bloxlab[.]st

As of July 24, 2026, the domain bloxlab.st is flagged as a phishing site. The domain was registered on February 21, 2026, and has since been taken offline. Analysis indicates that the domain resolves to an IP address located in the United States (172.67.136.249, AS13335 Cloudflare, Inc.), suggesting the use of Cloudflare's services for infrastructure and possibly DDoS protection. The site was detected by 19 out of 93 security vendors, indicating a significant level of risk. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature.

The SSL certificate for the domain is issued by Let's Encrypt, which is common for both legitimate and phishing sites. The exact content of the site, as represented by the page title 'BLOXLAB,' has not been fully analyzed, but the elevated risk level suggests that it may have been used to host a phishing campaign targeting users. The Gridinsoft trust score for this domain is 1/100, reflecting a very low level of trust. Given these findings, network defenders should block access to bloxlab.st to prevent potential phishing attacks.

The domain's presence in multiple threat intelligence pulses (16 on AlienVault OTX) and its low trust score indicate that it has been actively monitored and flagged for potential threats. Furthermore, the use of Cloudflare and HTTP/3 technologies may have been intended to enhance the site's credibility and performance, making it more convincing to unsuspecting users. Defenders should also monitor for any related subdomains or similar-sounding domains to mitigate broader risks. Security teams are advised to review their logs for any historical activity involving this domain and take appropriate action to secure their networks.