trumpslots[.]world

The domain trumpslots.world was registered through Global Domain Group LLC and first seen on 23 January 2026. Its authoritative nameservers are kim.ns.cloudflare.com and tate.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. DNS resolution points to the IPv4 address 104.21.10.234, a Cloudflare‑owned edge node that commonly hosts multiple unrelated sites, making attribution to a single operator difficult. The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, suggesting that at least one sinkhole or threat‑intel source has observed malicious use.

VirusTotal records show the domain was scanned by 91 AV engines, none of which raised a detection at the time of scanning; this absence of flags should not be interpreted as evidence of benign intent, especially given the ongoing investigation status. No public SSL certificate details, HTTP response codes, or page title information are available in the supplied intelligence, limiting the ability to confirm whether the site delivers a credential‑harvesting page or redirects to additional payloads. Similarly, there is no information about Safe Browsing status, OTX mentions, or other reputation scores. The lack of such data does not imply inactivity; rather it reflects a current gap in observable evidence.

Given the registration date, Cloudflare infrastructure, blocklist presence, and the generic phishing classification, defenders should treat trumpslots.world as a potentially active phishing lure. Recommended actions include adding the domain to internal deny lists, monitoring DNS queries for the associated IP and nameservers, and employing URL filtering to block HTTP/HTTPS connections to the domain. Continuous re‑inspection of VirusTotal and other reputation services is advised, as additional detections may emerge as the campaign matures.