# dotpbuff.com — SUSPICIOUS

> dotpbuff.com is flagged as suspicious by PhishDestroy threat intelligence.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)

## Domain Intelligence
- Registered: 2026-03-27 17:07:01
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: FI
- IP: 104.21.73.15
- Nameservers: ["karina.ns.cloudflare.com", "koa.ns.cloudflare.com"]

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "G-Data", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d30af-044c-7048-8d69-688100e5c6b0.png
- PhishDestroy: https://phishdestroy.io/domain/dotpbuff.com/
- LLM endpoint: https://phishdestroy.io/domain/dotpbuff.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dotpbuff.com/
Last updated: 2026-03-28