laurablockchain[.]pages[.]dev

Analysis of laurablockchain.pages.dev shows that the domain was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. located in the United States. The authoritative nameservers are melinda.ns.cloudflare.com and ian.ns.cloudflare.com. HTTP requests receive a 403 status code and the page title returned is “Suspected phishing site | Cloudflare”, indicating that the site was flagged by Cloudflare’s own anti‑phishing mechanisms. The host advertises HSTS, Cloudflare services and HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 label.

Security telemetry shows that two of ninety‑three VirusTotal scanners flagged the domain, and a Gridinsoft trust score of zero out of one hundred further corroborates its malicious nature. The domain is listed on four external blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. The threat type is identified as credential phishing, although the specific credential targets or compromised services have not been disclosed.

Current observations indicate the site is offline, and no additional content beyond the Cloudflare warning page has been captured. Defenders should immediately block laurablockchain.pages.dev at the DNS and proxy layers, add the IP address 188.114.97.3 to network‑level deny lists, and monitor for any re‑registration or reuse of the same nameservers. Continued scanning with sandbox environments is recommended if the site reappears, and any inbound traffic matching the observed TLS fingerprint should be inspected for malicious payloads.