bondly[.]site

This domain, bondly.site, is currently under investigation for brand impersonation phishing activity specifically targeting Aliexpress. The domain remains active and presents itself as a virtual credit card solution, a tactic commonly used to harvest payment credentials from unsuspecting users. Analysis of bondly.site reveals it was registered through NameCheap, Inc. on May 30, 2025, and resolves to the IP address 163.61.188.5, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The domain employs a Let's Encrypt SSL certificate (YE1) to appear legitimate. Despite its recent creation, it has already been flagged by one security blocklist, though VirusTotal reports 0 detections out of 95 vendors. The page title, "vtbills - Virtual Credit Card Solution," does not align with Aliexpress's legitimate services, further indicating malicious intent. Infrastructure analysis reveals that bondly.site is still operational and has not been widely detected by security vendors, suggesting it may be part of a newer or targeted phishing campaign. Organizations and users are advised to block the domain at the network level and monitor for related indicators of compromise. Financial institutions and e-commerce platforms should alert customers to verify domain authenticity before entering credentials or payment details. Continuous monitoring of this domain and its associated IP is recommended to track potential evolution in its tactics or infrastructure.