trumprush[.]com
“Trumprush: Donald Trump’s Leading Blockchain Crypto Casino”
Resumen de las pruebas
Analysis indicates that trumprush.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited. The domain resolves to the Cloudflare IP address 188.114.97.3, located in the United States and announced as AS13335 Cloudflare, Inc. Nameserver records point to daphne.ns.cloudflare.com and marty.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No SSL certificate is presented, meaning the site was served over plain HTTP. The page title retrieved from the site reads "Trumprush: Donald Trump’s Leading Blockchain Crypto Casino," which aligns with the classified scam type of a crypto‑focused gambling scheme. Malware intelligence identifies the underlying phishing kit as the "Gambler Scam," reinforcing the gambling‑and‑cryptocurrency narrative.
VirusTotal scanning shows that six of ninety‑five security vendors flagged the domain, providing independent detection evidence. The domain is blocked by PhishDestroy and appears on one additional security blocklist, indicating that at least one external blocklist has catalogued the threat. Current status is reported as taken offline, but the infrastructure components—particularly the Cloudflare IP and nameservers—remain reusable for future malicious deployments.
Defenders should immediately add trumprush.com to URL filtering and DNS block policies, monitor the associated IP address and Cloudflare nameservers for re‑use, and consider broader blocking of the identified kit signature. Continuous observation of the registrar NiceNIC for any re‑registration attempts is advised. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms employed, as no further content analysis beyond the page title is available. The lack of SSL further exposes any residual traffic to interception. Vigilance is recommended to detect potential re‑emergence of the scam under new subdomains or hosting configurations.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-1770575708-trumprush.com- Artefacto PDF
- Evidencia en PDF
Historial de reportes 2
- Reporte 1 Phishing Abuse Report: trumprush[.]com
- Reporte 2 ⚠️ ESCALATION #2 (616h active): Phishing - trumprush[.]com
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.