Alibaba Cloud: phishing domains and abuse response

PhishDestroy reported 145 phishing domains registered with Alibaba Cloud between 2026-01-02 and 2026-06-18, sending 146 abuse reports. Median time from the first report until a domain stopped resolving: 24.0 days (n = 95). 40 of 135 domains were still active 90 days after the first report. The database holds 81 Alibaba Cloud domains in total.

145
Domains reported (window)
146
Abuse reports sent
24.0 days
Median time to unavailable
81
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Offline 91 (63%); Live 50 (34%); Suspended 4 (3%).

90th percentile time to unavailable: 37.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. WhatsApp6
  2. Google3
  3. Gemini2
  4. TikTok2
  5. MetaMask2
  6. Valve1
  7. Discord1
  8. TikTok1

Top-level domains

  1. .com40
  2. .shop23
  3. .cn7
  4. .life3
  5. .cc2
  6. .hk2
  7. .net1
  8. .invalid1

Most reported domains

  1. icefish.cc
  2. 0gas.fun
  3. 250club.com
  4. 3wcsgo.cc/home
  5. aierfeinails.com

Latest Alibaba Cloud phishing domains

The 30 most recently detected domains at Alibaba Cloud
DomainFirst detectedStatus at last checkRegistrar
awssjkokf.shop2026-10-22OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
aglidl.shop2026-10-20OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
agbie.shop2026-10-20OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
2026workclothesvipqx.shop2026-10-19OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
codeshare365.com2026-10-11OnlineAlibaba Cloud Computing (Beijing)
lhs-kitchen.com2026-10-11OnlineAlibaba Cloud Computing (Beijing)
ai.zdmlm.com2026-10-09OnlineAlibaba Cloud Computing (Beijing)
0q.hk2026-10-08OnlineAlibaba Cloud Computing
m.chinasexq.com2026-09-27OnlineAlibaba Cloud Computing (Beijing)
whytd.com2026-09-21OnlineAlibaba Cloud Computing (Beijing)
workclothesa.shop2026-09-20OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
workclothessale.shop2026-09-19OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
workclothesvip.shop2026-09-19OfflineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
venezlo-pl.shop2026-09-19OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
paymob.shop2026-09-19OfflineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
uuss6s.cloud2026-09-18OnlineAlibaba Cloud Computing
przecenione.shop2026-09-18OnlineAlibaba Cloud Computing
rylkostore.shop2026-09-18OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
resevedplolinepl.shop2026-09-17OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
it-mc2sainonline.shop2026-09-10OfflineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
orca.aelithia.shop2026-09-03OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
business-meta.iwenyan.com2026-08-31OfflineAlibaba Cloud Computing (Beijing)
lolbuku.com2026-08-28OnlineAlibaba Cloud Computing (Beijing)
2026workclothes.shop2026-08-28OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
2026f1storeplvip.shop2026-08-28OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
hbsxjd.com2026-08-10OnlineAlibaba Cloud Computing (Beijing)
cgprohelmets.com2026-07-20OnlineAlibaba Cloud Computing (Beijing)
tiktokshopcn.shop2026-07-19OfflineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
unishares.com2026-07-17OnlineAlibaba Cloud Computing (Beijing)
zmklg.q.hen360.com2026-07-09OnlineAlibaba Cloud Computing (Beijing)

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.