trump-event[.]com

This domain, trump-event.com, is currently flagged as an active credential phishing infrastructure. Registered on October 12, 2025, through a Hong Kong-based registrar, the domain resolves to the IP address 104.21.70.65 and is protected by Cloudflare, as indicated by detected technologies including HTTP/3. The site returns a 404 Not Found page title, suggesting either a placeholder, misconfigured landing page, or an attempt to evade detection while maintaining operational infrastructure. Analysis indicates the domain has been identified in 24 threat intelligence pulses, demonstrating persistent inclusion in security monitoring systems. It appears on three security blocklists and is flagged by 3 out of 95 security vendors in aggregated scanning results. The domain holds a trust score of 0 out of 100, reinforcing its classification as high-risk. SSL certification is provided by Google Trust Services, which does not inherently validate the legitimacy of the site but ensures encrypted connections, a common tactic used by phishing operators to appear credible. What remains uncertain is the exact nature of the phishing campaign, as the page title does not reveal specific branding or targeting. No evidence confirms whether this infrastructure is used for political, financial, or other credential harvesting purposes. The use of Cloudflare may obscure hosting details and hinder attribution, while the 404 response could indicate a temporary state or a deliberate evasion technique. Defenders should treat this domain as active phishing infrastructure and implement blocking measures at the network and endpoint levels. Monitoring for connections to 104.21.70.65 or related domains registered through the same registrar may help identify additional malicious activity. Given its inclusion in multiple threat intelligence feeds, organizations are advised to correlate logs for any interactions with this domain, particularly those involving credential submission or user redirection.