Pgl Yoyo
Open Source Threat Intel
Infrastructure & Attack Surface Visibility
概要
PGL Yoyo connector imports Peter Lowe's ad/tracking blocklists into OpenCTI as STIX 2.1 Indicators for IPv4 addresses and domain names.
Peter Lowe (PGL / yoyo.org) maintains curated blocklists of ad-serving, tracking, and malicious domains and IP addresses. This connector imports PGL blocklists into OpenCTI and transforms entries into STIX 2.1 Indicators for IPv4 addresses and domain names.
Key features: • Parses plain-text feeds and emits canonical STIX 2.1 Indicator patterns • Supports both IPv4 and Domain-Name indicator types • Input sanitization and validation before emission • Configurable multiple feeds with custom labels • Scheduled imports with configurable interval