# Phishing sites impersonating Aliexpress PhishDestroy has recorded 35 phishing domains impersonating Aliexpress since 2025-08-07, 4 of them in the last 30 days. The most used registrars are Gname.com and NameCheap; the most common TLDs are .com and .online. Open Aliexpress only from its official app or a saved bookmark. 35Domains, all time 4Last 30 days 17Online at last check 5Confirmed takedowns ## New domains in the last 90 days Aliexpress phishing domains detected per day: 9 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Aliexpress site Words most often added to the brand in reported domains: parceltracx, globexshipping, globexships, aliexpressgo, ganar, bondly, coup, vicarshop, aliexpressi, protocol. - Type the address yourself or use a bookmark; phishing links for Aliexpress arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Aliexpress does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Aliexpress phishing domains The 35 most recently detected domains impersonating Aliexpress Domain | First detected | Status at last check | Registrar | [ghexu.cc](https://phishdestroy.io/domain/ghexu.cc/) | 2026-10-21 | Online | Gname.com | [ganar2026it.vip](https://phishdestroy.io/domain/ganar2026it.vip/) | 2026-10-17 | Online | Gname.com | [ganar2026sp.vip](https://phishdestroy.io/domain/ganar2026sp.vip/) | 2026-10-17 | Online | Gname.com | [readyotp.com](https://phishdestroy.io/domain/readyotp.com/) | 2026-10-07 | Online | NICENIC | [secoupon.com](https://phishdestroy.io/domain/secoupon.com/) | 2026-09-12 | Online | Gabia | [comecome.click](https://phishdestroy.io/domain/comecome.click/) | 2026-09-04 | Online | Sav.com | [couponatome.com](https://phishdestroy.io/domain/couponatome.com/) | 2026-09-02 | Online | GoDaddy.com | [filmistanstudios.com](https://phishdestroy.io/domain/filmistanstudios.com/) | 2026-08-11 | Online | GoDaddy.com | [mackeyins.com](https://phishdestroy.io/domain/mackeyins.com/) | 2026-08-08 | Online | GoDaddy.com | [sastacosmetics.com](https://phishdestroy.io/domain/sastacosmetics.com/) | 2026-06-11 | Online | HOSTINGER operations | [smsvirtual.co](https://phishdestroy.io/domain/smsvirtual.co/) | 2026-05-02 | Offline | NAMECHEAP | [homeharvest.co.za](https://phishdestroy.io/domain/homeharvest.co.za/) | 2026-04-30 | Offline | Cybersmart | [account-reactivate.com](https://phishdestroy.io/domain/account-reactivate.com/) | 2026-03-18 | Online | Ultahost | [aliexpress-usa.com](https://phishdestroy.io/domain/aliexpress-usa.com/) | 2026-03-11 | Offline | Global Domain | [edenrockcafe.com](https://phishdestroy.io/domain/edenrockcafe.com/) | 2026-03-01 | Offline | DropCatch.com 1200 | [parceltrac.online](https://phishdestroy.io/domain/parceltrac.online/) | 2026-02-26 | Offline | Dynadot | [cuponsluiza.online](https://phishdestroy.io/domain/cuponsluiza.online/) | 2026-02-26 | Offline | PublicDomainRegistry.com | [alexitaly.com](https://phishdestroy.io/domain/alexitaly.com/) | 2026-02-09 | Offline | Gname.com | [aliexpress66.cc](https://phishdestroy.io/domain/aliexpress66.cc/) | 2026-02-02 | Taken down | Gname.com | [aliexpressgo.top](https://phishdestroy.io/domain/aliexpressgo.top/) | 2026-01-05 | Offline | NameSilo | [aliexpressgo.com](https://phishdestroy.io/domain/aliexpressgo.com/) | 2026-01-04 | Offline | Gname.com | [myixi-power.com](https://phishdestroy.io/domain/myixi-power.com/) | 2025-12-31 | Online | HiChina (www.net.cn) | [aliexpress.lm-e.top](https://phishdestroy.io/domain/aliexpress.lm-e.top/) | 2025-12-30 | Offline | Registrar.eu | [f1169862.xsph.ru](https://phishdestroy.io/domain/f1169862.xsph.ru/) | 2025-11-18 | Taken down | SPRINTHOST-NET-193 (ASN: 35278) | [globexships.online](https://phishdestroy.io/domain/globexships.online/) | 2025-11-18 | Offline | COSMOTOWN | [globexships.online.parceltracx.org](https://phishdestroy.io/domain/globexships.online.parceltracx.org/) | 2025-11-18 | Offline | NameCheap | [fmjd.com](https://phishdestroy.io/domain/fmjd.com/) | 2025-11-16 | Online | GoDaddy.com | [galaxysecurityservice.org.parceltracx.org](https://phishdestroy.io/domain/galaxysecurityservice.org.parceltracx.org/) | 2025-11-07 | Offline | NameCheap | [gt-protocol.io](https://phishdestroy.io/domain/gt-protocol.io/) | 2025-10-31 | Taken down | GoDaddy.com | [aliexpressi.online](https://phishdestroy.io/domain/aliexpressi.online/) | 2025-10-24 | Offline | Ledl.net & KG | [coup.vicarshop.com](https://phishdestroy.io/domain/coup.vicarshop.com/) | 2025-10-20 | Online | Dominet (HK) | [globexshipping.online](https://phishdestroy.io/domain/globexshipping.online/) | 2025-09-18 | Offline | Dynadot | [parceltracx.org](https://phishdestroy.io/domain/parceltracx.org/) | 2025-08-26 | Offline | NameCheap | [globexshipping.online.parceltracx.org](https://phishdestroy.io/domain/globexshipping.online.parceltracx.org/) | 2025-08-21 | Taken down | NameCheap | [bondly.site](https://phishdestroy.io/domain/bondly.site/) | 2025-08-07 | Taken down | NameCheap | [All 35 Aliexpress reports](https://phishdestroy.io/domain/?brand=Aliexpress) ## Where they are registered and hosted ### Registrars - [Gname.com](https://phishdestroy.io/registrar/name-com/)6 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)5 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)5 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)1 - [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)1 - Ledl.net & KG1 - [COSMOTOWN](https://phishdestroy.io/registrar/cosmotown/)1 - SPRINTHOST-NET-193 (ASN: 35278)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)14 - [.online](https://phishdestroy.io/tld/online/)5 - [.org](https://phishdestroy.io/tld/org/)4 - [.top](https://phishdestroy.io/tld/top/)2 - [.cc](https://phishdestroy.io/tld/cc/)2 - [.vip](https://phishdestroy.io/tld/vip/)2 - [.site](https://phishdestroy.io/tld/site/)1 - [.io](https://phishdestroy.io/tld/io/)1 ### Hosting networks - AS-COLOCROSSING, US6 - CLOUDFLARENET, US5 - Cloudflare, Inc.5 - AMAZON-02, US3 - ORACLE-BMC-31898 - Oracle Corporation, US2 - NETSEC-HK - Netsec Limited, HK2 - NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD1 - DOMAINTECHNIK Ledl.net GmbH, AT1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Aliexpress; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/aliexpress/