gettrumpmemes[.]pages[.]dev

This domain, gettrumpmemes.pages.dev, is identified as a brand impersonation threat targeting Trump Token, a cryptocurrency-associated brand. Analysis indicates the site presented itself as an official platform for Trump-themed memes, likely leveraging political and crypto-related themes to deceive users. No direct evidence of a crypto drainer kit was observed, but the domain’s branding alignment with a known cryptocurrency suggests a high probability of financial fraud intent, such as fake token sales or credential harvesting. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.44.207 and was registered through Cloudflare, Inc. on March 26, 2026. The SSL certificate is issued by Google Trust Services, and the site employed technologies including HSTS, Google Tag Manager, Cloudflare, and HTTP/3. Detection metrics show 3 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist, specifically PhishDestroy. The Gridinsoft trust score for this domain is 0/100, reinforcing its classification as high-risk infrastructure. As of the latest assessment, gettrumpmemes.pages.dev has been taken offline, likely due to enforcement actions by the hosting provider or domain registrar. However, the underlying threat remains elevated due to the domain’s prior association with brand impersonation and cryptocurrency fraud. Users who interacted with the site are advised to monitor financial accounts for unauthorized transactions, revoke any connected wallet permissions, and verify the legitimacy of any communications or transactions linked to Trump Token or similar assets. Organizations should update blocklists to include this domain and its associated IP to prevent residual exposure.