# 420dv.com — SUSPICIOUS

> 420dv.com is a medium-risk phishing site posing as a bot verification page. Avoid interaction and do not share personal data with this domain.

## Summary
PhishDestroy identifies 420dv.com as a medium-risk generic phishing domain that impersonates a bot verification or captcha-like page, indicated by the page title 'Вы не робот?' (Are you not a robot?). This tactic aims to deceive users into believing the site is legitimate while potentially harvesting sensitive information or delivering malicious payloads.

The domain 420dv.com was registered on July 20, 2025, through NiceNIC International Group Co., Limited and resolves to IP address 91.206.71.183. It has been flagged on 1 security blocklist and holds a very low trust score of 0/100 according to Gridinsoft. VirusTotal analysis shows that 3 out of 95 security vendors have identified suspicious activity related to this domain. The infrastructure and domain age suggest a newly created phishing campaign leveraging generic social engineering themes.

Currently, 420dv.com is offline, reflecting a positive response likely triggered by security interventions or takedown actions. Users are strongly advised to avoid accessing this domain and to remain vigilant against similar phishing schemes that use fake bot verification prompts. Continuous monitoring of such domains is essential to mitigate the risk of credential theft and malware distribution.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Вы не робот?

## Domain Intelligence
- Registered: 2025-07-20 15:55:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 91.206.71.183
- IP Country: NL
- IP City: Rotterdam
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: david.ns.cloudflare.com dina.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["CRDF", "Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccd54-3cd6-762d-924f-b5448d53d789.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/420dv.com
- Wayback Machine: https://web.archive.org/web/https://420dv.com
- PhishDestroy: https://phishdestroy.io/domain/420dv.com/
- LLM endpoint: https://phishdestroy.io/domain/420dv.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/420dv.com/
Last updated: 2026-03-19