ZeroFox

Version: 2.0.8

ZeroFox provides cloud-based software as a service for organizations to detect risks found on social media and digital channels, such as phishing, malware, scams, impersonator accounts, piracy, counterfeit and more.

Connect ZeroFox with LogicHub

  1. Navigate to Automations > Integrations.
  2. Search for ZeroFox.
  3. Click Details, then the + icon. Enter the required information in the following fields.
    • Label: Enter a connection name.
    • Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
    • Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
    • Remote Agent: Run this integration using the LogicHub Remote Agent.
    • API Token: API Token for accessing Zerofox servers.
  4. After you've entered all the details, click Connect.

Actions for ZeroFox

Get Alerts

Returns alerts matching given/default filters and parameters. By default, no filters are applied and results are sorted by timestamp.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Min timestampJinja-templated ISO-8601 date-time string. (Defaults to batch start time).
Example: 2019-09-26T07:58:30.996+0200
Optional
Max timestampJinja-templated ISO-8601 date-time string. (Defaults to batch end time).
Example: 2019-09-26T07:58:30.996+0200
Optional
AccountJinja-templated Social network account number (unique ID).Optional
AssigneeJinja-templated name of user assigned to alert.Optional
EntityJinja-templated ZeroFox entity ID.Optional
Entity_termJinja-templated ZeroFox entity term ID.Optional
Last_modifiedJinja-templated number of seconds since an alert has changed.Optional
Last Modified Min DateJinja-templated ISO-8601 date-time string. Example: 2019-09-26T07:58:30.996+0200Optional
Last Modified Max DateJinja-templated ISO-8601 date-time string. Example: 2019-09-26T07:58:30.996+0200Optional
Entity_searchJinja-templated substring matching for the protected entity.Optional
PerpetratorJinja-templated substring to filter alerts by perpetrator username or display name.Optional
Pro_social_obj_searchJinja-templated substring to filter alerts by protected social object username, display name, or entity term name.Optional
PostJinja-templated Social network post number (unique ID).Optional
Alert_typeJinja-templated CSV of alert types. Possible values are account_information, entity_discovery_content, entity_discovery_profile, impersonating_account, impersonating_comment, impersonating_post, incoming_comment, incoming_post, incoming_private_message, outgoing_private_message, self_comment, self_post, search_query, email, and location.Optional
Rule_idJinja-templated ZeroFox rule ID CSV.Optional
Rule_nameJinja-templated ZeroFox rule name CSV.Optional
NetworkJinja-templated Network name CSV.Optional
Alert_idJinja-templated CSV of alert IDs.Optional
SeverityJinja-templated Severity level of alert. 1 - 5 (Critical).Optional
StatusJinja-templated Alert status. Possible values are closed, open, takedown_accepted, takedown_denied, takedown_requested, takedown_submitted, and whitelisted.Optional
TagsJinja-templated alerts containing one or more of the tags in provided comma separated list.Optional
Entity_typeJinja-templated alert tags. Returns any alerts containing one or more of the tags in provided comma separated list.Optional

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alerts Data
{
   "alert_type":"search query",
   "asset":{
      "entity_group":{
         "id":4660,
         "name":"Default"
      },
      "id":578470,
      "image":"",
      "labels":[
         
      ],
      "name":"Dark Web / Code Sharing"
   },
   "asset_term":{
      "deleted":false,
      "id":326992,
      "name":"aeroplan.com"
   },
   "assignee":"",
   "business_network":null,
   "content_created_at":"2018-01-01T00:00:00+00:00",
   "darkweb_term":null,
   "entity":{
      "entity_group":{
         "id":4660,
         "name":"Default"
      },
      "id":578470,
      "image":"",
      "labels":[
         
      ],
      "name":"Dark Web / Code Sharing"
   },
   "entity_account":null,
   "entity_email_receiver_id":null,
   "entity_term":{
      "deleted":false,
      "id":326992,
      "name":"aeroplan.com"
   },
   "error":null,
   "escalated":false,
   "has_error":false,
   "id":154182828,
   "last_modified":"2021-10-04T03:37:28Z",
   "logs":[
      {
         "action":"invalidate",
         "actor":"ZeroFox Platform Specialist",
         "id":240292915,
         "subject":"",
         "timestamp":"2021-10-04T03:37:28+00:00"
      },
      {
         "action":"open",
         "actor":"",
         "id":238136956,
         "subject":"",
         "timestamp":"2021-09-26T08:27:32+00:00"
      }
   ],
   "metadata":"{\"ai_confidence_display\":[{\"color\":\"#0072ce\",\"detections\":[{\"confidence\":0.9999963719,\"label\":\"English\"}],\"icon\":\"chat\",\"name\":\"Language Detection\"}],\"content_raw_data\":{\"data\":\"[Adblock Plus 2.0]\\n! Version: 2021-09-25Z\\n! Title: BlockConvert Exception Filters\\n! Last modified: 2021-09-25Z\\n! Expires: 1 days (update frequency)\\n! Homepage: https://github.com/mkb2091/blockconvert\\n! Licence: GPL-3.0\\n!\\n!-----------------------Filters-----------------------!\\n@@||ad.10010.com^\\n@@||m1.ad.10010.com^\\n@@||static.ws.126.net^\\n@@||bnet.163.com^\\n@@||1drv.com^\\n@@||i-am3p-cor003.api.p001.1drv.com^\\n@@||1drv.ms^\\n@@||1fichier.com^\\n@@||1und1.de^\\n@@||www.1und1.de^\\n@@||24timezones.com^\\n@@||112.2o7.net^\\n@@||viarnd.112.2o7.net^\\n@@||www.112.2o7.net^\\n@@||122.2o7.net^\\n@@||citiintl.122.2o7.net^\\n@@||www.citiintl.122.2o7.net^\\n@@||cdn.gigya.commes.122.2o7.net^\\n@@||www.122.2o7.net^\\n@@||2shared.com^\\n@@||static.3001.net^\\n@@||4chan.org^\\n@@||4shared.com^\\n@@||70i.net^\\n@@||8ch.net^\\n@@||91-cdn.com^\\n@@||91mobiles.com^\\n@@||a-0001.a-msedge.net^\\n@@||bat-bing-com.a-0001.a-msedge.net^\\n@@||star-r-bat-bing-com.a-0001.a-msedge.net^\\n@@||concierge.analytics.console.aws.a2z.com^\\n@@||aaa.com^\\n@@||safebrowsing.g.aaplimg.com^\\n@@||swcdn.g.aaplimg.com^\\n@@||world-gen.g.aaplimg.com^\\n@@||abc.com^\\n@@||aboo.se^\\n@@||feodotracker.abuse.ch^\\n@@||ransomwaretracker.abuse.ch^\\n@@||sslbl.abuse.ch^\\n@@||urlhaus.abuse.ch^\\n@@||acast.com^\\n@@||accuweather.com^\\n@@||vortex.accuweather.com^\\n@@||www.accuweather.com^\\n@@||acehardware.com^\\n@@||delivery.acm.org^\\n@@||actionnetwork.org^\\n@@||valimail.actonservice.com^\\n@@||ci61.actonsoftware.com^\\n@@||forpci61.actonsoftware.com^\\n@@||iij.ad.jp^\\n@@||www.iij.ad.jp^\\n@@||ftp.tsukuba.wide.ad.jp^\\n@@||ad.nl^\\n@@||www.ad.nl^\\n@@||ada.support^\\n@@||cricket.att.ada.support^\\n@@||static.ada.support^\\n@@||adapools.org^\\n@@||adaway.org^\\n@@||adblock.dk^\\n@@||adblock.ee^\\n@@||road.adblock.ro^\\n@@||easylist-downloads.adblockplus.org^\\n@@||adcolo.com^\\n@@||add0n.com^\\n@@||www.add0n.com^\\n@@||adguard.com^\\n@@||adidas.com^\\n@@||www.adidas.com^\\n@@||imagesrv.adition.com^\\n@@||app.adjust.com^\\n@@||yahoo.adnetasia.com^\\n@@||3dns-3.adobe.com^\\n@@||activate-sea.adobe.com^\\n@@||activate-sjc0.adobe.com^\\n@@||activate.adobe.com^\\n@@||adobe-dns.adobe.com^\\n@@||documentcloud.adobe.com^\\n@@||ereg.adobe.com^\\n@@||get.adobe.com^\\n@@||hl2rcv.adobe.com^\\n@@||lm.licenses.adobe.com^\\n@@||na2m-pr.licenses.adobe.com^\\n@@||na1r.services.adobe.com^\\n@@||hlrcv.stage.adobe.com^\\n@@||lmlicenses.wip4.adobe.com^\\n@@||wwwimages.adobe.com^\\n@@||xsdownload.adobe.com^\\n@@||assets.adobedtm.com^\\n@@||feed.adrelayer.com^\\n@@||filters.adtidy.org^\\n@@||crunchyroll.adtrackers.net^\\n@@||serve.adtrackers.net^\\n@@||advanceautoparts.com^\\n@@||guce.advertising.com^\\n@@||stage.guce.advertising.com^\\n@@||trunk.guce.advertising.com^\\n@@||a.adwolf.ru^\\n@@||adyen.com^\\n@@||aeriagames.com^\\n@@||som.aeroplan.com^\\n@@||aetna.com^\\n@@||www.aetna.com^\\n@@||vip5.afdorigin-prod-am02.afdogw.com^\\n@@||vip5.afdorigin-prod-ch02.afdogw.com^\\n@@||affirm.com^\\n@@||www.affirm.com^\\n@@||afi-b.com^\\n@@||t.afi-b.com^\\n@@||www.afi-b.com^\\n@@||aftership.com^\\n@@||ip107307705.ahcdn.com^\\n@@||ip107316446.ahcdn.com^\\n@@||aka.ms^\\n@@||appleid.apple.com.akadns.net^\\n@@||configuration.apple.com.akadns.net^\\n@@||lcdn-locator-usnkq.apple.com.akadns.net^\\n@@||lcdn-locator.apple.com.akadns.net^\\n@@||swcdn.apple.com.akadns.net^\\n@@||www-cdn.icloud.com.akadns.net^\\n@@||us.configsvc1.live.com.akadns.net^\\n@@||gsp-ssl-geomap.ls-apple.com.akadns.net^\\n@@||gsp-ssl.ls-apple.com.akadns.net^\\n@@||asimov-win.settings.data.microsoft.com.akadns.net^\\n@@||v10-win.vortex.data.microsoft.com.akadns.net^\\n@@||modern.watson.data.microsoft.com.akadns.net^\\n@@||cy2.displaycatalog.md.mp.microsoft.com.akadns.net^\\n@@||cy2.licensing.md.mp.microsoft.com.akadns.net^\\n@@||co4.telecommand.telemetry.microsoft.com.akadns.net^\\n@@||sls.update.microsoft.com.akadns.net^\\n@@||login.msa.akadns6.net^\\n@@||ipv4.login.msa.akadns6.net^\\n@@||a248.e.akamai.net^\\n@@||a1014.g.akamai.net^\\n@@||a1599.g.akamai.net^\\n@@||a1767.g.akamai.net^\\n@@||a1843.g.akamai.net^\\n@@||a19.g.akamai.net^\\n@@||a90.g.akamai.net^\\n@@||e16973.a.akamaiedge.net^\\n@@||e8999.b.akamaiedge.net^\\n@@||user-att-107-136-128-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-203-0-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-207-16-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-211-112-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-194-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-219-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-241-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-246-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-95-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-160-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-163-72-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-185-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-200-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-80-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-219-248-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-53-216-0.e8999.b.akamaiedge.net^\\n@@||user-att-162-224-184-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-32-88-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-35-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-41-64-0.e8999.b.akamaiedge.net^\\n@@||user-att-202-112-48-0.e8999.b.akamaiedge.net^\\n@@||user-att-208-70-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-76-228-192-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-22-168-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-43-168-0.e8999.b.akamaiedge.net^\\n@@||e3489.cd.akamaiedge.net^\\n@@||e1151.e12.akamaiedge.net^\\n@@||e10217.g.akamaiedge.net^\\n@@||e11100.g.akamaiedge.net^\\n@@||e3843.g.akamaiedge.net^\\n@@||e5070.g.akamaiedge.net^\\n@@||e5413.g.akamaiedge.net^\\n@@||e5460.g.akamaiedge.net^\\n@@||e6603.g.akamaiedge.net^\\n@@||e7081.g.akamaiedge.net^\\n@@||fbcdn-profile-a.akamaihd.net^\\n@@||twimg0-a.akamaihd.net^\\n@@||img-prod-cms-rt-microsoft-com.akamaized.net^\\n@@||img-s-msn-com.akamaized.net^\\n@@||lastfm-img2.akamaized.net^\\n@@||akismet.com^\\n@@||serial.alcohol-soft.com^\\n@@||trial.alcohol-soft.com^\\n@@||alexa.com^\\n@@||algolia.com^\\n@@||www.algolia.com^\\n@@||ynuf.aliapp.org^\\n@@||us-aebridge.aliexpress.com.gds.alibabadns.com^\\n@@||sh.wagbridge.taobao.com.gds.alibabadns.com^\\n@@||alicdn.com^\\n@@||ae01.alicdn.com^\\n@@||aeis.alicdn.com^\\n@@||aeu.alicdn.com^\\n@@||amos.alicdn.com^\\n@@||assets.alicdn.com^\\n@@||at.alicdn.com^\\n@@||at.alicdn.com.danuoyi.alicdn.com^\\n@@||g.alicdn.com.danuoyi.alicdn.com^\\n@@||img.alicdn.com.danuoyi.alicdn.com^\\n@@||files.alicdn.com^\\n@@||g.alicdn.com^\\n@@||gtms01.alicdn.com^\\n@@||gtms02.alicdn.com^\\n@@||gtms03.alicdn.com^\\n@@||gtms04.alicdn.com^\\n@@||gw.alicdn.com^\\n@@||i.alicdn.com^\\n@@||img.alicdn.com^\\n@@||tce.alicdn.com^\\n@@||aliexpress.com^\\n@@||cdp.aliexpress.com^\\n@@||coupon.aliexpress.com^\\n@@||feedback.aliexpress.com^\\n@@||fr.aliexpress.com^\\n@@||freight.aliexpress.com^\\n@@||gpsfront.aliexpress.com^\\n@@||my.aliexpress.com^\\n@@||promotion.aliexpress.com^\\n@@||mobilegw.alipay.cn^\\n@@||app.alipay.com^\\n@@||authweb.alipay.com^\\n@@||clientsc.alipay.com^\\n@@||entpsz.alipay.com^\\n@@||mdap.alipay.com^\\n@@||mobilecns.alipay.com^\\n@@||mobilecodec.alipay.com^\\n@@||mobilegw.alipay.com^\\n@@||mygw.alipay.com^\\n@@||passport.alipay.com^\\n@@||personalweb.alipay.com^\\n@@||zcbprod.alipay.com^\\n@@||zht.alipay.com^\\n@@||gz-lb1.internet.spanner.alipaydns.com^\\n@@||gw.alipayobjects.com^\\n@@||i.alipayobjects.com^\\n@@||aliyuncs.com^\\n@@||arms-retcode.aliyuncs.com^\\n@@||adash.man.aliyuncs.com^\\n@@||allegro.pl^\\n@@||allure.com^\\n@@||ally.com^\\n@@||alternativeto.net^\\n@@||adiu.amap.com^\\n@@||abroad.apilocate.amap.com^\\n@@||restapi.amap.com^\\n@@||aax-us-east.amazon-adsystem.com^\\n@@||c.amazon-adsystem.com^\\n@@||s.amazon-adsystem.com^\\n@@||amazon.at^\\n@@||amazon.ca^\\n@@||www.amazon.ca^\\n@@||amazon.cn^\\n@@||amazon.com^\\n@@||arcus-uswest.amazon.com^\\n@@||completion.amazon.com^\\n@@||d[TRUNC]...\"},\"content_type\":\"page\",\"content_url\":\"https://github.com/mkb2091/blockconvert/blob/178ef7b0cadc5b07f64b4a978afaebc8f936e553/output/whitelist_adblock.txt\",\"enrichment\":{\"analysis-message-mapper\":{\"enterpriseID\":4348,\"entityID\":578470,\"network\":\"github\",\"relation\":\"search_query\",\"serviceOrigin\":\"sdk-github_code\",\"texts\":[{\"field\":\"content.text\",\"item\":\"[Adblock Plus 2.0]\\n! Version: 2021-09-25Z\\n! Title: BlockConvert Exception Filters\\n! Last modified: 2021-09-25Z\\n! Expires: 1 days (update frequency)\\n! Homepage: https://github.com/mkb2091/blockconvert\\n! Licence: GPL-3.0\\n!\\n!-----------------------Filters-----------------------!\\n@@||ad.10010.com^\\n@@||m1.ad.10010.com^\\n@@||static.ws.126.net^\\n@@||bnet.163.com^\\n@@||1drv.com^\\n@@||i-am3p-cor003.api.p001.1drv.com^\\n@@||1drv.ms^\\n@@||1fichier.com^\\n@@||1und1.de^\\n@@||www.1und1.de^\\n@@||24timezones.com^\\n@@||112.2o7.net^\\n@@||viarnd.112.2o7.net^\\n@@||www.112.2o7.net^\\n@@||122.2o7.net^\\n@@||citiintl.122.2o7.net^\\n@@||www.citiintl.122.2o7.net^\\n@@||cdn.gigya.commes.122.2o7.net^\\n@@||www.122.2o7.net^\\n@@||2shared.com^\\n@@||static.3001.net^\\n@@||4chan.org^\\n@@||4shared.com^\\n@@||70i.net^\\n@@||8ch.net^\\n@@||91-cdn.com^\\n@@||91mobiles.com^\\n@@||a-0001.a-msedge.net^\\n@@||bat-bing-com.a-0001.a-msedge.net^\\n@@||star-r-bat-bing-com.a-0001.a-msedge.net^\\n@@||concierge.analytics.console.aws.a2z.com^\\n@@||aaa.com^\\n@@||safebrowsing.g.aaplimg.com^\\n@@||swcdn.g.aaplimg.com^\\n@@||world-gen.g.aaplimg.com^\\n@@||abc.com^\\n@@||aboo.se^\\n@@||feodotracker.abuse.ch^\\n@@||ransomwaretracker.abuse.ch^\\n@@||sslbl.abuse.ch^\\n@@||urlhaus.abuse.ch^\\n@@||acast.com^\\n@@||accuweather.com^\\n@@||vortex.accuweather.com^\\n@@||www.accuweather.com^\\n@@||acehardware.com^\\n@@||delivery.acm.org^\\n@@||actionnetwork.org^\\n@@||valimail.actonservice.com^\\n@@||ci61.actonsoftware.com^\\n@@||forpci61.actonsoftware.com^\\n@@||iij.ad.jp^\\n@@||www.iij.ad.jp^\\n@@||ftp.tsukuba.wide.ad.jp^\\n@@||ad.nl^\\n@@||www.ad.nl^\\n@@||ada.support^\\n@@||cricket.att.ada.support^\\n@@||static.ada.support^\\n@@||adapools.org^\\n@@||adaway.org^\\n@@||adblock.dk^\\n@@||adblock.ee^\\n@@||road.adblock.ro^\\n@@||easylist-downloads.adblockplus.org^\\n@@||adcolo.com^\\n@@||add0n.com^\\n@@||www.add0n.com^\\n@@||adguard.com^\\n@@||adidas.com^\\n@@||www.adidas.com^\\n@@||imagesrv.adition.com^\\n@@||app.adjust.com^\\n@@||yahoo.adnetasia.com^\\n@@||3dns-3.adobe.com^\\n@@||activate-sea.adobe.com^\\n@@||activate-sjc0.adobe.com^\\n@@||activate.adobe.com^\\n@@||adobe-dns.adobe.com^\\n@@||documentcloud.adobe.com^\\n@@||ereg.adobe.com^\\n@@||get.adobe.com^\\n@@||hl2rcv.adobe.com^\\n@@||lm.licenses.adobe.com^\\n@@||na2m-pr.licenses.adobe.com^\\n@@||na1r.services.adobe.com^\\n@@||hlrcv.stage.adobe.com^\\n@@||lmlicenses.wip4.adobe.com^\\n@@||wwwimages.adobe.com^\\n@@||xsdownload.adobe.com^\\n@@||assets.adobedtm.com^\\n@@||feed.adrelayer.com^\\n@@||filters.adtidy.org^\\n@@||crunchyroll.adtrackers.net^\\n@@||serve.adtrackers.net^\\n@@||advanceautoparts.com^\\n@@||guce.advertising.com^\\n@@||stage.guce.advertising.com^\\n@@||trunk.guce.advertising.com^\\n@@||a.adwolf.ru^\\n@@||adyen.com^\\n@@||aeriagames.com^\\n@@||som.aeroplan.com^\\n@@||aetna.com^\\n@@||www.aetna.com^\\n@@||vip5.afdorigin-prod-am02.afdogw.com^\\n@@||vip5.afdorigin-prod-ch02.afdogw.com^\\n@@||affirm.com^\\n@@||www.affirm.com^\\n@@||afi-b.com^\\n@@||t.afi-b.com^\\n@@||www.afi-b.com^\\n@@||aftership.com^\\n@@||ip107307705.ahcdn.com^\\n@@||ip107316446.ahcdn.com^\\n@@||aka.ms^\\n@@||appleid.apple.com.akadns.net^\\n@@||configuration.apple.com.akadns.net^\\n@@||lcdn-locator-usnkq.apple.com.akadns.net^\\n@@||lcdn-locator.apple.com.akadns.net^\\n@@||swcdn.apple.com.akadns.net^\\n@@||www-cdn.icloud.com.akadns.net^\\n@@||us.configsvc1.live.com.akadns.net^\\n@@||gsp-ssl-geomap.ls-apple.com.akadns.net^\\n@@||gsp-ssl.ls-apple.com.akadns.net^\\n@@||asimov-win.settings.data.microsoft.com.akadns.net^\\n@@||v10-win.vortex.data.microsoft.com.akadns.net^\\n@@||modern.watson.data.microsoft.com.akadns.net^\\n@@||cy2.displaycatalog.md.mp.microsoft.com.akadns.net^\\n@@||cy2.licensing.md.mp.microsoft.com.akadns.net^\\n@@||co4.telecommand.telemetry.microsoft.com.akadns.net^\\n@@||sls.update.microsoft.com.akadns.net^\\n@@||login.msa.akadns6.net^\\n@@||ipv4.login.msa.akadns6.net^\\n@@||a248.e.akamai.net^\\n@@||a1014.g.akamai.net^\\n@@||a1599.g.akamai.net^\\n@@||a1767.g.akamai.net^\\n@@||a1843.g.akamai.net^\\n@@||a19.g.akamai.net^\\n@@||a90.g.akamai.net^\\n@@||e16973.a.akamaiedge.net^\\n@@||e8999.b.akamaiedge.net^\\n@@||user-att-107-136-128-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-203-0-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-207-16-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-211-112-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-194-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-219-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-241-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-246-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-95-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-160-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-163-72-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-185-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-200-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-80-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-219-248-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-53-216-0.e8999.b.akamaiedge.net^\\n@@||user-att-162-224-184-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-32-88-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-35-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-41-64-0.e8999.b.akamaiedge.net^\\n@@||user-att-202-112-48-0.e8999.b.akamaiedge.net^\\n@@||user-att-208-70-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-76-228-192-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-22-168-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-43-168-0.e8999.b.akamaiedge.net^\\n@@||e3489.cd.akamaiedge.net^\\n@@||e1151.e12.akamaiedge.net^\\n@@||e10217.g.akamaiedge.net^\\n@@||e11100.g.akamaiedge.net^\\n@@||e3843.g.akamaiedge.net^\\n@@||e5070.g.akamaiedge.net^\\n@@||e5413.g.akamaiedge.net^\\n@@||e5460.g.akamaiedge.net^\\n@@||e6603.g.akamaiedge.net^\\n@@||e7081.g.akamaiedge.net^\\n@@||fbcdn-profile-a.akamaihd.net^\\n@@||twimg0-a.akamaihd.net^\\n@@||img-prod-cms-rt-microsoft-com.akamaized.net^\\n@@||img-s-msn-com.akamaized.net^\\n@@||lastfm-img2.akamaized.net^\\n@@||akismet.com^\\n@@||serial.alcohol-soft.com^\\n@@||trial.alcohol-soft.com^\\n@@||alexa.com^\\n@@||algolia.com^\\n@@||www.algolia.com^\\n@@||ynuf.aliapp.org^\\n@@||us-aebridge.aliexpress.com.gds.alibabadns.com^\\n@@||sh.wagbridge.taobao.com.gds.alibabadns.com^\\n@@||alicdn.com^\\n@@||ae01.alicdn.com^\\n@@||aeis.alicdn.com^\\n@@||aeu.alicdn.com^\\n@@||amos.alicdn.com^\\n@@||assets.alicdn.com^\\n@@||at.alicdn.com^\\n@@||at.alicdn.com.danuoyi.alicdn.com^\\n@@||g.alicdn.com.danuoyi.alicdn.com^\\n@@||img.alicdn.com.danuoyi.alicdn.com^\\n@@||files.alicdn.com^\\n@@||g.alicdn.com^\\n@@||gtms01.alicdn.com^\\n@@||gtms02.alicdn.com^\\n@@||gtms03.alicdn.com^\\n@@||gtms04.alicdn.com^\\n@@||gw.alicdn.com^\\n@@||i.alicdn.com^\\n@@||img.alicdn.com^\\n@@||tce.alicdn.com^\\n@@||aliexpress.com^\\n@@||cdp.aliexpress.com^\\n@@||coupon.aliexpress.com^\\n@@||feedback.aliexpress.com^\\n@@||fr.aliexpress.com^\\n@@||freight.aliexpress.com^\\n@@||gpsfront.aliexpress.com^\\n@@||my.aliexpress.com^\\n@@||promotion.aliexpress.com^\\n@@||mobilegw.alipay.cn^\\n@@||app.alipay.com^\\n@@||authweb.alipay.com^\\n@@||clientsc.alipay.com^\\n@@||entpsz.alipay.com^\\n@@||mdap.alipay.com^\\n@@||mobilecns.alipay.com^\\n@@||mobilecodec.alipay.com^\\n@@||mobilegw.alipay.com^\\n@@||mygw.alipay.com^\\n@@||passport.alipay.com^\\n@@||personalweb.alipay.com^\\n@@||zcbprod.alipay.com^\\n@@||zht.alipay.com^\\n@@||gz-lb1.internet.spanner.alipaydns.com^\\n@@||gw.alipayobjects.com^\\n@@||i.alipayobjects.com^\\n@@||aliyuncs.com^\\n@@||arms-retcode.aliyuncs.com^\\n@@||adash.man.aliyuncs.com^\\n@@||allegro.pl^\\n@@||allure.com^\\n@@||ally.com^\\n@@||alternativeto.net^\\n@@||adiu.amap.com^\\n@@||abroad.apilocate.amap.com^\\n@@||restapi.amap.com^\\n@@||aax-us-east.amazon-adsystem.com^\\n@@||c.amazon-adsystem.com^\\n@@||s.amazon-adsystem.com^\\n@@||amazon.at^\\n@@||amazon.ca^\\n@@||www.amazon.ca^\\n@@||amazon.cn^\\n@@||amazon.com^\\n@@||arcus-uswest.amazon.com^\\n@@||completion.amazon.com^\\n@@||d[TRUNC]...