{"report_id":"d4812a85-e4d1-436c-8ac6-c311cb232647","version":6,"status":"done","tags":[],"date":"2025-04-02T23:04:53Z","url":{"schema":"http","addr":"s.intimcity.fans/admin.php","fqdn":"s.intimcity.fans","domain":"intimcity.fans","tld":"fans"},"ip":{"addr":"172.67.147.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"title":"Администрирование анкет"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T23:04:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"q.intimcity.one","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-07","domain_rank":0,"first_seen":"2025-04-02T23:04:53.90481Z","last_seen":"2025-04-02T23:04:53.90481Z","alert_count":24,"request_count":24,"received_data":501661,"sent_data":12183,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.intimcity.fans","ip":{"addr":"172.67.147.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-06","domain_rank":0,"first_seen":"2025-04-02T23:04:53.903339Z","last_seen":"2025-04-02T23:04:53.903339Z","alert_count":1,"request_count":1,"received_data":30525,"sent_data":494,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.fans","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/functions.js?ver=1.21","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcc22b72870119f0660e713a89aa69e7","sha1":"849aa404ebff6a34ca68c1717b131b2a7d24b7d3","sha256":"0ab2b96fa5d24183967c644be3326c112b9bc1691eb675afeb6952eb2c842c57","sha512":"5b67157bb1bb193ebff9877c7890bbcecf4bb20f28f9cfee97b6f92fee0591b2869f650c88b643d8eea4df0bfc6dea98ef63d6d057042f62ad1422a3ecef66be","ssdeep":"768:g7SKx8cd/r5O36gv1icx8U4GjShCRMaKfO7ejoFc0kDIkIC5Iz4:fKx8d3Z1YGjRRMMeUGHDbIC5Iz4","tlshash":"dc53c781b65f176d83e23356a93e1149ec7dd43b66024274b4eca8d839e8f28d31787e","size":62777,"data":"","first_seen":"2025-02-03T19:41:53.630553Z","last_seen":"2026-05-20T19:21:33.407077Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/tooltips.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29da69074427e8af5d65ad99a9547807","sha1":"9cbacc7654980934433884f942d2514f7559bbfb","sha256":"6ec4e15d04100bdc30cbbfff3cfef634808a77138c27d6f9b57b3b8c57adbdda","sha512":"41cbb3c4b924141d2094389ae1a12cabf12a7fa7205bda23edfde0fdd16702421bebd0b59aecf9fa03d18079a77150730b46fa02bfb9d6843c3b8e8d1725f385","ssdeep":"384:MLHj033Qt1Mfx3rmvvnGbGvuLYrEZfJXEfJDNSr7/yFIyWjoAfySTtPaUAYVbcDe:MLHw3hrmvPGCvDzJCYI96SZPaZYVQDAH","tlshash":"e792b48b72d662a247f7727a912f570b743390422581941dbc3dc9e0af78a169733ebc","size":20818,"data":"","first_seen":"2024-10-24T23:28:18.519412Z","last_seen":"2026-05-20T19:21:33.409332Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-23T16:28:27.205245Z","times_seen":44379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e99e272764ba4efed61ab9a9a8e1257a","sha1":"e8d1d2fabe3bad3a94d09cc6c53621f50ac96249","sha256":"3c60f658cc4a882fb6f62677f047428e3dfbddb297015d08ad5b7eecca61f532","sha512":"43690535e1990fab64126becc474b4e0b35e756db3a5dfd2eed669c87fd328f2625f667c6ec8ead3ea06bd821d842d6ae31ec7d8949c5aa500f8a35848bc62f9","ssdeep":"192:BQ0k14QkE0B2dXUgDxXUHhXUHFSCwO1Im:BQJqQp3tac","tlshash":"d112de89f1fb834aa1b3986d8f77755caa1241270182cd84be5c89bc3f9d95264f3784","size":9298,"data":"","first_seen":"2025-02-23T14:35:24.317406Z","last_seen":"2025-04-26T07:34:17.455606Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c573d9a7c5ba541d72d0271550d5af2","sha1":"c75021918d3feba12c470d07a7c740bdace38be7","sha256":"053cd6c808d1188a461cffa8b1a35a86e0750dc5087a128889158ee679542dd4","sha512":"e6ef324d9b83dfc1155ff22d403ee65bc86e8736cd3c393093c72472b8738f36b5f519ae24648a0463281404c7a563623b3819421529ce65afb0f9e745fde06b","ssdeep":"","tlshash":"8201689b58b70131a4db3970a30fe0141ae3201b0c84c867bf6e82040fe5e7710867e5","size":715,"data":"","first_seen":"2025-04-02T23:04:58.887367Z","last_seen":"2025-04-04T23:08:45.509893Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/persons.js?ver=1.11.8","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d516658ba570ff29032fd91f2654d61","sha1":"78e4b3568c4849aa1fc9f56befadefa28d77b763","sha256":"0de70ee74788ad7f62c2b243ddc7c0c32144698687016209cf10440e818a507b","sha512":"82ccd3694ac41057009cac88ccaf22461e5fed9d934a946568f418b677666e6d7fd2638db4334411c040087d08bfb5e06f1f1cb2e3b568c4dcde0382d7c7772d","ssdeep":"384:R41goxm6wwA4cRXF+R1BDfFEo5oIecy51Fs:IjlcRXF+x5oey6","tlshash":"0d720e0c6d5510691a3bb3bfeb2b6009fa7b04b7361487027d5e96a03fb182c8665fdc","size":16015,"data":"","first_seen":"2025-02-03T19:41:53.626029Z","last_seen":"2025-04-26T07:34:17.460922Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery-1.7.1.min.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7607d74e61f9c5b2e689055ffe7a8ba9","sha1":"64fc4e10ad5d723f53635145b1c784fc5b625af7","sha256":"ed2dc5f0b0fbc48a762829c5384516a489a5c8cdfb5c303e4040b5813c51f874","sha512":"3dc7872f2597e9a9c5eb36a235b49eb2d559e2692f20e325aced23b7292c1cf8e762b96138ce7d3f6056c856f24e09a4d56b90747f121a4366ccbc75f08a8d16","ssdeep":"1536:k5RKUpVgklsdpuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee83bGzA81+xRRi1Z3","tlshash":"1b93e7d9b2d6716387b731bc50af510bb13698aa784c8c50f068d8e4be74a48907bf7d","size":93870,"data":"","first_seen":"2023-03-09T02:21:40Z","last_seen":"2026-05-23T16:33:28.05603Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery.validate.min.