Skip to content

Netcraft#

README

Netcraft Takedown#

This responder sends observables to Netcraft Takedown service.

Requirements#

One need to request API-key from Netcraft Contact form.

Configuration#

  • api_key : Netcraft Takedown API-key
  • takedown_url: Netcraft Takedown URL (default: https://takedown.netcraft.com/authorise.php)

Official documenation#

Official API documentation: Netcraft site.

Netcraft_TakedownPhishingURL#

Author: Keijo Korte - @korteke
License: AGPL-V3
Version: 1.0
Supported data types:
- thehive:case_artifact
Registration required: True
Subscription required: True
Free subscription: False
Third party service: https://www.netcraft.com/cybercrime/countermeasures/

Description#

Submit URL to Netcraft's Takedown API.

Configuration#

api_key Netcraft Takedown API key
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
username Netcraft Takedown Username
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
password Netcraft Takedown Password
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
useUserPass Use User and Password authentication
Default value if not configured False
Type of the configuration item boolean
The configuration item can contain multiple values False
Is required True
takedown_url Netcraft Takedown URL
Default value if not configured https://takedown.netcraft.com/authorise.php
Type of the configuration item string
The configuration item can contain multiple values False
Is required True