GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Salesforce

Intent: Credential collection

  • Domain is not operated by Salesforce
  • DNS nameservers do not match Salesforce's known infrastructure
  • TLS certificate has no organization information
  • Domain not registered through Salesforce's usual registrar

Salesforce login page with username field and Log In button

Scanned 40 days ago · Aug 20, 2026, 20:39 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: fastspring-salesforce.api.nemetschek.com — Grizzly