darb[.]qmobilitucj[.]com

This report analyzes the domain darb.qmobilitucj.com, which is assessed as a high-risk threat due to verified impersonation of the Q Mobility brand. The site page title is "DARB Platform," and the identified scam type is Impersonation (Q Mobility). The primary threat posed by this domain is brand impersonation, likely designed to deceive users into believing they are interacting with a legitimate Q Mobility platform, potentially leading to credential theft or other fraudulent activity.

Technical evidence confirms the threat. VirusTotal analysis shows 22 out of 95 security vendors flagged the domain as malicious. The domain is hosted on IP address 43.165.133.137, located in Japan and associated with AS132203 Tencent Building, Kejizhongyi Avenue. It was registered through Dominet (HK) Limited and created on 2026-01-19. The domain uses no SSL certificate, indicating a lack of basic security. It is flagged by multiple security vendors including ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25, and is listed on one blocklist. The nameservers are martin.ns.cloudflare.com and venus.ns.cloudflare.com.

The current status of the domain is DOWN/OFFLINE. The GridinSoft trust rating is 0 out of 100, confirming a high risk level. The combination of a recent creation date, lack of SSL, and multiple vendor detections strongly indicates this domain is a malicious impersonation site, even though it is currently offline.