elon4afdmeme[.]com

On July 24, 2026, investigators examined the domain elon4afdmeme.com, which is currently offline. The domain was registered on April 29, 2025 through GMO Internet Group, Inc. d/b/a Onamae.com. DNS resolution points to IP 162.55.90.94, an address owned by Hetzner Online GmbH in Germany and announced by AS24940. The TLS certificate was issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2, indicating a legitimate‑looking HTTPS endpoint. Web server fingerprinting identified Nginx with the OpenResty module.

The site title retrieved prior to takedown reads "Elon4AfD – The First Meme Token Bridging Elon & German Politics", and the listed scam type is a crypto scam that impersonates the CoinGecko brand. VirusTotal recorded a single positive detection among 95 scanners, and the domain appears on one external blocklist used by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation. The available evidence confirms that the infrastructure was deliberately set up to leverage CoinGecko’s brand reputation for a cryptocurrency‑related deception, but the exact content of the landing page and any credential‑collection mechanisms remain unknown because the site has been taken offline.

Defenders should continue to block the IP address 162.55.90.94 and the associated ASN, and add elon4afdmeme.com to domain‑level deny lists. Monitoring of future registrations by the same registrar and of new domains resolving to the same hosting provider is advised. Because the SSL certificate is publicly trusted, security controls that rely solely on certificate legitimacy may be insufficient. Continual correlation with threat‑intel feeds that cite the single VirusTotal positive and the PhishDestroy blocklist will help surface any re‑use of this infrastructure.