claim[.]trumpmeme[.]news

The domain claim.trumpmeme.news was a brand impersonation phishing site targeting users with a fake airdrop scam under the pretense of an 'OFFICIAL TRUMP | Airdrop'. It impersonated the 'across' brand and operated as a seed-phishing, airdrop scam, and wallet-connect phishing scheme. No crypto drainer kit was identified. The site is currently taken offline, but it previously posed an elevated risk to visitors seeking legitimate cryptocurrency offers.

Technical indicators confirm claim.trumpmeme.news was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. The domain appeared on 1 security blocklist (PhishDestroy) and was not flagged by Google Safe Browsing. It resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate was issued by WE1, and the domain was created on February 21, 2026. The registrar information was not available, and no legitimate association with the impersonated brand was found.

Users who interacted with claim.trumpmeme.news should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Report the domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader takedown efforts. Monitor financial and cryptocurrency accounts for suspicious activity.