{
  "type": "bundle",
  "id": "bundle--ff3a3b41-0eb5-4440-9914-16641eec9ded",
  "spec_version": "2.1",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "h0sint.com",
      "identity_class": "system",
      "description": "External attack surface target: h0sint.com"
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--ad60e006-502f-4e48-a0a7-433b9a4f0de9",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "h0sint.com",
      "x_footprint_port": "80",
      "x_footprint_banner": ""
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--6f197c2a-e833-42f1-b3fe-7c1fab0b83a9",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "h0sint.com",
      "x_footprint_port": "443",
      "x_footprint_banner": ""
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--1763b8b3-4770-4d45-946f-ee89c3a085f2",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "tease.h0sint.com",
      "x_footprint_port": "80",
      "x_footprint_banner": ""
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--1ad09e7f-e177-4f60-99a1-ea36e3f581af",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "tease.h0sint.com",
      "x_footprint_port": "443",
      "x_footprint_banner": ""
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--6e035276-fb01-47a2-beb6-8cd5a6fdc627",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "try.h0sint.com",
      "x_footprint_port": "80",
      "x_footprint_banner": ""
    },
    {
      "type": "observed-data",
      "spec_version": "2.1",
      "id": "observed-data--a32f547c-dcca-45ff-b5aa-f73968fbd11c",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "first_observed": "2026-08-06T13:06:24.000Z",
      "last_observed": "2026-08-06T13:06:24.000Z",
      "number_observed": 1,
      "object_refs": [
        "identity--17220b75-21b5-4a0a-8d54-c5ea6120b318"
      ],
      "x_footprint_host": "try.h0sint.com",
      "x_footprint_port": "443",
      "x_footprint_banner": ""
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--8ccd6bd2-ac28-4eaf-bac8-7a9727246fc5",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Finding: newsletters",
      "description": "Security finding detected by newsletters module",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1190",
          "url": "https://attack.mitre.org/techniques/T1190"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--4284948c-6da1-4500-a7b2-1c33c8d37ec4",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Finding: nuclei",
      "description": "Security finding detected by nuclei module",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1190",
          "url": "https://attack.mitre.org/techniques/T1190"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74131c9b-d115-4981-861f-704affdaa22e",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Missing Subresource Integrity (missing-sri)",
      "description": "Missing Subresource Integrity (missing-sri)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94a91216-534d-410b-bbe4-e63b48d7bed5",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Github Workflow Disclosure (github-workflows-disclosure)",
      "description": "Github Workflow Disclosure (github-workflows-disclosure)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "medium",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25d11e81-e25f-44df-bc3a-3f6411eb9cbe",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Dockerfile - Detect (dockerfile-hidden-disclosure)",
      "description": "Dockerfile - Detect (dockerfile-hidden-disclosure)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "medium",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afd4ee50-669f-480d-9462-516c2bc96270",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Email Extractor (email-extractor)",
      "description": "Email Extractor (email-extractor)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91822d51-6195-4333-a33f-85e58d5e5f80",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "README.md file disclosure (readme-md)",
      "description": "README.md file disclosure (readme-md)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b13e610-2f7e-4f4e-8872-874afa87df79",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "RDAP WHOIS (rdap-whois)",
      "description": "RDAP WHOIS (rdap-whois)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64ca62fa-23a2-462e-879d-e8130550aea7",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Google Apps (mx-service-detector)",
      "description": "Google Apps (mx-service-detector)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d97be98e-7a4c-4c37-bec2-6d93f3b452b3",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "NPM package.json Disclosure (package-json)",
      "description": "NPM package.json Disclosure (package-json)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb26a706-9e3b-4e8d-a1f4-206735b42b89",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "Finding",
      "description": "Finding",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22bc341d-62ba-4832-9105-a14f1ca5ea85",
      "created": "2026-08-06T13:06:24.000Z",
      "modified": "2026-08-06T13:06:24.000Z",
      "name": "security.txt File (security-txt)",
      "description": "security.txt File (security-txt)",
      "indicator_types": [
        "anomalous-activity"
      ],
      "pattern_type": "stix",
      "pattern": "[x-footprint:domain = 'h0sint.com']",
      "valid_from": "2026-08-06T13:06:24.000Z",
      "x_footprint_severity": "low",
      "x_footprint_category": "Finding"
    }
  ]
}