GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Microsoft 365

Intent: Persuasion

  • Domain is not operated by Microsoft 365
  • Domain name closely resembles Microsoft 365's real domain
  • TLS certificate has no organization information
  • Domain not registered through Microsoft 365's usual registrar
  • SPF record does not reference Microsoft 365's infrastructure

Microsoft 365 invoice review page prompting approval, denial, or reporting of invoice INV-78421

Scanned 50 days ago · Aug 11, 2026, 00:58 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: invoiceview.help-rnicrosoft.com — Grizzly