vodafone-form.mhmr.ro
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of vodafone-form.mhmr.ro
This subdomain appears to host a Romanian-language promotional landing page themed around Vodafone and a venue called Zoom Beach Bar. The page headline suggests a summer giveaway or raffle, and the visible content advertises a chance to win Motorola-branded devices and accessories. Based on the screenshot and linked assets, the page is designed as a simple campaign-style form or entry page rather than a full corporate website.
The domain itself is not an official Vodafone-owned domain; instead, it is a subdomain under mhmr.ro. That suggests the page may be operated by a third party using Vodafone branding for a marketing campaign, affiliate promotion, or potentially unauthorized imitation. Based on available data, the operator is not clearly identified on the landing page, which limits transparency about who is responsible for collecting visitor information.
Safety Assessment for vodafone-form.mhmr.ro
This website raises notable concerns based on the available scan results. At the time of this scan, 12 out of 91 security engines flagged the URL, with multiple detections describing it as phishing or otherwise malicious. The page also prominently uses Vodafone branding while being hosted on an unrelated third-party subdomain, which may indicate a look-alike or impersonation-style setup rather than an official brand property.
Other signals are mixed. The malware scan did not identify flagged files, and several major threat databases were clean at the time of review. However, one blacklist-style result marked the site with a generic suspicious classification, and the visual presentation resembles a prize or giveaway page that could be used to solicit personal details. The domain itself is old, but that does not by itself reduce the risk of abuse on a specific subdomain.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presents a valid Let's Encrypt SSL certificate with an expiry date of 2026-11-16 and is hosted on IP address 193.189.99.18 in Bucharest, Romania. The web server identifies as openresty/1.31.1.1, and hosting appears to be provided by Global Internet Solutions SRL. Nameservers are set to ns.globalis.ro and ns1.globalis.ro, while DNSSEC status is unknown.
From a technical standpoint, HTTPS availability is a positive baseline signal, but it should not be treated as proof of legitimacy. The more relevant concern is that a branded promotional page is being served from a third-party subdomain rather than an evidently official Vodafone domain, which may increase the likelihood of impersonation or credential-harvesting risk.
Share your experience with this website. Was it safe? Did you encounter any issues?