\"}],\"type\":\"page\",\"urls\":[{\"field\":\"content.text\",\"item\":\"https://github.com/mkb2091/blockconvert\"}]},\"language-detection\":{\"confidence\":0.9999963719,\"detected_language\":\"en\",\"detection_method\":\"languageProbability\",\"language_probability\":{\"en\":0.9999963719}},\"nlp-utils\":{\"lemmatized_and_stop_words_filter\":\"[ Adblock Plus 2.0 ] \\n ! Version : 2021 - 09 - 25Z \\n ! Title : BlockConvert Exception Filters \\n ! modify : 2021 - 09 - 25Z \\n ! Expires : 1 day ( update frequency ) \\n ! Homepage : https://github.com/mkb2091/blockconvert \\n ! Licence : GPL-3.0 \\n ! \\n ! -----------------------Filters----------------------- ! \\n @@||ad.10010.com^ \\n @@||m1.ad.10010.com^ \\n @@||static.ws.126.net^ \\n @@||bnet.163.com^ \\n @@||1drv.com^ \\n @@||i - am3p - cor003.api.p001.1drv.com^ \\n @@||1drv.ms^ \\n @@||1fichier.com^ \\n @@||1und1.de^ \\n @@||www.1und1.de^ \\n @@||24timezones.com^ \\n @@||112.2o7.net^ \\n @@||viarnd.112.2o7.net^ \\n @@||www.112.2o7.net^ \\n @@||122.2o7.net^ \\n @@||citiintl.122.2o7.net^ \\n @@||www.citiintl.122.2o7.net^ \\n @@||cdn.gigya.commes.122.2o7.net^ \\n @@||www.122.2o7.net^ \\n @@||2shared.com^ \\n @@||static.3001.net^ \\n @@||4chan.org^ \\n @@||4shared.com^ \\n @@||70i.net^ \\n @@||8ch.net^ \\n @@||91-cdn.com^ \\n @@||91mobiles.com^ \\n @@||a-0001.a - msedge.net^ \\n @@||bat - bing - com.a-0001.a - msedge.net^ \\n @@||star - r - bat - bing - com.a-0001.a - msedge.net^ \\n @@||concierge.analytics.console.aws.a2z.com^ \\n @@||aaa.com^ \\n @@||safebrowsing.g.aaplimg.com^ \\n @@||swcdn.g.aaplimg.com^ \\n @@||world - gen.g.aaplimg.com^ \\n @@||abc.com^ \\n @@||aboo.se^ \\n @@||feodotracker.abuse.ch^ \\n @@||ransomwaretracker.abuse.ch^ \\n @@||sslbl.abuse.ch^ \\n @@||urlhaus.abuse.ch^ \\n @@||acast.com^ \\n @@||accuweather.com^ \\n @@||vortex.accuweather.com^ \\n @@||www.accuweather.com^ \\n @@||acehardware.com^ \\n @@||delivery.acm.org^ \\n @@||actionnetwork.org^ \\n @@||valimail.actonservice.com^ \\n @@||ci61.actonsoftware.com^ \\n @@||forpci61.actonsoftware.com^ \\n @@||iij.ad.jp^ \\n @@||www.iij.ad.jp^ \\n @@||ftp.tsukuba.wide.ad.jp^ \\n @@||ad.nl^ \\n @@||www.ad.nl^ \\n @@||ada.support^ \\n @@||cricket.att.ada.support^ \\n @@||static.ada.support^ \\n @@||adapools.org^ \\n @@||adaway.org^ \\n @@||adblock.dk^ \\n @@||adblock.ee^ \\n @@||road.adblock.ro^ \\n @@||easylist - downloads.adblockplus.org^ \\n @@||adcolo.com^ \\n @@||add0n.com^ \\n @@||www.add0n.com^ \\n @@||adguard.com^ \\n @@||adidas.com^ \\n @@||www.adidas.com^ \\n @@||imagesrv.adition.com^ \\n @@||app.adjust.com^ \\n @@||yahoo.adnetasia.com^ \\n @@||3dns-3.adobe.com^ \\n @@||activate - sea.adobe.com^ \\n @@||activate - sjc0.adobe.com^ \\n @@||activate.adobe.com^ \\n @@||adobe - dns.adobe.com^ \\n @@||documentcloud.adobe.com^ \\n @@||ereg.adobe.com^ \\n @@||get.adobe.com^ \\n @@||hl2rcv.adobe.com^ \\n @@||lm.licenses.adobe.com^ \\n @@||na2m - pr.licenses.adobe.com^ \\n @@||na1r.services.adobe.com^ \\n @@||hlrcv.stage.adobe.com^ \\n @@||lmlicenses.wip4.adobe.com^ \\n @@||wwwimages.adobe.com^ \\n @@||xsdownload.adobe.com^ \\n @@||assets.adobedtm.com^ \\n @@||feed.adrelayer.com^ \\n @@||filters.adtidy.org^ \\n @@||crunchyroll.adtrackers.net^ \\n @@||serve.adtrackers.net^ \\n @@||advanceautoparts.com^ \\n @@||guce.advertising.com^ \\n @@||stage.guce.advertising.com^ \\n @@||trunk.guce.advertising.com^ \\n @@||a.adwolf.ru^ \\n @@||adyen.com^ \\n @@||aeriagames.com^ \\n @@||som.aeroplan.com^ \\n @@||aetna.com^ \\n @@||www.aetna.com^ \\n @@||vip5.afdorigin - prod - am02.afdogw.com^ \\n @@||vip5.afdorigin - prod - ch02.afdogw.com^ \\n @@||affirm.com^ \\n @@||www.affirm.com^ \\n @@||afi - b.com^ \\n @@||t.afi - b.com^ \\n @@||www.afi - b.com^ \\n @@||aftership.com^ \\n @@||ip107307705.ahcdn.com^ \\n @@||ip107316446.ahcdn.com^ \\n @@||aka.ms^ \\n @@||appleid.apple.com.akadns.net^ \\n @@||configuration.apple.com.akadns.net^ \\n @@||lcdn - locator - usnkq.apple.com.akadns.net^ \\n @@||lcdn - locator.apple.com.akadns.net^ \\n @@||swcdn.apple.com.akadns.net^ \\n @@||www - cdn.icloud.com.akadns.net^ \\n @@||us.configsvc1.live.com.akadns.net^ \\n @@||gsp - ssl - geomap.ls - apple.com.akadns.net^ \\n @@||gsp - ssl.ls - apple.com.akadns.net^ \\n @@||asimov - win.settings.data.microsoft.com.akadns.net^ \\n @@||v10-win.vortex.data.microsoft.com.akadns.net^ \\n @@||modern.watson.data.microsoft.com.akadns.net^ \\n @@||cy2.displaycatalog.md.mp.microsoft.com.akadns.net^ \\n @@||cy2.licensing.md.mp.microsoft.com.akadns.net^ \\n @@||co4.telecommand.telemetry.microsoft.com.akadns.net^ \\n @@||sls.update.microsoft.com.akadns.net^ \\n @@||login.msa.akadns6.net^ \\n @@||ipv4.login.msa.akadns6.net^ \\n @@||a248.e.akamai.net^ \\n @@||a1014.g.akamai.net^ \\n @@||a1599.g.akamai.net^ \\n @@||a1767.g.akamai.net^ \\n @@||a1843.g.akamai.net^ \\n @@||a19.g.akamai.net^ \\n @@||a90.g.akamai.net^ \\n @@||e16973.a.akamaiedge.net^ \\n @@||e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 136 - 128 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 203 - 0 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 207 - 16 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 211 - 112 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 217 - 32 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-107 - 217 - 40 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 194 - 96 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 197 - 32 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 197 - 8 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 219 - 40 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 241 - 32 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 246 - 8 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-108 - 95 - 96 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 160 - 96 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 163 - 72 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 185 - 40 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 199 - 200 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 199 - 80 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 219 - 248 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-12 - 53 - 216 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-162 - 224 - 184 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-184 - 32 - 88 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-184 - 35 - 8 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-184 - 41 - 64 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-202 - 112 - 48 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-208 - 70 - 96 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-76 - 228 - 192 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-99 - 22 - 168 - 0.e8999.b.akamaiedge.net^ \\n @@||user - att-99 - 43 - 168 - 0.e8999.b.akamaiedge.net^ \\n @@||e3489.cd.akamaiedge.net^ \\n @@||e1151.e12.akamaiedge.net^ \\n @@||e10217.g.akamaiedge.net^ \\n @@||e11100.g.akamaiedge.net^ \\n @@||e3843.g.akamaiedge.net^ \\n @@||e5070.g.akamaiedge.net^ \\n @@||e5413.g.akamaiedge.net^ \\n @@||e5460.g.akamaiedge.net^ \\n @@||e6603.g.akamaiedge.net^ \\n @@||e7081.g.akamaiedge.net^ \\n @@||fbcdn - profile - a.akamaihd.net^ \\n @@||twimg0-a.akamaihd.net^ \\n @@||img - prod - cm - rt - microsoft - com.akamaized.net^ \\n @@||img - s - msn - com.akamaized.net^ \\n @@||lastfm - img2.akamaized.net^ \\n @@||akismet.com^ \\n @@||serial.alcohol - soft.com^ \\n @@||trial.alcohol - soft.com^ \\n @@||alexa.com^ \\n @@||algolia.com^ \\n @@||www.algolia.com^ \\n @@||ynuf.aliapp.org^ \\n @@||us - aebridge.aliexpress.com.gds.alibabadns.com^ \\n @@||sh.wagbridge.taobao.com.gds.alibabadns.com^ \\n @@||alicdn.com^ \\n @@||ae01.alicdn.com^ \\n @@||aeis.alicdn.com^ \\n @@||aeu.alicdn.com^ \\n @@||amos.alicdn.com^ \\n @@||assets.alicdn.com^ \\n @@||at.alicdn.com^ \\n @@||at.alicdn.com.danuoyi.alicdn.com^ \\n @@||g.alicdn.com.danuoyi.alicdn.com^ \\n @@||img.alicdn.com.danuoyi.alicdn.com^ \\n @@||files.alicdn.com^ \\n @@||g.alicdn.com^ \\n @@||gtms01.alicdn.com^ \\n @@||gtms02.alicdn.com^ \\n @@||gtms03.alicdn.com^ \\n @@||gtms04.alicdn.com^ \\n @@||gw.alicdn.com^ \\n @@||i.alicdn.com^ \\n @@||img.alicdn.com^ \\n @@||tce.alicdn.com^ \\n @@||aliexpress.com^ \\n @@||cdp.aliexpress.com^ \\n @@||coupon.aliexpress.com^ \\n @@||feedback.aliexpress.com^ \\n @@||fr.aliexpress.com^ \\n @@||freight.aliexpress.com^ \\n @@||gpsfront.aliexpress.com^ \\n @@||my.aliexpress.com^ \\n @@||promotion.aliexpress.com^ \\n @@||mobilegw.alipay.cn^ \\n @@||app.alipay.com^ \\n @@||authweb.alipay.com^ \\n @@||clientsc.alipay.com^ \\n @@||entpsz.alipay.com^ \\n @@||mdap.alipay.com^ \\n @@||mobilecns.alipay.com^ \\n @@||mobilecodec.alipay.com^ \\n @@||mobilegw.alipay.com^ \\n @@||mygw.alipay.com^ \\n @@||passport.alipay.com^ \\n @@||personalweb.alipay.com^ \\n @@||zcbprod.alipay.com^ \\n @@||zht.alipay.com^ \\n @@||gz - lb1.internet.spanner.alipaydns.com^ \\n @@||gw.alipayobjects.com^ \\n @@||i.alipayobjects.com^ \\n @@||aliyuncs.com^ \\n @@||arms - retcode.aliyuncs.com^ \\n @@||adash.man.aliyuncs.com^ \\n @@||allegro.pl^ \\n @@||allure.com^ \\n @@||ally.com^ \\n @@||alternativeto.net^ \\n @@||adiu.amap.com^ \\n @@||abroad.apilocate.amap.com^ \\n @@||restapi.amap.com^ \\n @@||aax - - east.amazon - adsystem.com^ \\n @@||c.amazon - adsystem.com^ \\n @@||s.amazon - adsystem.com^ \\n @@||amazon.at^ \\n @@||amazon.ca^ \\n @@||www.amazon.ca^ \\n @@||amazon.cn^ \\n @@||amazon.com^ \\n @@||arcus - uswest.amazon.com^ \\n @@||completion.amazon.com^ \\n @@||d[TRUNC ] ...\",\"nlp_model\":\"en\"},\"threatfeed\":{\"data\":[]}},\"error_logger\":{},\"image_overlays\":[],\"occurrences\":[{\"origin\":null,\"term\":\"login\"},{\"origin\":null,\"term\":\"aeroplan\"}],\"offending_content\":[{\"origin\":null,\"term\":\"login\",\"text\":\"[Adblock Plus 2.0]\\n! Version: 2021-09-25Z\\n! Title: BlockConvert Exception Filters\\n! Last modified: 2021-09-25Z\\n! Expires: 1 days (update frequency)\\n! Homepage: https://github.com/mkb2091/blockconvert\\n! Licence: GPL-3.0\\n!\\n!-----------------------Filters-----------------------!