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb445cb7196b6b72dc25a6b1d95907f","sha1":"c5acc2c72036740376c8b14cdbf7dca061f3377f","sha256":"3363a412ad2ef59785cb322283a55ec7cd25bfe4ff94527b0fc3e7cbf4730fe5","sha512":"7f348f5b9586785106d3506ef8c2a1a8b4f54417f88fb483acefb8c8cfb4ea28db5a4c28f278b02f60bf6e4e641c4782605119a970ec8ed4bf4d8a787cb43e06","ssdeep":"384:Gj2+G0DqvD2e0mP86d9zkqi16cahi2DTW3GnyV5wjp0T3VJZXZ7SBFWKvwycnH0s:GC+fOrx0f6d9z166cQVTW3GnyVWEszDo","tlshash":"5fb2b8097681201e8edf31f7b89b624fb2ba45a92005906df4f894d2bef4f45b056f78","size":24505,"data":"","first_seen":"2025-02-03T19:41:53.628537Z","last_seen":"2026-05-20T19:21:33.41739Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aea73f4190057337c8872c1d8e0342d7","sha1":"b66c966e1c2a8e267f9ed9c867cd3c85af2794f3","sha256":"bbcfe10b17a5bba744354597a1b3dfdfcd0305faa06bc43982d402e39ac67c9a","sha512":"2c1f57dbafd4fffee7b378727ce3875e0168b25bc6b90f10360fc4c16d01d519119c04797f71f78617c82b1cf4ed45e0db13f4b33351c484ec1d1b26ed45044f","ssdeep":"","tlshash":"cc11224d3d9308974e67306a2baf102038f6cba71641eaddb66c16421f60d60c69fbb8","size":1092,"data":"","first_seen":"2025-02-03T19:41:53.633559Z","last_seen":"2026-05-20T19:21:33.427995Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35f74b381db718d851bd1ac1ef3cc485","sha1":"6e680878f578e160b4f2e81f5d54fc34848bb38f","sha256":"e438e2b7cddc25996a067eb09508c9698c02fcfffdbb40a333a449350f86e13d","sha512":"7d96cfeed37a31578e7d9cc76ac10f4287e77f5f4fbee61872957747916d026bead7e21998264e2abd8871dd4696ec5a6e27303520abdc56a582ed3664d0cfea","ssdeep":"","tlshash":"cde02b6b38db163083ab3289910bf64412a320731c80d40c7f1f87144fb4ea710877c2","size":314,"data":"","first_seen":"2025-04-02T23:04:58.891896Z","last_seen":"2025-04-04T23:08:45.513896Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24dcc8be0b153f59bd2a643b92844885","sha1":"d0002e1c2566795f5dc36ddd2111b68291f1909b","sha256":"a7cf5789091aa6de766b089530e655ab809e234f3d6b8315e29390c4b3b8c82a","sha512":"dae7a69a868db0f1bddf163bf0c14c1c4528ced95f78f874809d69919a4f73209385ec14fc75ff3dff28381042ef9f163e81ca66381d9d6bda7263ee648def51","ssdeep":"","tlshash":"9001c5ab6f945030b515e1aadd7d651c653754174c006c1fbccdd08477a0eb54f3daac","size":846,"data":"","first_seen":"2025-02-03T19:41:53.63516Z","last_seen":"2026-05-20T19:21:33.433617Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery.cookie.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ec184596af8855bb7cca6554af2c1f","sha1":"15f1ef7fcb2df1ca1e4674a56f0a13bb088343b6","sha256":"64a7a0e3612b87d5088ceb8daf269c7cd96acfd33b2c380ebaaa43fe3d69553a","sha512":"28ef9487f82b2a6903c8560967d707a2d2de99ccbc49a04d49f1c7720cae34877533c9dfc96b3ee131a6cc3cce1eb9f4187cd7975318a8f531bd8a5bee533fc1","ssdeep":"","tlshash":"6f31dc98388c2d2545fb1be035ff05a8a23cdf7210aa1094c561a6e07d74c42eaa7e69","size":1801,"data":"","first_seen":"2023-03-07T12:01:42Z","last_seen":"2026-05-23T08:41:25.601402Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e5e6c93cc9f144fa945811684ba4e57","sha1":"08d2ce5fb0f9fa2036cbb3cf4769d4a5bd439cb3","sha256":"ab5e2e0f3564335c7d9515a380b9bbb870c4a309f0bece546f17fecc46b26092","sha512":"43c6b5ab65b24b359364fe21a830837d27698b4e3c7256b0ba4f1c5756859cb03c5f7e3700a93cc0bff3a389cdd5813389f6dbab98461883480a2c197aa4e843","ssdeep":"96:gbHObyMEiFFFvlo9/fMjaYkCkLWjVJtRTT62a51ayr:gC2MyMIiZdP0Cyr","tlshash":"b3c18066f6d58b888033314f1b7b81c8ba3d599f7506ce447c6c4ed9af09a14f8e364a","size":6018,"data":"","first_seen":"2025-02-03T19:41:53.636777Z","last_seen":"2026-05-20T19:21:33.434996Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"q.intimcity.one/Images/tlg.svg","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /Images/tlg.svg HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 16 Aug 2023 05:58:42 GMT\r\netag: W/\"64dc6592-35d\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=npkMLFLeVHRDwFx0AxNFk6tb05xEUjl3ALKZm0MmjGyNqBaW32SayCCTYGyrOtPQfRvoqu%2FCywcoSXaP3B6ez8Y5WCkXdui9E15YVJMPL6L5odhzRCov70O6%2FR1zgvG1aFI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f7399b8cb50c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2685\u0026min_rtt=1045\u0026rtt_var=1978\u0026sent=110\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=103479\u0026recv_bytes=4027\u0026delivery_rate=17926333\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=491\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ad481cb29bf9df91e8f725bf4dd25bc","sha1":"27432a2292533f6c85510fcf8e5c35d32bd12001","sha256":"130d6c154ec18caef132e937d03d47f4e0142d930f9c9806c7db90ba82c70a83","sha512":"6ab3d97edf9eb820c1df162853c119ace884c98960e0f0add9c62b4fec24f875b5ef5a15dc356b71dd36874b2db7cd691a18be164b26e8892d856d1c96e288b8","ssdeep":"","tlshash":"641199ca0503944df003e2e5c9564c6b17a3be382b82940a83948c4bd1ef8ac4a76ec7","first_seen":"2025-04-02T23:04:58.867847Z","last_seen":"2025-04-04T23:08:45.495072Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/style.css?ver=4.25","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /style.css?ver=4.25 HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 08:55:25 GMT\r\netag: W/\"67dbd7fd-27891\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NmkGl7khXLsN%2BcKtJO%2F3%2FSoIiuKWP8dy74vEobt8UZyHvDEwKSCmwUCCxAgtsCKlXaEQcrA8K73qo6rutj248YNQJTh0uVtVG4wxVQSr9qhYmsGEirSFAO5GUdiD%2FEQEkv0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f7395b66b50c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4242\u0026min_rtt=1685\u0026rtt_var=2458\u0026sent=15\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4212\u0026recv_bytes=1881\u0026delivery_rate=352408\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=460\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":161937,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"fc3d36d05480fb39d46c7182937910a2","sha1":"edc318cfc3d83df12dfcc6df36171cf51cdc2463","sha256":"018b382ce308d535fb51cc3d2b2eca66c143b0b65346adcbb83faa38ed6fb0dc","sha512":"22740a5f58f45669e0ee6c6595016d86824a989a18997bac198354492eeeccee658041cfae9bb9730e7dd7431eb40f9007dfab999506a2844c392cd1f5aeb7ce","ssdeep":"1536:IN2nh1cXwCnYrpMpljqdWA+5NGF0Ji7gyCrr6gmbYaqbh0sT0NwfJKISj:aCGGFlbYaqSwfK","tlshash":"5af3746cda41110af636db78afb2131afb1940539b0306797ae47354dfba4788269fcc","first_seen":"2025-04-02T23:04:58.869109Z","last_seen":"2025-04-04T23:08:45.490215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/functions.js?ver=1.21","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/functions.js?ver=1.21 HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Feb 2024 07:28:31 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\netag: W/\"65d5a61f-f547\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f7399b87b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62791,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/persons.js?ver=1.11.8","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/persons.js?ver=1.11.8 HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Sep 2024 09:12:01 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\npriority: u=3,i=?0\r\netag: W/\"66e7f661-3b07\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f739cba2b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"e1610f5cec45f82febb4082eee5ee516","sha1":"6f4a00ff31d8e20f14c509f8802bead68d2e3931","sha256":"e85daaf377ca9047a9f58124478cf9865ca99b54de4d2ce6ecdaed59a8196ad0","sha512":"b3e6322960fd14c87f0dea40cf744343b49b404a3f73854fc97cb5db7e7fc4ead1afc5ed51045f79682691de56868e10c33fcf9a14b72cc0ed686593619a450d","ssdeep":"384:R41E726GgwAPBaUT+R1BDfP53SIvIy1Fs:m6BaUT+p53S1p","tlshash":"4c72440d5da610295a3b73bfab2f5005f63624232504aa217caed3903f7b81d467deed","first_seen":"2025-02-03T19:41:53.618989Z","last_seen":"2025-04-26T07:34:17.447784Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/shoes_adp.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/shoes_adp.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\nlast-modified: Wed, 27 May 2015 13:21:10 GMT\r\netag: \"5565c4c6-239\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 3988\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9diuCX7wdobpcvxhmWKlgPcjb8kkzdTVvlRVYUQ5k%2F6Z%2Bgdn8DWRard2D3fJyat%2BRk%2Brkyn%2F3wecIXp9TGvX%2FOkNh8higc%2FVlRy2bfmVmQnxJPtRV5bQydxdXIrUpVeM3Nk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f739cb9fb50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2547\u0026min_rtt=1045\u0026rtt_var=1381\u0026sent=123\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=116183\u0026recv_bytes=4993\u0026delivery_rate=175336\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=520\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ea4cb2f010cea08bb7c3e9d5408e80a6","sha1":"f388ef3c785cfe6941aea8075c787abc56bf8363","sha256":"50d9337cde9113e2c868385e3b89c43ce4bc6a69e7c906b3d9b2dd5ac3c699ca","sha512":"9cea577d939bd7647e7be23369009ea014a36381fcc2d09229b3d36dbacbd9e56db1cf79b29f9b439676b2b6d9db1991a23a4449c9eb2ba71f206012ef05c18f","ssdeep":"","tlshash":"9ff0eba6abd39c1fe4209cb60e5245aadc7301908c9080e36d377488300fe1cb3a2729","first_seen":"2025-02-03T19:41:53.591515Z","last_seen":"2026-05-20T19:21:33.411577Z","times_seen":44,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_r.gif","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_r.gif HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":767,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0]]],373,[[\"1743635048417\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"742503072.0\\\",\\\"Z8LtZ--dCqXNwbkPqqvYiQ0\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1946,null,0,0,null,\\\"og-c2f2fe93-8c71-4652-9cc7-d0750e397f71\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",180],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1743635049419\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 888\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Feb 2012 19:34:53 GMT\r\netag: \"4f43f1dd-378\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-ray: 92a3f73aec97b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":888,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 4 x 25","md5":"996a9706b2d9e0a81b0449af25554cde","sha1":"6cf519db7f329bebc2549e9e5790142252396b74","sha256":"ede8a690773a5647f95e738ffda3ab928a9eac2eb4f0a2043698c7878ecb6e61","sha512":"67551ad41ffddbac4810705a7ec26668bf49ad902011b59a21edb12f8d9bcd12b102f307053d74fa647c7f5c7123b4215445de181128675f116fc739f87e3052","ssdeep":"","tlshash":"80112202d81892d9d31dae304c36e01f3200a32494d86a2aaac08e0ab4b224a2b3ad58","first_seen":"2025-02-03T19:41:53.598803Z","last_seen":"2026-05-20T19:21:33.385189Z","times_seen":44,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_bbg.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_bbg.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":3496,"data":"[{\"eid\":\"214ea31d-bea3-4ceb-8f1b-567eace63ba9\",\"ts_ms\":1743635058007,\"created_at\":1743635058007,\"event\":{\"name\":\"vimeo.play_video\",\"ts_ms\":1743635058003,\"version\":2,\"fields\":{\"session_segment_id\":1,\"segment_start_time\":0,\"log_end_time\":0,\"video_duration_ms\":32574}},\"global\":{\"name\":\"vimeo.web_global\",\"ts_ms\":1743635053430,\"version\":5,\"fields\":{\"user\":{\"subscription_type\":\"none\",\"is_mod\":false,\"session_id\":\"cc1e1dba39d66c9f7d1bf70987581073424fd27a1743635051\",\"teams\":[],\"user_id\":null,\"vuid\":null,\"flags\":[\"plays\",\"dnt\",\"autohide_controls\",\"preload_video\",\"qoe_survey_forced\",\"ai_widget\",\"ecdn_delta_updates\",\"disable_mms\",\"check_clip_skipping_forward\"],\"is_free_trial\":false},\"application\":{\"application\":\"vimeo\",\"vimeo_language\":\"en\",\"product\":\"vimeo-vod\",\"build_environment\":\"production\",\"version\":{\"full\":\"4.40.32\",\"major\":\"4\",\"minor\":\"40\",\"patch\":\"32\"}},\"platform\":{\"device_language\":\"en-US\",\"screen\":{\"dpi\":24,\"height\":1024,\"width\":1280,\"size\":\"1280 x 