GrizzlyGrizzly

Zero-hour phishing detection

Paste a link. Grizzly renders the page and tells you whether it is phishing, who it impersonates, and what it is after.

NewTwo ways to fake a browser: BitB and BitM

Recent phishing

Updated just now · refreshes every 60 s
Public scans with a phishing or suspicious verdict, one row per site per day, newest first.See all recent phishing →

How Grizzly decides

Blocklists tell you what is already known. Grizzly looks at the page itself, so a phish is caught the moment it goes live.

Renders the page
Every scan loads the page in a real browser and reads what a visitor would see, not just the HTML a crawler gets.
Names the target
Grizzly works out who the page claims to be and what it is trying to collect, even when the brand appears nowhere in the URL.
Returns a verdict
Phish, suspicious, or neutral, with the reasons behind it. One engine behind the web, the API, and the extension.

The same verdict, from your code

One call, one JSON verdict: classification, target brand, page intent, reasons, and a link to the permanent result page. 100 scans a day per key, free with an account.

Get an API keyRead the docs
POST https://api.grizzlysec.com/scan
Authorization: Bearer gk_live_...
Content-Type: application/json

{ "url": "https://paypal-verify.example/signin" }
{
  "classification": "phish",
  "target_brand": "PayPal",
  "page_intention": "credential_collection",
  "scan_id": "3f9c2a1e-7b4d-4e8a-9c21-5d0f6a8b1c33"
}