phishunt.io flags avinfra.in Alibaba phishing page
phishunt.io flagged an Alibaba phishing page at avinfra.in/Li/alibaba, hosted on 192.185.142.84. Alibaba is not involved.
- First reported
- Reports
- 1
Source: x.com · published
What happened
On 6 November 2026 the phishing tracker phishunt.io posted on X that avinfra.in was hosting a phishing page impersonating Alibaba. The post listed the path avinfra[.]in/Li/alibaba, said the host resolves to 192.185.142.84 on Oracle Corporation's network (AS31898) in the United States with a hosting tag for Endurance International Group, and linked to phishunt.io's Alibaba listing. The domain also appears on the Phishing Army blocklist. The domain is not operated by Alibaba, and Alibaba is not involved in the page.
How the scam works
Phishing pages like this are usually reached through a text message, email or search ad that claims there is a problem with an account, an order or a payment. The link opens a copy of the Alibaba sign-in or checkout screen on an address that has nothing to do with Alibaba. Anything typed into the form, such as an email address, password, card number or one-time code, goes to whoever runs the page rather than to Alibaba.
Criminals then use the stolen login to take over the account, place orders, change the recovery email or try the same password on other services. Card details can be used for fraudulent purchases within minutes. Because the page can look almost identical to the real one, the safest check is the address bar: avinfra.in is not a Alibaba address. Public blocklists and tracker feeds such as the one that flagged this site help browsers and security tools warn visitors, but a newly created page can stay online for some time before every filter catches it.
Anyone who entered details on avinfra.in should change the password through the official Alibaba app or website straight away, sign out other sessions, turn on two-step verification and contact their card issuer if payment details were entered. The indicators come from the tracker's post and have not been independently checked by scammers.com.
Source
Post by phishunt.io (@phishunt_io) on X, 6 November 2026, flagging avinfra.in. Not independently verified by scammers.com.
Red flags
- A Alibaba login or payment page on an address that is not an official Alibaba domain.
- A link to avinfra.in arriving by text, email or ad.
- A message that creates urgency about an account problem, order or payment.
- A request for your password, card number or one-time code after following a link.
- An Alibaba page placed in a folder on an unrelated Indian business domain.
If you were targeted
- 1Do not enter passwords, card numbers or one-time codes on a page reached from a text, email or ad.
- 2Open the company's official app or type its address yourself to check your account.
- 3If you entered details, change your password at once and contact the company through its official channels.
- 4Report the message and the link to the company and to your national phishing reporting service.
- 5Delete the message without replying or tapping any links.