1024\"},\"network\":null,\"platform\":\"web\"}}},\"tracker\":{},\"contexts\":{\"player_context\":{\"name\":\"player_context\",\"ts_ms\":1743635058003,\"version\":5,\"fields\":{\"player_session_id\":\"cc1e1dba39d66c9f7d1bf70987581073424fd27a1743635051\",\"total_video_duration\":32.574,\"video_timestamp\":0,\"player_location\":\"embed\",\"player_breakpoint\":\"lg\",\"player_width\":1280,\"player_height\":720}},\"video_context\":{\"name\":\"video_context\",\"ts_ms\":1743635058003,\"version\":13,\"fields\":{\"video_id\":806895400,\"title\":\"TEST_Converge23_Background\",\"video_privacy\":\"disable\",\"video_embed_privacy\":\"public\",\"content_rating\":[\"6\"],\"duration\":33,\"resolution\":\"1280x720\",\"video_height\":720,\"video_width\":1280,\"orientation\":\"landscape\",\"is_auto_cc_enabled\":null,\"upload_method_api\":null,\"upload_method_api_id\":null,\"is_demo\":null,\"video_owner_id\":55647647,\"video_owner_account_type\":\"live_premium\",\"video_categories\":null,\"has_embed_available\":false,\"video_version_id\":531607713,\"embed_context\":\"embed.main\",\"is_drm_enabled\":false,\"is_intaractive\":false,\"language\":null}},\"web_context\":{\"name\":\"web_context\",\"ts_ms\":1743635058006,\"version\":25,\"fields\":{\"location\":\"player\",\"page_name\":\"embedded_page\",\"referrer\":\"https://converge.inspirecio.com/\",\"copy\":null,\"path\":null,\"referrer_page_name\":null,\"target\":null,\"target_path\":null}},\"team_context\":{\"name\":\"team_context\",\"ts_ms\":1743635058006,\"version\":5,\"fields\":{\"team_owner_id\":0,\"team_subscription_type\":\"none\",\"team_role\":\"viewer\",\"team_id\":0,\"joined_team_at\":null,\"resource_permission_level\":null,\"team_size\":null}},\"action_context\":{\"name\":\"action_context\",\"ts_ms\":1743635058006,\"version\":5,\"fields\":{\"feature\":\"player\",\"action_type\":\"click\"}},\"product_analytics_context\":{\"name\":\"product_analytics_context\",\"ts_ms\":1743635058006,\"version\":41,\"fields\":{\"product\":\"viewer_experience\",\"feature\":\"player\",\"location\":\"player\",\"modal_name\":null,\"flow\":null,\"element\":null,\"copy\":null,\"device_type\":\"desktop\",\"is_user_facing_data\":null,\"entity_type\":null}},\"target_team_context\":{\"name\":\"target_team_context\",\"ts_ms\":1743635058006,\"version\":6,\"fields\":{\"is_team_member\":false,\"team_owner_id\":0,\"team_subscription_type\":\"none\",\"team_role\":\"viewer\",\"team_id\":0,\"team_size\":null,\"resource_permission_level\":null,\"joined_team_at\":null}},\"user_facing_video_analytics_context\":{\"name\":\"user_facing_video_analytics_context\",\"ts_ms\":1743635058006,\"version\":2,\"fields\":{\"session_ts\":1743635051,\"session_id\":2557870767,\"lead_id\":null,\"content_type\":null,\"is_do_not_track\":false,\"playback_route\":\"player_embed\",\"is_session_live\":null}}}}]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 183\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Oct 2016 12:18:32 GMT\r\netag: \"58061318-b7\"\r\naccept-ranges: bytes\r\nage: 4059\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 92a3f73aeca1b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 25, 8-bit colormap, non-interlaced","md5":"d7ac1fb126dc8704303ad5f5aba64b88","sha1":"1ea8975b21c32a3e23880ee5dee3ba1e547b5bca","sha256":"6f1c7272faaec5cb81f6f50b649fb2706ac744211144c84e2225b155522e42b9","sha512":"b03debd870e4224aa91892c0bb70c45bc471ce2add4e63f386c5973e4afaf97e58848642a6260480c81f52d9e9d02a8cdb094ca5f8c71cfe2f04cacc00cbf410","ssdeep":"","tlshash":"a6c012c367605ed9c70dab73813b0126a54293620561263b8c44d216581638a84a6698","first_seen":"2025-02-03T19:41:53.59477Z","last_seen":"2026-05-20T19:21:33.371296Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/Images/cross.svg","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:51.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /Images/cross.svg HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":769,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,3]]],373,[[\"1743635048417\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"742503072.0\\\",\\\"Z8LtZ--dCqXNwbkPqqvYiQ0\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1946,null,0,0,null,\\\"og-c2f2fe93-8c71-4652-9cc7-d0750e397f71\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",180],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1743635064183\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Aug 2023 05:58:42 GMT\r\nage: 3547\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"64dc6592-424\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f7b87c59b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1060,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33d886e4c6978a81f92a4e12f20c35bc","sha1":"dfeba0dce7e3efb0d629585d0f3bf81f9a19a255","sha256":"9cbcc2a1a2215fbd4439fb592570911fc3e6e2a2bbd7acd6fd22a7f112d5dac9","sha512":"bc5d3072bcc253eade226e7ed0250854a034fbb179e6cedf1a8c1a763f1610e89d6276b6d6b682cf80c99f19956d889f7689a0218ebbd54041fb487c56bc9053","ssdeep":"","tlshash":"7c11a8f453d430f13983fb05df2168b835c630bf5fb9621946a04d1a6000de9c2cec50","first_seen":"2025-02-23T14:35:24.303837Z","last_seen":"2025-04-04T23:08:45.494024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/user_modaltg-show.php?counter=0","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:51.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /user_modaltg-show.php?counter=0 HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":769,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,1]]],373,[[\"1743635048417\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"742503072.0\\\",\\\"Z8LtZ--dCqXNwbkPqqvYiQ0\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1946,null,0,0,null,\\\"og-c2f2fe93-8c71-4652-9cc7-d0750e397f71\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",180],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1743635051781\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:51 GMT\r\ncontent-type: text/html; charset=windows-1251\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 23:04:51 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nset-cookie: tg_offer=%7B%22show_time%22%3A1743635091000%2C%22counter%22%3A1%2C%22block%22%3A0%2C%22subscribe%22%3A0%7D\r\ncf-ray: 92a3f7b87c58b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery-1.7.1.min.