gettrumpmemeclaim[.]com

The domain gettrumpmemeclaim.com is identified as a high-risk brand impersonation threat targeting Telegram users. Analysis confirms the domain was actively impersonating Telegram services, a common tactic to deceive users into disclosing credentials or installing malicious payloads. The site is currently offline, but prior activity warrants close monitoring. Infrastructure analysis reveals the domain was registered through NameSilo, LLC on January 22, 2025, and resolved to the IP address 104.21.16.1. Security vendor detections include 11 of 95 flags on VirusTotal, with additional blocking by five independent security blocklists. The page title, HWHB8 Game, suggests an attempt to lure victims with gamified or reward-based social engineering. Trust scores from Gridinsoft rate the domain at 0/100, reinforcing its malicious classification. While gettrumpmemeclaim.com is no longer accessible, the domain remains a documented threat vector. Organizations and users are advised to maintain blocklist entries for this domain and its associated IP. Security teams should review logs for connections to 104.21.16.1 or references to the HWHB8 Game title. If credentials or sensitive data were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended.