{ "type": "Domain", "indicator": "captcha.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/captcha.com", "alexa": "http://www.alexa.com/siteinfo/captcha.com", "indicator": "captcha.com", "type": "domain", "type_title": "Domain", "validation": [ { "source": "whitelist", "message": "Whitelisted domain captcha.com", "name": "Whitelisted domain" } ], "base_indicator": { "id": 2776856469, "indicator": "captcha.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 6, "pulses": [ { "id": "6a1562e873e9552952bc9d85", "name": "undefined", "description": "", "modified": "2026-05-31T05:20:48.924000", "created": "2026-05-26T09:07:52.801000", "tags": [ "number", "label google", "llc regional", "arin country", "us continent", "address range", "cidr", "network name", "type", "status", "whois server", "entity gogl", "handle", "please", "google team", "orgtechhandle", "google llc", "orgtechphone", "orgtechref", "orgabusehandle", "orgabuseref" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 173, "hostname": 157, "CIDR": 1, "URL": 32, "email": 3, "IPv4": 7, "CVE": 1 }, "indicator_count": 374, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "2 hours ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c9096b0cb259316bda97c1", "name": "First seen Subject Thumbprint 2026-02-11 *.wixpress.com 5f3f18c1828d2f8f8bd1562e461497fdb1ade422 2026-03-12 telemetry-proxy.rocky-eyrie-5018.herokuspace.com cb1a2d24931cbc8ccc6c0009cdd8739d8e528619", "description": "A public key has been sent to the Wixpress.com website by the US government to secure the identity of a member of the public and send it to a secure secure server in the United States.", "modified": "2026-04-28T00:11:25.123000", "created": "2026-03-29T11:13:47.196000", "tags": [ "algorithm", "key identifier", "x509v3 subject", "v3 serial", "number", "cus olet", "encrypt cnr13", "validity", "subject public", "key info", "address range", "cidr", "network name", "allocation type", "whois server", "entity adsn1", "handle", "amazon", "net13200001", "amazon data", "net13216001" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 30, "hostname": 22, "FileHash-SHA1": 1, "domain": 2, "URL": 37, "CIDR": 2 }, "indicator_count": 94, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c909c0a307e67dc602b9e2", "name": "First seen Subject Thumbprint 2026-02-11 *.wixpress.com 5f3f18c1828d2f8f8bd1562e461497fdb1ade422 2026-03-12 telemetry-proxy.rocky-eyrie-5018.herokuspace.com cb1a2d24931cbc8ccc6c0009cdd8739d8e528619", "description": "A public key has been sent to the Wixpress.com website by the US government to secure the identity of a member of the public and send it to a secure secure server in the United States.", "modified": "2026-04-28T00:11:25.123000", "created": "2026-03-29T11:15:12.022000", "tags": [ "algorithm", "key identifier", "x509v3 subject", "v3 serial", "number", "cus olet", "encrypt cnr13", "validity", "subject public", "key info", "address range", "cidr", "network name", "allocation type", "whois server", "entity adsn1", "handle", "amazon", "net13200001", "amazon data", "net13216001" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 30, "hostname": 27, "FileHash-SHA1": 31, "domain": 4, "URL": 39, "CIDR": 2 }, "indicator_count": 133, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c21ec9ed70aa8930710a51", "name": "google = program your answer??", "description": "The domain name cohassetma.org has been registered as an unregistered domain by the Internet Service Authority (icann) and is subject to an ongoing investigation into its registration and use.<