kleinanzeigen[.]09152[.]icu

This report analyzes the domain kleinanzeigen.09152.icu, which is assessed as a high-risk threat impersonating the German classifieds platform Kleinanzeigen. The site displayed a "Sicherheitsprüfung" (security check) page, a common social engineering tactic designed to trick visitors into believing their connection is being verified, potentially to deliver malware, steal credentials, or facilitate fraudulent transactions. The domain exploits the Kleinanzeigen brand to gain user trust.

Technical analysis reveals the domain was created on 2026-02-21 and uses an SSL certificate identified as WE1. VirusTotal flagged it with 18 out of 95 security vendors detecting malicious activity. Specific vendors including ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Certego identified the domain as a threat. The GridinSoft trust score is 0 out of 100, and the ScamAdviser trust score is also 0 out of 100. The domain has one blocklist entry and a DOM risk score of 73.

As of the time of assessment, the domain status is reported as DOWN or OFFLINE, meaning it is currently inaccessible. However, the risk level remains high due to the combination of its recent creation, zero trust scores, and the number of vendor detections. Users should exercise caution and avoid any future interaction with this domain if it becomes active again.