klelnanzeigen-deutsch[.]de-stvc7124[.]info

Analysis of the domain klelnanzeigen-deutsch.de-stvc7124.info shows multiple indicators of malicious activity consistent with a generic phishing operation. The domain is listed on one security blocklist and is explicitly blocked by the PhishDestroy service, confirming that threat‑intel feeds have already categorized it as hostile. DNS resolution points to the IP address 172.67.158.148, a host frequently associated with abuse clusters used for phishing distribution.

Registration details reveal that the domain was created on June 11, 2026 and is registered through Global Domain Group LLC, a registrar that has been observed in other short‑lived malicious campaigns. VirusTotal scans report that 13 of 91 security vendors flag the domain, providing independent confirmation of its suspicious nature. No additional public data such as page titles, SSL certificate information, HTTP response codes, or Safe Browsing ratings are currently available, leaving the exact content and delivery mechanisms unverified.

Defenders should immediately block traffic to this domain at network perimeter controls and update endpoint protection signatures to include the listed IP address. Continuous monitoring of DNS queries for the domain and the associated IP is advised, as well as querying threat‑intel platforms for any emerging indicators tied to the host. Given the recent creation date, the domain may still be in an early distribution phase; rapid containment will reduce exposure to credential‑stealing attempts.