{"report_id":"0759a90e-d3ad-401a-a35d-2bef9833203c","version":6,"status":"done","tags":[],"date":"2025-10-22T15:25:04Z","url":{"schema":"http","addr":"pathtrkx.com/f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5?device_type={device_type}\u0026creative_id={creative_id}\u0026browser={browser}\u0026site_id={site_id}\u0026site_host={site_host}\u0026carrier={carrier}\u0026category={category}\u0026adspot_id={adspot_id}\u0026adspot_name={adspot_name}\u0026keywords={keywords}\u0026price={price}\u0026externalid={click_id}","fqdn":"pathtrkx.com","domain":"pathtrkx.com","tld":"com"},"ip":{"addr":"13.33.235.112","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"title":"Зріла жінка"},"submit":{"url":{"schema":"http","addr":"pathtrkx.com/f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5?device_type={device_type}\u0026creative_id={creative_id}\u0026browser={browser}\u0026site_id={site_id}\u0026site_host={site_host}\u0026carrier={carrier}\u0026category={category}\u0026adspot_id={adspot_id}\u0026adspot_name={adspot_name}\u0026keywords={keywords}\u0026price={price}\u0026externalid={click_id}","fqdn":"pathtrkx.com","domain":"pathtrkx.com","tld":"com"},"ip":{"addr":"13.33.235.112","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T15:25:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-10-22","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"notix.io/ent/current/enot.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.temptationhub.space","ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-19","domain_rank":0,"first_seen":"2025-10-22T15:25:05.387795Z","last_seen":"2025-10-22T15:25:05.387795Z","alert_count":17,"request_count":17,"received_data":2297098,"sent_data":28752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"notix.io","ip":{"addr":"139.45.197.103","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-08-20","domain_rank":50484,"first_seen":"2020-08-20T13:14:00Z","last_seen":"2025-10-21T05:03:08.045074Z","alert_count":1,"request_count":2,"received_data":146453,"sent_data":927,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pathtrkx.com","ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-05-02","domain_rank":366114,"first_seen":"2024-10-10T14:38:12Z","last_seen":"2025-10-17T14:04:19.962443Z","alert_count":0,"request_count":1,"received_data":19589,"sent_data":769,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.temptationhub.space/js/so_n_backs.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51ef662fb54c46e8e3570f1637709bbd","sha1":"ecf835eb9c0e57e7cda035c3c0afe3aed3a51b4f","sha256":"748c59c21493a7d90abf25d814c0da3f63ae466995c336f99654e365858beec1","sha512":"25fd320fbc7b5e9d1bbffa5c399a254abc3556fdf980aa228d8f057d0bb9fafbc583225f0fb36ad9957d3b2cee66eba1625713b60317ae612e22c9b75978a71f","ssdeep":"","tlshash":"2931bd9630b101751ae720bc904fb65c7166681b35c884e4be2c9b505f25d2bb5aa7cc","size":1756,"data":"","first_seen":"2025-07-14T15:28:44.443173Z","last_seen":"2025-11-26T15:32:36.117974Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9d787a39cd8743ba52b3fa0ede6abfe","sha1":"5eae8484d135ff16052ef13904996cfc7d178d62","sha256":"5b94731ca9a304979bc6336a40af068e79bc55686aae31326980be16de0c8173","sha512":"9fdb951feab105e6005ef848c90278f0c44e4867577ed409b841b14426c4134c874521f7a1011562c42039019f384332f02412fd2d110caff6d35da2e8a61804","ssdeep":"","tlshash":"a5d0950d257370348037319b52bfd2143432050f8054e09435dc8e54cf18fef811759c","size":277,"data":"","first_seen":"2024-10-16T20:47:01.905904Z","last_seen":"2025-11-30T23:41:46.589757Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"450e53fe8d0e42b0e5f552d3c8839265","sha1":"e58d6c0109bb918c77303ea18966a04be1e2813f","sha256":"26ba14ed70f391e4d21b7e2e6d40f625c53262dae83b951e4cdf86e60f62c3f3","sha512":"7845bfeb6fa332dbe3b6fd415ee813b1c87ae259fe9ed4be25c803109846372aaba4f2646f58d416c74064446545b776e55c4d087a95061feb42af6eba175afc","ssdeep":"48:k0xtCUuiOyG7Qnx4IddAMBWet95tjKIhy9yKG5bkR8ijEeiNpTSGM3Z9L5pc7uyU:ZhyyGI4Q6et95tQ93Ce8gh5pc7wr/ZR","tlshash":"2d816556e1ba252993f840b4ccef171b54bc29462c080511b7edc9c9ad99fff352ed24","size":4162,"data":"","first_seen":"2025-01-31T02:55:15.338179Z","last_seen":"2025-12-26T12:58:34.626141Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/ent/current/enot.min.js","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.197.103","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a3ae56c31a58c28e606e1e069a21059","sha1":"ea3cdfcda002044373d2090e1745f83a15b82d17","sha256":"6ccf4be26c7c79133eaf94c9c64a2ace27574e72d4c40c3c2011479cadca1f55","sha512":"c30fd5573663ff878026630684b7b9b80bea7736db0c9b8bbcb1740dfa63d8c1cf79d151244afeffd8454e598fcb50d918482c108923872f16fdb0d60b263d13","ssdeep":"3072:dMk6Iy3kf74OpU1Ng5WpFfZ7pRhxY+VOgWGrrKO7jaz+ojITs2siKAV:dMvLOpU1SWpFfZ7pRhxP7mz+ojITjKAV","tlshash":"3ae3948077d0ec9d1787f776bb2ba0e5f44b0a6839c4880bd181fc50199d62beda99f4","size":145421,"data":"","first_seen":"2024-03-06T08:52:05Z","last_seen":"2026-03-30T18:03:28.843657Z","times_seen":1285,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-10-22","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"notix.io/ent/current/enot.