trump-meme[.]top

Analysis indicates that the domain trump-meme.top was registered on 2026-02-21 and is currently taken offline. When active, the site served a page titled "Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets," which matches the pattern of a fake airdrop scam targeting cryptocurrency users. The domain resolves to IP address 45.9.148.51, which is located in the Netherlands and belongs to ASN 49447 (Nice IT Services Group Inc.). An SSL certificate identified as R11 was present, suggesting the use of encrypted connections to lend credibility.

Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, indicating a malicious classification. VirusTotal analysis recorded detections by 2 of 93 security vendors, and the domain appears on one external security blocklist. It was also blocked by the PhishDestroy filtering service. The intelligence notes an impersonation label of "across," implying the campaign may be designed to lure victims across multiple brands, though no specific brand is enumerated in the available data.

Defenders should add both the domain and its hosting IP to deny and reputation lists, monitor for re‑registration or similar domains resolving to the same IP range, and enforce strict filtering of URLs containing the Arbitrum airdrop phrasing. User education campaigns should remind stakeholders that legitimate airdrops are announced only through official channels and that unsolicited offers of up to $25,000 are highly suspect. Ongoing telemetry should be collected to identify any resurgence of the campaign or related infrastructure, and any future observations of the domain should be reported to threat‑sharing platforms.