ohnivaliska.lol
Appeared in the .lol zone on Saturday, September 12, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain is simply gated behind genuine Cloudflare Access Zero Trust (legitimate cdn-cgi/access/login URL on cloudflareaccess.com with a valid signed JWT meta token), which is the owner's own access control, not impersonation of Cloudflare; the joke org name 'Heroin Corporation' and snarky disclaimer indicate a personal/hobby deployment.
The page impersonates Cloudflare Access by displaying the Cloudflare Access logo and branding, with a login form requesting email credentials, while the actual destination domain (heroincorporation.cloudflareaccess.com) is a subdomain abuse. The form posts to heroincorporation.cloudflareaccess.com and the disclaimer ('they WILL BE USED for whatever purpose') reveals malicious intent to harvest credentials. The nonsensical domain name ohnivaliska.lol redirects to this fake Cloudflare Access login
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, September 12, 2026
Same data as JSON: /api/zone/domain/ohnivaliska.lol. This page is not indexed by search engines and does not link to the site it describes.