GrizzlyGrizzly
Recent phishing
Suspicious

Impersonating Telegram

Intent: Sensitive personal information collection

  • Domain is not operated by Telegram

Telegram Web sign-in page for Telegram account access with phone number and cloud password fields

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 22 hours ago · Nov 9, 2026, 22:33 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Suspicious: auth.telegram.org.5f7h28t3v8jd105c5003dkgbwl7.icu — Grizzly