{
  "type": "URL",
  "indicator": "https://this.options.cookie.name",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://this.options.cookie.name",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 3389535322,
      "indicator": "https://this.options.cookie.name",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 6,
      "pulses": [
        {
          "id": "65708eb824dc4c51811f6de9",
          "name": "Indusface  - in YOUR face ;)",
          "description": "",
          "modified": "2023-12-06T15:09:44.273000",
          "created": "2023-12-06T15:09:44.273000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 307,
            "hostname": 333,
            "domain": 192,
            "URL": 1143,
            "FileHash-MD5": 1
          },
          "indicator_count": 1976,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "907 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708c13ee010f81d3f9b3af",
          "name": "Malware hosting - hostrocket.com",
          "description": "",
          "modified": "2023-12-06T14:58:27.115000",
          "created": "2023-12-06T14:58:27.115000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 232,
            "hostname": 963,
            "domain": 412,
            "URL": 2337,
            "email": 3,
            "FileHash-MD5": 1,
            "FileHash-SHA1": 1
          },
          "indicator_count": 3949,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "907 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65707fe17dfdfe16066d16de",
          "name": "Bexar.org",
          "description": "",
          "modified": "2023-12-06T14:06:25.800000",
          "created": "2023-12-06T14:06:25.800000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1735,
            "hostname": 1833,
            "domain": 1025,
            "URL": 4668,
            "email": 4,
            "FileHash-MD5": 133,
            "FileHash-SHA1": 6,
            "CIDR": 5
          },
          "indicator_count": 9409,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "907 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "628c310ac9ae8e3e8f352e3d",
          "name": "Indusface  - in YOUR face ;)",
          "description": "function D(t,e,n), as well as window.com, has been frozen by a single function, as part of a series of \"snoopers' checks\"...",
          "modified": "2022-05-24T01:12:42.216000",
          "created": "2022-05-24T01:12:42.216000",
          "tags": [
            "fontawesome",
            "font awesome",
            "free",
            "license",
            "cc by",
            "sil ofl",
            "code",
            "mit license",
            "uf007",
            "uf017",
            "segoe ui",
            "emoji",
            "woff2",
            "roboto",
            "helvetica neue",
            "arial",
            "apple color",
            "symbol",
            "noto color",
            "type",
            "getcookie",
            "mxqueryparams",
            "samesitenone",
            "secure",
            "mxcookie",
            "date",
            "null",
            "domain",
            "orgcode",
            "message",
            "apino",
            "allow",
            "close",
            "safari",
            "large safari",
            "subscribe",
            "segment1",
            "segment2",
            "pushengage",
            "click",
            "scroll",
            "body",
            "iframe",
            "false",
            "typeof e",
            "array",
            "typeof t",
            "swiper",
            "most",
            "copyright",
            "july",
            "android",
            "win32",
            "version",
            "typeof n",
            "typeerror",
            "startr",
            "endr",
            "default",
            "typeof",
            "defaulttype",
            "function",
            "error",
            "shown",
            "flip",
            "regexp",
            "mozt",
            "mstransitionend",
            "webkitt",
            "dom element",
            "ua83948896",
            "gtmpf7h94q",
            "vendor site",
            "widget id",
            "page url",
            "write",
            "message api",
            "february",
            "april",
            "june",
            "august",
            "fbcd",
            "398410357733708",
            "prop",
            "init",
            "autoconfig",
            "protocol",
            "adnxsdomain",
            "aoldomain",
            "adrolltpc",
            "26015787",
            "reduceright",
            "tracking file",
            "number",
            "string",
            "aw827450946",
            "uint8array",
            "fnumber",
            "dustmap",
            "void",
            "class",
            "attr",
            "pseudo",
            "child",
            "typeof module",
            "trackevent",
            "trackpageview",
            "register",
            "path",
            "download",
            "verify",
            "xsnull",
            "script",
            "closure library",
            "xdfunction",
            "typeof window",
            "syntaxerror",
            "xmlhttprequest",
