claim-buttcoin[.]live

The domain claim-buttcoin.live is currently active and engaged in brand impersonation, specifically targeting the Across protocol. Analysis confirms this domain is designed to deceive users by mimicking legitimate cryptocurrency-related services, leveraging social engineering tactics to exploit trust in the targeted brand. The domain remains operational as of the latest assessment. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 172.67.186.209 and is protected by Cloudflare, a common obfuscation tactic. Security vendors on VirusTotal flag this domain as malicious, with 6 out of 95 detections. The domain appears on four security blocklists, and its Gridinsoft trust score is 0/100, indicating high confidence in its malicious nature. The SSL certificate is issued by Google Trust Services, and the page title, "BUTTCOIN - The Original Memecoin Since 2011," further suggests an attempt to mislead users into believing it is a legitimate cryptocurrency platform. Current status indicates the domain is actively serving content and poses an elevated risk to users. Immediate mitigation steps are recommended, including blocking the domain and associated IP address at the network level. Organizations should update endpoint protection rules to prevent access and alert users to the threat. Monitoring for similar domains registered through the same registrar or resolving to the same IP range is advised to preempt further abuse. Users interacting with cryptocurrency platforms should verify domain authenticity through official channels before engaging with any links or transactions.