buttcoin[.]guru

The domain buttcoin.guru is currently active and poses a specific threat of brand impersonation, targeting the brand Buttcoin. It is flagged as an elevated risk due to its potential use in phishing scams. The site appears to be impersonating Buttcoin, which could deceive users into believing they are interacting with the legitimate brand.

Technical indicators for buttcoin.guru include detection by 2 of 95 vendors on VirusTotal, specifically flagged by Gridinsoft and SOCRadar. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on February 26, 2026. It resolves to the IP address 188.114.97.3, located in the United States under AS13335 Cloudflare, Inc. The domain is listed on three security blocklists: PhishDestroy, MetaMask, and SEAL. Notably, it lacks an SSL certificate, which is a common security measure for legitimate sites.

For those who suspect they may have interacted with buttcoin.guru, it is crucial to take immediate safety steps. If credentials or logins were potentially compromised, users should change their passwords and enable two-factor authentication on affected accounts. It is also advisable to monitor for any suspicious activity or fraud. Reporting the phishing attempt to authorities or security platforms can help further mitigate the threat. Users can also report the site to the blocklists that have already flagged it, such as PhishDestroy, MetaMask, and SEAL, to aid in broader protection efforts.