{"report_id":"982b953c-d73b-4aca-82eb-b88aa2e9e417","version":6,"status":"done","tags":[],"date":"2026-01-31T13:56:29Z","url":{"schema":"http","addr":"darb.itc.gov.ae-qoes.com","fqdn":"darb.itc.gov.ae-qoes.com","domain":"ae-qoes.com","tld":"com"},"ip":{"addr":"43.160.249.131","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"darb.itc.gov.ae-qoes.com/","fqdn":"darb.itc.gov.ae-qoes.com","domain":"ae-qoes.com","tld":"com"},"title":"Access Denied","dom":{"size":1772,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1dd1a3401937f319c7ab8179152d30aa","sha1":"53b3af4972907f7a8f462a37d46546a700c737a7","sha256":"892852cdfc3c6f456417d8d26883055f9f9ae05ce203cb7437389f07b51852d1","sha512":"971dae4fb770e6c04c613c47bfb61680e1b2632d8ab684adb82948a5be0d15f2d4d55c7efca4b05cf1bf6f98c592bf37dcbfadbbc4db0bfb18a3acdbebacab23","ssdeep":"","tlshash":"be31a9879ae704167843e4946fb2a7022a84d913c25adf623f8c63a8cf869948c9374c","dom_hash":"domhashb0edbcced89fac88c05e85c0f23b2eda","first_seen":"2026-01-31T13:56:30.149183Z","last_seen":"2026-01-31T13:56:30.149183Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"darb.itc.gov.ae-qoes.com","fqdn":"darb.itc.gov.ae-qoes.com","domain":"ae-qoes.com","tld":"com"},"ip":{"addr":"43.160.249.131","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T13:56:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-31","alert":"Phishing Block","trigger":"darb.itc.gov.ae-qoes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"darb.itc.gov.ae-qoes.com","ip":{"addr":"43.160.249.131","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-01-31T13:35:43.587329Z","last_seen":"2026-01-31T13:35:43.587329Z","alert_count":6,"request_count":2,"received_data":3916,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"darb.itc.gov.ae-qoes.com/","fqdn":"darb.itc.gov.ae-qoes.com","domain":"ae-qoes.com","tld":"com"},"ip":{"addr":"43.160.249.131","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T13:56:08.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darb.itc.gov.ae-qoes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:19:22 GMT","end":"Wed, 22 Apr 2026 07:19:21 GMT"},"fingerprint":{"sha1":"08:A4:94:79:85:BC:77:16:05:63:67:E0:2D:C3:5D:98:62:02:A5:AF","sha256":"5D:55:C9:98:2F:F9:54:58:66:A2:94:6D:7E:AB:DF:C5:07:23:DA:8C:F8:48:8E:2D:D4:66:76:00:C5:DD:91:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: darb.itc.gov.ae-qoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 31 Jan 2026 13:56:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1789,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e9327373e9c5e0a3e45f3df5c2e1b367","sha1":"c97da0688c3b68f3155e281c0610c92df2a3ffa2","sha256":"8130926dc5cec83c92d1d173e99e947542e910b33ef697dd999cdb8372780b22","sha512":"d0338e6b9b407c72675087b8085ae28729ccf2f78fedba0275a584cdbde5206b09026786986ac956e38bef309aad898540a39baca5cbcb80ace9518f72c0d00c","ssdeep":"","tlshash":"5a31ab875ae704123843e4947fb267022685da53c65adf623f8c63a8cf869948c9374c","first_seen":"2026-01-31T13:56:30.150453Z","last_seen":"2026-01-31T13:56:30.150453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1886,"timings":{"blocked":612,"dns":50,"connect":274,"send":0,"wait":662,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-31","alert":"Phishing Block","trigger":"darb.itc.gov.ae-qoes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darb.itc.gov.ae-qoes.com/favicon.ico","fqdn":"darb.itc.gov.ae-qoes.com","domain":"ae-qoes.com","tld":"com"},"ip":{"addr":"43.160.249.131","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darb.itc.gov.ae-qoes.com/","date":"2026-01-31T13:56:09.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darb.itc.gov.ae-qoes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:19:22 GMT","end":"Wed, 22 Apr 2026 07:19:21 GMT"},"fingerprint":{"sha1":"08:A4:94:79:85:BC:77:16:05:63:67:E0:2D:C3:5D:98:62:02:A5:AF","sha256":"5D:55:C9:98:2F:F9:54:58:66:A2:94:6D:7E:AB:DF:C5:07:23:DA:8C:F8:48:8E:2D:D4:66:76:00:C5:DD:91:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: darb.itc.gov.ae-qoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://darb.itc.gov.ae-qoes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 31 Jan 2026 13:56:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1789,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"77d7d180bd37ff0f16e726b2a80651f7","sha1":"a96d6d752302d3fe2eb00e4cf8a46fb582649c6a","sha256":"b9671baf3b86258098a080656f7c90c5564ec37c27924c36de9d07d814289751","sha512":"e6bafa92e0b32feedec444d511a7787127d502b797f988858f0766b9500f29a55eeab9edf5b9088cac691bb64be8410bb898c2e5f3f0f07721b94ce015563395","ssdeep":"","tlshash":"a431a9879ae704123843e4947fb2a7022685da53c65adb623f8c63a88f869948c9374c","first_seen":"2026-01-31T13:56:30.151468Z","last_seen":"2026-01-31T13:56:30.151468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-31","alert":"Phishing Block","trigger":"darb.itc.gov.ae-qoes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"darb.itc.gov.ae-qoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}