trumpcoinclaim[.]com

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Trump Token, a cryptocurrency-related asset. Analysis indicates the site is designed to deceive users into believing it is an official platform for claiming or trading Trump Token, potentially facilitating unauthorized transactions, credential harvesting, or direct crypto asset theft. The domain exhibits characteristics consistent with crypto drainer or fraudulent investment schemes, leveraging high-profile branding to exploit user trust. Infrastructure analysis reveals the following technical indicators: the domain trumpcoinclaim.com resolves to IP address 216.198.79.1 and was registered on April 28, 2026, through Spaceship, Inc. It is currently offline but was previously detected using technologies including Wix, Sentry, React, Vercel, and HSTS. Security assessments show a Gridinsoft trust score of 0/100, with 2 out of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The page title was recorded as TRUMP, reinforcing the brand impersonation theme. Mitigation steps for organizations and end-users include immediate blocking of the domain and its associated IP (216.198.79.1) at the network perimeter. Security teams should monitor for any attempts to access this domain from internal networks and investigate potential exposure. Users who may have interacted with the site should revoke any connected wallet permissions, rotate credentials for associated accounts, and verify transaction histories for unauthorized activity. Cryptocurrency holders are advised to cross-reference official Trump Token communication channels to confirm legitimate platforms and avoid engaging with unverified domains claiming to offer token distributions or investments.