GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Internal Revenue Service

Intent: Credential collection

  • Hosted on a public/shared platform

IRS-branded portal sign-in page with email and password fields

Scanned 30 days ago · Aug 31, 2026, 10:10 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: irs.sandbox.inits.dev — Grizzly