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/js/city.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04d2fa16d4ec1e525e65b76a80eda773","sha1":"6ab453c523ef9857e685d25553c7a29e3b1fefae","sha256":"eea549b5367ac087610a674a0ec68d91aaa56725848de75742a99d1318ce5570","sha512":"acf2753beef779c44698253fbf33af099e1bb319d843a0568e9f46b24ee4bf2d76a4ccdea008b652bf486f8e101c48e774be960e2fc507043e146be2cf7fb01d","ssdeep":"","tlshash":"e8f081a8357b59704c737c445787c250646a41563903d698f9acd1508fe2f1d017b78c","size":582,"data":"","first_seen":"2024-08-22T17:16:17.729661Z","last_seen":"2025-12-26T12:58:34.620945Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87647bbfd6fad661aca989cc2eed1eea","sha1":"a28d982822db6d99cd97a99f06cb00752fadd664","sha256":"8f18a9d1e40d97c1cc4a5d02394c7615531d48bf05b859eea574f3630c09b324","sha512":"91d3684664f1894bcc94df9bc0f93b419c6a70fa2105d09328b5d353bcc00c7f58e4069ae83d3206aa6bcea092372fd9266001f76fa9f916f6782f697969c9b1","ssdeep":"","tlshash":"7cc0124a3ab2455952bbf4ff917bc70824253827a94bab883c1e05504f51594a2a35c5","size":135,"data":"","first_seen":"2024-10-24T15:35:03.965559Z","last_seen":"2025-10-31T15:46:23.970261Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c02fc7549d62a8cb3c6c6d9e8b9ada4","sha1":"8b82c45356c49e58f581879100f47c99328e9213","sha256":"18e0ebe149fcfc7a37080239f2da95507f3bc362933da8b803fb9d3bc55678d4","sha512":"30bd642b86cee1f48f41af6df333307a13a2259b4802add8586ccc62236aae5b86efdb72ca6e9e629355684d9c035daa15365ee13469abe4e23bfb4a8d4c2f83","ssdeep":"","tlshash":"3c900218d39739916a2a514512504e669935072d146064c81752a381555c813e845155","size":57,"data":"","first_seen":"2025-08-27T14:16:41.555336Z","last_seen":"2026-03-04T22:45:39.036762Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/js/steps.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aec925aebd7fc4b8a040bf08a6c170c0","sha1":"16c84f48c5569862854a825a3bdd0e8abff94c94","sha256":"97a54092c94bd34854e43253c7a3e3b014160e219c70068daebda4b08fa92f74","sha512":"e22bbd0cc46df22d3ab99ceba185a88ea56aa0f3a2b66f313bdef852912f90e5c76441a47354d041334e889ba528e9540c93232e890646b33de99f56243d8f93","ssdeep":"","tlshash":"8021e0f662b50534426fa02f5e578b1b7a3a001f7649df443cac28820fe5d8819f03e5","size":1282,"data":"","first_seen":"2024-08-22T17:16:17.728294Z","last_seen":"2025-12-06T09:55:19.384378Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/js/final_cta.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a457d5dbf8e7d2aa13a2bcea8d26cac1","sha1":"fb674b5647b585d50d51181538c54f63fd6e1db8","sha256":"572ce089bbd78390c3c14e862ff42a97b64e8a70c4e4765c98682915053d9450","sha512":"5be2b98cd4c0ce364ff3f5008dbecb2c2b9fe4976a52c9340ab44f221dbb5578bdb45ac3a32d52a370413ce136a0d9d7bb001418b49f3b4546137bc1a4fdd4f5","ssdeep":"","tlshash":"5611592924f121390ea3d09db09fe75d72699027328c49dafe3dd2415f419296df29c8","size":1040,"data":"","first_seen":"2025-07-14T15:28:44.432425Z","last_seen":"2025-11-05T15:00:31.141322Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T15:24:40.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 15:24:40 GMT\r\ncontent-type: text/html\r\nx-amz-id-2: jz3OP6s0hbZAaw9GvB6SrUuLXrabC5g425/aA53/G7JA9Ap4k9y0R0gc/QjS77GBCbbvrvBdPow357T6D5W3pIGB2/26RmKlaUlZudUCkSI=\r\nx-amz-request-id: S4PTWBGF6Z5T6M5M\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpxobVVE62bajE2kaB5qbtcQHQLVok2Kg7Iar9ln9rMELNPKnAsL3A1rbn53%2F2EjGa8SpKYLdlFAbJOBOsUBzCNtTTE1%2F897ft%2BkWJXmNuHx6Grtsw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 992a00c0cfa60b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3507)","md5":"1ff6de758521c5960c63435faed6b5cf","sha1":"2f9904331509ad22c42cb082746b5e061996f354","sha256":"f472a7acdf7c88b53636335b17ab32db2cd3b0491e60974e157da19110bcabe7","sha512":"491c8b637f3bff7c8d59d1bdc843bcf8ec53dfb65be5ac26d40ef16e4174d9c71b9b6956863ea6dd7e128847a6e739b03ad19d7f45828cc888e6d7b26637124f","ssdeep":"192:BGQtoYJh8ZEx73Me8gh5lrB4c5x38qLFReoWR16RfORcUg9Dm0:BGQtnF73T84rR1LDwafIcUg9DJ","tlshash":"80729221a0fa297f10478096b8adb6177ed04867db1e464071ae1fe98fc2ceb1d5738c","first_seen":"2025-08-27T14:16:41.529709Z","last_seen":"2025-11-08T14:27:59.285703Z","times_seen":9,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":42,"dns":23,"connect":1,"send":0,"wait":241,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/LOGO%20Whats%D1%81%D0%B5%D0%BA%D1%81.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/LOGO%20Whats%D1%81%D0%B5%D0%BA%D1%81.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: +w1nMFokZeg9ZthVLH2+W/TVAoAPqXMdVjesQyOZQhUTWTu/UtX3zJR3K4kHXEUB2Y+9lokMcKTJ37Zsxl12y9TRZfM7sLn+u1Rs4tbAxbc=\r\nx-amz-request-id: S4PY3M0Z4112D98F\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"22f6000939ba50ca85189f4ce3192a5b\"\r\ncontent-type: image/png\r\ncontent-length: 13268\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0POnnanYxVvLLFWGP0Gd9XkVykOPiYGLZPeIpk4cfvJUAVkEQPdXgS4F9dQwoa8gHvu7djt0l8TFwPF71g5AoImfNDExXI2djA2R8HfPYov0KEQZ%2BuXg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3996e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 64, 8-bit/color RGBA, non-interlaced","md5":"22f6000939ba50ca85189f4ce3192a5b","sha1":"dd0cf0b79f1023419cdd1b109eec5a2c6bde6fa6","sha256":"670ce0c6669a411c8578bf4e5922494f82b6ffd245a3e003783dd033cb493ec4","sha512":"182f89081eaf43ba1d089988c8826a443071f35035da0b36854c6ae040ea333ec32fc0d3cfc2d6c40f202114edb0fa3d1f1f4b8430009dc4390fc30dffafd908","ssdeep":"384:UZ5O4CDeO5Uax7Z5orH80LRqt17vH9bVncHYHTDbR0DobfMpZ7TB:sxCDt5t1KrHRALR4CDbi8bfMz/B","tlshash":"1d52c0b9fdc282d7a90cbc108dd1734adefb86220491964a75d3d8619db0ca12dd35cf","first_seen":"2025-08-27T14:16:41.5317Z","last_seen":"2025-11-08T14:27:59.287469Z","times_seen":9,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/53.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/53.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: yEYKTTwSIDPVPetJswnYGcL/4jc9DHPXUkEQk4h2VA+mztMnxcgUSHacI+ipzlAg4NkOk/YEqPJuIxgNqAPX1BU5OqlEhyBnQFR4mVGRj/I=\r\nx-amz-request-id: S4PH5G3ZAGADYHW1\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\netag: \"8be802c456c576f4346f15704a6b2d9e\"\r\ncontent-type: image/png\r\ncontent-length: 193938\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcXuDko9nfSaaEF8djv6u6YN6AwpgeqAa2QeOc3USnZvcglkH3a7WRV2EMv2ttci6ZZgTwJdv0eHIFTK8FmLOi9Qu3IPncyAxEzTeUHt8qz2qFa0CLfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"8be802c456c576f4346f15704a6b2d9e","sha1":"405f8be8ff93db827eb9cafc5c25fd4588325143","sha256":"3ea1821d7dfbea79f2389d6c7b0e5d02877fc94c307ca1b6e737e067997b6066","sha512":"207cb1248d3b7156760898432ddc36a3f7992fbf0ffbb4009558235bd3cbbc5842163938a24d4b401ee0b41ec2a0f70335b2420d7fbff6be1ec96d7d5cce2d54","ssdeep":"3072:dLLLLLLLLLLLLLLS4CXr/76JMj0cxFQ/8oNpdRGFOrF5TMSJu4B2grGk1EXWs2v6:dLLLLLLLLLLLLLLS4CXr/WJsXXQ1TyE4","tlshash":"011423f47424276da920a2796e4e12e0508b634d50ff0df71edba4adcc99f09dba4826","first_seen":"2025-03-15T15:56:54.899927Z","last_seen":"2025-10-31T15:46:23.942346Z","times_seen":11,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/js/so_n_backs.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /js/so_n_backs.js HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: ahJKSL8wG4eGD2VTYF5+ZVBeUCNFQolBX9Jsn4cHedPTN5urN4PMc91OBJFhsGsL2/9pq9BVu65JALTmJv3wSykydOWO+Iux\r\nx-amz-request-id: YTEB9V0VBCE7666Z\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:10:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnykBWdWicQGIskWT%2BDHjcvgWYO1WAdggQXvY5fqW8pehd3Trq2VbfXjfvXlXLHiHg7haKzUe46QyJTSV%2Bp%2BBp7xvnM6LffAYerTCTzX%2B40rh%2Bh5fJ%2BW\"}]}\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"51ef662fb54c46e8e3570f1637709bbd\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3a97a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"51ef662fb54c46e8e3570f1637709bbd","sha1":"ecf835eb9c0e57e7cda035c3c0afe3aed3a51b4f","sha256":"748c59c21493a7d90abf25d814c0da3f63ae466995c336f99654e365858beec1","sha512":"25fd320fbc7b5e9d1bbffa5c399a254abc3556fdf980aa228d8f057d0bb9fafbc583225f0fb36ad9957d3b2cee66eba1625713b60317ae612e22c9b75978a71f","ssdeep":"","tlshash":"2931bd9630b101751ae720bc904fb65c7166681b35c884e4be2c9b505f25d2bb5aa7cc","first_seen":"2025-07-14T15:28:44.443173Z","last_seen":"2025-11-26T15:32:36.117974Z","times_seen":68,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/ent/current/enot.min.js","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.197.103","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:41.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notix.io","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 21:30:08 GMT","end":"Sun, 16 Nov 2025 21:30:07 GMT"},"fingerprint":{"sha1":"83:93:8E:39:6C:D7:D7:30:DF:B3:60:65:D0:38:D0:23:43:6A:C6:C9","sha256":"29:19:6B:70:31:D4:98:79:B5:20:71:A9:65:27:50:DB:34:6A:3A:5D:95:16:F8:91:D1:8F:42:2E:4D:43:2D:48"}}},"request":{"raw":"GET /ent/current/enot.min.js HTTP/1.1\r\nHost: notix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Mar 2024 11:17:38 GMT\r\netag: W/\"65f18b52-2380d\"\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a3ae56c31a58c28e606e1e069a21059","sha1":"ea3cdfcda002044373d2090e1745f83a15b82d17","sha256":"6ccf4be26c7c79133eaf94c9c64a2ace27574e72d4c40c3c2011479cadca1f55","sha512":"c30fd5573663ff878026630684b7b9b80bea7736db0c9b8bbcb1740dfa63d8c1cf79d151244afeffd8454e598fcb50d918482c108923872f16fdb0d60b263d13","ssdeep":"3072:dMk6Iy3kf74OpU1Ng5WpFfZ7pRhxY+VOgWGrrKO7jaz+ojITs2siKAV:dMvLOpU1SWpFfZ7pRhxP7mz+ojITjKAV","tlshash":"3ae3948077d0ec9d1787f776bb2ba0e5f44b0a6839c4880bd181fc50199d62beda99f4","first_seen":"2024-03-06T08:52:05Z","last_seen":"2026-03-30T18:03:28.843657Z","times_seen":1285,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":103,"dns":15,"connect":28,"send":0,"wait":34,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-10-22","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"notix.io/ent/current/enot.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/css/build.css","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/css/build.css HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: RTnrwf1b0pygpNGRmQI0orIpn6rFPSFChZepszeQNmo0vMQMw/QmdeicP1JAx/jFJYLoo4ArBo8=\r\nx-amz-request-id: S4PYPW25JAWPMTPH\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zq4XrTWeDYzzk0g5VEkGBxtVnYs22pBhRpdOHkkhvS3OHUQ5RJs9PVy9gZrXX0DDVtBCt2s%2B5BLk55N68W%2BwIgP3KiS0Zp4CLPt0Z8TpQYqdvPev0KYI\"}]}\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"3817617cc633116b2583540598b67379\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3996c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":216280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55470)","md5":"3817617cc633116b2583540598b67379","sha1":"2dc77fe3e7ded454a422cc63ea5daa5174c054e1","sha256":"113123af4a3c5e91dc961b3384c2a2a2d961f2fd15de73d6ab4feb0997c7280a","sha512":"fdfb3f360a07a4760fcfa3b9a3029ea594c5329d98075ef63621390fa5f03fd122aa4fac7a77c24fce929cc07494904766651f4aa4a8bb3129ecf2972112a1c7","ssdeep":"3072:mXnOqiWvaprVIdLM3YnKJ2xkyhUZQhcIUwgP0Tk:mXnOhE4y3hUZQhcIUwG0Tk","tlshash":"f624975ce555e07b2c27d2b1939caa8dc01a73e1de6a03e5f4a357205ac27f11f6272c","first_seen":"2024-10-24T15:35:03.942821Z","last_seen":"2025-12-07T14:52:20.948915Z","times_seen":18,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/css/custom.css","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/css/custom.css HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: aM3Mcx+OcS3vKeUp+KWO5aC6IjKHUcmqlvBH62uKdfQk3dBI9Sf5dwG/ytOPpFBl4htSO8Sddinc680EV98qbhDRzWYVJZbO5L2DsSCtK40=\r\nx-amz-request-id: YTE8764D2RJGWGMM\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MjiYGnLgaF2hBPfnctCpp3Qr%2BhnmYCayf4Y2grBPgNFVCm5RRVVp5YSdihpzvT7Fp0MEZ4UDaW30KslVvS6JKSnXzQ6uyGknqAUjzZfQjhgQwhIl1L%2B\"}]}\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"31c923d34f75dec96df362a538d04f71\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3996d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"31c923d34f75dec96df362a538d04f71","sha1":"3287f472a017113bfdbbd6a9083ae3cc684073e2","sha256":"571183d1f6a2dc59ad2609988c9d0fdd614b96071576c1334d3e0f7f81b22c96","sha512":"41a48fcc33ec9b83378cb451afab153d3d4d5a72e710227f2f3ce4772a2a740c181897e366f00282e88c1a457d4e72c6ed26cd25ccfbb1948c0a7bbe4b373414","ssdeep":"","tlshash":"99115b6529f31004615786b057ee5b38563c94a31526cdfcb6cd684b8f4195433c96a7","first_seen":"2025-05-11T09:33:57.902989Z","last_seen":"2025-11-08T14:27:59.286416Z","times_seen":17,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/52.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/52.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: gE/cGyGUhQZv8OTkeqxBQMxIfFtI2UMGdC7fV/afjxGttlshF04IgzkgD/XNffYgMjuCkOuqJF0d6PDG85wk6JNCkI9SCYvhWO8kcK8vO1M=\r\nx-amz-request-id: YTE34F81ZQR5CQDE\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\netag: \"ac582a9ed53e437c0725686dfb0d32c0\"\r\ncontent-type: image/png\r\ncontent-length: 212900\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZricEeZdmYCZF0VLtKGlAdKLUFRKfeemb5jcLlj2%2BOwTXAnlHX2HU9rUBchrjUVH8klqac2iud7WvUp%2FilOzhnwDUtNJB7ypaTViZq1mIusFX1WLupyQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3996f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"ac582a9ed53e437c0725686dfb0d32c0","sha1":"9b136d34e708f3ed02e9ee1fe4c4c0655d082e86","sha256":"8f437bd3e900737ba12562f4a92c464626fea09c4e04a14cabec68f48127fc1f","sha512":"196ee37d1fdee2eeeb3408d3195c52a3736e8ab4d25b963487491ab1cba2f8a8dd9fb7aeaef4ef2ea0ee99eb639afdf0427e1bfa9b92b9bb2a365d2b09104c64","ssdeep":"6144:b+pzdb6TrZRE6h6loeRLwCw+iCnWM1PWhu:bkzdMrZeuoB6CkCnTku","tlshash":"c8242373cfbf3295ba5dc992695502a542a9c911113a8b7d5ec8f6cc3c04e7d30f28d6","first_seen":"2025-03-15T15:56:54.907063Z","last_seen":"2025-11-08T14:27:59.288537Z","times_seen":10,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/56.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/56.