Phishing detection: freshdesk.vodafone-dachau.de

Vodafone
http://freshdesk.vodafone-dachau.de Access site
Screenshot
Screenshot of freshdesk.vodafone-dachau.de
Investigate
Domain freshdesk.vodafone-dachau.de2 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 92.205.211.26
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://freshdesk.vodafone-dachau.de
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.7 Brand in domain label
  • +3.2 Brand favicon
  • +3.0 OpenPhish
  • +2.0 Young domain
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Long domain
  • +0.6 Suspicious TLD
  • +0.1 Hyphens
  • +0.1 External scripts
  • +0.1 Deep subdomain
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Vodafone-branded page on a 'freshdesk' subdomain of a lookalike German domain (vodafone-dachau.de), listed by OpenPhish. It presents the Vodafone name in the page title and likely harvests customer account credentials.

Brand in domain labelBrand in titleOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-28 · confidence 70%
Domain & Network
Whois
Network
IP 92.205.211.26
Country FranceFrance
Hosting Host Europe GmbH
ASN AS21499
TLS Cert -
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-28 01:03 UTC  ·  Last refreshed 2026-10-30 17:30 UTC