Phishing detection: 22.alibaba-taobaol.cn
Alibaba Screenshot
Investigate
Domain
22.alibaba-taobaol.cn0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
114.134.184.138
ipinfo
Greynoise
URL
https://22.alibaba-taobaol.cn
Phishunt analysis Beta
20
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +3.7 Brand in domain label
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.1 ASN reputation
- +1.1 Cert reuse
- +1.1 No CSP header
- +1.0 Site cluster
- +0.7 Brand in cert SAN
- +0.7 Bulletproof DNS
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.4 Long domain
- +0.3 Free CA
- +0.1 Hyphens
- +0.1 Deep subdomain
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Alibaba and Taobao via a hyphenated domain embedding both brand names under a numeric subdomain. Hosted on a Hong Kong IP with bulletproof nameservers, the site targets Chinese-speaking users and is consistent with a credential-harvesting operation.
Brand in domain labelKeyword matchBulletproof DNS
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-31 · confidence 50%
External detection
No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists