alibaba66a.net - phishunt.io

Alibaba

https://alibaba66a.net Access site

Screenshot

Investigate

Domain alibaba66a.net1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 172.67.200.30

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://alibaba66a.net

urlscan

Wayback

archive.today

Cert SSL Corporation

crt.sh

Censys

Google CT

Phishunt analysis Beta

38 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+2.2 Country mismatch
+2.0 Young domain
+1.9 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.5 Young certificate
+0.3 Long domain
+0.2 Suspicious TLD

16 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates Alibaba using a domain embedding the brand name with numeric padding, and an SSL certificate whose SAN also references the brand. Confirmed malicious by urlscan and geolocated outside Alibaba infrastructure, indicating credential or account harvesting targeting Alibaba users.

Brand in domain labelBrand in cert SANurlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-30 · confidence 85%

Domain & Network

Whois

Registrar Dynadot Inc

Network

IP 172.67.200.30

Country