vinted[.]id18754[.]click

PhishDestroy identifies vinted.id18754.click as an active brand impersonation phishing domain designed to mimic the legitimate secondhand marketplace Vinted. This domain employs deceptive branding to trick users into entering credentials or payment details under false pretenses, likely leveraging the trust associated with the Vinted platform to facilitate fraud.

This domain was flagged as a generic phishing site with 0 detections out of 95 VirusTotal scans at the time of analysis. It was registered on March 30, 2026, through NameSilo, LLC, and resolved to IP address 104.21.78.230. The use of a recently created domain and low detection rate suggests this is a newly launched threat, potentially still in the early stages of deployment. The SSL certificate from Let's Encrypt may further lend an appearance of legitimacy to unsuspecting users.

Users who have visited this domain should immediately cease any interaction with it and avoid entering personal or financial information. If credentials or payment details were submitted, change passwords immediately and monitor financial accounts for unauthorized transactions. Block the domain at the network level and report it to relevant authorities or security platforms. Exercise heightened caution with links claiming affiliation to Vinted or other popular brands, especially those received via unsolicited emails or messages.