fall4lyt.top
Appeared in the .top zone on Wednesday, October 28, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The redirect lands on a genuine Cloudflare Access gate (the real cloudflareaccess.com, OTP email login for a Worker named young-rain-2aa3), which is Cloudflare's own access control in front of a private app, not impersonation. The random .top name gives no brand cue, though the content behind the gate cannot be seen.
The domain fall4lyt.top redirects to a fake Cloudflare Access login page (round-smoke-0691.cloudflareaccess.com) that impersonates Cloudflare's branding, logo, and authentication interface. The page requests email credentials with a 'Send login code' button posting to the attacker's server, using Cloudflare's legitimate visual design and 'Cloudflare Access' branding to deceive users into surrendering credentials. The arbitrary domain name combined with this credential-harvesting form is a sealed
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, October 28, 2026
Same data as JSON: /api/zone/domain/fall4lyt.top. This page is not indexed by search engines and does not link to the site it describes.