\\n@@||ad.10010.com^\\n@@||m1.ad.10010.com^\\n@@||static.ws.126.net^\\n@@||bnet.163.com^\\n@@||1drv.com^\\n@@||i-am3p-cor003.api.p001.1drv.com^\\n@@||1drv.ms^\\n@@||1fichier.com^\\n@@||1und1.de^\\n@@||www.1und1.de^\\n@@||24timezones.com^\\n@@||112.2o7.net^\\n@@||viarnd.112.2o7.net^\\n@@||www.112.2o7.net^\\n@@||122.2o7.net^\\n@@||citiintl.122.2o7.net^\\n@@||www.citiintl.122.2o7.net^\\n@@||cdn.gigya.commes.122.2o7.net^\\n@@||www.122.2o7.net^\\n@@||2shared.com^\\n@@||static.3001.net^\\n@@||4chan.org^\\n@@||4shared.com^\\n@@||70i.net^\\n@@||8ch.net^\\n@@||91-cdn.com^\\n@@||91mobiles.com^\\n@@||a-0001.a-msedge.net^\\n@@||bat-bing-com.a-0001.a-msedge.net^\\n@@||star-r-bat-bing-com.a-0001.a-msedge.net^\\n@@||concierge.analytics.console.aws.a2z.com^\\n@@||aaa.com^\\n@@||safebrowsing.g.aaplimg.com^\\n@@||swcdn.g.aaplimg.com^\\n@@||world-gen.g.aaplimg.com^\\n@@||abc.com^\\n@@||aboo.se^\\n@@||feodotracker.abuse.ch^\\n@@||ransomwaretracker.abuse.ch^\\n@@||sslbl.abuse.ch^\\n@@||urlhaus.abuse.ch^\\n@@||acast.com^\\n@@||accuweather.com^\\n@@||vortex.accuweather.com^\\n@@||www.accuweather.com^\\n@@||acehardware.com^\\n@@||delivery.acm.org^\\n@@||actionnetwork.org^\\n@@||valimail.actonservice.com^\\n@@||ci61.actonsoftware.com^\\n@@||forpci61.actonsoftware.com^\\n@@||iij.ad.jp^\\n@@||www.iij.ad.jp^\\n@@||ftp.tsukuba.wide.ad.jp^\\n@@||ad.nl^\\n@@||www.ad.nl^\\n@@||ada.support^\\n@@||cricket.att.ada.support^\\n@@||static.ada.support^\\n@@||adapools.org^\\n@@||adaway.org^\\n@@||adblock.dk^\\n@@||adblock.ee^\\n@@||road.adblock.ro^\\n@@||easylist-downloads.adblockplus.org^\\n@@||adcolo.com^\\n@@||add0n.com^\\n@@||www.add0n.com^\\n@@||adguard.com^\\n@@||adidas.com^\\n@@||www.adidas.com^\\n@@||imagesrv.adition.com^\\n@@||app.adjust.com^\\n@@||yahoo.adnetasia.com^\\n@@||3dns-3.adobe.com^\\n@@||activate-sea.adobe.com^\\n@@||activate-sjc0.adobe.com^\\n@@||activate.adobe.com^\\n@@||adobe-dns.adobe.com^\\n@@||documentcloud.adobe.com^\\n@@||ereg.adobe.com^\\n@@||get.adobe.com^\\n@@||hl2rcv.adobe.com^\\n@@||lm.licenses.adobe.com^\\n@@||na2m-pr.licenses.adobe.com^\\n@@||na1r.services.adobe.com^\\n@@||hlrcv.stage.adobe.com^\\n@@||lmlicenses.wip4.adobe.com^\\n@@||wwwimages.adobe.com^\\n@@||xsdownload.adobe.com^\\n@@||assets.adobedtm.com^\\n@@||feed.adrelayer.com^\\n@@||filters.adtidy.org^\\n@@||crunchyroll.adtrackers.net^\\n@@||serve.adtrackers.net^\\n@@||advanceautoparts.com^\\n@@||guce.advertising.com^\\n@@||stage.guce.advertising.com^\\n@@||trunk.guce.advertising.com^\\n@@||a.adwolf.ru^\\n@@||adyen.com^\\n@@||aeriagames.com^\\n@@||som.aeroplan.com^\\n@@||aetna.com^\\n@@||www.aetna.com^\\n@@||vip5.afdorigin-prod-am02.afdogw.com^\\n@@||vip5.afdorigin-prod-ch02.afdogw.com^\\n@@||affirm.com^\\n@@||www.affirm.com^\\n@@||afi-b.com^\\n@@||t.afi-b.com^\\n@@||www.afi-b.com^\\n@@||aftership.com^\\n@@||ip107307705.ahcdn.com^\\n@@||ip107316446.ahcdn.com^\\n@@||aka.ms^\\n@@||appleid.apple.com.akadns.net^\\n@@||configuration.apple.com.akadns.net^\\n@@||lcdn-locator-usnkq.apple.com.akadns.net^\\n@@||lcdn-locator.apple.com.akadns.net^\\n@@||swcdn.apple.com.akadns.net^\\n@@||www-cdn.icloud.com.akadns.net^\\n@@||us.configsvc1.live.com.akadns.net^\\n@@||gsp-ssl-geomap.ls-apple.com.akadns.net^\\n@@||gsp-ssl.ls-apple.com.akadns.net^\\n@@||asimov-win.settings.data.microsoft.com.akadns.net^\\n@@||v10-win.vortex.data.microsoft.com.akadns.net^\\n@@||modern.watson.data.microsoft.com.akadns.net^\\n@@||cy2.displaycatalog.md.mp.microsoft.com.akadns.net^\\n@@||cy2.licensing.md.mp.microsoft.com.akadns.net^\\n@@||co4.telecommand.telemetry.microsoft.com.akadns.net^\\n@@||sls.update.microsoft.com.akadns.net^\\n@@||login.msa.akadns6.net^\\n@@||ipv4.login.msa.akadns6.net^\\n@@||a248.e.akamai.net^\\n@@||a1014.g.akamai.net^\\n@@||a1599.g.akamai.net^\\n@@||a1767.g.akamai.net^\\n@@||a1843.g.akamai.net^\\n@@||a19.g.akamai.net^\\n@@||a90.g.akamai.net^\\n@@||e16973.a.akamaiedge.net^\\n@@||e8999.b.akamaiedge.net^\\n@@||user-att-107-136-128-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-203-0-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-207-16-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-211-112-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-107-217-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-194-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-197-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-219-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-241-32-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-246-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-108-95-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-160-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-163-72-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-185-40-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-200-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-199-80-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-219-248-0.e8999.b.akamaiedge.net^\\n@@||user-att-12-53-216-0.e8999.b.akamaiedge.net^\\n@@||user-att-162-224-184-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-32-88-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-35-8-0.e8999.b.akamaiedge.net^\\n@@||user-att-184-41-64-0.e8999.b.akamaiedge.net^\\n@@||user-att-202-112-48-0.e8999.b.akamaiedge.net^\\n@@||user-att-208-70-96-0.e8999.b.akamaiedge.net^\\n@@||user-att-76-228-192-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-22-168-0.e8999.b.akamaiedge.net^\\n@@||user-att-99-43-168-0.e8999.b.akamaiedge.net^\\n@@||e3489.cd.akamaiedge.net^\\n@@||e1151.e12.akamaiedge.net^\\n@@||e10217.g.akamaiedge.net^\\n@@||e11100.g.akamaiedge.net^\\n@@||e3843.g.akamaiedge.net^\\n@@||e5070.g.akamaiedge.net^\\n@@||e5413.g.akamaiedge.net^\\n@@||e5460.g.akamaiedge.net^\\n@@||e6603.g.akamaiedge.net^\\n@@||e7081.g.akamaiedge.net^\\n@@||fbcdn-profile-a.akamaihd.net^\\n@@||twimg0-a.akamaihd.net^\\n@@||img-prod-cms-rt-microsoft-com.akamaized.net^\\n@@||img-s-msn-com.akamaized.net^\\n@@||lastfm-img2.akamaized.net^\\n@@||akismet.com^\\n@@||serial.alcohol-soft.com^\\n@@||trial.alcohol-soft.com^\\n@@||alexa.com^\\n@@||algolia.com^\\n@@||www.algolia.com^\\n@@||ynuf.aliapp.org^\\n@@||us-aebridge.aliexpress.com.gds.alibabadns.com^\\n@@||sh.wagbridge.taobao.com.gds.alibabadns.com^\\n@@||alicdn.com^\\n@@||ae01.alicdn.com^\\n@@||aeis.alicdn.com^\\n@@||aeu.alicdn.com^\\n@@||amos.alicdn.com^\\n@@||assets.alicdn.com^\\n@@||at.alicdn.com^\\n@@||at.alicdn.com.danuoyi.alicdn.com^\\n@@||g.alicdn.com.danuoyi.alicdn.com^\\n@@||img.alicdn.com.danuoyi.alicdn.com^\\n@@||files.alicdn.com^\\n@@||g.alicdn.com^\\n@@||gtms01.alicdn.com^\\n@@||gtms02.alicdn.com^\\n@@||gtms03.alicdn.com^\\n@@||gtms04.alicdn.com^\\n@@||gw.alicdn.com^\\n@@||i.alicdn.com^\\n@@||img.alicdn.com^\\n@@||tce.alicdn.com^\\n@@||aliexpress.com^\\n@@||cdp.aliexpress.com^\\n@@||coupon.aliexpress.com^\\n@@||feedback.aliexpress.com^\\n@@||fr.aliexpress.com^\\n@@||freight.aliexpress.com^\\n@@||gpsfront.aliexpress.com^\\n@@||my.aliexpress.com^\\n@@||promotion.aliexpress.com^\\n@@||mobilegw.alipay.cn^\\n@@||app.alipay.com^\\n@@||authweb.alipay.com^\\n@@||clientsc.alipay.com^\\n@@||entpsz.alipay.com^\\n@@||mdap.alipay.com^\\n@@||mobilecns.alipay.com^\\n@@||mobilecodec.alipay.com^\\n@@||mobilegw.alipay.com^\\n@@||mygw.alipay.com^\\n@@||passport.alipay.com^\\n@@||personalweb.alipay.com^\\n@@||zcbprod.alipay.com^\\n@@||zht.alipay.com^\\n@@||gz-lb1.internet.spanner.alipaydns.com^\\n@@||gw.alipayobjects.com^\\n@@||i.alipayobjects.com^\\n@@||aliyuncs.com^\\n@@||arms-retcode.aliyuncs.com^\\n@@||adash.man.aliyuncs.com^\\n@@||allegro.pl^\\n@@||allure.com^\\n@@||ally.com^\\n@@||alternativeto.net^\\n@@||adiu.amap.com^\\n@@||abroad.apilocate.amap.com^\\n@@||restapi.amap.com^\\n@@||aax-us-east.amazon-adsystem.com^\\n@@||c.amazon-adsystem.com^\\n@@||s.amazon-adsystem.com^\\n@@||amazon.at^\\n@@||amazon.ca^\\n@@||www.amazon.ca^\\n@@||amazon.cn^\\n@@||amazon.com^\\n@@||arcus-uswest.amazon.com^\\n@@||completion.amazon.com^\\n@@||d[TRUNC]...\"}]}",
   "network":"github",
   "notes":"",
   "offending_content_url":"https://github.com/mkb2091/blockconvert/blob/178ef7b0cadc5b07f64b4a978afaebc8f936e553/output/whitelist_adblock.txt",
   "perpetrator":{
      "content":"...[TRUNC]m^\n@@||anti-ad.net^\n@@||tkx-acc.apis.anvato.net^\n@@||tkx2-prod.anvato.net^\n@@||aol.com^\n@@||www.aol.com^\n@@||o.aolcdn.com^\n@@||ap.org^\n@@||apnewsregistry.com^\n@@||reddit.app.link^\n@@||in.appcenter.ms^\n@@||gateway.fe.apple-dns.net^\n@@||apple.com^\n@@||albert.apple.com^\n@@||appldnld.apple.com^\n@@||appleid.apple.com^\n@@||c.apple.com^\n@@||captive.apple.com^\n@@||discussions.apple.com^\n@@||gs-loc.apple.com^\n@@||gs.apple.com^\n@@||gsp1.apple.com^\n@@||iadsdk.apple.com^\n@@||cf.iadsdk.apple.com^\n@@||itunes.apple.com^\n@@||ax.itunes.apple.com^\n@@||ax.init.itunes.apple.com^\n@@||gsp-ssl.ls.apple.com^\n@@||ocsp.apple.com^\n@@||ocsp2.apple.com^\n@@||phobos.apple.com^\n@@||api-glb.smoot.apple.com^\n@@||swcdn.apple.com^\n@@||trailers.apple.com^\n@@||imp.appledaily.com^\n@@||forums.appleinsider.com^\n@@||breeze.aimon.applicationinsights.io^\n@@||artifactory.appodeal.com^\n@@||app.appsflyer.com^\n@@||appspot.com^\n@@||hiroservers.appspot.com^\n@@||snapabug.appspot.com^\n@@||static-dot-virustotalcloud.appspot.com^\n@@||virustotalcloud.appspot.com^\n@@||arcgis.com^\n@@||arcgisonline.com^\n@@||archive.org^\n@@||web.archive.org^\n@@||bbs.archlinux.org^\n@@||arcot.com^\n@@||secure5.arcot.com^\n@@||arcpublishing.com^\n@@||arizona.edu^\n@@||arkoselabs.com^\n@@||arstechnica.com^\n@@||cdn.arstechnica.net^\n@@||art19.com^\n@@||asics.com^\n@@||ask.fm^\n@@||askubuntu.com^\n@@||ajax.aspnetcdn.com^\n@@||assets-cdk.com^\n@@||c64.assets-yammer.com^\n@@||audible.com^\n@@||ws.audioscrobbler.com^\n@@||auth0.com^\n@@||cdn.auth0.com