fialan[.]ua

The domain fialan.ua is currently active and resolves to the IP address 188.114.96.3, which belongs to Cloudflare’s network (AS13335) and is geolocated in the United States. The domain was created on 2017-11-01 and is delegated to the Cloudflare name servers jamie.ns.cloudflare.com and phil.ns.cloudflare.com. An HTTPS service is present, backed by a Let’s Encrypt/E8 certificate, and the web server returns HTTP 200 responses. The only visible page element is the title “Калькулятор доставки”. Malware scanning on VirusTotal shows that 2 of 91 security vendors have flagged the domain, and it appears on a single external blocklist. AlienVault OTX references the domain in one threat‑intel pulse, and PhishDestroy has listed it as blocked. Additional infrastructure data includes MX records pointing to Google’s mail infrastructure (aspmx.l.google.com, alt1.as...). A Gridinsoft trust score of 0/100 further indicates a lack of confidence in the site’s legitimacy. No detailed content analysis is available beyond the title, so the exact phishing methodology (e.g., credential harvesting form) remains unknown. Defenders should treat fialan.ua as high‑risk: block network connections to the domain and its IP, add the host to DNS and URL filtering policies, monitor for any associated traffic, and consider sinkholing the domain if possible. Continuous re‑evaluation is advised in case additional indicators emerge.