{"report_id":"08821573-7492-4a69-b190-697cbf14a1e2","version":6,"status":"done","tags":[],"date":"2026-01-28T03:44:34Z","url":{"schema":"http","addr":"darbqmobilityae.com","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"title":"DARB Platform","dom":{"size":2259,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2259), with no line terminators","md5":"57b6f530a691c819156cdb5fe09c908d","sha1":"8f8fd40c9499fd8920bbe9cabfcf310e5aefe80b","sha256":"709e00a9fa8a3816186b5c69a3948de9f2b5cac886bd6c0163f03dfc2ecf38b7","sha512":"241b5dcd8ee4ca65fa653111c7ec00e0134a805d6c50d74204dd6cf9dc64f3816500c5b58eff7f6102979c5f84da4b937b1f40a9319d676f5cf74006fbe94dd8","ssdeep":"","tlshash":"914115e79cc11157a8231d1f81dd4a60469af7ab38702eca3782b41a8383ffe509b753","dom_hash":"domhash6448c70ea74166a48e6bd32b4c77471f","first_seen":"2026-01-11T13:01:27.973196Z","last_seen":"2026-04-26T00:12:54.79348Z","times_seen":284,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"darbqmobilityae.com","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T03:44:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T03:44:17Z","timestamp":1769571857,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":42898,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-01-28T03:44:17.947527+0000\",\"flow_id\":211353294971325,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":42898,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3425,\"start\":\"2026-01-28T03:44:17.893373+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"darbqmobilityae.com","ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":75,"request_count":15,"received_data":1674216,"sent_data":6563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-01-21T11:21:58.53138Z","alert_count":0,"request_count":1,"received_data":650,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/common.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"966d35204d4e687944efcc9b671be585","sha1":"a03e6c5955ae9ae71f21e19cbee0625fe7c19433","sha256":"131d692db6e7ae469ce6b36be5126ddc242522760f11b73ab0d2edc4c22d6fef","sha512":"43eb4f41788c22de86d98fc3192b0bb92fca64b933467ef16df0e092c33acefc2d86a75a83da4e1485d2eba88a599d5caadcc58fb0d044c4ec00c042b1d10e2b","ssdeep":"","tlshash":"2a11384469e34610819290ad399a2822f6364457f93cbe2476ada1453f8c66d07f27de","size":989,"data":"","first_seen":"2026-01-17T11:55:26.317407Z","last_seen":"2026-04-26T00:12:54.807648Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"15997dbf7d7b64676030fe4d78117e5f","sha1":"0b7980f482e326045edb4e48d9ba4bc59f815e89","sha256":"0fe6dcdb345a405768102cde47f0d1788f71b15b15272e6859c970ca8cf0343e","sha512":"28e352014d0399fa63a536e7f4411269de7b63805c35aef7acd6f5e9480153d0cacc74a5e85b05e339d4004e19d96f03d479ade284658b94e81e0edbe653d9da","ssdeep":"","tlshash":"cef02bf134f812a44a455922417b7b95780e84f6d118588897748cc918ed3701ba921f","size":507,"data":"","first_seen":"2026-01-17T11:55:26.328226Z","last_seen":"2026-04-26T00:12:54.880333Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"79d3047976294a77d989ee9b2cd1d222","sha1":"51503a911f345376f30051fd12a7b910a0fa0731","sha256":"69e4e38fae8f4781cd7dbd0da8d5b7ce3fe36c06baf41d9f03d5a4bd6f8309d8","sha512":"713937244b7fd9668e2950f3770367d3c0908257438f6c650710a8a2035862d63403fe17244108393ef7b0687b1de08870247162ea5f83e7761d4035a8c6df6b","ssdeep":"","tlshash":"8b61ea723a6c7838fa5a08d2a245fff0f84a2465f3b84dedfe518d1494d52704f0a71a","size":3174,"data":"","first_seen":"2026-01-17T11:55:26.324449Z","last_seen":"2026-04-26T00:12:54.86393Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/axios.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eb8e8e2284670dc214a3e70c25992b8","sha1":"94ece417aa560aa8de906e8f54c0985da90364cc","sha256":"96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455","sha512":"ae6cce74fa46a0ee1b00245f7da885ace7bd608d96152f3b4d9b2c1e66d53cbf5c1f298d1eb60cdf4a17a14296edc2fec63c22a7cf968025911ebe9272f7d49e","ssdeep":"768:iE/e1fRWqcYe4Q2q3jetDArR2d1mP2EduTgeIQN/s:VGoqcY22q3GASme1k","tlshash":"0a1385c6fbd57803b51630a98e8f754a76b4d05374046ca5bc4cb9e83fd883c86e6a89","size":42736,"data":"","first_seen":"2023-03-08T19:53:18Z","last_seen":"2026-08-06T22:39:10.596182Z","times_seen":25686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/main.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf2af0fdadfb6b0fab36262393b03d7","sha1":"1603fe221f7de13c75e2a0a92b86d5d558f4c956","sha256":"e3d34c04d3479eece9aaf481dd1a9f666a27a85cf8cbcc19a4a4a4c3fa5b973c","sha512":"3522cce5eeff0a1b70dc023125f7114daf30473950a37d3591a11cffc1caad70be8a6f21f412badd448fa278c7091eb41c4da19d05966977a9a62786d5e408d2","ssdeep":"3072:Rg8O4ZuAuvrVwNYw7nZLRKC97rUty4UC5oO4aTEnTj3sZP6:Rg82AuvrVwNYILRKC97rUtaC5oO4aTEb","tlshash":"01f372947ec089126b0a1ffb3a0aa4f8d9a42caa7c4844dbf85cfd745156667fde4230","size":169891,"data":"","first_seen":"2026-01-23T14:42:09.825535Z","last_seen":"2026-02-16T15:37:05.031594Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa4f657ef9c1a92050b322d1d95b53a","sha1":"c752d836d91cdd0606c2d7ca40be869830e44139","sha256":"c625e1df8a53db809b962a1fe3b938368bafd3dcf8b6732221a5a5d240960d59","sha512":"e6313070d5c8133c95201066475c00a04857d765974bcae8d089ffbb83a3bdce66a833fc3fa82d3a75b1204146ad1825e1ac5fd181d7e8a200c04f4c633fd314","ssdeep":"","tlshash":"75110d533ac1520cce577bd86953221eac192507348bddb2fc7c605a246bc46c4be8ec","size":1015,"data":"","first_seen":"2026-01-17T11:55:26.326205Z","last_seen":"2026-04-26T00:12:54.865066Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7a6ebf4ed072c960f2eab24bee444d35","sha1":"38180c138484aaacf1c594a69ff06f356a247385","sha256":"88fc5948160a39326b0a840fe30233b0af24f67e610109db4210a1956aa1bb46","sha512":"7e1699edaab42cb90298707027f7c0fb90f7fbc3835a6e8abe3e701b4239fcdc3c8a15867c8ac5a86f760c4444ef3f5cd8c2afcbd2ee4ff48f8e1a3ca2122801","ssdeep":"","tlshash":"27e0d83539b8f0e8ce96c90214bab7b1e40d9cb2c35690daab648d0480ee730136d15e","size":383,"data":"","first_seen":"2026-01-17T11:55:26.33044Z","last_seen":"2026-04-26T00:12:54.883184Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/vue.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d510c12b589a26e2c72f65a1e726a347","sha1":"61131c8e8cc4151fdc2d89e21f95ee27a76710c1","sha256":"d535a5f003b5350e4753025226c81f30cf883edb0ddc01901a31e49f0a9740b5","sha512":"a31326ea137759a06e3c7d26f26ca4adfe31bcc7b96cf24710bf6ef0cc1ae778b883f2f838145e8c615dcaeff42fc8118bec25d83eff4077ed24e67a20ddb945","ssdeep":"1536:DUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:SYeJpN28efKMBlmV00/r","tlshash":"c29308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93674,"data":"","first_seen":"2025-12-05T15:25:52.043787Z","last_seen":"2026-08-06T22:39:10.57159Z","times_seen":22289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/check.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"364469ad15c397b8cdb8394106b79c66","sha1":"db4b60baf52324c026c38f3417656816f17cf76f","sha256":"ee455fb388c52cb44af3696a28f9c3cd6a2314efade95e0d15254fbe8d5183ed","sha512":"0bcf5f1c6221c2e5c3c8d85dd63e44e46fa70b56663bdd6386dede0ef1a5a4f0b89a929eb9f0123a1ac3251313a751de67043bf3939dc9e4ed7ea1e983752741","ssdeep":"768:ksJDawYgSPVaeJFcR5kryNs4VqvwivUwK6wtvOA33q+L12n5Uq3YB0Hk6nztdAcZ:7o2hYvwiYtjOJf","tlshash":"d0e297097ec0744667065ff7363b88f1ed2e0cca688406afd208bc58769662fd5fa635","size":34133,"data":"","first_seen":"2026-01-23T14:42:09.833004Z","last_seen":"2026-02-10T09:58:00.719988Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"darbqmobilityae.com/static/font/img_19571c933e68_si1vsu.woff2","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/font/img_19571c933e68_si1vsu.woff2 HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://darbqmobilityae.com/static/css/pwotricg2754.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 184076\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"8efe516679482824d7dd4f4c6b77ff4b\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":184076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 184076, version 2.983","md5":"8b4f872c5de19974857328d06d3fe48f","sha1":"32092efbd7938af900e99d63cf25db246c6bff26","sha256":"30f77a5ff0bcba46d4e760b0c939a5ff112da0d3ddd13a261834134e00cc21c7","sha512":"c7b87b142cef8e1b31e5561593db2ac5eca2c578a724204464e9ede977c8107f3d6748e9b52d072aff04eef07b232b8f19286aa2267bc325c57926db1a2a3e9d","ssdeep":"3072:n/i8XilDQ8+jMiJpkOaE5tOMeawFlPgalLuAmKjLcSPwXUWFwZRqfs5Mi805Hx58:/iyUj+jMiJO1EzOMeawsAL9JLDPwXUWj","tlshash":"34041205981dd0cbd8c1ba3a68351ff112160fe216949940e767be278bffdcabc1ae10","first_seen":"2023-05-03T07:48:28Z","last_seen":"2026-08-06T21:14:47.778008Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2330,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/axios.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/axios.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 42736\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"b1cf32225809bf23a49dcfa159aeb6d2\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42736,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1eb8e8e2284670dc214a3e70c25992b8","sha1":"94ece417aa560aa8de906e8f54c0985da90364cc","sha256":"96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455","sha512":"ae6cce74fa46a0ee1b00245f7da885ace7bd608d96152f3b4d9b2c1e66d53cbf5c1f298d1eb60cdf4a17a14296edc2fec63c22a7cf968025911ebe9272f7d49e","ssdeep":"768:iE/e1fRWqcYe4Q2q3jetDArR2d1mP2EduTgeIQN/s:VGoqcY22q3GASme1k","tlshash":"0a1385c6fbd57803b51630a98e8f754a76b4d05374046ca5bc4cb9e83fd883c86e6a89","first_seen":"2023-03-08T19:53:18Z","last_seen":"2026-08-06T22:39:10.596182Z","times_seen":25686,"resource_available":true,"data":null}},"time_used":2266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2264,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/json","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:17.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 19:31:13 GMT","end":"Thu, 19 Mar 2026 19:31:12 GMT"},"fingerprint":{"sha1":"FD:43:17:F6:FC:F9:5E:2B:53:FD:34:62:25:32:FF:41:EC:72:38:91","sha256":"8D:5B:FC:11:FC:AF:23:2A:87:1C:7B:4B:8D:AD:0B:AB:BB:D9:D3:7D:C7:9E:49:C6:11:1F:78:3D:E2:1A:49:DC"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://darbqmobilityae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Wed, 28 Jan 2026 03:44:18 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adf22d9a8ca3a97a9ff78909b8702358","sha1":"f5046826566a7e98d6b5e5c7b0a65677c3bde708","sha256":"756edd1454b049c1370e83c864bc93dfdd82f44d8f9752b3068e5a11867a5de3","sha512":"182391c8c01e54481853a09aa4cf8072496850e45863b198721d0d572e3aa93d8fe11a90bfb24cf97fa64cc132f1594c379474db65db5a1d2207694f770443b9","ssdeep":"","tlshash":"c3d02b6621341b37aeed455c8406960622656e1f1642369f0fe72b0c100c87334f03ae","first_seen":"2023-04-17T17:28:07Z","last_seen":"2026-06-07T07:46:18.554959Z","times_seen":58786,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":61,"dns":3,"connect":25,"send":0,"wait":150,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/api/open/getSyncSettings","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:18.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /api/open/getSyncSettings HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 1204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"48f36427927aa359861ab6ec0d731852","sha1":"19772064442e74f59fd65d2965314710b03a64fa","sha256":"f2a0d6c6d8a00a972baaf70925da9a9d768958f70848f7a6f73c94e0a05ce499","sha512":"341b414146bc37ef14b41b19ec78900fdba0882454dd7341c14ae2e8783a4f14b253cb42cc36121164a69ff7d4855aa567ed5e278a053e6aa0831090eec516d4","ssdeep":"","tlshash":"e121494d9e3be97621bfc752a09df982418f4b348b758050ccc7d4d5169c842e20d6df","first_seen":"2026-01-28T03:44:39.00728Z","last_seen":"2026-01-28T12:15:52.152691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/img/img_d12a582f8912_odrki3.x_icon","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:18.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/img/img_d12a582f8912_odrki3.x_icon HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 15406\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"5379dd33e8ab0d014b6b7fd619976d4b\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"49eed2fe20c945fbac6e2da8e3482935","sha1":"4910144b05ae127300dba9ce189d03d169804e88","sha256":"924c8b66af518d070bdd2f473b6796672fa13fa732cf938832c6d46f6181d3a1","sha512":"1ee9422aef0e8a3d41c4ae323a6a4a3eb3a5834178b69014c305178f72d4bd4510d7decde4a9a9aeffdfb30f1cb6e4c36078ca5e1c43d3746eca8052c705e9a1","ssdeep":"384:/wqVsXbbLYk+YkgVs9kay2FjtquU/1EJ2kPfkeRcxNwYcfTkyudkokGWZNri5xR/:nSLYk+YkdkB2FjtDUdY2kHkMcx071Ykk","tlshash":"9ba2bb570843ffe8e1ebcff0de96598f526986be9a23280cb63461f02d55777902d40a","first_seen":"2025-09-23T11:20:43.60843Z","last_seen":"2026-04-21T06:36:02.178125Z","times_seen":282,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":929,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T03:44:11.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":838443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"bef2498d1bd1fafe9997ad78cdc54ba1","sha1":"eba9aad2faa27daa1512c95a81f92ee44dae3dbd","sha256":"0c4f108c33f737f08ae61bd9ac7cc6d1d15e856a224a0c81373dad15eeb942f4","sha512":"fcf37b1047a807e13a2e7039d4869e866c729583734c34b65fef1303f98f235bbb1fcf622faf51ed4c45372fb8f1c72db784878371e72a9b9700e9ba2dc42e6f","ssdeep":"24576:qatHPJUgiWC77obBtApL5s505BAcqrniT4AID9g:qOI3pVA6etmbCg","tlshash":"7f051360548209dcb7f41afce47afb3e1bfe6afbe04413ca7da870d25692106e885745","first_seen":"2026-01-17T11:55:26.321554Z","last_seen":"2026-04-26T00:12:54.846413Z","times_seen":95,"resource_available":false,"data":null}},"time_used":3245,"timings":{"blocked":595,"dns":37,"connect":274,"send":0,"wait":2055,"receive":0,"ssl":281},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/img/img_6ab0b3426e92_vtq2ey.png","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:14.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/img/img_6ab0b3426e92_vtq2ey.png HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2494\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"ae49db00d7efed71f78efe218e5d10cc\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 59, 8-bit/color RGBA, non-interlaced","md5":"e8dffb2f303fcbc70a960ed515aa72c6","sha1":"07a77777fe074b7561abd0f7135c9e5fa97ee8cb","sha256":"f77425c3147991905333abebc248f63082db6f51be8f6614faa297fa91dc5e3c","sha512":"984ab5cc1e5adffc62807a5e87bd8e71db398f16db1c4e4d5ca474e7dff184a3bbbce16a9a64fdd62c509f3ed1676a797fbfdbdf81873665591a3062ece3cb56","ssdeep":"","tlshash":"4a512cca056efc09a4925c1c2a3094f268d93f9ea0a78942ead84f65771afe0c234715","first_seen":"2025-09-23T11:20:43.603812Z","last_seen":"2026-04-26T00:12:54.850915Z","times_seen":293,"resource_available":false,"data":null}},"time_used":2943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2942,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/vue.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/vue.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 93674\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"4043439fa74bf49c667031f856f0ea8d\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":93674,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65445)","md5":"d510c12b589a26e2c72f65a1e726a347","sha1":"61131c8e8cc4151fdc2d89e21f95ee27a76710c1","sha256":"d535a5f003b5350e4753025226c81f30cf883edb0ddc01901a31e49f0a9740b5","sha512":"a31326ea137759a06e3c7d26f26ca4adfe31bcc7b96cf24710bf6ef0cc1ae778b883f2f838145e8c615dcaeff42fc8118bec25d83eff4077ed24e67a20ddb945","ssdeep":"1536:DUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:SYeJpN28efKMBlmV00/r","tlshash":"c29308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2025-12-05T15:25:52.043787Z","last_seen":"2026-08-06T22:39:10.57159Z","times_seen":22289,"resource_available":true,"data":null}},"time_used":2098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2095,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/main.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 169891\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"98f2d2af5986e0b3b4e943d11b3c794d\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169891,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65310), with no line terminators","md5":"ddf2af0fdadfb6b0fab36262393b03d7","sha1":"1603fe221f7de13c75e2a0a92b86d5d558f4c956","sha256":"e3d34c04d3479eece9aaf481dd1a9f666a27a85cf8cbcc19a4a4a4c3fa5b973c","sha512":"3522cce5eeff0a1b70dc023125f7114daf30473950a37d3591a11cffc1caad70be8a6f21f412badd448fa278c7091eb41c4da19d05966977a9a62786d5e408d2","ssdeep":"3072:Rg8O4ZuAuvrVwNYw7nZLRKC97rUty4UC5oO4aTEnTj3sZP6:Rg82AuvrVwNYILRKC97rUtaC5oO4aTEb","tlshash":"01f372947ec089126b0a1ffb3a0aa4f8d9a42caa7c4844dbf85cfd745156667fde4230","first_seen":"2026-01-23T14:42:09.825535Z","last_seen":"2026-02-16T15:37:05.031594Z","times_seen":302,"resource_available":true,"data":null}},"time_used":1457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1451,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/check.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/check.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 34133\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"2148063a502a832794d30ccf25ce3273\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":34133,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34121), with no line terminators","md5":"364469ad15c397b8cdb8394106b79c66","sha1":"db4b60baf52324c026c38f3417656816f17cf76f","sha256":"ee455fb388c52cb44af3696a28f9c3cd6a2314efade95e0d15254fbe8d5183ed","sha512":"0bcf5f1c6221c2e5c3c8d85dd63e44e46fa70b56663bdd6386dede0ef1a5a4f0b89a929eb9f0123a1ac3251313a751de67043bf3939dc9e4ed7ea1e983752741","ssdeep":"768:ksJDawYgSPVaeJFcR5kryNs4VqvwivUwK6wtvOA33q+L12n5Uq3YB0Hk6nztdAcZ:7o2hYvwiYtjOJf","tlshash":"d0e297097ec0744667065ff7363b88f1ed2e0cca688406afd208bc58769662fd5fa635","first_seen":"2026-01-23T14:42:09.833004Z","last_seen":"2026-02-10T09:58:00.719988Z","times_seen":300,"resource_available":true,"data":null}},"time_used":2085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2070,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/img/img_79a7dd80d380_bw7u4j.png","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/img/img_79a7dd80d380_bw7u4j.png HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://darbqmobilityae.com/static/css/pwotricg2754.