pussl3.com
The entire domain.
You can see an example of it being used by going to
https://kickass.cd/
and clicking in the search box. A popup is given which first has a URL at the pussl3.com domain, which redirects to one of many often-maliciously-behaving persistent ads/sites. They always start at pussl3.com though.