Do Not Use Any Website That’s On This List—They’re All Traps
All these websites are dangerous
Sometimes it’s hard to resist a click — and attackers know it. And with thousands of domains registered daily, it’s all too easy to combine relevant keywords into something that seems legitimate but is not. They’re all traps and you need to steer clear.
So it is with the latest warning from BforeAI. In the immediate aftermath of the feud between President Donald Trump and Elon Musk, “threat actors are attempting to capitalize on this new, high-profile rivalry to register and weaponize a broad array of malicious domains.” These domains lead users into a maze of “crypto scams, phishing, fake betting sites, impersonation schemes, and engagement farming.”
While malicious domains listed by BforeAI include gaming, betting and merchandise, it’s the crypto-themed websites that stand out. Crypto became synonymous with the relationship between Trump and Musk and the flurry of crypto-related activity in the early days of the regime. Crypto lures will be all too believable to many.
These are the domains you need to avoid:
- trumpvselon.space
- trumpbilliondollar.com
- trump2mars.com
- trumpvselon.wtf
- trumpvselon.live
- trumpvsmusk.xyz
- elonxparty.site
- elonvstrump.xyz
- elonprivateaccess.com / .info / .online
- elonrip.online
Website: trumpbilliondollar.com (June 18, 2025)
The researchers point out that the attacks use “a wide range of typical TLDs [top-level domains],” including .com domains that are more believable than the more standout .xyz, .site and even .wtf. Security researchers have repeatedly warned users to watch for less common TLDs, but clearly that’s much harder when a .com is hijacked.
While these lures focus on Trump versus Musk, that’s not the warning here. It could be anything. Be wary of any domains using current event keywords to solicit a click.
The team says the “Elon vs. Trump feud” became “a fertile ground for opportunistic threat actors” in much the same way as we’ve seen with other events, especially disasters and conflicts, such as the California wildfires or Ukraine war.
This latest warning is similar to the list of Android apps hijacked to trick users into giving up their crypto wallet login details. For whatever reason, users seem more likely to shop around and take chances. Don’t.