trumpgo[.]top

This domain is flagged for elevated-risk brand impersonation targeting crypto casino and gambling platforms. Analysis indicates trumpgo.top mimics legitimate blockchain-based gambling services, leveraging the Trump brand to deceive users into engaging with fraudulent financial transactions or credential harvesting schemes. The threat type is specifically classified as brand impersonation within the online gambling sector, a tactic commonly used to exploit trust in established names for illicit gain. Infrastructure analysis reveals multiple technical indicators supporting this classification. The domain trumpgo.top was registered on December 22, 2025, through Global Domain Group LLC, and resolves to IP address 172.67.140.77, hosted on Cloudflare’s network (AS13335). It lacks an SSL certificate, increasing exposure to interception risks. Security vendors on VirusTotal flagged the domain at a rate of 18/95, while it appears on one security blocklist. The page title, 'Trumpgo: Donald Trump’s Leading Blockchain Crypto Casino,' further confirms the intent to impersonate a high-profile gambling service. No legitimate association with the targeted brand has been verified. Mitigation steps for this threat type include immediate blocking of the domain across network security controls, particularly in environments where online gambling or cryptocurrency transactions occur. Security teams should monitor for related domains registered under the same registrar or resolving to the same IP, as these may indicate coordinated campaigns. End-user education should emphasize verifying domain authenticity and SSL certificates before interacting with gambling or crypto platforms. Organizations should also review logs for connections to 172.67.140.77 or domains created around December 22, 2025, to identify potential compromise. If credentials or financial details were entered on this site, affected users should reset passwords and revoke access to linked crypto wallets immediately.