claim[.]gettrumppmemes[.]us

The domain claim.gettrumppmemes.us was created on February 21 2026 and is registered through Web Commerce Communications Limited dba WebNic.cc. It resolves to the IPv4 address 45.9.148.51, which is hosted in the Netherlands and assigned to AS49447 Nice IT Services Group Inc. The domain is served by the authoritative name servers ns101.webnic.cc and ns100.webnic.cc, both belonging to the same registrar. No TLS certificate was observed for the host, indicating that access was provided only over plain HTTP.

A single page retrieved before the site was taken offline carried the title "Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets," directly referencing the Arbitrum brand and promising a crypto‑related payout, which aligns with the classified crypto scam and brand impersonation. VirusTotal scans recorded three of ninety‑three security vendors flagging the domain as malicious, and the domain appears on two external blocklists, PhishDestroy and ScamSniffer, reinforcing its malicious reputation. The site’s current HTTP status is offline, so active content, redirects, or credential‑phishing mechanisms cannot be examined further.

Defenders should immediately block the domain and the associated IP address at network perimeters, incorporate the domain into URL filtering policies, and monitor DNS logs for any re‑appearance or resolution changes. Threat intelligence platforms should be updated with the registrar, nameserver, and hosting details to aid correlation with future Arbitrum‑related impersonation campaigns. Continuous observation of related brand‑impersonation activity is recommended to detect potential re‑use of the infrastructure.