# mpvlegolas.buzz — SUSPICIOUS

> mpvlegolas.buzz is a crypto drainer scam that steals digital assets. This domain has 0/95 VirusTotal detections. Verify safety on PhishDestroy.

## Summary
PhishDestroy identifies the active crypto drainer domain mpvlegolas.buzz as a high-risk threat. This domain is currently under investigation for its role in phishing campaigns aimed at cryptocurrency users. The domain remains operational and poses an ongoing risk to victims who interact with its fraudulent content.  mpvlegolas.buzz was registered through GoDaddy.com, LLC on January 20, 2026, and resolves to IP address 188.114.96.3. The domain utilizes a Google Trust Services SSL certificate, which may be exploited to appear legitimate. Despite being listed on VirusTotal, it remains undetected by all 0 out of 95 security vendors as of the latest scan, indicating it has evaded immediate detection mechanisms. The domain has not yet been added to public blocklists, and its trust scores remain unverified due to its recent creation.  This domain is active and should be treated as a confirmed threat vector. Users are strongly advised to avoid interacting with mpvlegolas.buzz or any associated links. PhishDestroy recommends reporting this domain immediately and updating local blocklists to prevent further exposure. Users who suspect prior engagement with this domain should audit their cryptocurrency wallets and revoke any unauthorized permissions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-20 10:26:19
- Registrar: GoDaddy.com, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/mpvlegolas.buzz
- PhishDestroy: https://phishdestroy.io/domain/mpvlegolas.buzz/
- LLM endpoint: https://phishdestroy.io/domain/mpvlegolas.buzz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mpvlegolas.buzz/
Last updated: 2026-04-08