Security Review

Is vdhd.fr legit or a scam?

Our verdict:Dangerous· 1/100

Leboncoin phishing clone registered 30 days ago; confirmed in 4 scam reports for fake rental card-payment fraud.

vdhd.frScanned 1h ago
0
Trust score
DANGEROUS
Heuristics 0·MT 8
Category tags
phishingfraud#Phishing#Clone Site#Fake Shop95% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
5/92
Engines flagged this URL
Domain Age
30 days old
Registered May 18, 2026
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Fake shop — do not order

3 of 92 antivirus engines flag this page as malicious. The site shows patterns common to non-delivery scam shops. Don't submit payment details, and if you already paid by card or PayPal, start a chargeback today.

Website Preview

Screenshot of vdhd.fr
LIVE RENDER
vdhd.fr

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

The page displays a generic server-level 403 Forbidden response blocking access to the resource; no scam indicators or meaningful content are visible to assess.

Visual risk50/100

What our vision model saw

1 signal

Page renders a standard HTTP 403 Forbidden error with no functional content visible

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust8/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The domain vdhd.fr is a confirmed clone of leboncoin.fr, deliberately designed to impersonate the legitimate French classifieds platform. Our scam-network fingerprint and multiple independent scam-report databases (PhishTank, Signal-Arnaques, ScamDoc) document active fraud: victims report being contacted via SMS about fake rental listings, then directed to enter payment card details on the fake site. The domain is only 30 days old, has no legitimate business registration, and carries a 1% trust score from independent aggregators. Five antivirus engines (ADMINUSLabs, BitDefender, G-Data, alphaMountain.ai, SOCRadar) flag it as phishing or malicious. The /pay subdirectory is explicitly listed on PhishTank as a credential-harvesting endpoint. This is an active, operational phishing operation targeting French consumers.
Full dossier
Analysis complete

Page Content

The page displays a generic HTTP 403 Forbidden error with no functional content. The actual phishing occurs on subdomains (leboncoin.vdhd.fr) and the /pay path, which are designed to mimic Leboncoin's checkout flow and harvest payment card details.

Infrastructure

Hosted on IONOS (IP 217.160.0.128). Valid SSL certificate issued by Sectigo, which is common for phishing sites that need HTTPS to appear legitimate. The IP has 1 abuse report on record.

Domain History

Registered approximately 30 days ago via IONOS with privacy protection enabled. No legitimate business registration found in France or elsewhere. The recent registration combined with clone-site fingerprinting confirms this is a purpose-built fraud domain.

Web Reputation

PhishTank lists the /pay endpoint as suspected phishing (ID 9455653). Signal-Arnaques documents multiple victim complaints linking the domain to SMS-initiated rental scams with card-payment requests. ScamDoc assigns a 1% trust score and labels it as arnaque (fraud). No positive reviews or legitimate business presence detected.

Risk Factors
7
  • Confirmed clone of leboncoin.fr used in active rental-scam operations targeting card payments.
  • Listed on PhishTank as phishing; /pay endpoint explicitly documented as credential-harvesting.
  • Four independent scam-report sources (PhishTank, Signal-Arnaques, ScamDoc, and our network fingerprint) confirm fraudulent activity.
  • Domain registered only 30 days ago with no legitimate business registration or company details.
  • Five antivirus engines flag as phishing or malicious: ADMINUSLabs, BitDefender, G-Data, alphaMountain.ai, SOCRadar.
  • Phone numbers 0756872614 and 0759683538 repeatedly associated with scam reports on the domain.
  • 1% trust score from independent aggregators; explicitly labeled as arnaque.
Positive Signals
1
  • Valid SSL certificate from Sectigo (though phishing sites routinely obtain legitimate certificates).
AI Recommendation
Do not visit this site or enter any payment information. If you received an SMS linking to this domain or leboncoin.vdhd.fr, report it to your bank and the French authorities (DGCCRF or Gendarmerie). Block the associated phone numbers (0756872614, 0759683538) and report them to your mobile provider.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for vdhd.fr, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
1 months
Registered May 2026
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones leboncoin.fr
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports
Key findings
7 headline facts from open-web research
  • Domain vdhd.fr is approximately 30 days old
  • Listed on PhishTank as suspected phishing (ID 9455653 for https://vdhd.fr/pay)
  • Multiple recent reports on Signal-Arnaques (June 2026) link it to Leboncoin scams involving SMS contact followed by card payment requests for fake rentals via leboncoin.vdhd.fr
  • Phone numbers 0756872614 and 0759683538 repeatedly associated with the domain in scam reports
  • ScamDoc assigns 1% trust score and labels it as arnaque
  • Hosted by IONOS; described explicitly as "phishing site de chez ionos" in victim reports
  • No legitimate business, reviews, or registration information located
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • PhishTankopen

    "9455653, https:// vdhd.fr /pay ..."