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1842\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"0b0947cbc8680199b6ce28a3db7f47dd\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-07T12:12:05.158327Z","times_seen":74162,"resource_available":false,"data":null}},"time_used":2236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/css/pwotricg2754.css","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:14.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/css/pwotricg2754.css HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://darbqmobilityae.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 82281\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"c2b575c9477b3baf3f810d7b7fc39e04\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":82281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (727)","md5":"3f31ce96d0744d118697853ab57acf87","sha1":"ca01a009d75875151d0ca4b40f8219033a5225b0","sha256":"37c1d58a13c447c9729fb97e443a7045825e3e6ce0a891269052d3c349b6f63f","sha512":"080caa86f0b7d3284400a271dbd9d4482b84fb574a6c1effbd59e0a42ed0cd4ac89ebedc9b336509510e263c0e58fb7516ff98b390f80af19955ebc4f71727f1","ssdeep":"1536:MtdWm8RIAIzIAIsKGKEKGKxfYfbfYflfRf7fRfvWYa9ed:MZ8RIAIzIAIsKGKEKGKxfYfbfYflfRfP","tlshash":"6183b8bf49822395e1134e45c3de0f68072cc66355a75cef3351388a874abee62da74b","first_seen":"2025-09-23T11:20:43.584005Z","last_seen":"2026-04-26T00:12:54.805759Z","times_seen":290,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/img/img_f46e3f70440a_8ulvya.png","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:14.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/img/img_f46e3f70440a_8ulvya.png HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 196050\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"6ee82aedba23c793c13f8f3f1278ce5b\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2256 x 877, 8-bit/color RGBA, non-interlaced","md5":"ba422c31771020f1db29bbb87a173c7f","sha1":"694615b7649df60050d3418ecfbf49aa41ed069b","sha256":"1af9b0b99a41777e144e20dd1df786ef463c6fc298dde133e4a91ed80f2a16cb","sha512":"8a2caf24212cb50de92edbdcec674afa048bc7015602a6e4b7f436f69cae951f85b292c2cb2be3f03e4e990c1bae10fc8a0a026c0c8ae8c5788a1d644842f17a","ssdeep":"3072:N2FA9kyYBhVMMRajr2m2uAj3Gm3EMjKXAbmW6qNdCtatPxxxxxxxxxxxxh:sC9DB4ajim2V3V3XW6vNhtJ","tlshash":"ba14f307ce80707f681289682b4336d6e42259677451cf6f8f8a607e2e0bbb0fdb6c55","first_seen":"2025-09-23T11:20:43.587162Z","last_seen":"2026-04-26T00:12:54.818606Z","times_seen":291,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/common.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:15.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/common.