GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Microsoft

Intent: Credential collection

  • Domain is not operated by Microsoft
  • TLS certificate has no organization information
  • Domain not registered through Microsoft's usual registrar

Microsoft phone recovery verification page asking for a recovery phone number and SMS code

Scanned 13 days ago · Sep 17, 2026, 14:55 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL