llms.txt
+7 −5
− > Ohey is a threat intelligence feed of malicious domains and IP addresses for blocking and detection. Every host is checked by our scanner, sandbox, contract monitor or analysts before it goes into the feed, and every host we take out gets a dated reason. The feed is delivered as STIX 2.1 over TAXII 2.1, plain-text lists and JSON through the API, which also serves host profiles, captures, a CVE catalog and URL scans. Every page is also served as Markdown with `Accept: text/markdown`.− - [Home](https://ohey.ca/): what is in the feed, removals, licences, the 14-day evaluation and common questions.− - [EtherHiding contract tracker](https://ohey.ca/threats/etherhiding/contracts/): each contract's current destinations and history.− - [Pricing](https://ohey.ca/pricing/): research seats, blocklists, the full feed and redistribution, monthly or annual.− - [Contact](https://ohey.ca/contact/): 14-day feed evaluations and API access.+ > Ohey is a threat intelligence feed of malicious domains and IP addresses for blocking and detection. Every host is checked by our scanner, sandbox, contract monitor or analysts before it goes into the feed, and every host we take out gets a dated reason. The feed is delivered as STIX 2.1 over TAXII 2.1, plain-text lists, an RPZ zone by zone transfer or HTTPS, and JSON through the API, which also serves host profiles, captures, a CVE catalog and URL scans. Every page is also served as Markdown + - [Home](https://ohey.ca/): what is in the feed, removals, licences, the 14-day trial and common questions.+ - [Watering holes](https://ohey.ca/threats/watering-holes/): scripts that hold a WebSocket open from each visitor's browser to a controller and run the code it sends.+ - [EtherHiding contract tracker](https://ohey.ca/threats/etherhiding/contracts/): each contract's current destinations and history, and the DNS TXT names some kits read instead of a contract.+ - [Pricing](https://ohey.ca/pricing/): blocklists, the full feed and redistribution, monthly or annual.+ - [Trial](https://ohey.ca/trial/): request a free 14-day trial of Blocklists or the full feed.+ - [Contact](https://ohey.ca/contact/): questions about the feed, licences, pricing and research.