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/jquery-1.7.1.min.js HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 02 Mar 2012 07:16:03 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\netag: W/\"4f5073b3-16eac\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f7396b70b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93868,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/tooltips.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/tooltips.js HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Nov 2013 13:03:13 GMT\r\netag: W/\"52989091-5152\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7onmhtdDtgOwZzNuH5THnoZ9%2Fiexx4xDNWbffS0VgQJFUSPmLH%2BVRJ%2Bh3nqjO1XzHb7yEhPadonLJ8KWfFOyDMrJSkDm29BKnOncUckA2CE3jB24OrcUyEeUPtHTSDLYsQc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f7399b89b50c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2685\u0026min_rtt=1045\u0026rtt_var=1978\u0026sent=111\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=104662\u0026recv_bytes=4027\u0026delivery_rate=17926333\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=493\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20818,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (11668), with CRLF line terminators","md5":"29da69074427e8af5d65ad99a9547807","sha1":"9cbacc7654980934433884f942d2514f7559bbfb","sha256":"6ec4e15d04100bdc30cbbfff3cfef634808a77138c27d6f9b57b3b8c57adbdda","sha512":"41cbb3c4b924141d2094389ae1a12cabf12a7fa7205bda23edfde0fdd16702421bebd0b59aecf9fa03d18079a77150730b46fa02bfb9d6843c3b8e8d1725f385","ssdeep":"384:MLHj033Qt1Mfx3rmvvnGbGvuLYrEZfJXEfJDNSr7/yFIyWjoAfySTtPaUAYVbcDe:MLHw3hrmvPGCvDzJCYI96SZPaZYVQDAH","tlshash":"e792b48b72d662a247f7727a912f570b743390422581941dbc3dc9e0af78a169733ebc","first_seen":"2024-10-24T23:28:18.519412Z","last_seen":"2026-05-20T19:21:33.409332Z","times_seen":43,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_l.gif","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_l.gif HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 193\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Feb 2012 19:36:22 GMT\r\netag: \"4f43f236-c1\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-ray: 92a3f73aec95b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 4 x 25","md5":"b0d684a68231f12bd1f6419abb4bc42c","sha1":"446660d92975f56af7ccb4ade7ae4362c4cdba28","sha256":"f28d6aba09ad26bcf45063c99873a07bc4d3b85f4944181ea873353b15998a15","sha512":"7f8e3075e3990059a4174b9bdd595bc0749a78009625fe616ff2dbadb6fe81bed55d7471d57d4b4ba9a5795658c0678b87f318e8245187ac67dab7a89322b121","ssdeep":"","tlshash":"34c0c0019918a3c2c73c02704c36a10f3416635445fc332bad50ca2ef4963ca1333c8d","first_seen":"2025-02-03T19:41:53.596503Z","last_seen":"2026-05-20T19:21:33.369228Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/style_adp.css?ver=1.36","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /style_adp.css?ver=1.36 HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Jan 2025 08:35:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\netag: W/\"6790adba-93f4\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f7396b6eb50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37876,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"dda0e012d892c71522bef79837d30924","sha1":"ff3ae5e356862a5b760b1a53dbaddc33e2a39f44","sha256":"5e57cd18dcd73d5c9bccf2dd307a48f3b85386f1ffe6c68e7d530077b96f3dcf","sha512":"fd174877ec4c85ddab593f44b06d9f63001129791706656c420704e7fe886732742f74f11e06214128670304b024a0fd88fb3207bdac4cbf3b6703a25939f4fa","ssdeep":"384:qpd/SUoHoG9mESEUo8zaUNIhrpFAgY5FnFDx4zb3Ffx5+qZ71KSFYF:qeZJJ+SsDFnFDEFfxMUFo","tlshash":"f803de5b5ee3014dbc03a0796fba37593239c003934bcc683e9cb69cdf4a69585e2789","first_seen":"2025-04-02T23:04:58.877576Z","last_seen":"2026-05-20T19:21:33.382442Z","times_seen":41,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_button.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_button.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 602\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Oct 2016 12:18:32 GMT\r\netag: \"58061318-25a\"\r\naccept-ranges: bytes\r\nage: 4059\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 92a3f73afca4b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 20, 8-bit colormap, non-interlaced","md5":"868201125b375f939f934ce81cada5e1","sha1":"cf7f67bb4fce06f6454315725a5c820730cd2c58","sha256":"5966b089c2aa5d7e672c46c7b2b4b66af02dcfce66078bd478d2a1e8c241e5c8","sha512":"e92430fdc575996d8aa40fda8c90d378b274c937ee676166fb4830932195017ffb4e28c75ac4e6da92b9c409aa0295da94b071ed199392db0c35fc66c5d18a8a","ssdeep":"","tlshash":"5bf020e153888c71c43a259d930433da12a78c243f53c80b4a5cb0f8c4730af782b103","first_seen":"2025-02-03T19:41:53.60369Z","last_seen":"2026-05-20T19:21:33.403973Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/favicon_story.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /favicon_story.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 513\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Nov 2015 14:59:51 GMT\r\netag: \"564f3567-201\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncf-ray: 92a3f73bed1cb50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"35196f7560c2a886aa762532da335976","sha1":"57e88356a4f5fe7d9b1e8650aeda5318e9c81c7a","sha256":"37ae1b9b916b1d94c20877fe7f31e887086dfcf0b338d5042a4b2413ea062be8","sha512":"4df3fbae52084a848e424fe4bb5f1e4d4b21a0c3a8d79bb41354ae56b6b98f2eaaf2509b34f5c8899474c7f2b2c87c5d0aca9e58d02aec7e55c6062f9b7f8e95","ssdeep":"","tlshash":"d6f075a1b5244f34d1e523a2f010d070d193408f44c201e80d0fe410d8ad64988acf4d","first_seen":"2025-04-02T23:04:58.879208Z","last_seen":"2026-05-09T02:08:24.457344Z","times_seen":13,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.intimcity.fans/admin.php","fqdn":"s.intimcity.fans","domain":"intimcity.fans","tld":"fans"},"ip":{"addr":"172.67.147.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-02T23:04:30.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intimcity.fans","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Feb 2025 13:47:05 GMT","end":"Wed, 07 May 2025 14:45:32 GMT"},"fingerprint":{"sha1":"6D:79:B3:50:3D:02:F1:FF:02:A9:2E:5B:23:7A:AB:E4:63:43:68:AD","sha256":"89:79:CF:5B:9B:FC:F6:DC:59:76:F7:0B:63:D6:7C:8E:22:33:56:C5:6E:4E:F5:6B:86:26:25:7F:7D:39:AF:18"}}},"request":{"raw":"GET /admin.php HTTP/1.1\r\nHost: s.intimcity.fans\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: text/html\r\nlocation: https://q.intimcity.one/admin.php\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FqyKN3nalKW5u6BIYepZQvojr8Y2ltprxAggShKCkEMTrMHQ0CErwpM2EHl7MKV8VOC396BbTxdKnZx6wf3nyJPy7op98QMGxgPKJPlN%2F8SI4nPBlW4XW7FB34sO9Lx%2FSKSp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 92a3f734c9737129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6675\u0026min_rtt=516\u0026rtt_var=12082\u0026sent=10\u0026recv=12\u0026lost=0\u0026retrans=1\u0026sent_bytes=3298\u0026recv_bytes=1311\u0026delivery_rate=7425641\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=60b95a21559e532e\u0026ts=91\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":29721,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":65,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.fans","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_bg.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_bg.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 183\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Oct 2016 12:18:32 GMT\r\netag: \"58061318-b7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-ray: 92a3f73adc8cb50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 25, 8-bit colormap, non-interlaced","md5":"d7ac1fb126dc8704303ad5f5aba64b88","sha1":"1ea8975b21c32a3e23880ee5dee3ba1e547b5bca","sha256":"6f1c7272faaec5cb81f6f50b649fb2706ac744211144c84e2225b155522e42b9","sha512":"b03debd870e4224aa91892c0bb70c45bc471ce2add4e63f386c5973e4afaf97e58848642a6260480c81f52d9e9d02a8cdb094ca5f8c71cfe2f04cacc00cbf410","ssdeep":"","tlshash":"a6c012c367605ed9c70dab73813b0126a54293620561263b8c44d216581638a84a6698","first_seen":"2025-02-03T19:41:53.59477Z","last_seen":"2026-05-20T19:21:33.371296Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_mr_massaz.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_mr_massaz.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 18823\r\nlast-modified: Wed, 30 Mar 2016 09:26:30 GMT\r\netag: \"56fb9bc6-4987\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 5115\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8lyva1JqtZqz%2Bf9mZPDeoJmD%2Fg3LwqjH4P733HFUsU6koabqJ%2F6s6LacvkemluhMOpGCpK5SERdAa489Ch7t%2B7gkGhQUdOb3igYqlduRzIiU9mKgiO4mSiIgEq5VYp8Gr%2FY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f73aec9ab50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2177\u0026min_rtt=1045\u0026rtt_var=1154\u0026sent=147\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=134435\u0026recv_bytes=7416\u0026delivery_rate=128778\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=700\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 80, 8-bit/color RGB, non-interlaced","md5":"ab99e5035c4e7809749aa82a8c1f35f6","sha1":"333b2e325a34e29b6f5c17eecf73d5b73b037454","sha256":"a1993f481da9dac164196b4509a2b43e3f90d3b324bec6ceb41f8cf542c944e9","sha512":"4efad256745fb65604b1e469cf8826ed5190fed0603a2517ea5b89e5de46930947d790404f76e6b28b864eeba74251d8f4a6fcc119e8b132dd404f04ad7e3b7d","ssdeep":"384:8tUzdJzrwHdFOTCLhd2XxkVLaZ5Fhiv9CRl6rXNiBrcTI78APxCqe:yUzdVrwzOG7+xrZ5eOl6rXycTYLPxpe","tlshash":"d382e0055968ddadfd23704b560403d1f91a59d5df01efb56ab2028a83f7009cf132af","first_seen":"2025-04-02T23:04:58.879926Z","last_seen":"2026-05-09T02:08:24.449426Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_shadow.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_shadow.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 112\r\nlast-modified: Tue, 18 Oct 2016 12:18:32 GMT\r\netag: \"58061318-70\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OxjHGIL0ewg8mxH4G2lffu7m3f7Jv2j9RmKFOvfs085Ij5nfmdKlnNv3bttV0Hr2gE%2FUsELWk2Ye03VaNxAx0yap%2FFQOYKeRmkMaPXvQQR7KcWWJGemE7LccX0TtD4VCP40%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f73afcaab50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1923\u0026min_rtt=1045\u0026rtt_var=1088\u0026sent=167\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=155683\u0026recv_bytes=7842\u0026delivery_rate=4275529\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=715\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 7, 4-bit colormap, non-interlaced","md5":"7747e3467d79e1f057915e5b51739ab8","sha1":"19a145cd436a6a9475d56fa099d8be185d8163a3","sha256":"241d6faaedccb57a3f97395bfeb26d0cf7ac652b0ec164795f524509c294cfce","sha512":"fc3dccb2ee77f05ad23faf727eb06102df258aab7354513adb710c8978d63de622596afac36ac1b742f1d15532698d8225bae4943737f8e12c5e8cf5e6186e3c","ssdeep":"","tlshash":"aeb012fab340fcb78969853350246c04ebbe1719a50b010f5483b43d2833745f9b86d3","first_seen":"2025-02-03T19:41:53.605596Z","last_seen":"2026-05-20T19:21:33.397122Z","times_seen":44,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/head_ml.jpg","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/head_ml.jpg HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/style.css?ver=4.25\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13820\r\nlast-modified: Tue, 21 Feb 2012 19:36:00 GMT\r\netag: \"4f43f220-35fc\"\r\naccept-ranges: bytes\r\nage: 