claim[.]gettrumppmemes[.]us
“Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets”
claim.gettrumppmemes.us — Contenuto non disponibile. Simulazione del marchio: Arbitrum; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 3/93 (CRDF, G-Data, Gridinsoft); 1 external blocklist match (ScamSniffer); PhishDestroy score 65/100. Registrar: Web Commerce Communica….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain claim.gettrumppmemes.us was created on February 21 2026 and is registered through Web Commerce Communications Limited dba WebNic.cc. It resolves to the IPv4 address 45.9.148.51, which is hosted in the Netherlands and assigned to AS49447 Nice IT Services Group Inc. The domain is served by the authoritative name servers ns101.webnic.cc and ns100.webnic.cc, both belonging to the same registrar. No TLS certificate was observed for the host, indicating that access was provided only over plain HTTP.
A single page retrieved before the site was taken offline carried the title "Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets," directly referencing the Arbitrum brand and promising a crypto‑related payout, which aligns with the classified crypto scam and brand impersonation. VirusTotal scans recorded three of ninety‑three security vendors flagging the domain as malicious, and the domain appears on two external blocklists, PhishDestroy and ScamSniffer, reinforcing its malicious reputation. The site’s current HTTP status is offline, so active content, redirects, or credential‑phishing mechanisms cannot be examined further.
Defenders should immediately block the domain and the associated IP address at network perimeters, incorporate the domain into URL filtering policies, and monitor DNS logs for any re‑appearance or resolution changes. Threat intelligence platforms should be updated with the registrar, nameserver, and hosting details to aid correlation with future Arbitrum‑related impersonation campaigns. Continuous observation of related brand‑impersonation activity is recommended to detect potential re‑use of the infrastructure.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi di VirusTotal
Dati e relazioni esterne
“The PhishDestroy system has identified this domain as a phishing threat, flagged both by our internal parser and reported by users. We also cross-reference with public databases and other antivirus systems.”
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo