trumpreal[.]live

The domain trumpreal.live is currently active and classified as a generic phishing site. Infrastructure analysis shows the domain resolves to IP 172.67.214.127, which is part of the Cloudflare network (AS13335) and is served over HTTPS with a Google Trust Services/WE1 certificate. The site is hosted behind Cloudflare’s DNS (gabe.ns.cloudflare.com, arely.ns.cloudflare.com) and supports HTTP/3. Registration data indicates the domain was created on 21 February 2026 through Regional Network Information Center, JSC dba RU-CENTER. The HTTP response returns a 403 status and the page title is “trumpreal.live | 523: Origin is unreachable,” limiting direct content observation. Google Safe Browsing flags the URL for SOCIAL_ENGINEERING, and the domain appears on at least one security blocklist. Independent scanning on VirusTotal shows 11 of 93 security vendors flag the domain, and the Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. PhishDestroy has already blocked the domain. While the exact phishing payload cannot be confirmed due to the 403 response, the combination of a low trust score, multiple vendor detections, safe‑browsing classification, and blocklist presence provides strong evidence of phishing intent. Defenders should block the domain at network perimeter, add it to URL filtering policies, and monitor DNS queries for the associated Cloudflare IP. Continuous observation of any changes to the HTTP response or new detections is recommended to adjust mitigation measures promptly.