GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Microsoft OneDrive

Intent: Credential collection

  • Domain is not operated by Microsoft OneDrive
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Domain not registered through Microsoft OneDrive's usual registrar

OneDrive-branded file link page showing a ZIP password and copy-link button

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 12 days ago · Oct 29, 2026, 23:41 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: rdrftyo.sbs — Grizzly