^\n@@||authorize.net^\n@@||secure.avangate.com^\n@@||forum.avast.com^\n@@||avsforum.com^\n@@||awin1.com^\n@@||a1.awin1.com^\n@@||autodiscover.awin1.com^\n@@||b1.awin1.com^\n@@||i-ber1.awin1.com^\n@@||i-lhr1.awin1.com^\n@@||i-new.awin1.com^\n@@||i.awin1.com^\n@@||pv-ber1.awin1.com^\n@@||pv-lhr1.awin1.com^\n@@||pv-new.awin1.com^\n@@||pv.awin1.com^\n@@||www-ber1.awin1.com^\n@@||www-lhr1.awin1.com^\n@@||www-new.awin1.com^\n@@||www.awin1.com^\n@@||www1.awin1.com^\n@@||email.awscloud.com^\n@@||r.us-east-1.awstrack.me^\n@@||ay.gy^\n@@||azorult-tracker.net^\n@@||wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com^\n@@||api.monitor.azure.com^\n@@||en.bab.la^\n@@||baidu.com^\n@@||hiphotos.baidu.com^\n@@||imgsa.baidu.com^\n@@||imgsrc.baidu.com^\n@@||api.map.baidu.com^\n@@||sapi.map.baidu.com^\n@@||passport.baidu.com^\n@@||ss0.baidu.com^\n@@||ss1.baidu.com^\n@@||ss2.baidu.com^\n@@||ss3.baidu.com^\n@@||captcha.su.baidu.com^\n@@||t11.baidu.com^\n@@||t12.baidu.com^\n@@||www.baidu.com^\n@@||xueshu.baidu.com^\n@@||global.edge.bamgrid.com^\n@@||bandcamp.com^\n@@||bankid.no^\n@@||bankrate.com^\n@@||crunchyroll.bannertrack.net^\n@@||battle.net^\n@@||bazaarvoice.com^\n@@||analytics-static.ugc.bazaarvoice.com^\n@@||display.ugc.bazaarvoice.com^\n@@||magpie-static.ugc.bazaarvoice.com^\n@@||www.bazaarvoice.com^\n@@||bbb.org^\n@@||bbc.com^\n@@||www.bbc.com^\n@@||ssl.bblck.me^\n@@||www.ssl.bblck.me^\n@@||bcee.lu^\n@@||maponline0.bdimg.com^\n@@||maponline1.bdimg.com^\n@@||maponline2.bdimg.com^\n@@||maponline3.bdimg.com^\n@@||bedbathandbeyond.com^\n@@||behance.net^\n@@||berush.com^\n@@||www.berush.com^\n@@||bestbuy.ca^\n@@||bestbuy.com^\n@@||betanews.com^\n@@||betfair.com^\n@@||l.betrad.com^\n@@||better.fyi^\n@@||betterttv.net^\n@@||beyondmenu.com^\n@@||static.beyondmenu.com^\n@@||www.beyondmenu.com^\n@@||bgr.com^\n@@||buyad.bi-xenon.cn^\n@@||bigcommerce.com^\n@@||bilder.bild.de^\n@@||billiger.de^\n@@||binarydefense.com^\n@@||www.binarydefense.com^\n@@||bing.at^\n@@||bing.ch^\n@@||bing.com^\n@@||api.bing.com^\n@@||cn.bing.com^\n@@||r.bing.com^\n@@||www.bing.com^\n@@||bing.cz^\n@@||bing.es^\n@@||bing.fi^\n@@||bing.fr^\n@@||bing.gr^\n@@||bing.hu^\n@@||bing.ie^\n@@||bing.it^\n@@||bing.no^\n@@||bing.pl^\n@@||bing.ru^\n@@||bing.se^\n@@||bit.ly^\n@@||www.bit.ly^\n@@||bitbucket.org^\n@@||bitcoin.com^\n@@||news.bitcoin.com^\n@@||bitcoin.it^\n@@||bitlord.com^\n@@||bitly.com^\n@@||bitpay.com^\n@@||bizrate.com^\n@@||blackhatworld.com^\n@@||www.blackhatworld.com^\n@@||bleacherreport.com^\n@@||blockstack.org^\n@@||blogblog.com^\n@@||img1.blogblog.com^\n@@||blogger.com^\n@@||www.blogger.com^\n@@||blogspot.com^\n@@||bloomberg.com^\n@@||www.bloomberg.com^\n@@||bloxcms.com^\n@@||ftp.bmp.ovh^\n@@||bokser.org^\n@@||boldchat.com^\n@@||www.boldchat.com^\n@@||manifest.prod.boltdns.net^\n@@||bootstrapcdn.com^\n@@||maxcdn.bootstrapcdn.com^\n@@||netdna.bootstrapcdn.com^\n@@||stackpath.bootstrapcdn.com^\n@@||inapcache.boston.com^\n@@||bountysource.com^\n@@||bowercdn.net^\n@@||boxrec.com^\n@@||braintreegateway.com^\n@@||brakrock.be^\n@@||www.brakrock.be^\n@@||www.brcdn.com^\n@@||breakingburner.com^\n@@||brightcove.com^\n@@||admin.brightcove.com^\n@@||edge.api.brightcove.com^\n@@||f1.media.brightcove.com^\n@@||secure.brightcove.com^\n@@||www.brightcove.com^\n@@||brightcove.net^\n@@||players.brightcove.net^\n@@||bugsnag.com^\n@@||docs.bugsnag.com^\n@@||www.bugsnag.com^\n@@||bungie.net^\n@@||businessinsider.com^\n@@||amp.businessinsider.com^\n@@||www.businessinsider.com^\n@@||buymeacoffee.com^\n@@||www.buymeacoffee.com^\n@@||buzzfed.com^\n@@||buzzfeed.com^\n@@||www.buzzfeed.com^\n@@||assets.bwbx.io^\n@@||mvaali1.ws.byteoversea.net^\n@@||calendly.com^\n@@||dictionary.cambridge.org^\n@@||cardinalcommerce.com^\n@@||everest.castbox.fm^\n@@||files.catbox.moe^\n@@||cbsi.com^\n@@||om.cbsi.com^\n@@||www.cbsi.com^\n@@||vidtech.cbsinteractive.com^\n@@||baltimore.cbslocal.com^\n@@||boston.cbslocal.com^\n@@||chicago.cbslocal.com^\n@@||houston.cbslocal.com^\n@@||lasvegas.cbslocal.com^\n@@||losangeles.cbslocal.com^\n@@||miami.cbslocal.com^\n@@||minnesota.cbslocal.com^\n@@||newyork.cbslocal.com^\n@@||philadelphia.cbslocal.com^\n@@||pittsburgh.cbslocal.com^\n@@||sacramento.cbslocal.com^\n@@||sanfrancisco.cbslocal.com^\n@@||tampa.cbslocal.com^\n@@||washington.cbslocal.com^\n@@||ccleaner.com^\n@@||cda.pl^\n@@||ebd.cda.pl^\n@@||www.cda.pl^\n@@||scontent-iad3-1.cdninstagram.com^\n@@||scontent.cdninstagram.com^\n@@||cdnpk.com^\n@@||2-01-2c3e-003d.cdx.cedexis.net^\n@@||2-01-2c3e-005c.cdx.cedexis.net^\n@@||cern.ch^\n@@||ceros.com^\n@@||cesanta.com^\n@@||www.cesanta.com^\n@@||change.org^\n@@||charter.com^\n@@||chng.it^\n@@||ftp.chocolatey.org^\n@@||packages.chocolatey.org^\n@@||chomikuj.pl^\n@@||www.chomikuj.pl^\n@@||christianpost.com^\n@@||f.chtah.com^\n@@||civicscience.com^\n@@||www.civicscience.com^\n@@||db.local.clamav.net^\n@@||cleanprint.net^\n@@||cleveland.com^\n@@||elinkeu.clickdimensions.com^\n@@||clickondetroit.com^\n@@||location-inference-westus.cloudapp.net^\n@@||skypeecs-prod-usw-0-b.cloudapp.net^\n@@||cloudflare-dns.com^\n@@||cloudflare.com^\n@@||ajax.cloudflare.com^\n@@||cdnjs.cloudflare.com^\n@@||dash.cloudflare.com^\n@@||c.disquscdn.com.cdn.cloudflare.net^\n@@||tvthemes.plexapp.com.cdn.cloudflare.net^\n@@||api.cloudflareapps.com^\n@@||login.cloudflarewarp.com^\n@@||cloudflareworkers.com^\n@@||rawhttp.cloudflareworkers.com^\n@@||d1z2jf7jlzjs58.cloudfront.net^\n@@||d2405b0jymm2dk.cloudfront.net^\n@@||d25xi40x97liuc.cloudfront.net^\n@@||d2c8v52ll5s99u.cloudfront.net^\n@@||d2gatte9o95jao.cloudfront.net^\n@@||d3orhvfyxudxxq.cloudfront.net^\n@@||d9hhrg4mnvzow.cloudfront.net^\n@@||djvbdz1obemzo.cloudfront.net^\n@@||dmqdd6hw24ucf.cloudfront.net^\n@@||cloudinary.com^\n@@||res.cloudinary.com^\n@@||www.res.cloudinary.com^\n@@||cmail19.com^\n@@||cmail20.com^\n@@||i.cmpnet.com^\n@@||cnbc.com^\n@@||www.cnbc.com^\n@@||images2015.cnblogs.com^\n@@||cnet.com^\n@@||download.cnet.com^\n@@||www.cnet.com^\n@@||cc.cnetcontent.com^\n@@||cdn.cnetcontent.com^\n@@||ws.cnetcontent.com^\n@@||cnn.com^\n@@||taimeod.co.il^\n@@||moonbit.co.in^\n@@||www.moonbit.co.in^\n@@||cloudmail17.netcore.co.in^\n@@||amazon.co.jp^\n@@||www.amazon.co.jp^\n@@||hb.afl.rakuten.co.jp^\n@@||pt.afl.rakuten.co.jp^\n@@||grp07.ias.rakuten.co.jp^\n@@||image.rakuten.co.jp^\n@@||yahoo.co.jp^\n@@||mediaworks.co.nz^\n@@||mega.co.nz^\n@@||amazon.co.uk^\n@@||www.amazon.co.uk^\n@@||secure.barclaycard.co.uk^\n@@||verifiedbyvisa.barclays.co.uk^\n@@||bbc.co.uk^\n@@||www.bbc.co.uk^\n@@||bbci.co.uk^\n@@||static.bbci.co.uk^\n@@||bing.co.uk^\n@@||dailymail.co.uk^\n@@||express.co.uk^\n@@||guardian.co.uk^\n@@||mirror.co.uk^\n@@||overclockers.co.uk^\n@@||email.procook.co.uk^\n@@||securesuite.co.uk^\n@@||theregister.co.uk^\n@@||www.theregister.co.uk^\n@@||codeberg.org^\n@@||codecanyon.net^\n@@||codepen.io^\n@@||codesandbox.io^\n@@||cdn.cohesionapps.com^\n@@||coinbase.com^\n@@||api.coinbase.com^\n@@||assets.coinbase.com^\n@@||blog.coinbase.com^\n@@||custody.coinbase.com^\n@@||static.coinbase.com^\n@@||status.coinbase.com^\n@@||support.coinbase.com^\n@@||ws.coinbase.com^\n@@||www.coinbase.com^\n@@||coinpot.co^\n@@||www.coinpot.co^\n@@||cointraffic.io^\n@@||www.cointraffic.io^\n@@||collegehumor.com^\n@@||alluremedia.com.au^\n@@||foxsports.com.au^\n@@||gizmodo.com.au^\n@@||go.scorptec.com.au^\n@@||weatherzone.com.au^\n@@||bing.com.br^\n@@||vivo.com.br^\n@@||sina.com.cn^\n@@||www.sina.com.cn^\n@@||dw.com.com^\n@@||di.com.pl^\n@@||cdn.rozetka.com.ua^\n@@||ocsp.comodoca.com^\n@@||ocsp.comodoca4.com^\n@@||confirmit.com^\n@@||survey.euro.confirmit.com^\n@@||www.confirmit.com^\n@@||cws.conviva.com^\n@@||www.cws.conviva.com^\n@@||zee.cws.conviva.com^\n@@||www.zee.cws.conviva.com^\n@@||livepassdl.conviva.com^\n@@||pings.conviva.com^\n@@||cosmopolitan.com^\n@@||costco.com^\n@@||countryflags.io^\n@@||platform.cloud.coveo.com^\n@@||static.cloud.coveo.com^\n@@||cloudplatform.coveo.com^\n@@||cdn.cpnscdn.com^\n@@||cracked.com^\n@@||cracovia.pl^\n@@||crateandbarrel.com^\n@@||code.createjs.com^\n@@||www.code.createjs.com^\n@@||creativecommons.org^\n@@||crunchbase.com^\n@@||crunchyroll.com^\n@@||eec.crunchyroll.com^\n@@||tags.crwdcntrl.net^\n@@||ag.tags.crwdcntrl.net^\n@@||celebslam.tags.crwdcntrl.net^\n@@||cnnmoney.tags.crwdcntrl.net^\n@@||www.cnnmoney.tags.crwdcntrl.net^\n@@||fanpop.tags.crwdcntrl.net^\n@@||fansites.tags.crwdcntrl.net^\n@@||livejournal.tags.crwdcntrl.net^\n@@||nbcu.tags.crwdcntrl.net^\n@@||oh.tags.crwdcntrl.net^\n@@||realnetwork.tags.crwdcntrl.net^\n@@||sociallitelife.tags.crwdcntrl.net^\n@@||www.sociallitelife.tags.crwdcntrl.net^\n@@||sportsillustrated.tags.crwdcntrl.net^\n@@||www.sportsillustrated.tags.crwdcntrl.net^\n@@||vampirefreaks.tags.crwdcntrl.net^\n@@||videogum.tags.crwdcntrl.net^\n@@||wwtdd.tags.crwdcntrl.net^\n@@||www.tags.crwdcntrl.net^\n@@||yardbarker.tags.crwdcntrl.net^\n@@||blog.csdn.net^\n@@||csdnimg.cn^\n@@||cstv.com^\n@@||cst.cstwpush.com^\n@@||cursecd[TRUNC]...",
      "display_name":"mkb2091",
      "id":245625444,
      "name":"mkb2091",
      "network":"github",
      "timestamp":"2018-01-01T00:00:00+00:00",
      "type":"page",
      "url":"https://github.com/mkb2091/blockconvert/blob/178ef7b0cadc5b07f64b4a978afaebc8f936e553/output/whitelist_adblock.txt"
   },
   "protected_locations":null,
   "protected_social_object":"aeroplan.com",
   "reviewed":true,
   "reviews":[
      
   ],
   "rule_group_id":1460,
   "rule_id":37572,
   "rule_name":"CodeSharing credentials",
   "severity":4,
   "status":"Closed",
   "tags":[
      
   ],
   "timestamp":"2021-09-26T08:27:32+00:00"
}

Get Alerts By Asset

Retrieves metrics on an Enterprise's alerts, grouped by entity

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Min timestampJinja-templated ISO-8601 date-time string. (Defaults to batch start time).
Example: 2019-09-26T07:58:30.996+0200
Optional
Max timestampJinja-templated ISO-8601 date-time string. (Defaults to batch end time).
Example: 2019-09-26T07:58:30.996+0200
Optional
AccountJinja-templated Social network account number (unique ID).Optional
EntityJinja-templated ZeroFox entity ID.Optional
Alert_typeJinja-templated CSV of alert types. Possible values are account_information, entity_discovery_content, entity_discovery_profile, impersonating_account, impersonating_comment, impersonating_post, incoming_comment, incoming_post, incoming_private_message, outgoing_private_message, self_comment, self_post, search_query, email, and location.Optional
Rule_idJinja-templated ZeroFox rule ID CSV.Optional
Rule_nameJinja-templated ZeroFox rule name CSV.Optional
NetworkJinja-templated Network name CSV.Optional
SeverityJinja-templated Severity level of alert. 1 - 5 (Critical).Optional
StatusJinja-templated Alert status. Possible values are closed, open, takedown_accepted, takedown_denied, takedown_requested, takedown_submitted, and whitelisted.Optional
PostJinja-templated Social network post number (unique ID).Optional

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alerts By Asset Data
{
   "count":3,
   "display_name":"Aeroplan",
   "has_error":false,
   "error":null,
   "entity":577708
}

Get Alerts By Timerange

Retrieves metrics on an Enterprise's alerts, grouped by timerange.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
GroupsJinja-templated number of groups to break timerange down into.Required
Min timestampJinja-templated ISO-8601 date-time string. (Defaults to batch start time).
Example: 2019-09-26T07:58:30.996+0200
Optional
Max timestampJinja-templated ISO-8601 date-time string. (Defaults to batch end time).
Example: 2019-09-26T07:58:30.996+0200
Optional
AccountJinja-templated Social network account number (unique ID).Optional
EntityJinja-templated ZeroFox entity ID.Optional
Alert_typeJinja-templated CSV of alert types. Possible values are account_information, entity_discovery_content, entity_discovery_profile, impersonating_account, impersonating_comment, impersonating_post, incoming_comment, incoming_post, incoming_private_message, outgoing_private_message, self_comment, self_post, search_query, email, and location.Optional
Rule_idJinja-templated ZeroFox rule ID CSV.Optional
Rule_nameJinja-templated ZeroFox rule name CSV.Optional
NetworkJinja-templated Network name CSV.Optional
SeverityJinja-templated Severity level of alert. 1 - 5 (Critical).Optional
StatusJinja-templated Alert status. Possible values are closed, open, takedown_accepted, takedown_denied, takedown_requested, takedown_submitted, and whitelisted.Optional
PostJinja-templated Social network post number (unique ID).Optional

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alerts By Timerange Data
{
   "begin":"2021-09-26T07:58:30.996000+02:00",
   "count":1,
   "has_error":false,
   "error":null,
   "end":"2021-09-26T09:58:30.996000+02:00"
}

Get Labels

List all valid labels for a review

Input

Choose a connection that you have previously created complete the connection.

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Labels Data
{
   "result":[
      "NOT_HELPFUL",
      "DUPLICATE",
      "FALSE_POSITIVE",
      "IRRELEVANT",
      "VERIFIED"
   ],
   "error":null,
   "has_error":false
}

Get Alert Types

List all possible alert types

Input Field

Choose a connection that you have previously created to complete the connection.

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alert Types Data
{
   "count":15,
   "previous":null,
   "has_error":false,
   "results":[
      {
         "id":1,
         "name":"account information"
      },
      {
         "id":5,
         "name":"outgoing private message"
      },
      {
         "id":6,
         "name":"incoming post"
      },
      {
         "id":7,
         "name":"incoming comment"
      },
      {
         "id":8,
         "name":"incoming private message"
      },
      {
         "id":9,
         "name":"impersonating account"
      },
      {
         "id":14,
         "name":"self post"
      },
      {
         "id":15,
         "name":"impersonating post"
      },
      {
         "id":16,
         "name":"impersonating comment"
      },
      {
         "id":17,
         "name":"self comment"
      },
      {
         "id":19,
         "name":"entity discovery profile"
      },
      {
         "id":20,
         "name":"entity discovery content"
      },
      {
         "id":23,
         "name":"search query"
      },
      {
         "id":24,
         "name":"location"
      },
      {
         "id":25,
         "name":"email"
      }
   ],
   "error":null,
   "next":null
}

Get Alert Type By ID

View an individual Alert Type.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert Type IDJinja-templated alert type ID.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alert Type By ID Data
{
   "id":1,
   "name":"account information",
   "error":null,
   "has_error":false
}

Get Alert By ID

Fetches an alert by ID

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert ID.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Alert By ID Data
{
   "alert":{
      "alert_type":"search query",
      "logs":[
         {
            "id":231318611,
            "timestamp":"2021-09-01T02:35:01+00:00",
            "actor":"ZeroFox Platform Specialist",
            "subject":"",
            "action":"modify tags"
         },
         {
            "id":231318610,
            "timestamp":"2021-09-01T02:35:00+00:00",
            "actor":"",
            "subject":"",
            "action":"open"
         }
      ],
      "offending_content_url":"hxxp://lynette-legalresource-us-canada.info?entity=577730",
      "asset_term":null,
      "assignee":"",
      "entity":{
         "id":577730,
         "name":"Air Canada Web Domains",
         "image":"",
         "labels":[
            
         ],
         "entity_group":{
            "id":4660,
            "name":"Default"
         }
      },
      "entity_term":null,
      "content_created_at":"2017-01-10T11:00:00+00:00",
      "id":150764339,
      "protected_account":null,
      "severity":2,
      "perpetrator":{
         "name":"Concealed",
         "display_name":"Concealed",
         "id":238833658,
         "url":"hxxp://lynette-legalresource-us-canada.info?entity=577730",
         "content":"Variation of protected domain air found: lynette-legalresource-us-canada.info",
         "type":"page",
         "timestamp":"2017-01-10T11:00:00+00:00",
         "network":"domains"
      },
      "rule_group_id":457,
      "asset":{
         "id":577730,
         "name":"Air Canada Web Domains",
         "image":"",
         "labels":[
            
         ],
         "entity_group":{
            "id":4660,
            "name":"Default"
         }
      },
      "metadata":"{\"alert_modal\":{\"a_records\":[\"lynette-legalresource-us-canada.info A 34.102.136.180\"],\"analysis\":1,\"live\":true,\"redirects\":[\"http://lynette-legalresource-us-canada.info\"],\"screenshot\":\"https://cdn.zerofox.com/screenshots/687474703a2f2f6c796e657474652d6c6567616c7265736f757263652d75732d63616e6164612e696e666f/2f/626f64795f73637265656e73686f74_1630463647\",\"whois\":\"Domain Name: LYNETTE-LEGALRESOURCE-US-CANADA.INFO\\nRegistry Domain ID: D503300001201883472-LRMS\\nRegistrar WHOIS Server: whois.godaddy.com\\nRegistrar URL: http://www.godaddy.com\\nUpdated Date: 2021-08-31T22:43:00Z\\nCreation Date: 2021-08-31T22:42:59Z\\nRegistry Expiry Date: 2022-08-31T22:42:59Z\\nRegistrar Registration Expiration Date:\\nRegistrar: GoDaddy.com, LLC\\nRegistrar IANA ID: 146\\nRegistrar Abuse Contact Email: [email protected]\\nRegistrar Abuse Contact Phone: +1.4806242505\\nReseller:\\nDomain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited\\nDomain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited\\nDomain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited\\nDomain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited\\nDomain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited\\nDomain Status: addPeriod https://icann.org/epp#addPeriod\\nRegistrant Organization: LegalShield\\nRegistrant State/Province: California\\nRegistrant Country: US\\nName Server: NS31.DOMAINCONTROL.COM\\nName Server: NS32.DOMAINCONTROL.COM\\nDNSSEC: unsigned\\nURL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/\"},\"alert_reasons\":[{\"key\":{\"text_content\":\"Site Status\"},\"value\":{\"style\":{\"color\":\"#000000\",\"font-weight\":\"bold\"},\"text_content\":\"Live\"}}],\"enrichment\":{\"analysis-message-mapper\":{\"enterpriseID\":4348,\"entityID\":577730,\"images\":[{\"field\":\"content.domain.screenshot\",\"item\":\"https://cdn.zerofox.com/screenshots/687474703a2f2f6c796e657474652d6c6567616c7265736f757263652d75732d63616e6164612e696e666f/2f/626f64795f73637265656e73686f74_1630463647\"}],\"network\":\"domains\",\"relation\":\"search_query\",\"serviceOrigin\":\"go-dm_8\",\"subtype\":\"unspecified\",\"texts\":null,\"type\":\"page\",\"urls\":null},\"form-detection\":{\"hasLoginForms\":false},\"ocr-analysis\":{\"data\":[{\"details\":{\"bounding_boxes\":[],\"confidences\":[],\"height\":600,\"width\":800,\"words\":[]},\"image\":\"https://cdn.zerofox.com/screenshots/687474703a2f2f6c796e657474652d6c6567616c7265736f757263652d75732d63616e6164612e696e666f/2f/626f64795f73637265656e73686f74_1630463647\"}]}},\"image_overlays\":[{\"image_highlights\":[],\"image_url\":\"https://cdn.zerofox.com/screenshots/687474703a2f2f6c796e657474652d6c6567616c7265736f757263652d75732d63616e6164612e696e666f/2f/626f64795f73637265656e73686f74_1630463647\"}],\"occurrences\":[{\"origin\":null,\"term\":\"air\"}]}",
      "status":"Open",
      "timestamp":"2021-09-01T02:35:00+00:00",
      "rule_name":"Advanced Domain Analysis - Substring Match",
      "last_modified":"2021-09-01T02:35:01Z",
      "protected_locations":null,
      "darkweb_term":null,
      "business_network":null,
      "reviewed":false,
      "escalated":false,
      "network":"domains",
      "protected_social_object":null,
      "notes":"",
      "reviews":[
         
      ],
      "content_actions":[
         
      ],
      "rule_id":38162,
      "entity_account":null,
      "entity_email_receiver_id":null,
      "tags":[
         "a-record",
         "live-domain"
      ]
   },
   "error":null,
   "has_error":false
}

Get Reviews for Alert

Lists all of the alert's current reviews.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert ID.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Reviews for Alert Data
{
   "result":[
      {
         "id":208790,
         "label":"DUPLICATE",
         "alert":153498101,
         "created_by":"",
         "timestamp":"2021-10-06T15:09:54Z"
      }
   ],
   "error":null,
   "has_error":false
}

Create Alert Review

Creates a custom, user-defined alert review on the company of the authorized user.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert_id for which review is to be created.Required
Max timestampJinja-templated alert.Required
LabelJinja-templated value of the review.Required
Created ByJinja-templated created By.Optional

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Create Alert Review Data
{
   "result":[
      ....review data
   ],
   "error":null,
   "has_error":false
}

Get Review by ID

Fetches information about a given alerts review.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert ID.Required
Review IDJinja-templated review ID.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Review by ID Data
{
   "result":[
      {
         "id":208790,
         "label":"DUPLICATE",
         "alert":153498101,
         "created_by":"",
         "timestamp":"2021-10-06T15:09:54Z"
      }
   ],
   "error":null,
   "has_error":false
}

Get Subscriptions

List of subscriptions associated with an Alert

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert ID.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Get Subscriptions Data
{
   "error":null,
   "has_error":false
}

Execute Action on Alert

Performs an action on an alert. Redundant actions (defined as actions that do not change alert status) cannot be performed

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja-templated alert ID.Required
ActionJinja-templated action.Required
Request BodyJinja-templated Json request.Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Execute Action on Alert Data
{
   "result":"Successfully executed the action",
   "error":null,
   "has_error":false
}

Create Alert Tag Changeset

Create an Alert Tag Changeset to bulk modify Alert Tags for a set of Alerts.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Request BodyJinja-templated JSON object HTTP payload to create alert tag changeset.
Example: {"changes": [{"alert": 0000000000,"added": ["test"]}]}
Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: Create Alert Tag Changeset Data
{
   "result":[
      ...changeset data
   ],
   "error":null,
   "has_error":false
}

List Alert Tags

Returns available alerts tags.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Enterprise IDJinja-templated enterprise ID.Optional

Output

A JSON object containing multiple rows of result:

  • has_error: True/False
  • error: message/null
  • result: List Alert Tags Data
{
   "reserved_tags":[
      {
         "name":"notags",
         "description":"When included in the list of tags as a parameter to the alerts LIST endpoint, indicates to also return alerts that do not have tags."
      }
   ],
   "tags":[
      {
         "name":"AC owned"
      },
      {
         "name":"Brand Abuse"
      },
      {
         "name":"Connection Error"
      },
      {
         "name":"Fan Site"
      },
      {
         "name":"HR scam"
      },
      {
         "name":"Legal Issue"
      },
      {
         "name":"Parked"
      },
      {
         "name":"Phishing"
      },
      {
         "name":"Redirect"
      },
      {
         "name":"Review"
      },
      {
         "name":"Social Media Unoffical"
      },
      {
         "name":"Telephone Scams"
      },
      {
         "name":"Verification Required"
      },
      {
         "name":"Void"
      },
      {
         "name":"Whitelist"
      },
      {
         "name":"a-record"
      },
      {
         "name":"closed-whitelist"
      },
      {
         "name":"continuous-monitoring"
      },
      {
         "name":"domain-update"
      },
      {
         "name":"live-domain"
      },
      {
         "name":"matching-term"
      },
      {
         "name":"mx-record"
      },
      {
         "name":"parked"
      },
      {
         "name":"parked-domain"
      },
      {
         "name":"phishing"
      },
      {
         "name":"phishing-site"
      },
      {
         "name":"subdomain"
      },
      {
         "name":"test"
      },
      {
         "name":"unusual"
      }
   ],
   "error":null,
   "has_error":false
}

Update the Case Notes

Update the case notes.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Alert IDJinja templated text containing alert IDRequired
NotesJinja templated text containing notesRequired

Output

JSON containing the following items:

{
  "data": {
    "msg": "Updated"
  },
  "error": null,
  "has_error": false
}

Release Notes

  • v2.0.8 - Jinja bug fix for Get Alerts
  • v2.0.0 - Updated architecture to support IO via filesystem
  • v1.2.2 - Added 1 new action: Update the Case Notes and added 2 optional field in Get Alerts action named Last Modified Min Date and Last Modified Max Date.

© 2017-2021 LogicHub®. All Rights Reserved.