vodafone-gewinnspiel[.]de

This domain is flagged as a high-risk generic phishing threat as of July 13, 2026. VirusTotal analysis shows 6 of 95 security vendors detecting malicious activity, and the domain appears in two AlienVault OTX threat intelligence pulses, indicating prior recognition by the security community. The domain resolves to IP address 152.53.123.174 and remains active at the time of reporting. The page title is 'Vodafone | Gewinnspiel', suggesting the site impersonates the Vodafone brand in the context of a contest or giveaway. The SSL certificate is issued by Let's Encrypt, a common free certificate authority used by both legitimate and malicious sites. Infrastructure details such as ASN, hosting country, and the specific phishing kit in use are not yet identified. The exact page content has not been analysed, so the specific mechanism of the phishing attack (e.g., credential harvesting, personal data collection) is unknown. Defenders should treat this domain as an active threat, block access at the network level, and monitor for related domains sharing the same IP or certificate pattern. Users should be warned not to interact with the site or provide any personal information.