trump-ai[.]entrance-cryptolist[.]com

Analysis of trump-ai.entrance-cryptolist.com indicates an active phishing domain with elevated risk, first registered on June 17, 2024, through Key-Systems GmbH. As of July 29, 2026, the domain resolves to IP address 188.114.96.3 and is hosted behind Cloudflare nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com. Security vendor detections on VirusTotal report 17 of 91 engines flagging the domain, while PhishDestroy has explicitly blocked it, and it appears on at least one additional security blocklist. The domain name incorporates 'trump-ai' and 'cryptolist,' suggesting a potential focus on cryptocurrency-related lures, though no confirmed brand impersonation or specific scam type has been verified in available data.

The exact content of the site remains unanalyzed, and no page title, phishing kit, or targeted brand has been identified in the provided intelligence. Infrastructure analysis reveals Cloudflare hosting, which is commonly used by threat actors to obscure origin servers and evade takedowns. Defenders should treat this domain as malicious infrastructure. Blocking the domain and its resolving IP at network and endpoint levels is recommended.

Organizations using PhishDestroy or compatible blocklists may already have protection in place. Further investigation into associated cryptocurrency wallets, redirect chains, or credential harvesting mechanisms is advised if the domain is encountered in logs or user reports. No SSL certificate details or HTTP response data were provided in the available evidence, limiting additional technical assessment.