zlayalavka[.]com

This domain, zlayalavka.com, is currently active and returns HTTP 200 with the page title “Just a moment…”. The site resolves to 104.21.64.122, an address owned by Cloudflare, Inc. (AS13335) and is served through Cloudflare’s edge network, indicated by the presence of Cloudflare Browser Insights and HTTP/3. The SSL certificate is issued by Google Trust Services under the WE1 label, confirming that TLS termination is handled by Cloudflare’s infrastructure. Registration data shows the domain was created on 21 February 2026 through NiceNIC International Group Co., Limited and uses the Cloudflare nameservers agustin.ns.cloudflare.com and romina.ns.cloudflare.com.

The domain carries a Gridinsoft trust score of 0 / 100, and it is listed on one security blocklist. PhishDestroy has already blocked the host, and two of ninety‑five VirusTotal security vendors have flagged it as malicious. The combination of a low trust score, blocklist presence, and vendor detections aligns with the classification of generic phishing.

While the page title provides little insight into the specific phishing campaign, the infrastructure characteristics—recent registration, Cloudflare hosting, low trust rating, and vendor detections—suggest a purpose‑built malicious site. Defenders should add zlayalavka.com to URL filtering and endpoint blocklists, monitor DNS queries for the associated IP address, and consider enforcing stricter outbound controls for traffic to Cloudflare‑proxied domains that lack known business justification. Ongoing observation of any changes to the page content or additional detections is advised.