facebook[.]kleinanz-market[.]pro

PhishDestroy identifies facebook.kleinanz-market.pro as a live fake Facebook login phishing site with 12/95 VirusTotal detections. This domain was flagged while impersonating Facebook’s login page to steal credentials. It resolves to IP 188.114.96.3 and uses a Let’s Encrypt SSL certificate, giving a false appearance of legitimacy. The domain was registered recently and has not yet been widely blacklisted, making it a fresh threat to users who may land on it via phishing emails, social posts, or typos. This threat is a credential-stealing phishing site disguised as a Facebook login page. VirusTotal currently shows 12/95 antivirus engines detecting the domain, meaning it remains undetected by most scanners as of the latest scan. The domain resolves to IP address 188.114.96.3 and uses a valid Let’s Encrypt SSL certificate, which attackers use to appear trustworthy. The registrar and creation date are being analyzed to assess age and ownership patterns, but early indicators suggest recent registration aimed at exploiting brand trust before detection systems catch up. If you visited this site, do not enter any login details. Close the browser and run a full antivirus scan on your device. Change your Facebook password from a trusted device, and enable two-factor authentication immediately. Report the suspicious site to Facebook and your network administrator. Avoid clicking links in unsolicited messages, even if they look like they’re from Facebook. Always verify URLs by typing facebook.com directly into your browser before logging in.