# etsy.kleinan-mall.pro — SUSPICIOUS

> esty.kleinan-mall.pro is a fake Etsy phishing site resolving to IP 172.67.219.250 pushing malicious checkout pages. Avoid entering payment data.

## Summary
esty.kleinan-mall.pro is an active phishing domain engineered to mimic the legitimate Etsy marketplace and trick users into completing fraudulent transactions. The site is hosted on 172.67.219.250, a Cloudflare node frequently abused by malicious actors for low-cost, high-reach credential-harvesting and payment-theft campaigns. PhishDestroy identifies this as a generic phishing threat because the domain lacks Etsy’s trademarked brand elements, uses a cheaply registered subdomain under kleinan-mall.pro, and exhibits rapid DNS churn typical of bullet-proof hosting setups. Visitors exposed to this site may be served counterfeit product listings and fake checkout flows designed to siphon credit-card data or install web skimmers.  esty.kleinan-mall.pro was registered through a privacy-protected registrar and is flagged on zero of ninety-five VirusTotal engines as of seed eb360b. The domain resolves to IP 172.67.219.250, which is positively linked to dozens of active phishing kits spoofing e-commerce brands. While the Let’s Encrypt SSL certificate creates a veneer of legitimacy, it only authenticates the domain, not its content, and is trivial for attackers to obtain. Intelligence sources report that this exact campaign has already redirected traffic from social-media ads and phishing emails targeting bargain-hunting shoppers.  If you visited esty.kleinan-mall.pro, assume your traffic was monitored for credentials or payment details. Disconnect from the site immediately and inspect browser extensions for any newly installed skimmers. Review recent credit-card statements for unauthorized charges and consider replacing cards used on the site. Report the domain to Etsy’s abuse team and your browser vendor to accelerate takedown. Forward any suspicious emails to your organization’s phishing inbox and maintain heightened vigilance for follow-up social-engineering attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.67.219.250

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/53e7a17e-8b19-4651-9204-096aa43d4842
- PhishDestroy: https://phishdestroy.io/domain/etsy.kleinan-mall.pro/
- LLM endpoint: https://phishdestroy.io/domain/etsy.kleinan-mall.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/etsy.kleinan-mall.pro/
Last updated: 2026-03-31