GrizzlyGrizzly
Recent phishing
Suspicious

Impersonating Yandex

Intent: Credential collection

  • Domain is not operated by Yandex

Yandex Direct login page with OAuth token and password fields

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 29 days ago · Oct 12, 2026, 23:49 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Suspicious: direct.google-setup.com — Grizzly