# dottbuff.com — MALICIOUS

> dottbuff.com is flagged as malicious by PhishDestroy threat intelligence.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)

## Domain Intelligence
- Registered: 2026-03-27 17:07:01
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: FI
- IP: 104.21.86.55
- Nameservers: ["jasper.ns.cloudflare.com", "julissa.ns.cloudflare.com"]

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["alphaMountain.ai", "G-Data", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d30b4-8b08-77c7-9d90-6ecd1cf2a1d3.png
- PhishDestroy: https://phishdestroy.io/domain/dottbuff.com/
- LLM endpoint: https://phishdestroy.io/domain/dottbuff.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dottbuff.com/
Last updated: 2026-03-28