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 989\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 19:59:28 GMT\r\netag: \"c868374f3224431847b0a618ac9eff25\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":989,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"966d35204d4e687944efcc9b671be585","sha1":"a03e6c5955ae9ae71f21e19cbee0625fe7c19433","sha256":"131d692db6e7ae469ce6b36be5126ddc242522760f11b73ab0d2edc4c22d6fef","sha512":"43eb4f41788c22de86d98fc3192b0bb92fca64b933467ef16df0e092c33acefc2d86a75a83da4e1485d2eba88a599d5caadcc58fb0d044c4ec00c042b1d10e2b","ssdeep":"","tlshash":"2a11384469e34610819290ad399a2822f6364457f93cbe2476ada1453f8c66d07f27de","first_seen":"2026-01-17T11:55:26.317407Z","last_seen":"2026-04-26T00:12:54.807648Z","times_seen":99,"resource_available":true,"data":null}},"time_used":1451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/api/open/addClick","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:18.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"POST /api/open/addClick HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 102\r\nOrigin: https://darbqmobilityae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":102,"data":"{\"ip\":\"91.90.42.154\",\"country\":\"NO\",\"click_list\":\"a_index\",\"click_url\":\"https://darbqmobilityae.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 64\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c38781fbc2c5b63719c8688b0e9bf313","sha1":"51ca8faa3e9dc2e2b162af77dc39b8e203e9368b","sha256":"f42b123cf06eee9bb3cfe228b92afef3d959f09ba63005c20bb3f68d5c77ed81","sha512":"b8103568c4932e1e6b5a97b098c534db84f12eb9497d226e8b9c23a9936f57c5d3a2309e54f6d9241ad0270624fbbb558cbdd3eb3a8af14de58cbc638f1c041d","ssdeep":"","tlshash":"23a0029a1c189a82a8c329a595066b1525fc36a35b299698cc5d9739c9981b4f085818","first_seen":"2025-08-11T04:08:23.447528Z","last_seen":"2026-04-10T14:44:54.011533Z","times_seen":9454,"resource_available":false,"data":null}},"time_used":2183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darbqmobilityae.com/static/js/ws-worker.js","fqdn":"darbqmobilityae.com","domain":"darbqmobilityae.com","tld":"com"},"ip":{"addr":"43.160.206.15","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darbqmobilityae.com/","date":"2026-01-28T03:44:18.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darbqmobilityae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 06:53:27 GMT","end":"Fri, 24 Apr 2026 06:53:26 GMT"},"fingerprint":{"sha1":"81:5D:02:7B:4C:DE:BB:C0:4A:68:EC:98:B5:0F:74:C5:BF:E5:E4:0F","sha256":"59:3E:42:99:09:7B:6F:8F:EC:00:7F:D9:2D:01:75:77:7A:08:AC:AA:AD:7E:04:CA:3C:CA:BE:51:43:29:C3:FD"}}},"request":{"raw":"GET /static/js/ws-worker.js HTTP/1.1\r\nHost: darbqmobilityae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Wed, 28 Jan 2026 03:44:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 6879\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"d5d5481ad9d4233b3973573508f19b60\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6879,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"6f0cefd470dddecf10065cfccec84729","sha1":"2887f3fb957e841a73df8380201da0aaf2603bdb","sha256":"6d1428fed9842932375ecf999f5786c766e6c8b86d8d389e65d9e7e2552f2316","sha512":"c476145b7850bf20a72d4d3eed104be0d1e34d426e89619bbf86426cbb2c56a5171b1c772867e234f1a139a89fd21dd1fb783ff61d98a1dca75b282a6e093c89","ssdeep":"96:3TmBAoTq1l/t0/ErpzP6sK0vwmk2lVOUzUvGvTQZrdgrlYOBnWki:qBLu1l/koNPvGEVxzrsdgrlYOBJi","tlshash":"e6e1828e6026182514f2773f6b53604eff2662430716a698fede4bd22f712a44684ffd","first_seen":"2026-01-23T14:42:09.83637Z","last_seen":"2026-02-16T15:37:05.028027Z","times_seen":277,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":1063,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"darbqmobilityae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-28","alert":"Phishing Block","trigger":"darbqmobilityae.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}