melaniatrumpxxx[.]com

The domain melaniatrumpxxx.com is currently active and classified as a high‑risk generic phishing operation. Infrastructure analysis shows the domain resolves to the IPv4 address 3.33.130.190, which is mapped to a Canadian location and is serviced by an AWS Global Accelerator endpoint. The authoritative nameservers are ns21.domaincontrol.com and ns22.domaincontrol.com, both associated with GoDaddy.com, LLC, which also issued the TLS certificate (GoDaddy TLS Intermediate CA DV - R1v1). HTTP requests receive a 200 OK response, indicating that a web service is reachable. The domain is listed on three public blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports two detections out of ninety‑one scanners, confirming that at least a small subset of security products identify malicious behavior. The registration data points to GoDaddy as the registrar, with no further details on creation date disclosed. Evidence regarding the specific content or targeted brand of the site is not available, so the exact phishing lure remains unknown. Defenders should prioritize blocking the domain and its resolved IP address, incorporate the observed nameserver patterns and TLS fingerprint into detection rules, and monitor the AWS Global Accelerator range for related activity. Continuous feed updates from the cited blocklists and periodic re‑scans of the domain are recommended to capture any changes in payload or hosting.