narco24[.]to

PhishDestroy has identified narco24.to as a generic phishing domain designed to trick users into a fake bot verification process. The domain displayed the title 'Вы не робот?', a common social engineering tactic used to lure victims into completing a CAPTCHA-like challenge that often leads to credential theft or malware delivery. While no specific brand is impersonated, the threat type is credential theft, as such pages typically harvest sensitive information.

The technical indicators for narco24.to are concerning. VirusTotal reports 2 out of 95 security vendors flagging the domain, and AlienVault OTX has identified it in 2 threat intelligence pulses. The domain was created on August 13, 2025, and resolves to IP address 91.206.71.136. It was registered through NiceNIC International Group Co., Limited and appears on 1 security blocklist. No SSL certificate was found, further indicating malicious intent.

Current status shows the domain has been taken offline. However, users who may have interacted with the page before takedown should remain vigilant. PhishDestroy recommends monitoring for any suspicious activity, changing passwords if credentials were entered, and enabling two-factor authentication on accounts. Avoid interacting with similar bot check prompts from untrusted sources.