vinted[.]id08937[.]click

PhishDestroy identifies vinted.id08937.click as an active credential phishing site masquerading as the legitimate Vinted secondhand marketplace. The domain is engineered to harvest user login credentials under the guise of a login page. Threat actors are likely using this site in phishing emails, social media messages, or spoofed ads to trick users into submitting their Vinted account email and password. Once captured, attackers can access real accounts to steal personal data, process unauthorized sales, or sell credentials on dark web forums. This is a high-risk, targeted phishing campaign aimed at unwary users seeking to sell or browse secondhand clothing. vinted.id08937.click exhibits multiple indicators of malicious intent. The domain was registered on March 30, 2026, through NameSilo, LLC, a registrar frequently abused in short-lived phishing campaigns. As of the latest scan, the domain shows 0 detections out of 95 security engines on VirusTotal, indicating it remains under the radar of most automated defenses. It resolves to IP address 172.67.150.111, a Cloudflare IP, commonly used to host malicious or phishing content behind proxy layers. The domain uses a Let's Encrypt SSL certificate to appear legitimate, increasing user trust. While currently undetected, the combination of recent creation, low detection rate, and fake login interface strongly suggests active credential harvesting. Users who have visited vinted.id08937.click should immediately assess whether they entered any Vinted account credentials. If so, change the password on both Vinted and any linked email accounts, and enable two-factor authentication. Scan devices for malware using reputable antivirus software, as some phishing pages may deliver payloads. Report the domain to Vinted and your email provider to aid in takedown efforts. Avoid interacting with this site and any links or ads promoting it. Always verify URLs by checking for HTTPS, domain spelling, and official branding before entering sensitive information. Stay vigilant against future phishing attempts by enabling browser warnings and using password managers that detect fake login pages.