minecraft-story-mode[.]pages[.]dev

Analysis of minecraft-story-mode.pages.dev indicates an active generic phishing campaign targeting users seeking the Minecraft Story Mode Android application. The site was registered on March 24, 2026 and is fronted by Cloudflare infrastructure, resolving to IP address 172.66.47.143 located in the Cloudflare, Inc. network. The domain employs Cloudflare Browser Insights and HTTP/3, and presents a valid SSL certificate issued by Google Trust Services under the WE1 label. The page title presented by the server reads "Minecraft Story Mode APK Download Free for Android [Latest]", aligning with the known gaming scam classification. HTTP responses return status code 403, and the site is listed on a single blocklist (PhishDestroy). Nameservers are keanu.ns.cloudflare.com and kristin.ns.cloudflare.com, and the Gridinsoft trust score is 0/100, indicating a high likelihood of malicious intent. Current intelligence does not reveal additional payloads or redirect behavior, and no public malware analysis is available. Defenders should block the domain and its associated IP, monitor DNS queries for the listed nameservers, and apply URL filtering for the documented page title keywords. Ongoing observation is advised to detect any evolution of the phishing infrastructure or emergence of new indicators.