login-odoo[.]com
Phishing and security check for login-odoo.com
login-odoo.com entered the PhishDestroy evidence set on Aug 3, 2026. The hostname uses “login,” a pattern consistent with a account-login lure; no target brand is confirmed from stored content. The stored content classification is credential phishing. The assembled evidence scores 89/100 (high).
Two independent sources are positive: VirusTotal and URLQuery. VirusTotal recorded 10 detections among 91 engines: alphaMountain.ai, Certego, CRDF, ESTsecurity, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Kaspersky, SOCRadar, Sophos on Aug 5, 2026 at 02:11 UTC. URLQuery recorded 1 threat-system alert on Aug 4, 2026 at 00:02 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Aug 3, 2026 at 23:53 UTC. URLScan completed without a malicious verdict (score 0) on Aug 3, 2026 at 23:56 UTC.
The collector marked the hostname reachable on Aug 6, 2026 at 22:14 UTC, but did not retain the HTTP response code. Registration records for the domain list Spaceship, Inc. as the registrar and Jun 21, 2026 as the creation date. At collection time, the hostname resolved to 185.26.238.176 on AS9009 (M247 Europe SRL). The associated network metadata labels the endpoint as EDIS GmbH in Frankfurt am Main, DE. The stored server header is nginx/1.30.3. The evidence archive retains 5 visual captures from PhishDestroy, URLScan, URLQuery, and Cloudflare Radar. IoC extraction completed on Aug 4, 2026 at 04:00 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Sep 27, 2026; checked Aug 4, 2026 at 01:02 UTC.
No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as credential phishing.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | login-odoo.com |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
ICANN Got Paid. Accountability Did Not Arrive.
For this gTLD, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
Accreditation: monetized. Accountability: please check back later.
Then the magic starts: ICANN writes RAA §3.18, the registrar investigates abuse inside its own customer base, and victims deliver the evidence for free while every layer waits for someone else to act. If that makes victims feel safer, excellent—the invoice worked.
Technologies · 1 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% confidenceVirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive