Skip to content

Netcraft#

README

Netcraft Takedown#

This responder sends observables to Netcraft Takedown service.

Requirements#

One need to request API-key from Netcraft Contact form.

Configuration#

  • api_key : Netcraft Takedown API-key
  • takedown_url: Netcraft Takedown URL (default: https://takedown.netcraft.com/authorise.php)

Official documenation#

Official API documentation: Netcraft site.

Netcraft_TakedownPhishingURL#

Author: Keijo Korte - @korteke
License: AGPL-V3
Version: 1.0
Supported data types:
- thehive:case_artifact
Registration required: True
Subscription required: True
Free subscription: False
Third party service: https://www.netcraft.com/cybercrime/countermeasures/

Description#

Submit URL to Netcraft's Takedown API.

Configuration#

api_key Netcraft Takedown API key
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
username Netcraft Takedown Username
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
password Netcraft Takedown Password
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
useUserPass Use User and Password authentication
Default value if not configured N/A
Type of the configuration item boolean
The configuration item can contain multiple values False
Is required None
takedown_url Netcraft Takedown URL
Default value if not configured https://takedown.netcraft.com/authorise.php
Type of the configuration item string
The configuration item can contain multiple values False
Is required True