Phishing detection: alibaba666.app
Alibaba Screenshot
Investigate
Domain
alibaba666.app1 CT host on apex
urlscan
VirusTotal
Whois
IP
172.67.160.52
ipinfo
Greynoise
URL
https://alibaba666.app
Phishunt analysis Beta
38
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +2.2 Country mismatch
- +2.0 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.8 Young domain
- +0.7 Brand in cert SAN
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.3 Long domain
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Alibaba on a .app domain with the brand present in the certificate SAN, page title, and visible page text. Registered via Dynadot and confirmed malicious by URLScan. Hosted behind Cloudflare, targeting Alibaba account credentials.
urlscan.ioBrand in cert SANBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-07 · confidence 88%
Domain & Network
Whois
Registrar
Dynadot LLC.
Network
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists