Alibaba

E-commerce & retail Chinaalibaba.comRank 50 of the most impersonated
Cert findings · 24 h
3
Cert findings · 7 days
19
15 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
303
12 listed by a source or an address list
Official domains
642
verified from Alibaba's own sites and records

Certificate findings for Alibaba

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Alibaba's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 30 findings, grouped by hostname

  1. www.taobao-alibabainfo.com HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    www.taobao-alibabainfo.com
    First seen
    2026-11-05 09:11 UTC
    First published
    2026-11-05 09:50 UTC
    DNS
    Not resolving · checked 2026-11-05 10:58 UTC
    Checks
    Overdue since 2026-11-05 09:57 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.61.139.85.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 202.61.139.85
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-05 08:00 UTC to 2027-02-03 07:59 UTC
    Logged 2026-11-05 09:07 UTC in Google Argon2027h1, entry 872,579,175
    SHA-256 a7c2c1cd23fba700f31f507d7506df1cc0a4b0a6858260b3638a3c99b56c7674
    Public key SHA-256 738e518b8592318fbb97cec0b319f42cde07e3f38d61319086f04bffbf5345d9
    Brand
    Alibaba
    Addresses
    202.61.139.85 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    taobao-alibabainfo.com
    Registered
    2026-11-05 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  2. tdum.alibaba.com.fjcloud.com US · AS46844 · Sharktech2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 17 y ago
    DetailsHide
    Hostname
    tdum.alibaba.com.fjcloud.com
    First seen
    2026-11-05 09:02 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.98.43.99.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.98.43.99
    Brand
    Alibaba
    Addresses
    208.98.43.99 · United States · AS46844 SHARKTECH - Sharktech
    208.98.40.226 · United States · AS46844 SHARKTECH - Sharktech
    Domain
    fjcloud.com
    Registered
    2009-09-28 · eName Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  3. sms.alibabaweb.ir IR · AS205585 · ARVANCLOUD-CDN-IR Noyan Abr…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    sms.alibabaweb.ir
    First seen
    2026-11-05 01:16 UTC
    First published
    2026-11-05 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 02:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.143.233.133.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.143.233.133
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 00:15 UTC to 2027-02-03 00:15 UTC
    Logged 2026-11-05 01:14 UTC in Google ParcelYard2027h1, entry 617,672,712
    SHA-256 006c1cd5aafb8b1c377e60f861f0b4be07b0d5e40ccdf5056d35e7cafcf79fee
    Public key SHA-256 7828899bae8a22c9e39da4d1419fe8f0419e830b65d94dfa9fcd3e4a3d2a6a93
    Brand
    Alibaba
    Addresses
    185.143.233.133 · Iran · AS205585 ARVANCLOUD-CDN-IR Noyan Abr Arvan Co. ( Private Joint Stock)
    185.143.234.133 · Iran · AS205585 ARVANCLOUD-CDN-IR Noyan Abr Arvan Co. ( Private Joint Stock)
    Domain
    alibabaweb.ir
    MX
    Receives mail at alibabaweb.ir
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:26 UTC

    Suggest a correction

  4. helpcenter.taobao.com.makeins.info HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    helpcenter.taobao.com.makeins.info
    First seen
    2026-11-04 07:01 UTC
    First published
    2026-11-04 08:03 UTC
    DNS
    Not resolving · checked 2026-11-05 10:18 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.9.223.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.9.223
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 05:59 UTC to 2027-02-02 05:59 UTC
    Logged 2026-11-04 06:58 UTC in IPng Networks Gouda2027h1, entry 311,533,293
    SHA-256 828d574acefef4ccf0f803c93bf04624884b12bebbede8c73714ad0ba4de7b6d
    Public key SHA-256 b9e852596577bc96ee5060d4e44accd2455e762413900018dbe7cd9fcc91c5f1
    Brand
    Alibaba
    Addresses
    118.107.9.223 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    makeins.info
    Registered
    2026-11-04 · NameMart Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  5. helpcenter.taobao.com.makeins.my HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    helpcenter.taobao.com.makeins.my
    First seen
    2026-11-04 06:52 UTC
    First published
    2026-11-04 08:03 UTC
    DNS
    Not resolving · checked 2026-11-05 10:18 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.9.223.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.9.223
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 05:51 UTC to 2027-02-02 05:51 UTC
    Logged 2026-11-04 06:49 UTC in Let's Encrypt Sycamore2027h1, entry 936,346,922
    SHA-256 314ee38950d68da60fdfe214a3bfbf31fd205e56481fbe73c06eb12e0d63db0a
    Public key SHA-256 78456e8a97511483eff7ca6ee72edff0af6a9d9394a2dabadbdaabc6798db742
    Brand
    Alibaba
    Addresses
    118.107.9.223 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    makeins.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:01 UTC

