Pgl Yoyo
Supported by community
Infrastructure & Attack Surface Visibility
Overview
PGL Yoyo connector imports Peter Lowe's ad/tracking blocklists into OpenCTI as STIX 2.1 Indicators for IPv4 addresses and domain names.
Peter Lowe (PGL / yoyo.org) maintains curated blocklists of ad-serving, tracking, and malicious domains and IP addresses. This connector imports PGL blocklists into OpenCTI and transforms entries into STIX 2.1 Indicators for IPv4 addresses and domain names.
Key features:
- Parses plain-text feeds and emits canonical STIX 2.1 Indicator patterns
- Supports both IPv4 and Domain-Name indicator types
- Input sanitization and validation before emission
- Configurable multiple feeds with custom labels
- Scheduled imports with configurable interval