Is buttcoinmoney.pages.dev safe? TrustSniffer's low-trust assessment: 35/100

Overview

This website is a single-page promotional site for a cryptocurrency "memecoin" called Buttcoin. Its homepage is titled "BUTTCOIN - The Original Memecoin Since 2011". It is served from a free, shared subdomain on a developer hosting platform rather than from a dedicated brand domain. The page carries a modest amount of text and presents the token to visitors as a novelty digital asset, apparently to promote the coin and attract interest in it.

Scam/Impersonation Risk

The most serious finding is that the domain is flagged by several independent security engines and is also listed on an external blacklist. This is a confirmed blacklisting rather than a soft reputational signal. It is the decisive factor in the cautionary posture of this report. No conflicting legal identities and no brand impersonation were observed, and no phishing-form or credential-harvesting behavior was detected in the live page. Behavioral testing was benign: three consecutive runs loaded the page cleanly. They showed no outbound data transfers, no wallet-connection prompts, no wallet-draining routines, no clipboard manipulation and no hidden forms. That absence of active exploitation is mitigating, but it cannot offset the blacklisting. Malicious behavior can be introduced later by swapping page content. The headline claim of being "the original memecoin since 2011" is a self-asserted superlative that nothing on the captured page supports. Unverifiable "original" and "since" claims are a common credibility device in token promotion. The site's hosting on a shared free subdomain also means it carries no independent brand ownership of its own domain name. Evidence:

• Homepage and domain-level reputation: multiple security engines classify the domain as malicious or suspicious, and it appears on an external blacklist.
• Homepage behavioral sandbox: all three runs succeeded with no external network calls, no wallet interaction, no password forms posting externally and no cloaking.
• Homepage title and copy: the "original memecoin since 2011" claim is presented without supporting documentation.

Regulatory Verification Notes

The captured page does not establish who operates the site or any legal entity behind the token, and no licensing, registration or regulatory standing could be tied to it. Operator identity could not be independently verified, and ownership is opaque. This is a transparency limitation, not an identity contradiction. No third-party broker or regulatory-database record matched the site, so no external reputational context is available from that source. Nothing here indicates the token or site is regulated. The site should not be treated as a supervised financial service. The blacklisting in the previous section, not this limited disclosure, drives the elevated risk assessment. Evidence:

• Homepage: no operator name, legal entity, license or registration number appears in the captured content.
• Hosting infrastructure: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by WE1 as a domain-validated (DV) certificate, valid to 2026-12-01 with about 36 days remaining. DV validation confirms control of the domain only and says nothing about the operator's identity.

What to Verify Next

Before any interaction, the operator and the token should be traced through independent channels. First, check whether a documented team, public repository or project announcement outside this site links to the same domain. Second, confirm the token's contract address and any claimed 2011 origin against public blockchain explorers and reputable token-tracking indexes, not against figures the site supplies. Third, check the current status of the blacklist and threat-intelligence listings, because compromised or repurposed pages are sometimes cleaned and relisted. Finally, confirm the official project channels through a source other than this page. Evidence:

• Homepage: the claimed origin and "original" status can be tested only against external, independently maintained records.
• Domain reputation: the existing listings should be rechecked directly at the listing providers before any decision is made.
• Hosting: the page lives on a shared free subdomain, so ownership of the project cannot be inferred from the domain itself.

Summary Verdict

The available evidence supports a high-risk posture. Confirmed adverse external listings outweigh the benign behavior observed in the live page. Operator identity is also unverified. The site is therefore not suitable for credentials, logins or financial interaction. At most it is suitable for passive, read-only viewing.

Infrastructure Integrity

The site is delivered through Cloudflare's content-delivery and web-application-firewall network. All observed addresses are edge servers, and the origin server was not observable. This hides the real hosting location and means independent verification of the underlying host is not possible, which could mask rapid content swaps. The shared infrastructure is a recognized, reputable provider with no abuse reports against its addresses, and that is mitigating. It does not offset the adverse external listings, and it does not demonstrate that the site's operator is legitimate.

Closing Assessment

Prospective users should restrict themselves to passive viewing. They should not connect a wallet, enter credentials, or send funds or personal data through this site. Any interest in the token should be pursued only through independently verified channels.