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: QOKCvzGKz9zZWlMnMexTvKXeuIG3r3v2xEVB7gWPxZGMadRzXzwY6ybsCbuw7d0m2myeQOHryxh0nvbczJkMUp8c2amFHaal\r\nx-amz-request-id: YTE7WCSK7EZ1KP19\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"c422d5960f507e3901dfe33cd64f94e5\"\r\ncontent-type: image/png\r\ncontent-length: 222445\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3pCZS8hS02FATkBVCjHmi6Q%2Fn3KQQmwVlxn0S0qTZn8DvPQ7kZuSMjE%2FuwtKGvvc889IlJYMAOxbSzTFm4%2BoiZn%2BqHopFX738HR7YQkdpnQ1NVuGO9e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399738deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"c422d5960f507e3901dfe33cd64f94e5","sha1":"8f660810f732d4a864ac80f08fe3308e2f5c524f","sha256":"8f9b0b95c3fe8cab2c61cc799c79a33a19e763477d36d4bfe4d2e947b6131466","sha512":"8bf09200ef50943e0f0f70b830d94859c20946754d273543198e765f85c5a67d1f7d27589b2b33a206f1adda1791717ad16164d9b9af6eef6efdf9b58f84eb10","ssdeep":"6144:et7y0suajdFDjoF9uhzT4yVPEDfTCj6d1CKBlwj4w:et7wVjdpoFYhzT4UQrCG1CKq9","tlshash":"e424224a8e5f0b16d55b15e6a74a6f6eaa2c2ee42cc71f4d0f19c85f0f873ac4d8c490","first_seen":"2025-03-15T15:56:54.908756Z","last_seen":"2025-10-31T15:46:23.953448Z","times_seen":9,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/57.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/57.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: 6dD39jv8zBxTSmzdViHHFKCy+MPh3nuIU+0wOfQmxw3rNvVYF4Wv0WcGCBUlPtEFpjDkWsAsMhCnip4Y7y8eimRpiKIpHeNDUHJawMTikqw=\r\nx-amz-request-id: YTEFD4M7KZ40DDF9\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"ac2cfc715eaa0c39a87476da8d3f0321\"\r\ncontent-type: image/png\r\ncontent-length: 175391\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhkcWMc77TIqvj6d2%2FDHhpPRpOcE%2B5OHwzIoUzJ2gy9o5rgOzf1MOoyj0c699T0S4J0sO%2BTmcTAzQmT%2B6aix464sYiZ3G5yc6gg0q7OElynxF1b8IY9F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399748deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"ac2cfc715eaa0c39a87476da8d3f0321","sha1":"f307299220b532ba6c2ee9012d85e998d85ce6bb","sha256":"aad2225eee5d0d2f5690a3ff1d5911656b3587727687c617587d82191a692ac4","sha512":"743feb29e6a7b04ad3a9eddb3e05b5f03540ab5d85820e14a08fc6b02d65eb42d6b562fe22766d72b03cfa30296f2119e3b32c6f9b8e4634a2988e432dae93c5","ssdeep":"3072:FICEaq1VUcrPrlq/n4rhsxgIOwhLhkSz9VDFZWKxDr9kQVkJOXJP9e7:mXaq1BrPrM/nGhdwVhkUVDPPxDr9kY0B","tlshash":"cc04137fe06d71239794d4b2d860f67ada6898854a4f119fd5423c0fae32e373b23029","first_seen":"2025-03-15T15:56:54.910379Z","last_seen":"2025-11-08T14:27:59.294252Z","times_seen":12,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/58.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/58.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: VWNhGYsXeh01uouNrvjKlEyvgbMtsSMEpPkaE/F3DzeJC34PM8YwK5/WgD3ieAiDcvWBr2PMbpY=\r\nx-amz-request-id: S4PJ4MRR4TNCTCDC\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"4d4cabe33069a032bdc64c405a042675\"\r\ncontent-type: image/png\r\ncontent-length: 199804\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2BTfjbIQsnkIpTw6z6TLjUHvVdhap9wwzVuyffQGkeuq%2FD%2FOGQzbqrXnfU5GoSCr01d2hoLzUY09MDviCQquvp6bXpRsjd2FJqUmXZZDclfQy0TIqzOR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399758deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"4d4cabe33069a032bdc64c405a042675","sha1":"c62a53fa834bbcaa54c533d2b5176b4b0ec2b6a1","sha256":"7b8a54c88e2146b87681d6d8f2f045eb7622dc8a4008aa5590670785008cb56c","sha512":"fa14d2b166484925f221290689c6f438b33ca5ad399d5f3a50978f87fb415fbf4a644ce3d308e7c544a2f4e55e6a77d0f7333b662a8a3451d4869deb4b44d224","ssdeep":"3072:t3kKGtB6TCx5ZktcLtUIlCr89RBio14sQmQ5DBnCC2jWfXyQkWeGjOZTug35pFvc:kx9ktcpHlCr89nVcbjc9+Ohug35pID","tlshash":"ce14129c09b38c6389a1b4502d80fbd709af3446a74fbacf24f73463561992ef98152f","first_seen":"2025-08-27T14:16:41.539622Z","last_seen":"2025-10-31T15:46:23.963399Z","times_seen":8,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/js/steps.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/js/steps.js HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: rdtH43Pn+BqG3dvyzXg1o7tFiVOblGFDjxSiwY7HwKgSP17bfNAr9nSMQG+xB5dATicIGTZVndinuglSg57lunLqYwf/Tzjw\r\nx-amz-request-id: YTEC7KQKZ0CDY04K\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txcqYhFRyozsNhUhKkN5TVeMAOzP6%2BC3PyFaUApdSYhhgPiESJJWieHz9E1PnqovFhu7z8ZqHcErUJL6vrmDT1B4djgQN33jbzhJjhP98Ra2LegkOoqd\"}]}\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"aec925aebd7fc4b8a040bf08a6c170c0\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399768deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"aec925aebd7fc4b8a040bf08a6c170c0","sha1":"16c84f48c5569862854a825a3bdd0e8abff94c94","sha256":"97a54092c94bd34854e43253c7a3e3b014160e219c70068daebda4b08fa92f74","sha512":"e22bbd0cc46df22d3ab99ceba185a88ea56aa0f3a2b66f313bdef852912f90e5c76441a47354d041334e889ba528e9540c93232e890646b33de99f56243d8f93","ssdeep":"","tlshash":"8021e0f662b50534426fa02f5e578b1b7a3a001f7649df443cac28820fe5d8819f03e5","first_seen":"2024-08-22T17:16:17.728294Z","last_seen":"2025-12-06T09:55:19.384378Z","times_seen":38,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/js/city.