darb[.]qmobtrily[.]info

This report details the technical threat posed by the domain darb.qmobtrily.info. The site presented a page titled "Welcome to nginx!" while impersonating the brand x.com, classifying it as an impersonation scam. The primary threat is that the site attempts to deceive users into believing they are interacting with a legitimate x.com service, potentially leading to credential theft or other fraudulent activities.

Technical analysis reveals a high detection rate, with 10 out of 95 VirusTotal vendors flagging the domain as malicious. It is flagged by multiple security vendors including Criminal IP, Chong Lua Dao, Cluster25, CRDF, and CyRadar, and appears on 1 blocklist. The domain resolves to IP address 188.114.97.3, located in the United States and hosted by AS13335 Cloudflare, Inc. It was created on February 21, 2026, and has no SSL certificate installed.

The current status of the domain is DOWN/OFFLINE, indicating it is not accessible at this time. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 10, reflecting a very low trust level and high risk. The overall risk level is assessed as high due to the impersonation of a well-known brand, high detection rate, and lack of SSL.