# buli163.com — SUSPICIOUS > Caution advised for buli163.com, a newly created domain linked to phishing risks. Avoid interaction until further analysis is complete. ## Summary PhishDestroy has identified buli163.com as a domain exhibiting indicators consistent with generic phishing threats. Although the domain does not currently trigger detections across major security engines, its recent registration and ambiguous activity profile warrant closer monitoring. The domain was created on March 28, 2025, indicating it is relatively new and possibly part of emerging phishing infrastructure. Technical examination reveals that buli163.com resolves to the IP address 188.114.96.3 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Despite no hits on VirusTotal or similar services, such early-stage domains often evade conventional detection methods. The domain remains active, and its registration through this particular registrar aligns with patterns observed in other suspicious domains under investigation. At present, buli163.com is classified as under investigation due to insufficient evidence for definitive classification, but its characteristics suggest potential phishing intent. PhishDestroy recommends users exercise caution, refrain from visiting the domain, and organizations consider blocking access until additional intelligence can confirm its threat posture. Continuous monitoring and threat intelligence updates will be essential as the investigation progresses. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP ?) - Page title: BUFF — Number one among all skin sites for CS2! ## Domain Intelligence - Registered: 2025-03-28 20:14:09 - Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED - Country: HK - IP: 188.114.96.3 - IP Country: US - IP City: San Francisco - IP Org: AS13335 Cloudflare, Inc. - Nameservers: armando.ns.cloudflare.com savanna.ns.cloudflare.com - SSL Issuer: Google Trust Services / WE1 ## Detection Status - VirusTotal: 1 vendors flagged Vendors: [] - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["PhishDestroy"] ## Live Page Content - Meta description: BUFF - Number one among all skin sites for CS2! ### Page Text BUFF — Number one among all skin sites for CS2! Advantages Reviews About us Contact us Terms Sign in BUFF — Number one among all skin sites for CS2 BUFF163 aims at providing a secure and user-friendly skins marketplace for all Steam users. Currently we support games like CS2, DOTA2, etc. Login via Steam 5 min to transfer Time is of the essence! Skin transfer takes only 5 minutes. Fast, convenient and secure, you can can enjoy your purchases instantly. Ref. program up to 15% Ref. program will help you get up to 15% of your friends' purchases. Simply register, invite people and get rewarded. Cashback up to 20% We value every customer, so we offer cashback on every purchase! A part of the funds is returned to your account and you can shop! >1,000,000 Items Huge selection of skins - more than 1.000.000 items! We regularly update our assortment so you can find exactly what you are looking for. We have the best features! BUFF163 is a modern platform designed to provide a secure and user-friendly skins marketplace for all Steam users. Currently, we support games like CS2, DOTA2, and more. With a vast selection of skins available, a large community of sellers and buyers ensures fast delivery for every order. Transactions are conducted safely and directly, from inventory to inventory. BUFF163 features an intuitive interface that makes it easy for users to navigate through available offers and complete transactions quickly. Whether you’re looking to buy or sell, the process is engaging and efficient, allowing you to find exactly what you need without hassle. One of the standout features of BUFF163 is its robust security system, which safeguards user accounts and ensures the integrity of all transactions. Users can have peace of mind knowing that their data and funds are well protected, fostering trust in the platform. About BUFF163 Skins marketplace We have a great amount of skins, and massive sellers and buyers make every order's fast delivery. From inventory to inventory, safely and directly. Login via Steam skinHunter99 User Positive feedback "BUFF163 has completely changed the way I trade skins! The platform is incredibly easy to use, and I was able to sell my items in no time. The prices are fair, and I appreciate the fast transactions. Highly recommend it to anyone looking to buy or sell skins!" dotaMaster42 User Positive feedback "I’ve been using BUFF163 for a few months now, and I couldn’t be happier! The selection of skins is imp ### External Scripts - https://unpkg.com/aos@2.3.1/dist/aos.js ### Form Fields - Your name - text - Your email - Enter the message... ## Evidence - Screenshot: https://urlscan.io/screenshots/019cd931-0b8e-714e-b9b4-f4c60fb3bb74.png - Cloudflare Radar: https://radar.cloudflare.com/scan/73755b9c-8887-430f-9598-c56f41cf9b52 - PhishDestroy: https://phishdestroy.io/domain/buli163.com/ - LLM endpoint: https://phishdestroy.io/domain/buli163.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/buli163.com/ Last updated: 2026-03-15