klelnanzeigen-deutch[.]provide229[.]life

This report analyzes the domain klelnanzeigen-deutch.provide229.life, which is assessed to be a fraudulent website designed to impersonate the German classifieds platform "Kleinanzeigen." The site poses a significant threat by attempting to deceive users into providing credentials or financial information through a phishing scheme, leveraging a trusted brand name to facilitate social engineering.

Technical analysis reveals the domain was created on 2026-02-21 and is hosted on IP address 172.67.160.55, associated with AS13335 Cloudflare, Inc. in the United States. VirusTotal detection shows 7 out of 95 vendors flagged the site as malicious, including ADMINUSLabs, CyRadar, Fortinet, SOCRadar, and Sophos. The domain is listed on 1 blocklist and uses an SSL certificate classified as WE1, indicating a basic level of encryption but not validating legitimacy.

The domain is currently offline and inaccessible, rendering it inoperative at this time. Based on the DOM risk score of 63, the threat level is assessed as moderate to high, with historical evidence of malicious activity and a strong likelihood of being used for credential theft. Users should avoid any interaction with this domain and report related communications.