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/js/city.js HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: L7l+IMsEJwLC7K1aLOCoYSbRfOF0MEoqfT/vlWTXYoCfMJOuCLj/oBGtWAkA0OpcPW5YlV7gj9A=\r\nx-amz-request-id: YTEA4Z1QMFTDYBW3\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlmqrpurxoyqXym3OxipseamyTX%2BF6vxrbDglLTbANwdgGzkfdkKc4phR%2F4gL52gp1yZI8FdpffS8%2F56vk%2Fe2Oti4M4pOKjSEaVi0UWmETRFq9A%2B5nPU\"}]}\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"04d2fa16d4ec1e525e65b76a80eda773\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"04d2fa16d4ec1e525e65b76a80eda773","sha1":"6ab453c523ef9857e685d25553c7a29e3b1fefae","sha256":"eea549b5367ac087610a674a0ec68d91aaa56725848de75742a99d1318ce5570","sha512":"acf2753beef779c44698253fbf33af099e1bb319d843a0568e9f46b24ee4bf2d76a4ccdea008b652bf486f8e101c48e774be960e2fc507043e146be2cf7fb01d","ssdeep":"","tlshash":"e8f081a8357b59704c737c445787c250646a41563903d698f9acd1508fe2f1d017b78c","first_seen":"2024-08-22T17:16:17.729661Z","last_seen":"2025-12-26T12:58:34.620945Z","times_seen":57,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/54.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/54.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: w/7zrOs0oybx+r30jCiuy6bQxPAo0KmshYFZXBs1NHywGzY4TeEgUCItqMcVjZlIzGNFIXGpny8=\r\nx-amz-request-id: YTEB3498K6SW6GYQ\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"9617a6ba0be18f566632531a5a388af7\"\r\ncontent-type: image/png\r\ncontent-length: 195067\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgiJRNDoHn6XLVlIkjL%2B7%2BYooWcwYnCEFO60HUyQrIqKHjBcCCjgxl1XVaU5GzVlcs4NWq85syaYXWl9S8IC1Anh1NrnBzJBf3XE4CB4dyBr7nbBxAeU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"9617a6ba0be18f566632531a5a388af7","sha1":"91e886acb21e1a44d45f20e338bd31f000178532","sha256":"cc042ff90b018b9dd8442b38ce2eea99e1f2278fc09578a05e09721422efc75d","sha512":"ae41c6f4ec416ac287cab9dc72c54ff45db86ed505520289c4e8228a6f3b724e1106578cdb93a362bb70411a6e1c54ac233b49b698d2846ba496921f3a1104cd","ssdeep":"3072:wyDHIo2DFBqpSd7tXpkiJX5sRwX4e6Yl9nfJK76woOIoZYazOb+SmU9uz+biqMeN:z2Bqcdh5dJX5Wwp6AfJK765OIoZBS+18","tlshash":"f914133a60e17e506cb4b96e9e9e11074abf84d3e275962c57b82a03d344c4c7ec2f79","first_seen":"2025-03-15T15:56:54.890893Z","last_seen":"2025-10-31T15:46:23.95652Z","times_seen":11,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/static/55.png","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/static/55.png HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: vXPbh8NqtjfhDYf1n2bTv1VfFJHjLXsmsn4EGBKBSyLc0ctPDxflhKnlNZ+QRN7FAHTVoc1leKqvYvMdqVH5k1OqCf5ocFaMpfm4JfjTxpU=\r\nx-amz-request-id: YTE9WSHHNQE0YQAH\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:19 GMT\r\netag: \"01a4d6772840919894b6258fc2b0e0cb\"\r\ncontent-type: image/png\r\ncontent-length: 232026\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Asrb8OudhWafh%2FLRskkARx8mBaaYJFT73CdOemlswLbErhzaMQ7qKmINkJweELpDAKpHTlA0Y9xl5bYTrH%2Fm%2BMp%2FBRHKUc6%2BYlb0WlKfaGFjIdyqtYBj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c399728deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 450, 8-bit/color RGBA, non-interlaced","md5":"01a4d6772840919894b6258fc2b0e0cb","sha1":"8d72701d967718aab3971e84d9ea9311e3194ebc","sha256":"a2aa0d2d060a9b611cac58075ff853ac63869e9ed00caca1fe60c8b909fbeb3b","sha512":"5d9921137aef273b6d114a4db3f47b530a6e97f7fedd926b03d1dc99ddb5f7c82a360aec9360fe27e4a34e1169c965246a87faf6b248ab88d7ae66ed85889e74","ssdeep":"6144:+kC586nxxQgyYPm93XFtdfCgZzuSa/KnXFzYZRSyREkZz6B:+rxxQ5YetvdfhySuwXFzYanGWB","tlshash":"6834231324a03f79eed67d15dd4e92fbca06a4b3a2f520e697e356c1181ca116e23f34","first_seen":"2025-03-15T15:56:54.886367Z","last_seen":"2025-11-08T14:27:59.289132Z","times_seen":11,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/js/final_cta.js","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:40.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /js/final_cta.js HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: H4PFhzw7ArEXpT9GFMlgci1PNCWeZtDQKA6Kg7bc8hlp9MhvR1ejPepg6DFWpAWEu4D8o/Tj/f0P9oNCL2Jhxp1HN4YOegdhqo/GR6bfXPE=\r\nx-amz-request-id: S4PWS8NV24PWMVE7\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:10:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drFDUXrzh40RRZfv0ILvD3u718ia7Hv1v%2BTpGoEn4sj2Bb9d%2FE%2FgiCki%2B2c3pEJni9Dl2jXjQodHp76CvcwqWKt7dEYilgk2vDxNOpATc6%2FkLzCbjQTW\"}]}\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"a457d5dbf8e7d2aa13a2bcea8d26cac1\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c3a9798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a457d5dbf8e7d2aa13a2bcea8d26cac1","sha1":"fb674b5647b585d50d51181538c54f63fd6e1db8","sha256":"572ce089bbd78390c3c14e862ff42a97b64e8a70c4e4765c98682915053d9450","sha512":"5be2b98cd4c0ce364ff3f5008dbecb2c2b9fe4976a52c9340ab44f221dbb5578bdb45ac3a32d52a370413ce136a0d9d7bb001418b49f3b4546137bc1a4fdd4f5","ssdeep":"","tlshash":"5611592924f121390ea3d09db09fe75d72699027328c49dafe3dd2415f419296df29c8","first_seen":"2025-07-14T15:28:44.432425Z","last_seen":"2025-11-05T15:00:31.141322Z","times_seen":68,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/settings?appId=1004bc33b623a157efab85885cd116d\u0026ver=0.16.4","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.197.103","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:41.