qantasrewards[.]759819[.]com

This report analyzes a domain identified as a threat through impersonation. The domain qantasrewards.759819.com presented a page titled "Welcome to nginx!" while being configured to impersonate the brand x.com. The primary threat posed is brand impersonation, which could be used to deceive users into believing they are interacting with a legitimate service associated with x.com, potentially leading to credential theft or other fraudulent activities.

Technical evidence confirms the malicious nature of this domain. VirusTotal flagged the site with 12 detections out of 95 vendors. The domain is hosted on IP address 104.21.14.209, associated with AS13335 Cloudflare, Inc., located in the United States. It was created on 2026-02-21 and uses an SSL certificate type WE1. The domain is listed on 1 blocklist and has a GridinSoft trust score of 0 out of 100.

The current operational status of the domain is DOWN or OFFLINE, meaning it is not accessible. However, the overall risk level is assessed as high, based on a DOM risk score of 88 out of 100. This indicates that although the site is currently inactive, it poses a significant threat due to its impersonation of a major brand and its detection by multiple security vendors including ADMINUSLabs, BitDefender, Cluster25, CRDF, and CyRadar.