4059\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pkq4vJa1aD8HOHEUynBWqzr7nC5OuEITgV0sczsRarh%2Bpps5p5rIvgMch7gPfBMM%2FBRKAMPhguuNyj%2BA6o7oBcYbRY1445BrwSpuyXIiz7IEf70hWAnF7D%2Fk9pCcUQx4nJ0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f73aec98b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2177\u0026min_rtt=1045\u0026rtt_var=1154\u0026sent=133\u0026recv=33\u0026lost=0\u0026retrans=0\u0026sent_bytes=119559\u0026recv_bytes=7082\u0026delivery_rate=128778\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=697\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 324x80, components 3","md5":"d16ee8ec1f14ef0eb9b5add4063b4584","sha1":"141fba38f280eab24abecd41184bd712c7413e36","sha256":"2095ba1188aa2a17cd92446921644964b33969fb178e12be3c30a77b214e7bcf","sha512":"ff8f5d03aae2480cb94f31040157f507d4fb5d9131efc80cff574aea797352852088026db6588f60f429c7574c46d4f0197f269240d279f2587c4958501a0a20","ssdeep":"384:42yKRYTrZJwYhEjMyh79kwWMXFCNOCt7FVa:429RqPujMyh7LWM0NOwVa","tlshash":"cc52d0e5d517e8c1635ca07a87bfb327411c82c2f42b988722461f51e745b8a8e4b92a","first_seen":"2025-02-03T19:41:53.600375Z","last_seen":"2026-05-20T19:21:33.387703Z","times_seen":43,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/admin.php","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-02T23:04:30.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /admin.php HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1857,"data":"{\"code\":\"error_json\",\"sw_version\":\"3.1.605\",\"error_message\":\"micro_tag_push_unsupported:, message: error-obj: {}, error-msg: no-message, error-name: Error, error-code: no-code, error-ctx: {\\\"installer_type\\\":\\\"micro\\\",\\\"zone_id\\\":8527407}\",\"error_location\":\"https://uwhewhoachastuz.net/casual-sl/1400/?z=1700745\u0026var=931435172425895936\u0026var_3=5688325_{request_ab}\u0026country=DO\u0026s=931435172425895936\u0026svar=1743634968\u0026ssk=bf4b313d9b193d8407f95e65c354e1a4\u0026stest=0f7b5ab8ad0a0184a7177dd074a7cffc\",\"error_stack\":\"\\\"@https://uwhewhoachastuz.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/universal.js\u0026var=1700745\u0026ymid=931435172425895936\u0026click_id=931435172425895936\u0026rhd=1\u0026var_3=5688325_%7Brequest_ab%7D\u0026btz=UTC\u0026bto=0\u0026z=8527407\u0026cdn=1\u0026domain=fousotejap.com\u0026wua=1:1:34326\\\\nasync*@https://uwhewhoachastuz.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/universal.js\u0026var=1700745\u0026ymid=931435172425895936\u0026click_id=931435172425895936\u0026rhd=1\u0026var_3=5688325_%7Brequest_ab%7D\u0026btz=UTC\u0026bto=0\u0026z=8527407\u0026cdn=1\u0026domain=fousotejap.com\u0026wua=1:1:34500\\\\n@https://uwhewhoachastuz.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/universal.js\u0026var=1700745\u0026ymid=931435172425895936\u0026click_id=931435172425895936\u0026rhd=1\u0026var_3=5688325_%7Brequest_ab%7D\u0026btz=UTC\u0026bto=0\u0026z=8527407\u0026cdn=1\u0026domain=fousotejap.com\u0026wua=1:1:34504\\\\n@https://uwhewhoachastuz.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/universal.js\u0026var=1700745\u0026ymid=931435172425895936\u0026click_id=931435172425895936\u0026rhd=1\u0026var_3=5688325_%7Brequest_ab%7D\u0026btz=UTC\u0026bto=0\u0026z=8527407\u0026cdn=1\u0026domain=fousotejap.com\u0026wua=1:1:34508\\\\n@https://uwhewhoachastuz.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/universal.js\u0026var=1700745\u0026ymid=931435172425895936\u0026click_id=931435172425895936\u0026rhd=1\u0026var_3=5688325_%7Brequest_ab%7D\u0026btz=UTC\u0026bto=0\u0026z=8527407\u0026cdn=1\u0026domain=fousotejap.com\u0026wua=1:1:34511\\\\n\\\"\",\"timeOrigin\":1152}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: text/html; charset=windows-1251\r\nlast-modified: Wed, 02 Apr 2025 23:04:30 GMT\r\nset-cookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W0p75RQMQ4p73jLHUGPA26b7u2CnFERJAnUGGz5HUmnAt7Y%2FpfMHa5yU8MRqKYGwkgSya%2FmA87vyAml8QsX27%2BKk7jXKeeDiCOCYb2C%2BWfA%2B94voc7Xiej%2Bj99dTAZ4rZWQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 92a3f7359b6556aa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1149\u0026min_rtt=476\u0026rtt_var=1289\u0026sent=10\u0026recv=11\u0026lost=0\u0026retrans=1\u0026sent_bytes=3291\u0026recv_bytes=1182\u0026delivery_rate=6277456\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=a2616fc3f400a99a\u0026ts=184\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29721,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (472)","md5":"ff471c4ccfa1d6a22dd5b0a6e9926829","sha1":"45d1d1c437bff395b3a849f1158cce6d5f73cbb4","sha256":"a560a3f7572a572a7f1a0525f9fdf7e43b0027b0ff2ebe1fb9ff2e8b144666b6","sha512":"cc98d25c87135b314251fac2820b65ca0bb871779298def41f78de03cea1284195b5148096fe7c29df8632be02581e72a28effb0719619f281bfaf9238be17a8","ssdeep":"384:9mefZ8m0a2QJqQp3taLOOzwRNvLIUV7rFmYs3qCkCoO:w+8m0a1x3taLOOzwfMUGYsiO","tlshash":"3fd2d805f5fb860a8173506adf3bb54caa6655279241ce44b9bc0df97fc9e00a8f3388","first_seen":"2025-04-02T23:04:58.882307Z","last_seen":"2025-04-04T23:08:45.501702Z","times_seen":3,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":57,"dns":21,"connect":1,"send":0,"wait":156,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery.validate.min.