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notix.io","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 21:30:08 GMT","end":"Sun, 16 Nov 2025 21:30:07 GMT"},"fingerprint":{"sha1":"83:93:8E:39:6C:D7:D7:30:DF:B3:60:65:D0:38:D0:23:43:6A:C6:C9","sha256":"29:19:6B:70:31:D4:98:79:B5:20:71:A9:65:27:50:DB:34:6A:3A:5D:95:16:F8:91:D1:8F:42:2E:4D:43:2D:48"}}},"request":{"raw":"GET /settings?appId=1004bc33b623a157efab85885cd116d\u0026ver=0.16.4 HTTP/1.1\r\nHost: notix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.temptationhub.space/\r\nOrigin: https://www.temptationhub.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 318\r\naccess-control-allow-origin: https://www.temptationhub.space\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":318,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2aa6e23f41c8163ad6687f06a3362efd","sha1":"d94bb528db571a75d9f9131a0a45249de485de8f","sha256":"6e305047f5ac1bf8acd8614bd52fce1ab9ac03c5af3eeef71f18cacd724b3fb9","sha512":"6a190d684cfa2b92a094a6a10ad547a8f84c6d2c09c226b2c96c6d50b424aa550364f14574a3d087da2fe28e56b1f0000093ad8bc889946c6c6ae6ca51e80bec","ssdeep":"","tlshash":"f6e0c28b54e72ed657e79a72d65f099ad0f3901d489309b26bfb8a0e009138e47d2229","first_seen":"2023-11-13T16:22:38Z","last_seen":"2026-03-24T13:17:07.210445Z","times_seen":292,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/favicon.ico","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:41.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: cKLDTCBAc1iAFEQxwYyrLuc5SfgsCNotfvngNwaeF0fVetVqo3jpXWCR4el0jna2MVKCh9nGQ0AHLhH+Ugw7k8mxyaZeO2+D\r\nx-amz-request-id: YTE65W6QDRQE4FR4\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:10:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSP3riYMnt%2FU0x7%2Fz9AeicBhQ3bwDkPSmRaYaux%2BjrGjrhxAlgtt1y0NXctJ9V1IBuBkJvYaBIpD6TqQSYetuA1Sh50Ebtg06VQywI8GBkahliQKCHg0\"}]}\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\netag: W/\"2b55e88649021155a0bc84457b67e0c4\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c7ea5f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21822,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"2b55e88649021155a0bc84457b67e0c4","sha1":"bdc00652cd0e8eb2debb657f6c928ff5644b0f70","sha256":"42a46bf1742d09c11a717635e70959a20172141a5a52b2835fcf31b2bd32dafa","sha512":"e0612e70fd74e311546257aa0a74398b8b211e45f58a079bfcd159d1bedef10c6f270f4af0b98baa9e6ac2d359649d3c0be14e4c6f1007b2428bb2d6700e806f","ssdeep":"192:SC/CRq+05RY91OmlnL1+YxyO4ALDX1S8EwKn7O53X4N3/psPOiVCXh/ln5gY91OD:SC++6+QXzG7OVIN3/ghCBJ5Z+QX6","tlshash":"a2a2a451796ada66cc4590b0cb8fc7ff052d4d96e8218a1313d7bc4fb5fa4da2b0c291","first_seen":"2023-05-07T17:56:44Z","last_seen":"2026-04-04T17:23:05.901004Z","times_seen":383,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":133,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.temptationhub.space/UA/ua-0006-steps-common-uk/img/background.jpg","fqdn":"www.temptationhub.space","domain":"temptationhub.space","tld":"space"},"ip":{"addr":"172.67.180.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D","date":"2025-10-22T15:24:41.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"temptationhub.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 17:06:53 GMT","end":"Sat, 17 Jan 2026 18:05:41 GMT"},"fingerprint":{"sha1":"5F:C3:69:B0:F1:54:EB:8C:8A:6C:A9:BA:43:90:9F:A6:8F:F5:00:3F","sha256":"36:E0:04:49:A5:1C:57:01:79:3F:1A:12:F7:8B:A4:A8:58:A0:91:65:FE:92:A1:0B:16:AD:2B:68:0E:28:C6:53"}}},"request":{"raw":"GET /UA/ua-0006-steps-common-uk/img/background.jpg HTTP/1.1\r\nHost: www.temptationhub.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: SDpf40lbZ4ZvuxAWl6usjWwR+WZEm9K5QXjb86Tmk6l+aVYwLNtrNvr21OwqPmR17Enw2pgyP3ARgjpaEimE2meSO+F2pmGOJf6T1/LvJOM=\r\nx-amz-request-id: YTE4V404XFT2PT2Z\r\ndate: Wed, 22 Oct 2025 15:24:41 GMT\r\nlast-modified: Wed, 22 Oct 2025 14:07:18 GMT\r\netag: \"c6f31bba931d0e89173966c1a03cdbd8\"\r\ncontent-type: image/jpeg\r\ncontent-length: 577294\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhHXCAHWp7zlNlEgX%2Fu5%2BkencfzVx%2B1DoKsTgPvSKSyQcx8S%2B9XTRXCqIwDfPiMA1u0dtMK4f0mxOMbXI6KamLSChcL7WtHmAbA2wd3Ey39faQ4dL4Dz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 992a00c5fa118deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x720, components 3","md5":"c6f31bba931d0e89173966c1a03cdbd8","sha1":"c27da60eec523f4226c837d183cfe62f20b71353","sha256":"1057fe8275430e2b17b315d3e2c8278f6a67948b947615b6a2830e268e72e340","sha512":"f5fc40f90aefa5400e61c0ec577f06d72e224a13f387bce7b8dcf4e80d4d26ee063b37cc441a161bf2ff8d5c643f161b8d04556a4a445e648b0402b1b591bfcf","ssdeep":"12288:CvJjXzHKOa8jpHGIcPWSd2NqLGnOhVXIRBARYi/wB:0da8phcHd2NqLmOrkBAP/+","tlshash":"b5c423ac210e74d44ef3cde44b5f3a31ea538f4350ba1bdc8651912dbe2bd1dba84059","first_seen":"2023-07-15T05:07:45Z","last_seen":"2026-01-09T10:34:38.940814Z","times_seen":39,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"www.temptationhub.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pathtrkx.com/f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5?device_type={device_type}\u0026creative_id={creative_id}\u0026browser={browser}\u0026site_id={site_id}\u0026site_host={site_host}\u0026carrier={carrier}\u0026category={category}\u0026adspot_id={adspot_id}\u0026adspot_name={adspot_name}\u0026keywords={keywords}\u0026price={price}\u0026externalid={click_id}","fqdn":"pathtrkx.com","domain":"pathtrkx.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T15:24:40.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pathtrkx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 02 Apr 2025 00:00:00 GMT","end":"Sat, 02 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:56:B7:D6:D2:49:C9:FF:BA:4B:B3:FE:36:C0:AE:6A:9F:7E:2D:02","sha256":"FB:5F:84:C2:F3:86:1D:2C:3D:02:25:B4:15:2D:17:D3:75:D5:B2:62:16:88:A7:55:16:31:8C:33:81:FA:B4:2E"}}},"request":{"raw":"GET /f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5?device_type={device_type}\u0026creative_id={creative_id}\u0026browser={browser}\u0026site_id={site_id}\u0026site_host={site_host}\u0026carrier={carrier}\u0026category={category}\u0026adspot_id={adspot_id}\u0026adspot_name={adspot_name}\u0026keywords={keywords}\u0026price={price}\u0026externalid={click_id} HTTP/1.1\r\nHost: pathtrkx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nlocation: https://www.temptationhub.space/UA/ua-0006-steps-common-uk/?trd=pathtrkx.com\u0026campaign_id=Native%20Xhamster%20%28restarted%29\u0026city=Kristiansand%20S\u0026lander_name=UA-0006%20-%20STEPS%20COMMON%20-%20UK%20-%20%28TEMPTATIONHUB%2FBROTRCKX%29\u0026sub1=f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5\u0026cep=ak9p1KDEJcgojgbqKsadA8kM4csahM9Nro1KQwXCIZxBdkLf2EEfjUqjb7OI9hSBm7RUW9kBia7lbPwzUkusHb7ODBkXUuzXbqLNDInmDbWBq6sO_JgRm0agleuUQmN4U80UOvC40VcvwMHyTxwubp7cTb6wY-Hixn-aQD8oDqhcNOSAzXT-JojxHh3PcUAwgEclO1uH4PuNXhQLYbH-ffz-9IaNtB_3QbSS1y0F0ZePbhjsygAoo8w4y2aHwyLK9_wEkh-oc-8fMXxySRkiZHotAzIE1i6Yfg8CmvVTEH-iSyxQ-7ZaFmU9MmoyD3c6EkzNEOFPnTdIVE8uuQfRfNKQckLbowkMbVQ4lJW2D4uIhlxU4fAOSlFlnh-_OtuYKMA6nixqQZK6Z2P_IsTzXX-OU2SCMPDxbMQlvRIMQMGOcXOhERTF4DVRVa0V_VV2xYNf7JJdkRIYs-N88WyZlHsB3vv0w9HL2SkUWqtvIxL-_hBLBgbOAB75Fkb3OvoCClOj4KkB38RmGczWLRuRO4aMuXve6xNL44GMe4_XY2T2C-0bjxBZyRztBfSOFhh67tvefK8KIzPXCkUlWWAkU6rfF6-ete7SVcKI3GFfgmnlvoWI0JaMKXhpgERAMXqk\u0026lptoken=17a8617a14a484d780ce\u0026device_type=%7Bdevice_type%7D\u0026creative_id=%7Bcreative_id%7D\u0026browser=%7Bbrowser%7D\u0026site_id=%7Bsite_id%7D\u0026site_host=%7Bsite_host%7D\u0026carrier=%7Bcarrier%7D\u0026category=%7Bcategory%7D\u0026adspot_id=%7Badspot_id%7D\u0026adspot_name=%7Badspot_name%7D\u0026keywords=%7Bkeywords%7D\u0026price=%7Bprice%7D\u0026externalid=%7Bclick_id%7D\r\ndate: Wed, 22 Oct 2025 15:24:40 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: f5f3d65e-9ff9-46f8-b333-d5f60ea2a3b5-v4=J0FB0fi4Ns7bGV72VZhD5xsqxJpHOdWAzN_CtFGI20I; Max-Age=86400; Expires=Thu, 23 Oct 2025 15:24:40 GMT; Domain=pathtrkx.com; Path=/; Secure; HttpOnly; SameSite=None\ncep-v4=mMKQCgOoHKsxCG8lQqQRc6dY0AF3jt_duJ_cnw-6YeHlEbjDL-YG1OPWu0twM1-SHKOq-g6twMVvK-XuArxx3UZO36u_BwJ5MfvvjQnHVJC_-FQMRFyVoQ2Tj4iUhNoOjoIDpS7LR0xlFw4lRNVO5Jfpb2L1PjsVx-OZr1P5lOqw6b4nHaOB_rYLtRLzY1R55Cm_ZCEzrRMO-A5aovnDBbTzFc15F5m3FPGwLOv3nlDTKakEOsmU93TM-bndPTVfO6BB7Ig04VRqf44yK8rkSOOm-uowT6HF1aZfj992dztQWWoYtTnFqz7cvEo8_uuN3RpgY1Q5ieFGU6uRpIL0Y3ITTSGjJDhRkMgowrMdNzwifQoHY-92tSrAkazLjB5hZ5AukPEpR3W8ltNu5eOjYzR5ljUjNGHYBVYLdPLVHrIecG5BEHz_06OrVvDfuA3LC371n-GQniyjC8p7LLEU8T9GS9F_e6jJeJwc-KEQ2BjCiMufTLqW4q74ZiDIM26GWBut4oQr789bivcvbuoOvIz0VJywjf9uFI526a5uE6Y5YrOoFt4N4LPZPLqyTBhnrJgHoFlzfFcXocfV6hIkxYFlibzxrfKUryL4CmXojbQRCOVm2slH9VuUaC9TgIXR; Max-Age=86400; Expires=Thu, 23 Oct 2025 15:24:40 GMT; Domain=pathtrkx.com; Path=/; Secure; HttpOnly; SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0bc6ea800eda1e813056323cb53f8c70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: FuNTfuvMiRwDIZQyO_NHvkFLdJhQS6PoHN5WQeo8O-_5s0NJQTATuw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":320,"dns":58,"connect":1,"send":0,"wait":26,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}