{"version":1,"generated_at":"2026-11-06T18:00:23Z","daily":{"days":31,"dates":["2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-05","2026-11-06"],"total":[208,184,120,68,88,163,118,210,136,163,98,87,240,1539,1845,151,244,372,71,184,170,221,181,162,70,82,226,358,253,399,414],"types":{"url":[81,82,50,29,43,55,52,91,51,73,44,33,99,749,234,70,113,177,28,72,66,97,78,63,29,36,96,65,73,168,193],"domain":[75,64,38,27,33,41,34,71,38,43,31,30,84,731,205,41,87,170,18,52,43,73,50,47,20,30,83,47,52,149,184],"ip":[32,23,13,4,10,39,13,30,36,27,15,19,40,32,1366,24,19,15,13,41,19,18,25,37,15,7,15,215,39,39,20],"sha256":[18,10,15,8,2,27,15,17,10,18,8,5,15,20,29,14,22,7,4,19,30,20,25,10,4,9,29,27,87,28,15],"md5":[2,5,4,0,0,1,4,1,1,2,0,0,2,7,11,2,3,3,8,0,12,13,3,5,2,0,3,4,2,15,2]}},"movers":{"current_range":["2026-10-31","2026-11-06"],"previous_range":["2026-10-24","2026-10-30"],"tags":[{"tag":"phishing","count":818,"previous":364,"delta":454,"pct":124.7},{"tag":"malware","count":131,"previous":448,"delta":-317,"pct":-70.8},{"tag":"malvertising","count":0,"previous":290,"delta":-290,"pct":-100.0},{"tag":"cryptoscam","count":69,"previous":8,"delta":61,"pct":762.5},{"tag":"dprk","count":0,"previous":18,"delta":-18,"pct":-100.0},{"tag":"apt","count":20,"previous":6,"delta":14,"pct":233.3},{"tag":"c2","count":47,"previous":33,"delta":14,"pct":42.4},{"tag":"clickfix","count":72,"previous":58,"delta":14,"pct":24.1},{"tag":"stealer","count":14,"previous":0,"delta":14,"pct":null},{"tag":"php2shell","count":0,"previous":9,"delta":-9,"pct":-100.0},{"tag":"aitm","count":8,"previous":0,"delta":8,"pct":null},{"tag":"android","count":5,"previous":13,"delta":-8,"pct":-61.5}]},"tlds":{"window":"month","domains_total":2691,"top":[{"tld":"com","count":1451},{"tld":"top","count":155},{"tld":"cyou","count":150},{"tld":"cn","count":95},{"tld":"shop","count":70},{"tld":"net","count":64},{"tld":"dev","count":55},{"tld":"org","count":55},{"tld":"info","count":40},{"tld":"app","count":38}],"other":518},"novelty":{"window":"week","distinct_values":1768,"new":1707,"recurring":61,"pct_new":96.5},"producers":{"window_7d":{"total":1802,"active_producers":63,"top":[{"user":"Malwarehunterr","count":594,"share":0.3296},{"user":"LandscapeThreat","count":232,"share":0.1287},{"user":"smica83","count":126,"share":0.0699},{"user":"masaomi346","count":103,"share":0.0572},{"user":"TheM3gatr0n","count":82,"share":0.0455},{"user":"skocherhan","count":56,"share":0.0311},{"user":"malwrhunterteam","count":52,"share":0.0289},{"user":"Fact_Finder03","count":40,"share":0.0222},{"user":"TKemmerling","count":34,"share":0.0189},{"user":"PhishStats","count":33,"share":0.0183}],"top2_share":0.4584,"bus_factor_50":3},"window_30d":{"total":8825,"active_producers":126,"top":[{"user":"Malwarehunterr","count":2574,"share":0.2917},{"user":"teamcymru_S2","count":1438,"share":0.1629},{"user":"smica83","count":573,"share":0.0649},{"user":"masaomi346","count":551,"share":0.0624},{"user":"skocherhan","count":460,"share":0.0521},{"user":"malwrhunterteam","count":312,"share":0.0354},{"user":"LandscapeThreat","count":252,"share":0.0286},{"user":"TheM3gatr0n","count":185,"share":0.021},{"user":"TKemmerling","count":150,"share":0.017},{"user":"PhishStats","count":148,"share":0.0168}],"top2_share":0.4546,"bus_factor_50":3}}}