trumpx-x2[.]com

This domain is flagged for elevated-risk brand impersonation targeting Ethereum, a prominent cryptocurrency platform. Analysis indicates the threat type involves fraudulent representation of the Ethereum brand to deceive users into disclosing sensitive credentials, wallet information, or transferring assets under false pretenses. The page title, "The Official Trump Meme," suggests an attempt to exploit political themes to lend credibility to the scheme, a common tactic in cryptocurrency-related phishing campaigns. Infrastructure analysis reveals the domain trumpx-x2.com was registered on September 08, 2025, through Onlinenic Inc, a registrar frequently associated with high-risk domains. It resolves to the IP address 77.110.124.154, which has been linked to prior malicious activity. Detection metrics indicate limited but concerning visibility: the domain is flagged by 2 out of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. Additionally, the domain holds a Gridinsoft trust score of 0/100, further corroborating its malicious classification. The domain is currently offline, though historical activity and registration details remain relevant for threat correlation. Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and its associated IP (77.110.124.154) across organizational security controls. Network administrators should update intrusion detection systems to flag any attempts to resolve or communicate with trumpx-x2.com. End-users, particularly those engaged in cryptocurrency transactions, should be educated on verifying domain authenticity through official channels and scrutinizing page titles or branding that misaligns with legitimate Ethereum communications. Monitoring for newly registered domains under the same registrar (Onlinenic Inc) or resolving to the same IP may help preemptively identify related threats.