Sectigo Public Server Authentication CA DV R36

URLs

Brands targeted

Unique IPs

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Screenshot	Flags	Details
2026-10-21 17:30	2026-10-16 13:16	https://vodafone-business-berlin.de		OpenPhish	Details
2026-10-21 17:30	2026-10-16 13:12	https://vodafone-business-berlin.store		OpenPhish	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://vodafone-business-ber… OpenPhish		Details
https://vodafone-business-ber… OpenPhish		Details

Brands most often impersonated with Sectigo Public Server Authentication CA DV R36

Among the active sites currently using a Sectigo Public Server Authentication CA DV R36 certificate, these are the brands attackers are mimicking most:

Vodafone (2 sites)