# trumpnow.live — SUSPICIOUS

> trumpnow.live is a confirmed Trump-themed credential phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies trumpnow.live as an active credential phishing site targeting users with a fabricated 'Trump Now' theme. The domain exhibits clear red flags including a recently registered date, hosting infrastructure associated with malicious activity, and zero detections across 95 VirusTotal scanners. This site is actively engaged in deceptive practices aimed at harvesting user credentials under the guise of political content.  trumpnow.live resolves to IP address 188.114.97.3, a known malicious hosting range frequently linked to phishing campaigns. The domain was registered on March 02, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar often exploited by threat actors for bulk malicious registrations. The site employs a Let's Encrypt SSL certificate to enhance legitimacy, despite its fraudulent nature. As of current analysis, the domain remains undetected on major threat intelligence platforms, including VirusTotal with 0/95 detections, indicating evasion of standard security measures. The absence of historical blocklist entries suggests this is a newly deployed threat with high potential for victim compromise.  Immediate mitigation is required for organizations and end-users. Users should avoid accessing trumpnow.live and report the domain to their security teams or through official phishing reporting channels. Network administrators are advised to block the domain at the DNS and firewall levels, and inspect outbound traffic for connections to 188.114.97.3. Given the domain’s recent registration and lack of detection, proactive hunting for similar domains using AI-driven threat intelligence tools is recommended to prevent credential theft. Threat hunters should monitor for DNS resolution patterns, SSL certificate reuse, and WHOIS anomalies to disrupt this campaign before it escalates.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-02 13:07:35
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/871e0f3d-17f2-4a8c-b021-ac35bf9f541f
- PhishDestroy: https://phishdestroy.io/domain/trumpnow.live/
- LLM endpoint: https://phishdestroy.io/domain/trumpnow.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trumpnow.live/
Last updated: 2026-03-22