    Suggest a correction

  6. www.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  7. webmail.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    webmail.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  8. webdisk.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    webdisk.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  9. taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  10. mail.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    mail.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  11. cpcontacts.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpcontacts.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  12. cpcalendars.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpcalendars.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  13. cpanel.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpanel.taobao247.com.vn
    First seen
    2026-11-01 09:01 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  14. autodiscover.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    autodiscover.taobao247.com.vn
    First seen
    2026-11-01 09:00 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  15. autoconfig.taobao247.com.vn US · AS7393 · CYBERCON, INC.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    autoconfig.taobao247.com.vn
    First seen
    2026-11-01 09:00 UTC
    First published
    2026-11-01 09:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.109.149.129.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.109.149.129
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 08:01 UTC to 2027-01-30 08:01 UTC
    Logged 2026-11-01 08:59 UTC in Google PlumbersArms2027h1, entry 553,551,815
    SHA-256 970ba1e35395cda10b3f59cb0cdbbb699074ef52582fcdeb1fc7e458e3d972ec
    Public key SHA-256 3f12fff31592f2155567bab5c5dba53b37ab5336a0b7df11a6f272fc4d30d95c
    Brand
    Alibaba
    Addresses
    213.109.149.129 · United States · AS7393 CYBERCON - CYBERCON, INC.
    Domain
    taobao247.com.vn
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  16. www.alibaba-baklava.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    www.alibaba-baklava.ru
    First seen
    2026-10-31 18:47 UTC
    First published
    2026-10-31 19:03 UTC
    DNS
    Resolves · checked 2026-11-04 19:10 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.196.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.196
    Certificate
    Issued by YR1
    Valid 2026-10-31 17:46 UTC to 2027-01-29 17:46 UTC
    Logged 2026-10-31 18:45 UTC in Google PlumbersArms2027h1, entry 543,991,017
    SHA-256 9fe5b900e7dce0b30f905b57128bde3b291d3a60bd870693de33072180733de2
    Public key SHA-256 63778c96fd08bf02a32050b6caa7f9b4a325af6c1bb7715f1ec84697b809f64b
    Brand
    Alibaba
    Addresses
    45.130.41.196 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    alibaba-baklava.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  17. taobao168.cc HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    taobao168.cc
    First seen
    2026-10-30 22:06 UTC
    First published
    2026-10-30 22:50 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 27.124.21.148.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 27.124.21.148
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 21:03 UTC to 2027-01-28 21:03 UTC
    Logged 2026-10-30 22:02 UTC in IPng Networks Halloumi2027h1, entry 316,088,853
    SHA-256 5d1485436906bd9d505c80d739c68b86cc0a2ba0d50f703a993b5cada9e5e433
    Public key SHA-256 fa78b0e13388c1afedbb284aed60dd9e535ae031b2ccf0f8ec526381ba39be95
    Brand
    Alibaba
    Addresses
    27.124.21.148 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    taobao168.cc
    Registered
    2026-05-06 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  18. tmall.kentcasino-login.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    tmall.kentcasino-login.ru
    First seen
    2026-10-30 05:32 UTC
    First published
    2026-10-30 06:35 UTC
    DNS
    Resolves · checked 2026-11-05 06:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-30 04:28 UTC to 2027-01-28 04:28 UTC
    Logged 2026-10-30 05:26 UTC in Google ParcelYard2027h1, entry 517,440,507
    SHA-256 0a96b4cc72edadcca17df20999ee5789c387d377853b5113626befea552f6afe
    Public key SHA-256 c1f447367b8996217680ddf2f40f11b40b298b5f77fe4a82d75b33d45b97f316
    Brand
    Alibaba
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    kentcasino-login.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  19. taobao1119.com DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    taobao1119.com
    First seen
    2026-10-30 02:47 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 01:44 UTC to 2027-01-28 01:44 UTC
    Logged 2026-10-30 02:42 UTC in Google ParcelYard2027h1, entry 515,641,620
    SHA-256 4c844bd6bca4c73f53e26ade1300f8abdfc1f5249b68327e68248cd1a9b5359f
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    Alibaba
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    taobao1119.com
    Registered
    2026-08-27 · Domain Science Kutatasi Szolgaltato Korlatolt Felelossegu Tarsasag
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  20. www.alibaba-lieferservice.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.alibaba-lieferservice.de
    First seen
    2026-10-29 05:57 UTC
    First published
    2026-10-29 06:44 UTC
    DNS
    Resolves · checked 2026-11-05 06:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 04:54 UTC to 2027-01-27 04:54 UTC
    Logged 2026-10-29 05:53 UTC in Google PlumbersArms2027h1, entry 501,352,644
    SHA-256 5aa1d79ac3a89400650fb0900c48b26b403f099029b5ebc8c4dcf97467218b2b
    Public key SHA-256 9ecfcdb5929fcb519f40ca79d6e0d0f1898d59926b65af416069c0a57f2e1ee7
    Brand
    Alibaba
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    alibaba-lieferservice.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  21. alibaba-lieferservice.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    alibaba-lieferservice.de
    First seen
    2026-10-29 05:57 UTC
    First published
    2026-10-29 06:44 UTC
    DNS
    Resolves · checked 2026-11-05 06:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 04:54 UTC to 2027-01-27 04:54 UTC
    Logged 2026-10-29 05:53 UTC in Google PlumbersArms2027h1, entry 501,352,644
    SHA-256 5aa1d79ac3a89400650fb0900c48b26b403f099029b5ebc8c4dcf97467218b2b
    Public key SHA-256 9ecfcdb5929fcb519f40ca79d6e0d0f1898d59926b65af416069c0a57f2e1ee7
    Brand
    Alibaba
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    alibaba-lieferservice.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  22. www.alibaba-abin.ir IR · AS51026 · MobinhostInfrastructure Dad…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.alibaba-abin.ir
    First seen
    2026-10-28 10:42 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.53.143.214.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.53.143.214
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-28 09:38 UTC to 2027-01-26 09:38 UTC
    Logged 2026-10-28 10:36 UTC in Google PlumbersArms2027h1, entry 487,501,375
    SHA-256 3bb6f717a635b12a1957720f41fa0a3501d55d3616b6e876bc8e5c485af65f19
    Public key SHA-256 f234b4a58989ed4e1a86c9c7f0bf136dee975d2718cb3a96e1f0bd5714dbd9d0
    Brand
    Alibaba
    Addresses
    185.53.143.214 · Iran · AS51026 MobinhostInfrastructure Dade Pardazi Mobinhost Co LTD
    Domain
    alibaba-abin.ir
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  23. alibaba-abin.ir IR · AS51026 · MobinhostInfrastructure Dad…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    alibaba-abin.ir
    First seen
    2026-10-28 10:42 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.53.143.214.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.53.143.214
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-28 09:38 UTC to 2027-01-26 09:38 UTC
    Logged 2026-10-28 10:36 UTC in Google PlumbersArms2027h1, entry 487,501,375
    SHA-256 3bb6f717a635b12a1957720f41fa0a3501d55d3616b6e876bc8e5c485af65f19
    Public key SHA-256 f234b4a58989ed4e1a86c9c7f0bf136dee975d2718cb3a96e1f0bd5714dbd9d0
    Brand
    Alibaba
    Addresses
    185.53.143.214 · Iran · AS51026 MobinhostInfrastructure Dade Pardazi Mobinhost Co LTD
    Domain
    alibaba-abin.ir
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  24. www.alibaba-grill-telgte.de DE · AS8560 · IONOS-AS IONOS SE
    Phishing hostIONOSAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC reject
    DetailsHide
    Hostname
    www.alibaba-grill-telgte.de
    First seen
    2026-10-27 14:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.160.0.235.
    1. Phishing-host list fetched with the address
    2. Resolved to 217.160.0.235
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 472,365,321
    SHA-256 346063652cef1b8c6d6020acd51fab09fdd371c1083d1a8d1af3075f5f2f39cf
    Brand
    Alibaba
    Addresses
    217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    alibaba-grill-telgte.de
    MX
    Receives mail at smtpin.rzone.de
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 08:31 UTC

