Recent phishing
Phishing
Impersonating IRS
Intent: Sensitive personal information collection
- Domain is not operated by IRS
- TLS certificate has no organization information
- Mail servers do not match IRS's known infrastructure
IRS refund status form requesting Social Security number, tax year, and filing status
Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 13 days ago · Oct 28, 2026, 22:06 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL