# dotabuff.at — SUSPICIOUS

> dotabuff.at mimics the real Dota 2 stats site to steal Steam credentials. This Austrian domain (registered via Hosting Concepts B.V.

## Summary
PhishDestroy identifies dotabuff.at as a malicious impersonation of the popular Dota 2 statistics platform dotabuff.com. This deceptive site capitalizes on the trust gamers place in the legitimate service by using a nearly identical domain name and visual design to trick visitors into entering their Steam account credentials. Once harvested, these stolen login details are likely sold on dark web markets or used to hijack in-game inventories and accounts, exposing users to financial loss and permanent bans from competitive play. The domain’s exact match to a well-known gaming resource makes it particularly dangerous for casual users who may not double-check URLs before logging in.  The suspicious website was registered through Hosting Concepts B.V. (as per nic.at records), resolving to IP 188.114.97.3 and protected by a Google Trust Services SSL certificate. VirusTotal currently shows zero detections out of 95 scanners, indicating that security vendors have not yet flagged this threat. This is concerning because the domain has been active long enough to establish a false sense of legitimacy, yet remains undetected by automated defense systems. The combination of a trusted gaming-related name, a legitimate-appearing SSL certificate, and zero detections makes this a high-risk trap for unsuspecting visitors.  If you visited dotabuff.at and entered any Steam or gaming account credentials, change your password immediately through the official Steam client or website—never via links from untrusted sources. Enable Steam Guard two-factor authentication as an additional layer of protection against unauthorized access. Scan your device with reputable antivirus software and monitor your account for unusual activity such as inventory changes or unauthorized trades. Consider revoking any session tokens or third-party app permissions granted after visiting suspicious sites. Report the domain to Steam Support and your antivirus vendor to help block future attacks. Do not trust similar-looking domains, and always verify URLs by hovering over links before clicking, especially in gaming communities where scams are prevalent.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Hosting concepts B.V. / Registrar.eu ( https://nic.at/registrar/648 )
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b23280e7-e131-4f94-836f-73379015b02c
- PhishDestroy: https://phishdestroy.io/domain/dotabuff.at/
- LLM endpoint: https://phishdestroy.io/domain/dotabuff.at/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dotabuff.at/
Last updated: 2026-03-21