# buttoncoins.com — SUSPICIOUS

> buttoncoins.com is a crypto drainer site flagged by 0 of 95 VirusTotal vendors. Investigated for credential theft risks—avoid interactions immediately.

## Summary
buttoncoins.com is currently under investigation as a generic crypto drainer phishing site, with active status as of the latest assessment.    This domain was flagged by 0 of 95 VirusTotal security vendors, indicating no immediate detection despite its suspicious nature. It is registered through IONOS SE, resolves to IP 185.158.133.1, and was created on February 16, 2026. The domain holds a valid SSL certificate from Google Trust Services, which may aid in deceiving users into trusting the site. Additionally, no known blocklist entries were reported in the submitted data.    Given the active status and lack of detection by VirusTotal, users should exercise extreme caution. Avoid interacting with buttoncoins.com, particularly for cryptocurrency transactions or login prompts. Disable unnecessary browser extensions, verify URLs before entering credentials, and report any suspicious activity related to this domain. Consider blocking the IP 185.158.133.1 at the network level to prevent potential access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-16 22:32:00
- Registrar: IONOS SE
- IP: 185.158.133.1

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/buttoncoins.com
- PhishDestroy: https://phishdestroy.io/domain/buttoncoins.com/
- LLM endpoint: https://phishdestroy.io/domain/buttoncoins.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/buttoncoins.com/
Last updated: 2026-04-08