GrizzlyGrizzly
Recent phishing
Phishing

Impersonating AR24

Intent: Credential collection

  • Hosted on a public/shared platform

AR24 login page for temporary document access with email and password fields

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 5 days ago · Nov 5, 2026, 23:59 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: armel-ar24-new-letter.pages.dev — Grizzly