# f4krw6wfqi327wcozwyvnwxtl46mnt7kcicpd6tuuqp5cwzb5ekq.mrciga.com — MALICIOUS

> Discover the dangers of the generic phishing domain f4krw6wfqi327wcozwyvnwxtl46mnt7kcicpd6tuuqp5cwzb5ekq.mrciga.com flagged as high risk. Stay protected now.

## Summary
PhishDestroy identifies f4krw6wfqi327wcozwyvnwxtl46mnt7kcicpd6tuuqp5cwzb5ekq.mrciga.com as a high-risk phishing domain. These sites trick users into revealing sensitive info, risking identity theft and financial loss.

This phishing domain masquerades as a legitimate site to lure victims, often using deceptive links or forms to steal credentials or personal data. It was registered through GoDaddy and is currently active, with multiple security vendors flagging it.

If you visited this domain, immediately avoid entering any data and run a malware scan. Change any passwords possibly exposed and monitor accounts for suspicious activity to reduce harm.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: GoDaddy.com, LLC
- IP: 116.203.98.181
- Nameservers: marty.ns.cloudflare.com violet.ns.cloudflare.com

## Detection Status
- VirusTotal: 21 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "Chong Lua Dao", "Cluster25", "CyRadar", "DNS8", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "SOCRadar", "Seclookup", "Sophos", "URLQuery", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
{"wallet":"8JWd4AobyyWRRb68k6qg9eK28u0fSB7voQ7PtIzIE4w","processId":"qNvAoz0TgcH7DMg8BCVn8jF32QH5L6T29VjHxhHqqGE","ans104UnbundleFilter":{"never":true},"ans104IndexFilter":{"always":true},"supportedManifestVersions":["0.1.0","0.2.0"],"release":"57"}

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccd57-15da-7729-b339-a443a6e05d4d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/425c72c8-bac0-4f6e-a6ff-3563d0b9cbfb
- PhishDestroy: https://phishdestroy.io/domain/f4krw6wfqi327wcozwyvnwxtl46mnt7kcicpd6tuuqp5cwzb5ekq.mrciga.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/f4krw6wfqi327wcozwyvnwxtl46mnt7kcicpd6tuuqp5cwzb5ekq.mrciga.com/
Last updated: 2026-03-14