trumpwlfisol[.]com

This domain, trumpwlfisol.com, is flagged as an active phishing infrastructure with a high-risk classification as of July 12, 2026. Registered on September 1, 2025, through NAMECHEAP INC, the domain resolves to IP address 216.150.1.65 and employs a Let's Encrypt SSL certificate, indicating basic encryption measures. The page title 'Webby' suggests an attempt to impersonate or reference a service or platform by that name, though the exact nature of the phishing content remains unconfirmed due to lack of direct analysis. Technologies detected include Vercel, Typekit, jsDelivr, and HSTS, which are consistent with modern web hosting and content delivery practices but do not inherently indicate malicious intent. Infrastructure analysis reveals the domain is currently active and appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Six of ninety-five security vendors on VirusTotal have flagged the domain, though this does not provide conclusive evidence of its specific threat vector. AlienVault OTX records show the domain in seventeen threat intelligence pulses, further corroborating its association with malicious activity. The Gridinsoft trust score of 0/100 aligns with these findings, reinforcing the domain's high-risk status. Defenders should treat this domain as hostile infrastructure. Immediate actions include blocking the domain and its resolving IP at the network perimeter, monitoring for internal connections to 216.150.1.65, and reviewing logs for any prior interactions. Given the domain's presence on multiple blocklists and its active status, organizations should prioritize containment and investigation of any related alerts. The lack of confirmed brand impersonation or specific scam type means additional analysis of the site's content may be required to determine the exact phishing methodology employed.