    Suggest a correction

  25. www.uedsports-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.uedsports-taobao.com.cn
    First seen
    2026-10-27 05:52 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.150.18.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.150.18
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 466,691,790
    SHA-256 0805632e0104c63b7117a0dbb32e29b409ba76089a121b2c48a8a68175798139
    Brand
    Alibaba
    Addresses
    23.235.150.18 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    uedsports-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  26. uedsports-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    uedsports-taobao.com.cn
    First seen
    2026-10-27 05:52 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.150.18.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.150.18
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 466,691,790
    SHA-256 0805632e0104c63b7117a0dbb32e29b409ba76089a121b2c48a8a68175798139
    Brand
    Alibaba
    Addresses
    23.235.150.18 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    uedsports-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  27. m.uedsports-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    m.uedsports-taobao.com.cn
    First seen
    2026-10-27 05:52 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.150.18.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.150.18
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 466,691,790
    SHA-256 0805632e0104c63b7117a0dbb32e29b409ba76089a121b2c48a8a68175798139
    Brand
    Alibaba
    Addresses
    23.235.150.18 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    uedsports-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  28. www.ued-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.ued-taobao.com.cn
    First seen
    2026-10-27 03:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.148.26.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.148.26
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 796,133,290
    SHA-256 05031b85f1df259bbce9851f688f5285f0eece7e9dc676f39411d66475dd1b55
    Brand
    Alibaba
    Addresses
    23.235.148.26 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    ued-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  29. ued-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ued-taobao.com.cn
    First seen
    2026-10-27 03:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.148.26.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.148.26
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 796,133,290
    SHA-256 05031b85f1df259bbce9851f688f5285f0eece7e9dc676f39411d66475dd1b55
    Brand
    Alibaba
    Addresses
    23.235.148.26 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    ued-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  30. m.ued-taobao.com.cn HK · AS132839 · POWER LINE DATACENTER
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    m.ued-taobao.com.cn
    First seen
    2026-10-27 03:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 23.235.148.26.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 23.235.148.26
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 796,133,290
    SHA-256 05031b85f1df259bbce9851f688f5285f0eece7e9dc676f39411d66475dd1b55
    Brand
    Alibaba
    Addresses
    23.235.148.26 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    ued-taobao.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Alibaba when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in E-commerce & retail

All brands →