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/jquery.validate.min.js HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Mar 2012 07:16:03 GMT\r\netag: W/\"4f5073b3-5fb7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4059\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ip7CrNWKYjETUaBp2Jeva5r5cMzJwvxWzjIM1Th66m8KE5AbeJroOBUcMC3nJKGCc3ieri86J8QzjSk%2FxPGh1P2wUY%2BeThtrMpvKL2K0GKT2vuYmQBHo5bRZUQQgYsiSa0o%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 92a3f7397b75b50c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3101\u0026min_rtt=1045\u0026rtt_var=2243\u0026sent=83\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=80083\u0026recv_bytes=2368\u0026delivery_rate=3476476\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=0d65380bbd796fdb\u0026ts=474\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24503,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/essent/js/jquery.cookie.js","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /essent/js/jquery.cookie.js HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1696,"data":"[{\"autoplay\":true,\"buffer_count\":0,\"total_buffer_duration\":0,\"buffer_ratio\":0,\"client_time\":6957,\"is_buffering\":false,\"looping\":true,\"minutes_watched\":0,\"network_state\":1,\"playback_rate\":1,\"player_width\":1280,\"player_height\":720,\"session_playback_duration\":0,\"video_time\":0,\"video_height\":540,\"video_width\":960,\"volume\":1,\"background\":true,\"clip_id\":806895400,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"is_mod\":false,\"is_spatial\":false,\"owner_id\":55647647,\"product\":\"vimeo-vod\",\"referrer\":\"https://converge.inspirecio.com/\",\"session_id\":\"cc1e1dba39d66c9f7d1bf70987581073424fd27a1743635051\",\"version\":\"4.40.32\",\"version_backend\":\"8c012f4\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":null,\"fps\":23.98,\"account_type\":\"live_premium\",\"api_version\":3,\"privacy\":\"disable\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"dropped_frame_percent\":0,\"event_time\":1743635055,\"fullscreen\":false,\"picture_in_picture\":false,\"highest_available_profile\":\"f3f6f5f0-2e6b-4e90-994e-842d1feeabc0\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":\"f9e4a5d7-8043-4af3-b231-641ca735a130\",\"profile_id\":\"f9e4a5d7-8043-4af3-b231-641ca735a130\",\"codec\":\"AVC\",\"audio_codec\":\"OPUS\",\"quality\":\"540p\",\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":\"f3f6f5f0-2e6b-4e90-994e-842d1feeabc0\",\"video_bitrate\":1196,\"video_duration\":32.574,\"ab_tests\":[],\"error_type\":\"not-supported\",\"error_reason\":\"None of the files could be played in this browser.\",\"name\":\"video-load-failure\"}]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Oct 2016 12:18:38 GMT\r\nage: 4059\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\netag: W/\"5806131e-709\"\r\ncontent-encoding: br\r\ncf-ray: 92a3f7399b8bb50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1813), with no line terminators","md5":"c798ce92cde69a649f57daa2bcab34c6","sha1":"a5ff8f54d952452e6a354dba2dacc57f081a3b65","sha256":"6b25aadffcfa3fe4b2ff13c2825b23d32d6a6f92de18e032b80d4ad59d0fa458","sha512":"d908741c4b672eb570960e61f6b392120216cf7c16f7601fd82dd546a6e6bf3cfb776e9cf2d4260c4263914f6621328c0feab872b270e80a63f9cba6766ac2ff","ssdeep":"","tlshash":"6931fc88388c2d2445fb1be035ff05a8b63ddfb2109a1098c561a7e03d74c42eaa7e69","first_seen":"2023-04-09T17:46:05Z","last_seen":"2025-04-04T23:08:45.506113Z","times_seen":30,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/Images/dot5.gif","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /Images/dot5.gif HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 63\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Nov 2010 07:48:38 GMT\r\netag: \"4ce388d6-3f\"\r\naccept-ranges: bytes\r\nage: 3987\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 92a3f7399b8db50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 4 x 5","md5":"32cbd28f2639aa433d0e39f50cfaca4c","sha1":"52716b27f33682945b0460fb4904fa83666219ad","sha256":"0d1bb28d98f8f39daef40338f1f7a8a8fb26983c65ce4db28012571b2a7970fa","sha512":"9e11860c0328859ddcb81601f48cf58782eeb949639bc0c617aaf23d6f14b0c4934db2c28120db10a916cc67b46b0364cd6ba6d8c5ee456611d526dc2c119dd8","ssdeep":"","tlshash":"efa00212d9d2d009c158d8359c59e15d7096612ab14521472de83b21f53d56d40e50a0","first_seen":"2025-02-03T19:41:53.589266Z","last_seen":"2026-05-20T19:21:33.402332Z","times_seen":44,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.intimcity.one/i/img/18_city2.png","fqdn":"q.intimcity.one","domain":"intimcity.one","tld":"one"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://q.intimcity.one/admin.php","date":"2025-04-02T23:04:31.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intimcity.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Mar 2025 11:24:07 GMT","end":"Tue, 24 Jun 2025 12:22:50 GMT"},"fingerprint":{"sha1":"30:A5:80:6A:0B:D6:33:CB:1A:0A:21:AC:77:8E:B8:F1:51:00:D2:58","sha256":"CD:89:F0:C4:3A:2B:CC:B6:18:DB:81:34:74:56:60:5C:68:0E:5C:6B:AA:3E:A4:7D:9C:D5:59:59:D4:92:D7:0F"}}},"request":{"raw":"GET /i/img/18_city2.png HTTP/1.1\r\nHost: q.intimcity.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q.intimcity.one/admin.php\r\nCookie: PHPSESSID=c306ac0b529a971fe6f8212350da40e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 02 Apr 2025 23:04:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 887\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Feb 2016 14:29:50 GMT\r\netag: \"56af6bde-377\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4060\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-ray: 92a3f739cba0b50c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit colormap, non-interlaced","md5":"21914846cf6271e287c8e65b4bc1afcc","sha1":"427f21526cd37475bb87fe3f33997df92f09ead1","sha256":"a193d35cbba35da2f350c7841fb3b53a8d62411ba0bbbaeb01f225974e3bae8a","sha512":"224fda931b7c125ff38e04778cfcf33f767f923f4b33197598d62b3b62e3c40f0ff6f70a996ec771cbb3bfd406f182cb292118fff472b6e42bf7472e655cb782","ssdeep":"","tlshash":"a01152b96daacc94d8229e79ac476121c4c80e5c259e082109b777e5cd31a2575fbd04","first_seen":"2025-02-03T19:41:53.59344Z","last_seen":"2026-05-20T19:21:33.365947Z","times_seen":29,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-02","alert":"Sinkholed","trigger":"intimcity.one","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}