Hello,
A friend of mine have found a phishing website pretending to be… etsy
After a reverse DNS and some searches, the IP serves a crypto-stealing trojan too
DNS : ns2.dns.nic.bid
A : 156.154.145.25
Domain : view94.bid
Website : etsy.view94.bid