vote-buttcoin[.]app

The domain vote-buttcoin.app is a phishing site engaged in brand impersonation targeting Buttcoin, a known cryptocurrency-related entity. It poses an elevated risk by attempting to deceive users into believing they are interacting with a legitimate Buttcoin platform, potentially leading to credential theft or financial fraud. As of the latest verification, vote-buttcoin.app has been taken offline, though its prior activity remains a concern for those who may have encountered it.

Technical indicators confirm the malicious nature of vote-buttcoin.app. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). Registered through NiceNIC International Group Co., Limited on February 21, 2026, it resolved to the IP address 104.21.22.19, hosted by Cloudflare in the US. No SSL certificate was issued, and the observed page title was '403 Forbidden'. The domain employed technologies such as HSTS, Cloudflare Browser Insights, and HTTP/3, with nameservers robin.ns.cloudflare.com and zeus.ns.cloudflare.com. Gridinsoft assigned it a trust score of 0/100.

Users who visited vote-buttcoin.app should assume their credentials or interactions may have been compromised. If login details were entered, change passwords immediately and enable two-factor authentication on all related accounts. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand, Buttcoin. Additionally, report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.