Which below listed statements are true

Session IDs stored in cookies are secure against theft through cross$-$site scripting attacks.

The cross$-$site request forgery $($CSRF$)$ attack can be countered if the web browser sends all cookies it has matching a domain to a corresponding web server.

In a DNS rebinding attack, an attacker first convinces the victim's browser to request a resource from a specific domain.

Reasons to attack a computer system through its web service usually do not include sending out spam, denial of service or infecting with malware.