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 36 days ago · Oct 5, 2026, 23:57 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL