PhishingInitiative#

README

Phishing-Initiative#

Phishing-Initiative ables any Internet user to help fight against phishing attacks. When reporting us the address of a suspected phishing website, we’ll analyze it and have it blocked in the participating Web browsers.

The analyzer comes in two flavours: lookup and scan. The first search in the database and can be used with basic API access while the second one requires higher profile role.

Requirements#

You need a valid Phishing-Initiative API integration subscription to use the analyzer.

Provide your API key as values for the key parameter.

PhishingInitiative_Lookup#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- url
Registration required: True
Subscription required: True
Free subscription: True
Third party service: https://phishing-initiative.fr/

Description#

Use Phishing Initiative to check if a URL is a verified phishing site.

Configuration#

key	Define the API Key
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

Templates samples for TheHive#

No template samples to display.

PhishingInitiative_Scan#

Author: Remi Pointel
License: AGPL-V3
Version: 1.0
Supported observables types:
- url
Registration required: True
Subscription required: True
Free subscription: False
Third party service: https://phishing-initiative.fr/