GrizzlyGrizzly
Recent phishing
Phishing

Impersonating IRS

Intent: Credential collection

  • Domain is not operated by IRS
  • TLS certificate has no organization information

IRS-branded login page with username and password fields

Scanned 9 days ago · Sep 20, 2026, 18:42 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL