aliexpress66[.]cc

This domain, aliexpress66.cc, is identified as a high-risk brand_impersonation threat targeting AliExpress, a global e-commerce platform. Analysis indicates the domain was designed to mimic the legitimate AliExpress interface, as evidenced by the page title 'AliExpress' and the absence of any legitimate branding deviations. No drainer kit signatures were detected in initial scans, though the infrastructure aligns with common phishing deployment patterns used to harvest user credentials and payment details. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain resolves to IP address 119.28.119.83, hosted within AS132203 (Tencent Building, Kejizhongyi Avenue, Singapore). It was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with fraudulent domains. Google Safe Browsing explicitly flags the domain as phishing, while VirusTotal reports 19 out of 95 security vendors detecting malicious behavior. The domain appears on one security blocklist, and no SSL certificate was present at the time of assessment, further reducing user trust signals. As of the latest verification, aliexpress66.cc has been taken offline, likely due to enforcement actions or hosting provider intervention. While the immediate threat is mitigated, residual risks persist, including potential DNS cache poisoning or secondary domains linked to the same threat actor. Users who interacted with the domain should immediately revoke any shared credentials, monitor financial transactions for unauthorized activity, and verify the legitimacy of any communications claiming to originate from AliExpress. Organizations are advised to update blocklists with this domain and its associated IP to prevent future access attempts.