us-aliexpress[.]com

This domain, us-aliexpress.com, has been assessed as a high-risk generic phishing threat. The domain name is designed to deceive users into believing it is associated with the legitimate AliExpress platform, a common tactic for credential harvesting or financial fraud. With a risk level of high, immediate caution is advised.

Technical analysis reveals alarming indicators: VirusTotal reports 17 out of 95 security vendors flagging this domain as malicious, and it appears on 5 security blocklists. The domain was registered on September 19, 2025, through NOMINALIA INTERNET S.L., and resolves to IP address 172.67.131.60. Its SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of legitimacy. AlienVault OTX includes this domain in 15 threat intelligence pulses, underscoring its widespread recognition as a threat.

Users who encounter us-aliexpress.com should under no circumstances provide personal information, login credentials, or payment details. PhishDestroy recommends blocking this domain at the network level and reporting it to relevant authorities. If any interaction has occurred, users should change passwords immediately and monitor accounts for suspicious activity. Vigilance against such impersonation domains is critical to prevent identity theft and financial loss.