voadafone[.]new[.]hr-rewards[.]com

Analysis of the domain voadafone.new.hr-rewards.com indicates a high-risk phishing campaign targeting telecommunications users. The domain was registered on December 17, 2007, through MarkMonitor, Inc., a registrar commonly associated with both legitimate and malicious infrastructure. As of July 19, 2026, the domain remains active and resolves to the IP address 63.176.245.164. While the domain name incorporates a misspelling of 'Vodafone' and suggests a rewards or incentive scheme, no specific confirmation of the page content or targeted brand has been independently verified at this stage. Security vendor detection on VirusTotal is limited, with only 2 of 95 engines flagging the domain as malicious. This low detection rate does not preclude the domain's use in phishing operations, particularly given the suggestive naming convention and the historical use of such domains in credential harvesting or fraudulent reward schemes. The age of the domain, registered nearly two decades ago, may contribute to its apparent legitimacy, potentially evading initial scrutiny by automated detection systems. Defenders are advised to monitor network traffic to 63.176.245.164 and assess any interactions with voadafone.new.hr-rewards.com for signs of credential submission or data exfiltration. Blocking or sinkholing the domain at the DNS or proxy level is recommended pending further analysis of its content and behavior. Given the high-risk classification, organizations should prioritize user awareness regarding phishing attempts leveraging telecommunications-themed lures, particularly those promising rewards or incentives.