fuck-trump[.]gate-cryptolist[.]com

Analysis of fuck-trump.gate-cryptolist.com indicates a generic phishing domain registered on June 17, 2024, through Key-Systems GmbH. The domain was taken offline by July 29, 2026, but prior infrastructure review reveals it resolved to 188.114.96.3, an IP associated with Cloudflare nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. At the time of assessment, the domain returned an HTTP 200 status, suggesting an active endpoint before deactivation. VirusTotal detections from 14 of 91 security vendors confirm malicious classification, while PhishDestroy blocklist inclusion further supports its phishing designation.

The domain appears on one additional security blocklist, though specific threat intelligence feeds naming it remain limited. No brand target, phishing kit fingerprint, or page title is available in the provided data, preventing classification beyond generic phishing. The use of Cloudflare nameservers is consistent with threat actor tactics to obscure hosting origins and evade takedowns. Defenders should treat this domain as compromised and prioritize blocking both the domain and its resolved IP in perimeter security controls.

Historical DNS logs should be reviewed for connections to 188.114.96.3, particularly during the domain's active window. Given the domain's offline status, further forensic analysis of captured payloads or redirect chains is not possible without archived telemetry. Monitoring for re-registration or similar patterns under the gate-cryptolist.com parent domain is recommended.