gettrumpmemeairdrop[.]pages[.]dev

PhishDestroy identifies gettrumpmemeairdrop.pages.dev as a domain actively impersonating Trump Token, a cryptocurrency brand, with clear intent to deceive users into interacting with malicious content. This domain leverages Cloudflare’s infrastructure and a Google Trust Services SSL certificate to lend false legitimacy, aiming to harvest credentials or drain crypto wallets under the guise of a memecoin airdrop campaign. The domain resolves to IP 172.66.44.150 and is currently under active investigation. This threat advisory is supported by hard data: VirusTotal currently flags the domain with 1/95 detections, indicating a high evasion rate among antivirus engines. The domain is registered through Cloudflare, Inc., a common tactic to obscure the true registrant and infrastructure ownership. While the precise creation date is not publicly disclosed via WHOIS due to Cloudflare’s privacy protections, active indexing by threat intelligence platforms suggests recent deployment. Despite the lack of immediate detection, the combination of brand impersonation, crypto-related lure, and SSL certificate utilization presents a clear risk of credential theft and financial compromise. Users who have accessed this domain or clicked any links should immediately cease interaction with the site. Do not enter any credentials, connect wallets, or download files. Clear browser cache and cookies associated with the domain, and consider running a full antivirus scan. For organizational networks, block the domain at the DNS/firewall level and add the IP 172.66.44.150 to deny lists. Report the domain to your security team and relevant threat intelligence platforms. Proactive monitoring of wallet addresses or credentials used on the site is advised.