GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Internal Revenue Service

Intent: Credential collection

  • Domain is not operated by Internal Revenue Service
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Mail servers do not match Internal Revenue Service's known infrastructure

Internal Revenue Service login page with username and password fields

Scanned 57 days ago · Aug 4, 2026, 00:58 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: irs-rp.com — Grizzly