  • Signal-Arnaquesopen

    "0756872614 leboncoin.vdhd.fr (2 commentaires) ... Premier contact par texto ensuite ils utilisent la plate-forme du bon coin. Contenu de l'arnaque : Demande de paiement par carte bancaire pour une réservation de location"

  • Signal-Arnaquesopen

    "https://vdhd.fr/pay/ phishing site de chez ionos"

  • ScamDocopen

    "Avis Leboncoin.vdhd.fr | Indice de confiance très faible : 1 % ... Arnaque"

Impersonation / typosquat
Clone of leboncoin.fr

Used as leboncoin.vdhd.fr in Leboncoin classifieds scams to impersonate the platform for fake rental reservations and card payments

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Scam-report databases and consumer-complaint sites document active fraud on this domain. PhishTank lists https://vdhd.fr/pay as suspected phishing (ID 9455653). Signal-Arnaques reports multiple victims describing SMS contact followed by fake rental listings and card-payment requests via leboncoin.vdhd.fr. Phone numbers 0756872614 and 0759683538 are repeatedly linked to these scams. an independent review aggregator assigns a 1% trust score and explicitly labels the site as arnaque (fraud). The domain is confirmed as a clone of leboncoin.fr used to impersonate the legitimate platform. No legitimate business registration, positive reviews, or consumer trust signals were found.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Evidence confirms this site is a clone of leboncoin.fr.
Linked signals (1)
Clone of leboncoin.fr

Antivirus Engines

Detection matrix · live
5 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

3Malicious2Suspicious53Harmless92Engines
0
of 92
ADMINUSLabs
Malicious· malicious
BitDefender
Malicious· phishing
G-Data
Malicious· phishing
alphaMountain.ai
Suspicious· suspicious
SOCRadar
Suspicious· suspicious

5 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age30 days old
RegistrarIONOS SE
RegisteredMay 18, 2026
ExpiresMay 18, 2027
Owner privacyHidden
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerSectigo Limited · Sectigo Public Server Authentication CA DV R36
ExpiresNov 14, 2026 (150d)
Self-signedNo
Hosting & Technology
HostingIONOS SE
Server locationDE

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file1
ISPIONOS SE
Usage typeContent Delivery Network

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Fake Shop
Fake Shop
Moderate likelihood
35/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.
  • Domain is 30 days old — very young for a shop.
Brand Impersonation
Moderate likelihood
30/100
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.

Fake shop — do not order

Signals common to non-delivery scam shops were detected on this site.

  • Do not interact with vdhd.fr

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • If you already paid by card or PayPal — start a chargeback

    Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.

  • Save every piece of evidence

    Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.

  • Report the shop

    Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags vdhd.fr as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — vdhd.fr scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. vdhd.fr presents a valid TLSv1.3 certificate issued by Sectigo Limited · Sectigo Public Server Authentication CA DV R36, expiring in 150 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • vdhd.fr is 1 month old, registered on 5/18/2026 through IONOS SE. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 5 out of 92 antivirus engines in our malware network flagged vdhd.fr as malicious or suspicious (3 outright malicious). Even one detection is a meaningful signal.
  • No. vdhd.fr is not currently listed on the major browser blocklist feeds that modern browsers use.
  • vdhd.fr resolves to an IP operated by IONOS SE in DE (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 17, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around vdhd.fr have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·vdhd.fr
DANGEROUS

This is a phishing clone of Leboncoin used to steal payment card details from rental scam victims. Multiple scam reports confirm it impersonates the legitimate platform to solicit fake reservation payments via SMS and card entry.

Do not visit this site or enter any payment information. If you received an SMS linking to this domain or leboncoin.vdhd.fr, report it to your bank and the French authorities (DGCCRF or Gendarmerie). Block the associated phone numbers (0756872614, 0759683538) and report them to your mobile provider.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.