gettrumppmemes[.]us

Analysis of gettrumppmemes.us indicates a brand impersonation campaign targeting users of the Arbitrum blockchain ecosystem. The domain was registered on February 21, 2026 through Web Commerce Communications Limited and resolves to IP address 45.9.148.51, which is assigned to the Nice IT Services Group Inc. network (AS49447) located in the Netherlands. Infrastructure observations show the domain is served by the generic Webnic nameservers ns101.webnic.cc and ns100.webnic.cc, and no TLS certificate is present, confirming the site operates without encryption.

The page title "Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets" directly references the Arbitrum brand and suggests a crypto‑scam incentive, matching the classified scam type of a crypto scam. VirusTotal scans report that two of ninety‑five security vendors flagged the domain, and the site is listed on a public blocklist and has been blocked by PhishDestroy. Current HTTP status is offline, preventing immediate interaction, yet the remnants of the infrastructure remain observable.

Defenders should add the domain and its associated IP to deny‑list rules, monitor the Webnic name server range for similar registrations, and maintain awareness of any re‑hosting attempts. Continuous verification of blocklist updates and periodic re‑scanning of the domain are advised to promptly detect any resurrection of the service.