Phishing detection: lonato-cc-il-leone-shopping-center.vodafone-on-line.it

Vodafone
https://lonato-cc-il-leone-shopping-center.vodafone-on-line.it Access site
Screenshot
Screenshot of lonato-cc-il-leone-shopping-center.vodafone-on-line.it
Investigate
Domain lonato-cc-il-leone-shopping-center.vodafone-on-line.it1 CT host on apex
URL https://lonato-cc-il-leone-shopping-center.vodafone-on-line…
Phishunt analysis Beta
39 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.7 Brand in domain label
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.0 ASN reputation
  • +1.6 Young domain
  • +1.1 Cert reuse
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Suspicious TLD
  • +0.4 Hyphens
  • +0.3 Free CA
  • +0.1 External scripts
  • +0.1 Deep subdomain
24 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Vodafone Italy using an extremely long subdomain embedding an Italian shopping center name. The resolved host does not match the presented brand, suggesting a redirect chain. Confirmed malicious by OpenPhish and part of an active cluster.

OpenPhishFinal host mismatchLong domain
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-04 · confidence 85%
Domain & Network
Whois
Network
Country United StatesUnited States
ASN AS13335
TLS Cert WE1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.

Tracked from 2026-09-04 13:03 UTC  ·  Last refreshed 2026-09-11 15:30 UTC