givetrump[.]org

The domain givetrump.org was registered on 30 October 2025 through Web Commerce Communications Limited and is currently hosted on the Cloudflare network (AS13335) at IP address 188.114.97.3, which geolocates to the United States. Authoritative name servers are hold1.luxhost.org and hold2.luxhost.org, and the site does not present an SSL/TLS certificate, returning an HTTP 404 Not Found status page. VirusTotal has recorded 12 detections out of 95 scanned security vendors, indicating that multiple antivirus and URL‑reputation engines flag the domain as malicious. The domain appears on three public blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services. Independent reputation scoring from Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low confidence in the site's legitimacy.

The only observable page content is the generic “404 Not Found” title, and no further page body or phishing landing page has been captured before the takedown. Analysis of the available artifacts suggests that the domain was being used for a generic phishing campaign, although the specific target brand or credential‑harvesting technique has not been disclosed. The combination of a recent registration date, lack of encryption, a low‑reputation IP address, and multiple vendor detections aligns with typical infrastructure employed by opportunistic phishing operators. Because the site is already offline, immediate mitigation focuses on preventing future reuse of the same infrastructure.

Defensive teams should continue to block the domain and its associated IP address at perimeter firewalls, proxy filters, and DNS‑based security solutions. Updating threat intelligence feeds to include the domain, its name servers, and the Cloudflare IP will help ensure that any re‑registration attempts are caught early.