GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Microsoft OneDrive

Intent: Device-code sign-in hand-off

  • Domain is not operated by Microsoft OneDrive
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Domain not registered through Microsoft OneDrive's usual registrar
  • SPF record does not reference Microsoft OneDrive's infrastructure

OneDrive-branded file access page showing a Microsoft device login code for a shared PDF

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 6 days ago · Nov 4, 2026, 23:42 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL