GrizzlyGrizzly
Recent phishing
Phishing

Impersonating IRS

Intent: Sensitive personal information collection

  • Hosted on a public/shared platform

IRS refund status lookup form for Social Security number, tax year, and filing status

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 32 days ago · Oct 10, 2026, 00:51 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: irs-dvr.pages.dev — Grizzly