Phishing detection: alibabarest.com

Alibaba
https://alibabarest.com Access site
Screenshot
Screenshot of alibabarest.com
Investigate
Domain alibabarest.com2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 188.114.96.3
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://alibabarest.com
urlscan Wayback archive.today
Cert Google Trust Services
crt.sh Censys Google CT
Phishunt analysis Beta
32 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +5.1 urlscan.io
  • +3.7 Brand in domain label
  • +3.4 Shared IP cluster
  • +2.2 Country mismatch
  • +2.0 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.7 Brand typo
  • +0.6 Final host mismatch
  • +0.6 Login text in screenshot
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.2 Suspicious TLD
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Alibaba on a domain with the brand embedded in the apex label and in the TLS certificate SAN. Confirmed by URLScan. Redirects to a different final host and displays login keywords, targeting Alibaba account credentials via Cloudflare-fronted infrastructure.

urlscan.ioBrand in cert SANFinal host mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-07 · confidence 85%
Domain & Network
Whois
Registrar GoDaddy.com, LLC
Network
IP 188.114.96.3
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert Google Trust Services
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Registrar GoDaddy.com, LLC
abuse@godaddy.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-07 08:30 UTC  ·  Last refreshed 2026-09-11 15:30 UTC