trumpdynast-presale[.]pages[.]dev

This domain, trumpdynast-presale.pages.dev, is currently listed as an active generic phishing infrastructure. Registration data show the site is hosted on Cloudflare Pages, a serverless hosting platform that provides automatic SSL termination and CDN services. The domain has been added to two public blocklists and is actively blocked by the PhishDestroy and ScamSniffer filtering services. VirusTotal records indicate that the URL was examined by 91 antivirus and URL‑reputation engines; none of the engines raised a detection at the time of analysis.

The absence of detections does not constitute validation of safety, and the domain remains flagged by external blocklists. No public Safe Browsing, Open Threat Exchange, or similar reputation feeds have yet reported the domain, and no IP address, ASN, or geographic location has been disclosed in the available intelligence. Likewise, the HTTP response code, certificate details, and page title have not been captured, preventing a more granular assessment of the site’s surface.

The limited evidence suggests that the infrastructure is intentionally minimal, relying on Cloudflare’s shared hosting to obscure the originating network. Defenders should continue to block the domain at the DNS and proxy layers, incorporate it into URL filtering policies, and monitor for any new indicators such as additional blocklist listings or changes in the Cloudflare Pages configuration. Ongoing surveillance of VirusTotal submissions and any emerging threat‑intel feeds is recommended to detect potential escalation or reuse of the domain in future campaigns.