zalfi[.]top

The domain zalfi.top, now offline, was actively involved in phishing activities. With 14 out of 95 vendors on VirusTotal marking it as malicious, the domain posed a significant threat during its operational period. PhishDestroy first identified this domain on February 26, 2026, shortly after its creation on February 21, 2026. This rapid detection underscores the domain's use in a potentially aggressive phishing campaign.

Hosted on an IP address managed by Cloudflare, Inc. in the United States, zalfi.top exploited the infrastructure to carry out its malicious activities. The domain's SSL certificate was issued by WE1, a detail that might have been used to lend an appearance of legitimacy to unsuspecting victims. The domain achieved a platform risk score of 78 out of 100, indicating a high level of threat potential.

Despite its brief lifespan, zalfi.top managed to evade detection by many security vendors initially, highlighting the importance of early detection systems like PhishDestroy. The domain's presence on one public blocklist further emphasizes its recognized threat level. Although zalfi.top is currently offline, its existence serves as a reminder of the persistent and evolving nature of phishing threats.