trump-force-47[.]entry-cryptolist[.]app

Analysis conducted on July 29, 2026, identifies trump-force-47.entry-cryptolist.app as an active phishing domain targeting cryptocurrency users. Infrastructure review reveals the domain resolves to IP address 188.114.97.3, an endpoint that has been previously associated with malicious activity. At the time of assessment, the domain lacks configured nameservers, a common indicator of rapid deployment tactics used in phishing campaigns to evade immediate detection. Detection metrics from security vendors indicate elevated risk: 16 of 91 engines on VirusTotal flag the domain as malicious, while it appears on at least one security blocklist.

The domain is also actively blocked by PhishDestroy, a specialized anti-phishing service. The domain name itself, containing terms like 'trump' and 'crypto,' suggests an attempt to exploit political or financial themes to lure victims, though the exact content and targeted brand remain unconfirmed due to the absence of page title or kit analysis in available intelligence. No registrar or hosting provider details are currently available, limiting attribution efforts.

Defenders are advised to treat this domain as a confirmed phishing threat and implement blocking measures at the DNS and network levels. Further monitoring of associated IP ranges and subdomains under entry-cryptolist.app is recommended to identify related malicious infrastructure. Given the domain's active status and detection profile, organizations should prioritize alerting users to avoid interaction with trump-force-47.entry-cryptolist.app and any linked resources.