vinted[.]id1402431644[.]click

PhishDestroy identifies vinted.id1402431644.click as a crypto-draining phishing site designed to trick users into connecting wallets and stealing funds. This impostor mimics the legitimate Vinted marketplace by using a deceptive subdomain (id1402431644) that appears authentic at first glance. Visitors risk irreversible cryptocurrency theft if they connect a wallet or enter credentials on this page, as the attacker’s smart contract can drain tokens immediately upon authorization.

This domain was flagged by PhishDestroy after showing multiple red flags: it resolved to IP 172.67.194.64, used a valid Let’s Encrypt SSL certificate to appear legitimate, and passed undetected by 7 out of 95 VirusTotal engines at the time of analysis. The domain was registered through NameSilo, LLC on March 25, 2026 — a recent creation with a clear intent to exploit brand trust. Despite low detection rates, no blocklist currently flags it, highlighting the need for real-time verification tools like PhishDestroy to detect emerging threats.

If you visited vinted.id1402431644.click, disconnect your wallet immediately using your wallet’s interface, revoke any unauthorized smart contract approvals via Etherscan or similar tools, and do not re-enter the site. Scan your device for malware and consider changing passwords if you entered any information. Report the domain to PhishDestroy for further analysis to help protect others from this crypto drainer.