kleinanzeigen[.]verifyprocess1528[.]com

This domain is flagged as a high-risk credential phishing threat and remains active as of July 12, 2026. The domain was registered on February 21, 2026, through Key-Systems GmbH, a German registrar. Infrastructure analysis reveals the domain resolves to IP address 104.21.34.219, which is hosted in the United States under AS13335 (Cloudflare, Inc.). The domain uses nameservers ns1.emailverification.info and ns2.emailverification.info, which are associated with email verification services but here are repurposed for malicious activity. The page title matches the domain name exactly, indicating no obfuscation or branded landing page content has been identified in the available data. The domain has a Gridinsoft trust score of 0 out of 100, confirming a strong negative reputation. It appears on one security blocklist and is blocked by PhishDestroy. VirusTotal data shows 2 out of 93 security vendors flag this domain as malicious. No SSL certificate is present, which is unusual for a site claiming to be a verification process and reduces user trust. The HTTP status code is 200, meaning the phishing page is live and accessible. Defenders should block the domain at the DNS and web gateway levels, monitor for subdomains or related domains using the same nameserver pattern, and investigate any credentials submitted to the site. The exact brand targeted is not confirmed beyond the domain name's reference to kleinanzeigen, but the scam type is explicitly credential phishing. Users who visited the site should be alerted to change passwords and enable multi-factor authentication on any accounts they suspect may have been compromised.