{"service":"Zedmos CTI","version":"0.1.0","generated_at":"2026-04-29T23:44:01.881Z","iocs":{"total":502774,"domain":307683,"ip":189628,"cidr":4496,"ja3":0,"ja4":0},"feeds":{"total":49,"enabled":37,"http":37,"last_ok":34,"failing":3},"review_queue":{"pending":2898577,"by_reason":[{"reason":"root_domain_protected","count":2635184},{"reason":"allowlist_match","count":254730},{"reason":"cloud_provider_range","count":8663}]},"allowlist":{"size":33944,"by_source":[{"source":"tranco","count":16720},{"source":"cloud_provider","count":13507},{"source":"umbrella","count":3703},{"source":"seed","count":14}]},"tokens":{"active":2},"sightings":{"total":4},"mitre_attack":{"objects":30649,"taxii_collection":"att-and-ck"},"taxii":{"collections_total":16,"version":"2.1","media_type":"application/taxii+json;version=2.1"},"formats_supported":["plain","suricata","pihole","opnsense","mikrotik","unbound-rpz","stix-2.1","taxii-2.1","misp"],"distribution":{"snapshots":82,"total_lines":2143325,"total_bytes":53800498,"last_built_at":"2026-04-29T23:39:31.936Z","items":[{"category":"compromised","kind":"security","type":"domains","bytes":95,"last_built_at":"2026-04-29T22:38:58.324Z","line_count":3},{"type":"domains","category":"compromised","kind":"security","bytes":28,"last_built_at":"2026-04-29T23:39:31.698Z","line_count":1},{"type":"domains","category":"compromised","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.700Z","line_count":0},{"type":"domains","category":"compromised","kind":"security","bytes":67,"last_built_at":"2026-04-29T23:39:31.702Z","line_count":2},{"type":"domains","category":"compromised","kind":"security","bytes":28,"last_built_at":"2026-04-29T23:39:31.705Z","line_count":1},{"type":"domains","category":"dynamic_dns","kind":"security","bytes":139,"last_built_at":"2026-04-29T22:38:58.336Z","line_count":9},{"type":"domains","category":"dynamic_dns","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.725Z","line_count":0},{"type":"domains","category":"dynamic_dns","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.727Z","line_count":0},{"type":"domains","category":"dynamic_dns","kind":"security","bytes":139,"last_built_at":"2026-04-29T23:39:31.729Z","line_count":9},{"type":"domains","category":"dynamic_dns","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.732Z","line_count":0},{"type":"domains","category":"hacking","kind":"security","bytes":95,"last_built_at":"2026-04-29T22:38:58.321Z","line_count":3},{"type":"domains","category":"hacking","kind":"security","bytes":28,"last_built_at":"2026-04-29T23:39:31.687Z","line_count":1},{"type":"domains","category":"hacking","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.689Z","line_count":0},{"type":"domains","category":"hacking","kind":"security","bytes":67,"last_built_at":"2026-04-29T23:39:31.692Z","line_count":2},{"type":"domains","category":"hacking","kind":"security","bytes":28,"last_built_at":"2026-04-29T23:39:31.695Z","line_count":1},{"type":"domains","category":"malware_virus","kind":"security","bytes":2191253,"last_built_at":"2026-04-29T22:38:55.936Z","line_count":82863},{"type":"domains","category":"malware_virus","kind":"security","bytes":2044004,"last_built_at":"2026-04-29T23:39:23.283Z","line_count":76797},{"type":"domains","category":"malware_virus","kind":"security","bytes":40413,"last_built_at":"2026-04-29T23:39:23.325Z","line_count":1305},{"type":"domains","category":"malware_virus","kind":"security","bytes":106836,"last_built_at":"2026-04-29T23:39:23.434Z","line_count":4761},{"type":"domains","category":"malware_virus","kind":"security","bytes":2084417,"last_built_at":"2026-04-29T23:39:25.339Z","line_count":78102},{"category":"phishing","kind":"security","type":"domains","bytes":5779013,"last_built_at":"2026-04-29T22:38:58.315Z","line_count":200733},{"type":"domains","category":"phishing","kind":"security","bytes":2046717,"last_built_at":"2026-04-29T23:39:27.400Z","line_count":76977},{"type":"domains","category":"phishing","kind":"security","bytes":40413,"last_built_at":"2026-04-29T23:39:27.449Z","line_count":1305},{"type":"domains","category":"phishing","kind":"security","bytes":3691883,"last_built_at":"2026-04-29T23:39:29.618Z","line_count":122451},{"type":"domains","kind":"security","category":"phishing","bytes":2087130,"last_built_at":"2026-04-29T23:39:31.681Z","line_count":78282},{"category":"recent_outbreaks","kind":"security","type":"domains","bytes":13359,"last_built_at":"2026-04-29T22:38:55.951Z","line_count":474},{"type":"domains","category":"recent_outbreaks","kind":"security","bytes":13101,"last_built_at":"2026-04-29T23:39:25.363Z","line_count":460},{"type":"domains","category":"recent_outbreaks","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:25.366Z","line_count":0},{"type":"domains","category":"recent_outbreaks","kind":"security","bytes":258,"last_built_at":"2026-04-29T23:39:25.370Z","line_count":14},{"type":"domains","category":"recent_outbreaks","kind":"security","bytes":13101,"last_built_at":"2026-04-29T23:39:25.387Z","line_count":460},{"category":"spam","kind":"security","type":"domains","bytes":2631,"last_built_at":"2026-04-29T22:38:58.333Z","line_count":188},{"type":"domains","category":"spam","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.707Z","line_count":0},{"type":"domains","category":"spam","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.709Z","line_count":0},{"type":"domains","category":"spam","kind":"security","bytes":2631,"last_built_at":"2026-04-29T23:39:31.719Z","line_count":188},{"type":"domains","category":"spam","kind":"security","bytes":0,"last_built_at":"2026-04-29T23:39:31.722Z","line_count":0},{"type":"domains","category":"turkish_usom","kind":"security","bytes":2600386,"last_built_at":"2026-04-29T22:38:54.294Z","line_count":102709},{"type":"domains","kind":"security","category":"turkish_usom","bytes":28484,"last_built_at":"2026-04-29T23:39:17.270Z","line_count":1152},{"type":"domains","kind":"security","category":"turkish_usom","bytes":2571902,"last_built_at":"2026-04-29T23:39:19.312Z","line_count":101557},{"type":"domains","kind":"security","category":"turkish_usom","bytes":0,"last_built_at":"2026-04-29T23:39:19.318Z","line_count":0},{"type":"domains","category":"turkish_usom","kind":"security","bytes":2600386,"last_built_at":"2026-04-29T23:39:21.334Z","line_count":102709},{"type":"domains","kind":"ti","category":"botnet_cc","bytes":78315,"last_built_at":"2026-04-29T22:38:58.421Z","line_count":3755},{"type":"domains","category":"botnet_cc","kind":"ti","bytes":4163,"last_built_at":"2026-04-29T23:39:31.821Z","line_count":203},{"type":"domains","kind":"ti","category":"botnet_cc","bytes":0,"last_built_at":"2026-04-29T23:39:31.824Z","line_count":0},{"type":"domains","kind":"ti","category":"botnet_cc","bytes":74152,"last_built_at":"2026-04-29T23:39:31.921Z","line_count":3552},{"type":"domains","kind":"ti","category":"botnet_cc","bytes":4163,"last_built_at":"2026-04-29T23:39:31.936Z","line_count":203},{"category":"botnet_cc","kind":"ti","type":"ips","bytes":111742,"last_built_at":"2026-04-29T22:38:46.220Z","line_count":7873},{"kind":"ti","category":"botnet_cc","type":"ips","bytes":6970,"last_built_at":"2026-04-29T23:38:58.956Z","line_count":494},{"category":"botnet_cc","kind":"ti","type":"ips","bytes":0,"last_built_at":"2026-04-29T23:38:58.967Z","line_count":0},{"category":"botnet_cc","kind":"ti","type":"ips","bytes":104772,"last_built_at":"2026-04-29T23:39:00.690Z","line_count":7379},{"kind":"ti","type":"ips","category":"botnet_cc","bytes":6970,"last_built_at":"2026-04-29T23:39:00.723Z","line_count":494},{"type":"ips","kind":"ti","category":"compromised","bytes":4731,"last_built_at":"2026-04-29T22:38:48.487Z","line_count":335},{"kind":"ti","category":"compromised","type":"ips","bytes":4731,"last_built_at":"2026-04-29T23:39:06.809Z","line_count":335},{"kind":"ti","category":"compromised","type":"ips","bytes":0,"last_built_at":"2026-04-29T23:39:06.813Z","line_count":0},{"kind":"ti","category":"compromised","type":"ips","bytes":0,"last_built_at":"2026-04-29T23:39:06.816Z","line_count":0},{"kind":"ti","category":"compromised","type":"ips","bytes":4731,"last_built_at":"2026-04-29T23:39:06.830Z","line_count":335},{"type":"domains","kind":"ti","category":"keyloggers","bytes":0,"last_built_at":"2026-04-29T23:39:17.227Z","line_count":0},{"type":"domains","kind":"ti","category":"keyloggers","bytes":0,"last_built_at":"2026-04-29T23:39:17.230Z","line_count":0},{"type":"domains","kind":"ti","category":"keyloggers","bytes":0,"last_built_at":"2026-04-29T23:39:17.232Z","line_count":0},{"type":"domains","kind":"ti","category":"keyloggers","bytes":0,"last_built_at":"2026-04-29T23:39:17.234Z","line_count":0},{"category":"malware_virus","kind":"ti","type":"domains","bytes":2191253,"last_built_at":"2026-04-29T22:38:50.211Z","line_count":82863},{"kind":"ti","category":"malware_virus","type":"domains","bytes":2044004,"last_built_at":"2026-04-29T23:39:08.805Z","line_count":76797},{"kind":"ti","category":"malware_virus","type":"domains","bytes":40413,"last_built_at":"2026-04-29T23:39:08.845Z","line_count":1305},{"kind":"ti","category":"malware_virus","type":"domains","bytes":106836,"last_built_at":"2026-04-29T23:39:08.965Z","line_count":4761},{"kind":"ti","category":"malware_virus","type":"domains","bytes":2084417,"last_built_at":"2026-04-29T23:39:10.963Z","line_count":78102},{"type":"ips","category":"malware_virus","kind":"ti","bytes":2448481,"last_built_at":"2026-04-29T22:38:48.474Z","line_count":169152},{"kind":"ti","type":"ips","category":"malware_virus","bytes":300432,"last_built_at":"2026-04-29T23:39:02.516Z","line_count":20980},{"category":"malware_virus","kind":"ti","type":"ips","bytes":843,"last_built_at":"2026-04-29T23:39:02.525Z","line_count":54},{"category":"malware_virus","kind":"ti","type":"ips","bytes":2147206,"last_built_at":"2026-04-29T23:39:04.892Z","line_count":148118},{"kind":"ti","category":"malware_virus","type":"ips","bytes":301275,"last_built_at":"2026-04-29T23:39:06.792Z","line_count":21034},{"type":"sha256","category":"malware_virus","kind":"ti","bytes":62855,"last_built_at":"2026-04-29T23:39:31.763Z","line_count":967},{"type":"sha256","category":"malware_virus","kind":"ti","bytes":0,"last_built_at":"2026-04-29T23:39:31.768Z","line_count":0},{"type":"sha256","category":"malware_virus","kind":"ti","bytes":0,"last_built_at":"2026-04-29T23:39:31.771Z","line_count":0},{"type":"sha256","category":"malware_virus","kind":"ti","bytes":62855,"last_built_at":"2026-04-29T23:39:31.808Z","line_count":967},{"category":"phishing","kind":"ti","type":"domains","bytes":5779013,"last_built_at":"2026-04-29T22:38:52.506Z","line_count":200733},{"kind":"ti","category":"phishing","type":"domains","bytes":2046717,"last_built_at":"2026-04-29T23:39:12.952Z","line_count":76977},{"kind":"ti","category":"phishing","type":"domains","bytes":40413,"last_built_at":"2026-04-29T23:39:12.991Z","line_count":1305},{"kind":"ti","category":"phishing","type":"domains","bytes":3691883,"last_built_at":"2026-04-29T23:39:15.208Z","line_count":122451},{"kind":"ti","category":"phishing","type":"domains","bytes":2087130,"last_built_at":"2026-04-29T23:39:17.212Z","line_count":78282},{"type":"domains","kind":"ti","category":"spyware_adware","bytes":0,"last_built_at":"2026-04-29T23:39:17.217Z","line_count":0},{"type":"domains","kind":"ti","category":"spyware_adware","bytes":0,"last_built_at":"2026-04-29T23:39:17.220Z","line_count":0},{"type":"domains","kind":"ti","category":"spyware_adware","bytes":0,"last_built_at":"2026-04-29T23:39:17.222Z","line_count":0},{"type":"domains","kind":"ti","category":"spyware_adware","bytes":0,"last_built_at":"2026-04-29T23:39:17.225Z","line_count":0}]},"categories_top":[{"name":"malware_virus","count":252982},{"name":"phishing","count":205027},{"name":"turkish_usom","count":116369},{"name":"botnet_cc","count":11628},{"name":"recent_outbreaks","count":474},{"name":"compromised","count":338},{"name":"spam","count":188},{"name":"dynamic_dns","count":9},{"name":"hacking","count":3}],"types":[{"type":"domain","count":307683},{"type":"cidr","count":4496},{"type":"sha256","count":967},{"type":"ip","count":189628}]}