# irkus.com.do — MALICIOUS

> Irkus.com.do is a high-risk phishing site. Avoid interactions and never share personal info. Learn how to stay safe from this active threat.

## Summary
PhishDestroy identifies irkus.com.do as a high-risk phishing domain actively targeting unsuspecting users. Phishing sites like this are designed to trick visitors into divulging sensitive information such as login credentials, financial data, or personal identification details. The danger lies in the potential for identity theft, financial loss, and compromised accounts resulting from interaction with this fraudulent site.

This phishing domain operates by masquerading as a legitimate service or entity to lure users into submitting confidential information. Registered through NIC .DO and created on February 29, 2016, irkus.com.do currently resolves to an IP address known for hosting malicious content. VirusTotal flags it by 11 out of 95 security vendors, reinforcing its reputation as a dangerous site. Attackers rely on deceptive web design and social engineering tactics to exploit user trust and harvest data.

If you have visited irkus.com.do, it is critical to immediately cease any interaction with the site. Do not enter any personal or financial information. Users should run a full antivirus and anti-malware scan on their devices, change passwords for accounts that may have been compromised, and monitor financial statements closely for unauthorized activity. Reporting the domain to your organization's IT security team or a trusted cybersecurity platform like PhishDestroy can help mitigate further risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Irkus – Irkus

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Registrar NIC .DO (midominio.do)
- IP: 172.67.138.93
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kip.ns.cloudflare.com", "cloe.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Cluster25", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "SOCRadar", "Sophos", "URLQuery"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Attention Required! | Cloudflare Please enable cookies. Sorry, you have been blocked You are unable to access irkus.com.do Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. What can I do to resolve this? You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page. Cloudflare Ray ID: 9dd131e72b19ef97 • Your IP: Click to reveal 104.28.156.41 • Performance & security by Cloudflare

### External Links
- https://www.cloudflare.com/5xx-error-landing

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc287-f8b8-70cf-9fe5-7f967e6bf0a2.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/irkus.com.do
- Wayback Machine: https://web.archive.org/web/https://irkus.com.do
- PhishDestroy: https://phishdestroy.io/domain/irkus.com.do/
- LLM endpoint: https://phishdestroy.io/domain/irkus.com.do/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/irkus.com.do/
Last updated: 2026-03-16