            "samesitelax",
            "innull",
            "ennull",
            "typeof symbol",
            "boolean",
            "circular",
            "customevent",
            "cuxref",
            "new r",
            "infinity",
            "image",
            "pnull",
            "html",
            "style",
            "ctnull",
            "post",
            "uint32array",
            "fanull",
            "ynull",
            "config",
            "meta",
            "accept"
          ],
          "references": [
            "https://k.clarity.ms/s/0.6.34/clarity.js",
            "https://www.clarity.ms/tag/uet/26015787",
            "https://dc.cux.io/analyzer.js",
            "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
            "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
            "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
            "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
            "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
            "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
            "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
            "https://bat.bing.com/p/action/26015787.js",
            "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
            "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
            "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
            "https://s.adroll.com/j/sendrolling.js",
            "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
            "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
            "https://www.gartner.com/reviews/public/Widget/js/widget.js",
            "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
            "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
            "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
            "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
            "https://web.mxradon.com/t/Tracker.js",
            "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
            "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
            "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1144,
            "hostname": 333,
            "FileHash-SHA256": 307,
            "domain": 192,
            "FileHash-MD5": 1
          },
          "indicator_count": 1977,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "1468 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "625f492a0581b2eb202e47c9",
          "name": "Malware hosting - hostrocket.com",
          "description": "ChunkLoadError, a new type of error, failed to load a chunk of JavaScript, according to the web browser operator, E.noconflict.com, as well as the website itself.",
          "modified": "2022-05-19T00:00:49.028000",
          "created": "2022-04-19T23:43:38.539000",
          "tags": [
            "jxuiwidget",
            "null",
            "function",
            "jxuihtmldiv",
            "date",
            "jxuilabel",
            "zendesk chat",
            "regexp",
            "api update",
            "jxuihtmla",
            "window",
            "chat",
            "void",
            "error",
            "loader",
            "back",
            "click",
            "close",
            "agent",
            "hello",
            "form",
            "banned",
            "cookie",
            "small",
            "legacy",
            "direct",
            "colorbox core",
            "style",
            "user style",
            "colorbox",
            "html",
            "6deg",
            "e5e5e5",
            "dbdbdb",
            "d2d2d2",
            "eaedef",
            "michael farrell",
            "home",
            "helvetica",
            "ssd shared",
            "page",
            "formnum",
            "hidden",
            "current",
            "hostrocket",
            "dotblock",
            "fast",
            "href",
            "price slider",
            "tooltip",
            "dotblock popup",
            "callback",
            "rect",
            "cycle plugin",
            "number",
            "auto",
            "shuffle",
            "manual",
            "roll",
            "speed",
            "stop",
            "false",
            "first",
            "look",
            "copyright",
            "gpl version",
            "http",
            "document",
            "ui effects",
            "width",
            "left",
            "bottom",
            "this",
            "atom",
            "html id",
            "price",
            "timer",
            "value",
            "processor",
            "example",
            "storage",
            "string",
            "class",
            "thecookie",
            "create",
            "thevalue",
            "param",
            "type",
            "pluginscookie",
            "author",
            "jquery",
            "u00a0",
            "option",
            "body",
            "optgroup",
            "multiple",
            "selectboxhover",
            "selectbox",
            "label",
            "control",
            "slideshow",
            "jack moore",
            "mit license",
            "overlay",
            "wrapper",
            "content",
            "loadedcontent",
            "loadingoverlay",
            "next",
            "iframe",
            "array",
            "attr",
            "tools",
            "ui library",
            "no copyrights",
            "or licenses",
            "like",
            "media",
            "john resig",
            "dual",
            "gtmkw8b5l",
            "classes",
            "host",
            "path",
            "element",
            "trackpageview",
            "typeerror",
            "typeof symbol",
            "typeof e",
            "typeof t",
            "referenceerror",
            "promise",
            "script",
            "boolean",
            "typeof n"
          ],
          "references": [
            "xfe-URL-hostrocket.com-stix2-2.1-export 2.json",
            "https://www.googletagmanager.com/gtm.js?id=GTM-KW8B5L",
            "https://www.hostrocket.com/js/jquery-1.6.1.min.js",
            "https://www.hostrocket.com/js/jquery.tools.min.js",
            "https://www.hostrocket.com/js/jquery.colorbox-min.js",
            "https://www.hostrocket.com/js/jquery.selectBox.min.js",
            "https://www.hostrocket.com/js/jquery.cookie.js",
            "https://www.hostrocket.com/js/jquery.price_slider.js",
            "https://www.hostrocket.com/js/jquery-ui-1.8.13.custom.min.js",
            "https://www.hostrocket.com/js/jquery.cycle.all.js",
            "https://www.hostrocket.com/js/jquery.behavior.js",
            "https://www.hostrocket.com/contact-files/contact-form.js",
            "https://www.hostrocket.com/css/style.css",
            "https://www.hostrocket.com/css/colorbox.css",
            "https://www.hostrocket.com/css/style-nophone.css",
            "https://v2.zopim.com/bin/v/widget_v2.329.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 963,
            "email": 3,
            "domain": 412,
            "URL": 2338,
            "FileHash-SHA256": 232,
            "FileHash-MD5": 1,
            "FileHash-SHA1": 1
          },
          "indicator_count": 3950,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "1473 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "621fff12d2c54f70fea90576",
          "name": "Bexar.org",
          "description": "",
          "modified": "2022-04-01T00:01:54.852000",
          "created": "2022-03-02T23:34:42.531000",
          "tags": [],
          "references": [
            "www.bexar.org - urlscan.io.pdf",
            "bexar api 4.pdf",
            "bexar api 8.pdf",
            "bexar 6.pdf",
            "bexar api 2.pdf",
            "bexar api 7.pdf",
            "bexar api 3.pdf",
            "bexar api 9.pdf",
            "bexar api 12.pdf",
            "bexar api 17.pdf",
            "bexar api 15.pdf",
            "bexar api 18.pdf",
            "bexar api 10.pdf",
            "bexar api 19.pdf",
            "bexar api 20.pdf",
            "bexar api 13.pdf",
            "bexar api 21.pdf",
            "bexar api 14.pdf",
            "bexar api 22.pdf",
            "bexar1.pdf",
            "bexar api5.pdf",
            "bexar2.pdf",
            "bexar3.pdf",
            "bexar.org 3.2.22.pdf",
            "bexar6.pdf",
            "bexar5.pdf",
            "bexar api_1.pdf",
            "bexar10.pdf",
            "bexar api.pdf",
            "bexar_v1df.pdf",
            "bexarv4df.pdf",
            "bexarv2df.pdf",
            "bexarv6df.pdf",
            "bexasv3df.pdf",
            "bexarv7df.pdf",
            "bear_v apidf.pdf"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "Government"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Kailula4",
            "id": "131997",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1833,
            "URL": 4669,
            "domain": 1025,
            "FileHash-SHA256": 1735,
            "email": 4,
            "FileHash-MD5": 133,
            "FileHash-SHA1": 6,
            "CIDR": 5
          },
          "indicator_count": 9410,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 406,
          "modified_text": "1521 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
        "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
        "https://v2.zopim.com/bin/v/widget_v2.329.js",
        "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
        "https://www.hostrocket.com/js/jquery-ui-1.8.13.custom.min.js",
        "https://www.hostrocket.com/js/jquery.price_slider.js",
        "bexarv4df.pdf",
        "https://web.mxradon.com/t/Tracker.js",
        "https://www.hostrocket.com/js/jquery.colorbox-min.js",
        "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
        "https://www.hostrocket.com/js/jquery.selectBox.min.js",
        "https://www.hostrocket.com/contact-files/contact-form.js",
        "bexar api 9.pdf",
        "bexar1.pdf",
        "https://www.hostrocket.com/css/style.css",
        "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
        "bexarv2df.pdf",
        "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css",
        "bexar api_1.pdf",
        "bexar10.pdf",
        "bexar6.pdf",
        "https://www.clarity.ms/tag/uet/26015787",
        "bexar api 3.pdf",
