Phishing detection: vodafone-business-berlin.de
Vodafone Screenshot
Investigate
Domain
vodafone-business-berlin.de2 CT hosts on apex
urlscan
VirusTotal
Whois
IP
217.160.0.16
ipinfo
Greynoise
URL
https://vodafone-business-berlin.de
Phishunt analysis Beta
33
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.2 Brand favicon
- +3.0 OpenPhish
- +2.0 Site cluster
- +1.6 Young domain
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Long domain
- +0.6 Final host mismatch
- +0.6 Suspicious TLD
- +0.2 Hyphens
20 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
A German domain combining the Vodafone name with business and Berlin terms impersonates the telecom brand. It is listed by OpenPhish, lacks CSP and HSTS headers, and is hosted at IONOS, likely targeting customer or business account credentials.
Brand in domain labelOpenPhishBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-16 · confidence 70%
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists