blockstranding[.]world

Analysis indicates that the domain blockstranding.world resolves to the IP address 188.114.97.3, which is hosted within the Cloudflare network (AS13335) and appears to be located in the United States. The domain is registered via Cloudflare, Inc., and utilizes Cloudflare‑provided name servers bjorn.ns.cloudflare.com and melina.ns.cloudflare.com. TLS termination is performed by a Google Trust Services certificate (WE1), and the site enforces HSTS while supporting HTTP/3 and Cloudflare Browser Insights, suggesting a standard Cloudflare front‑end configuration. The HTTP response for the root URL returns status code 403, and the only visible page title is the German phrase “Nur einen Moment…”. Threat intelligence sources classify the activity as banking phishing. VirusTotal scans have recorded 19 positive detections out of 95 submitted analyses, and AlienVault OTX has referenced the domain in 23 separate pulses. The domain is currently listed on one public blocklist and has been blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious intent. Given the combination of a high detection rate, low trust score, and classification as banking phishing, defenders should block network traffic to blockstranding.world at the DNS and firewall levels, monitor for outbound connections to the associated IP address, and ensure that any credential‑capture attempts targeting banking services are flagged. Continued observation is advised to detect any changes in HTTP response codes or additional infrastructure modifications.