        "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
        "bexar.org 3.2.22.pdf",
        "https://www.gartner.com/reviews/public/Widget/js/widget.js",
        "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
        "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
        "https://www.hostrocket.com/css/colorbox.css",
        "https://www.hostrocket.com/js/jquery.tools.min.js",
        "https://s.adroll.com/j/sendrolling.js",
        "bexarv6df.pdf",
        "bexar api 8.pdf",
        "bexar api 2.pdf",
        "bexar api 19.pdf",
        "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
        "bexar api 22.pdf",
        "bexarv7df.pdf",
        "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
        "bexar api 4.pdf",
        "https://www.hostrocket.com/js/jquery.behavior.js",
        "bexar api 21.pdf",
        "bexasv3df.pdf",
        "https://www.hostrocket.com/js/jquery-1.6.1.min.js",
        "bexar api 17.pdf",
        "bexar api 15.pdf",
        "bexar api.pdf",
        "https://bat.bing.com/p/action/26015787.js",
        "https://www.hostrocket.com/js/jquery.cookie.js",
        "bexar api 14.pdf",
        "bexar2.pdf",
        "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
        "bexar api 20.pdf",
        "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
        "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
        "https://www.hostrocket.com/css/style-nophone.css",
        "bexar api 7.pdf",
        "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
        "bexar api 12.pdf",
        "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
        "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
        "bexar api 10.pdf",
        "bexar_v1df.pdf",
        "https://dc.cux.io/analyzer.js",
        "bexar api 18.pdf",
        "https://k.clarity.ms/s/0.6.34/clarity.js",
        "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
        "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
        "bexar 6.pdf",
        "bexar5.pdf",
        "xfe-URL-hostrocket.com-stix2-2.1-export 2.json",
        "bexar api5.pdf",
        "bear_v apidf.pdf",
        "www.bexar.org - urlscan.io.pdf",
        "bexar3.pdf",
        "bexar api 13.pdf",
        "https://www.hostrocket.com/js/jquery.cycle.all.js",
        "https://www.googletagmanager.com/gtm.js?id=GTM-KW8B5L"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Reduceright"
          ],
          "industries": [
            "Government"
          ],
          "unique_indicators": 12894
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/cookie.name",
    "whois": "http://whois.domaintools.com/cookie.name",
    "domain": "cookie.name",
    "hostname": "this.options.cookie.name"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 6,
  "pulses": [
    {
      "id": "65708eb824dc4c51811f6de9",
      "name": "Indusface  - in YOUR face ;)",
      "description": "",
      "modified": "2023-12-06T15:09:44.273000",
      "created": "2023-12-06T15:09:44.273000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 307,
        "hostname": 333,
        "domain": 192,
        "URL": 1143,
        "FileHash-MD5": 1
      },
      "indicator_count": 1976,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 110,
      "modified_text": "907 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708c13ee010f81d3f9b3af",
      "name": "Malware hosting - hostrocket.com",
      "description": "",
      "modified": "2023-12-06T14:58:27.115000",
      "created": "2023-12-06T14:58:27.115000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 232,
        "hostname": 963,
        "domain": 412,
        "URL": 2337,
        "email": 3,
        "FileHash-MD5": 1,
        "FileHash-SHA1": 1
      },
      "indicator_count": 3949,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "907 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65707fe17dfdfe16066d16de",
      "name": "Bexar.org",
      "description": "",
      "modified": "2023-12-06T14:06:25.800000",
      "created": "2023-12-06T14:06:25.800000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1735,
        "hostname": 1833,
        "domain": 1025,
        "URL": 4668,
        "email": 4,
        "FileHash-MD5": 133,
        "FileHash-SHA1": 6,
        "CIDR": 5
      },
      "indicator_count": 9409,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 110,
      "modified_text": "907 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "628c310ac9ae8e3e8f352e3d",
      "name": "Indusface  - in YOUR face ;)",
      "description": "function D(t,e,n), as well as window.com, has been frozen by a single function, as part of a series of \"snoopers' checks\"...",
      "modified": "2022-05-24T01:12:42.216000",
      "created": "2022-05-24T01:12:42.216000",
      "tags": [
        "fontawesome",
        "font awesome",
        "free",
        "license",
        "cc by",
        "sil ofl",
        "code",
        "mit license",
        "uf007",
        "uf017",
        "segoe ui",
        "emoji",
        "woff2",
        "roboto",
        "helvetica neue",
        "arial",
        "apple color",
        "symbol",
        "noto color",
        "type",
        "getcookie",
        "mxqueryparams",
        "samesitenone",
        "secure",
        "mxcookie",
        "date",
        "null",
        "domain",
        "orgcode",
        "message",
        "apino",
        "allow",
        "close",
        "safari",
        "large safari",
        "subscribe",
        "segment1",
        "segment2",
        "pushengage",
        "click",
        "scroll",
        "body",
        "iframe",
        "false",
        "typeof e",
        "array",
        "typeof t",
        "swiper",
        "most",
        "copyright",
        "july",
        "android",
        "win32",
        "version",
        "typeof n",
        "typeerror",
        "startr",
        "endr",
        "default",
        "typeof",
        "defaulttype",
        "function",
        "error",
        "shown",
        "flip",
        "regexp",
        "mozt",
        "mstransitionend",
        "webkitt",
        "dom element",
        "ua83948896",
        "gtmpf7h94q",
        "vendor site",
        "widget id",
        "page url",
        "write",
        "message api",
        "february",
        "april",
        "june",
        "august",
        "fbcd",
        "398410357733708",
        "prop",
        "init",
        "autoconfig",
        "protocol",
        "adnxsdomain",
        "aoldomain",
        "adrolltpc",
        "26015787",
        "reduceright",
        "tracking file",
        "number",
        "string",
        "aw827450946",
        "uint8array",
        "fnumber",
        "dustmap",
        "void",
        "class",
        "attr",
        "pseudo",
        "child",
        "typeof module",
        "trackevent",
        "trackpageview",
        "register",
        "path",
        "download",
        "verify",
        "xsnull",
        "script",
        "closure library",
        "xdfunction",
        "typeof window",
        "syntaxerror",
        "xmlhttprequest",
        "samesitelax",
        "innull",
        "ennull",
        "typeof symbol",
        "boolean",
        "circular",
        "customevent",
        "cuxref",
        "new r",
        "infinity",
        "image",
        "pnull",
        "html",
        "style",
        "ctnull",
        "post",
        "uint32array",
        "fanull",
        "ynull",
        "config",
        "meta",
        "accept"
      ],
      "references": [
        "https://k.clarity.ms/s/0.6.34/clarity.js",
        "https://www.clarity.ms/tag/uet/26015787",
        "https://dc.cux.io/analyzer.js",
        "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
        "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
        "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
        "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
        "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
        "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
        "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
        "https://bat.bing.com/p/action/26015787.js",
        "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
        "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
        "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
        "https://s.adroll.com/j/sendrolling.js",
        "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
        "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
        "https://www.gartner.com/reviews/public/Widget/js/widget.js",
        "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
        "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
        "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
        "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
        "https://web.mxradon.com/t/Tracker.js",
        "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
        "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
        "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 9,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1144,
        "hostname": 333,
        "FileHash-SHA256": 307,
        "domain": 192,
        "FileHash-MD5": 1
      },
      "indicator_count": 1977,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "1468 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "625f492a0581b2eb202e47c9",
      "name": "Malware hosting - hostrocket.com",
      "description": "ChunkLoadError, a new type of error, failed to load a chunk of JavaScript, according to the web browser operator, E.noconflict.com, as well as the website itself.",
      "modified": "2022-05-19T00:00:49.028000",
      "created": "2022-04-19T23:43:38.539000",
      "tags": [
        "jxuiwidget",
        "null",
        "function",
        "jxuihtmldiv",
        "date",
        "jxuilabel",
        "zendesk chat",
        "regexp",
        "api update",
        "jxuihtmla",
        "window",
        "chat",
        "void",
        "error",
        "loader",
        "back",
        "click",
        "close",
        "agent",
        "hello",
        "form",
        "banned",
        "cookie",
        "small",
        "legacy",
        "direct",
        "colorbox core",
        "style",
        "user style",
        "colorbox",
        "html",
        "6deg",
        "e5e5e5",
        "dbdbdb",
        "d2d2d2",
        "eaedef",
        "michael farrell",
        "home",
        "helvetica",
        "ssd shared",
        "page",
        "formnum",
        "hidden",
        "current",
        "hostrocket",
        "dotblock",
        "fast",
        "href",
        "price slider",
        "tooltip",
        "dotblock popup",
        "callback",
        "rect",
        "cycle plugin",
        "number",
        "auto",
        "shuffle",
        "manual",
        "roll",
        "speed",
        "stop",
        "false",
        "first",
        "look",
        "copyright",
        "gpl version",
        "http",
        "document",
        "ui effects",
        "width",
        "left",
        "bottom",
        "this",
        "atom",
        "html id",
        "price",
        "timer",
        "value",
        "processor",
        "example",
        "storage",
        "string",
        "class",
        "thecookie",
        "create",
        "thevalue",
        "param",
        "type",
        "pluginscookie",
        "author",
        "jquery",
        "u00a0",
        "option",
        "body",
        "optgroup",
        "multiple",
        "selectboxhover",
        "selectbox",
        "label",
        "control",
        "slideshow",
        "jack moore",
        "mit license",
        "overlay",
        "wrapper",
        "content",
        "loadedcontent",
        "loadingoverlay",
        "next",
        "iframe",
        "array",
        "attr",
        "tools",
        "ui library",
        "no copyrights",
        "or licenses",
        "like",
        "media",
        "john resig",
        "dual",
        "gtmkw8b5l",
        "classes",
        "host",
        "path",
        "element",
        "trackpageview",
        "typeerror",
        "typeof symbol",
        "typeof e",
        "typeof t",
        "referenceerror",
        "promise",
        "script",
        "boolean",
        "typeof n"
      ],
      "references": [
        "xfe-URL-hostrocket.com-stix2-2.1-export 2.json",
        "https://www.googletagmanager.com/gtm.js?id=GTM-KW8B5L",
        "https://www.hostrocket.com/js/jquery-1.6.1.min.js",
        "https://www.hostrocket.com/js/jquery.tools.min.js",
        "https://www.hostrocket.com/js/jquery.colorbox-min.js",
        "https://www.hostrocket.com/js/jquery.selectBox.min.js",
        "https://www.hostrocket.com/js/jquery.cookie.js",
        "https://www.hostrocket.com/js/jquery.price_slider.js",
        "https://www.hostrocket.com/js/jquery-ui-1.8.13.custom.min.js",
        "https://www.hostrocket.com/js/jquery.cycle.all.js",
        "https://www.hostrocket.com/js/jquery.behavior.js",
        "https://www.hostrocket.com/contact-files/contact-form.js",
        "https://www.hostrocket.com/css/style.css",
        "https://www.hostrocket.com/css/colorbox.css",
        "https://www.hostrocket.com/css/style-nophone.css",
        "https://v2.zopim.com/bin/v/widget_v2.329.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 963,
        "email": 3,
        "domain": 412,
        "URL": 2338,
        "FileHash-SHA256": 232,
        "FileHash-MD5": 1,
        "FileHash-SHA1": 1
      },
      "indicator_count": 3950,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "1473 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "621fff12d2c54f70fea90576",
      "name": "Bexar.org",
      "description": "",
      "modified": "2022-04-01T00:01:54.852000",
      "created": "2022-03-02T23:34:42.531000",
      "tags": [],
      "references": [
        "www.bexar.org - urlscan.io.pdf",
        "bexar api 4.pdf",
        "bexar api 8.pdf",
        "bexar 6.pdf",
        "bexar api 2.pdf",
        "bexar api 7.pdf",
        "bexar api 3.pdf",
        "bexar api 9.pdf",
        "bexar api 12.pdf",
        "bexar api 17.pdf",
        "bexar api 15.pdf",
        "bexar api 18.pdf",
        "bexar api 10.pdf",
        "bexar api 19.pdf",
        "bexar api 20.pdf",
        "bexar api 13.pdf",
        "bexar api 21.pdf",
        "bexar api 14.pdf",
        "bexar api 22.pdf",
        "bexar1.pdf",
        "bexar api5.pdf",
        "bexar2.pdf",
        "bexar3.pdf",
        "bexar.org 3.2.22.pdf",
        "bexar6.pdf",
        "bexar5.pdf",
        "bexar api_1.pdf",
        "bexar10.pdf",
        "bexar api.pdf",
        "bexar_v1df.pdf",
        "bexarv4df.pdf",
        "bexarv2df.pdf",
        "bexarv6df.pdf",
        "bexasv3df.pdf",
        "bexarv7df.pdf",
        "bear_v apidf.pdf"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "Government"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 7,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Kailula4",
        "id": "131997",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 1833,
        "URL": 4669,
        "domain": 1025,
        "FileHash-SHA256": 1735,
        "email": 4,
        "FileHash-MD5": 133,
        "FileHash-SHA1": 6,
        "CIDR": 5
      },
      "indicator_count": 9410,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 406,
      "modified_text": "1521 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://this.options.cookie.name",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://this.options.cookie.name",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780242560.7352698
}