vdhd[.]fr

PhishDestroy identifies vdhd.fr as a generic phishing domain that is currently active and posing a high risk to users. The domain was created on May 18, 2026, and is registered through IONOS SE, resolving to IP address 217.160.0.128. It is secured with an SSL certificate issued by Sectigo Limited / Sectigo Public Server Authentication CA DV R36, which does not legitimize its malicious intent. VirusTotal flags this domain with 10 out of 95 security vendors marking it as malicious, indicating a consensus among security tools. Additionally, it appears in one threat intelligence pulse on AlienVault OTX and is listed on one security blocklist, further corroborating its dangerous nature.

The technical indicators surrounding vdhd.fr reveal a sophisticated phishing campaign. The domain's creation date is in the future relative to the current year, suggesting either a data anomaly or a forward-dated registration to evade detection. Its registration via IONOS SE, a reputable provider, does not imply safety, as threat actors often use legitimate services. The IP address 217.160.0.128 may host multiple malicious domains, and the SSL certificate from Sectigo adds a false sense of trust, encouraging users to disclose sensitive information. The presence in one AlienVault OTX pulse and one security blocklist indicates that this domain is recognized by threat intelligence communities, but its low blocklist count does not diminish its risk.

Currently, vdhd.fr remains active, meaning users may still encounter it via email, ads, or search results. PhishDestroy strongly recommends that users do not visit the site, click any links, or enter any personal information. If you have interacted with this domain, monitor accounts for suspicious activity and change passwords immediately. Organizations should block the domain at the network level and educate employees about generic phishing tactics. Report the domain to IONOS SE and relevant authorities to help takedown efforts. Stay vigilant against similar domains that may appear legitimate but are designed to steal credentials.