# dotibuff.com — SUSPICIOUS

> dotibuff.com flagged for low-risk phishing activity. Learn what this means and how to protect yourself from potential threats related to this domain.

## Summary
PhishDestroy identifies dotibuff.com as involved in generic phishing activities, posing a low but notable risk. Such threats can lead to compromised credentials or stolen personal data if users are not cautious.

The domain, registered on July 16, 2025, resolves to IP 188.114.97.3 and was registered through NiceNIC International Group Co., Limited. It has appeared on one security blocklist and was flagged by 2 out of 95 security vendors on VirusTotal. Currently, the domain is offline.

Users are advised to avoid interacting with dotibuff.com or providing any personal information. Regularly updating security software and remaining vigilant against suspicious links can help mitigate exposure to phishing attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Удобный автоматизированный сервис для анализа персонажей, статистики и обучения в компьютерных играх

## Domain Intelligence
- Registered: 2025-07-16 21:37:29
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: brad.ns.cloudflare.com naomi.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd938-0eb0-742a-854d-bb5f7652530c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8cbff101-7a1c-40c1-bdbd-a1e0766bfc26
- PhishDestroy: https://phishdestroy.io/domain/dotibuff.com/
- LLM endpoint: https://phishdestroy.io/domain/dotibuff.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dotibuff.com/
Last updated: 2026-03-19