# f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a.kirk.replit.dev — SUSPICIOUS

> The domain f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a[.]kirk[.]replit[.]dev has been flagged as a phishing threat by PhishDestroy. Our automated analysis detected 2 risk indicators associated with this domain. View WHOIS data, SSL certificate analysis, and blocklist status in the full report.

## Summary
Threat Overview
The domain f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a[.]kirk[.]replit[.]dev has been flagged as a phishing threat. PhishDestroy's automated scanning systems detected multiple risk indicators associated with this domain.
Detection Details
This domain was identified through a combination of automated analysis, community reports, and cross-referencing with global threat intelligence feeds including VirusTotal, Google Safe Browsing, and 50+ specialized blocklists.
Risk Indicators

- Domain registered on dev TLD
- Domain length: 66 characters
- Unusually long domain name — a common phishing technique
- Uses multiple subdomains to appear more legitimate

Stay Safe
Always verify URLs before entering credentials. Use a password manager to avoid typing passwords on fake sites. Enable two-factor authentication wherever possible.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Replit Inc.
- IP: 35.247.106.28
- Nameservers: NS_NOT_FOUND

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/3QbpTKM/de151da12adb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/dc65f136-d8a7-4f6a-9773-09ac8684c96f
- PhishDestroy: https://phishdestroy.io/domain/f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a.kirk.replit.dev/
- LLM endpoint: https://phishdestroy.io/domain/f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a.kirk.replit.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/f4919-c96b-4eef-bf2d-638ff96432ce-00-2rww6spn5jy5a.kirk.replit.dev/
Last updated: 2026-03-19