commonfields: id: Email Hippo version: -1 name: Email Hippo display: Email Hippo category: Data Enrichment & Threat Intelligence provider: EmailHippo description: "This is the Email Hippo integration used to verify email sources as fake emails that were used as part of phishing attacks." configuration: - section: Connect display: MORE Server URL (e.g., https://api.hippoapi.com) name: more_server_url defaultvalue: https://api.hippoapi.com type: 0 required: true - section: Connect display: Email Hippo WHOIS Server URL (e.g., https://api.whoishippo.com) name: whois_server_url defaultvalue: https://api.whoishippo.com type: 0 required: true - section: Connect display: '' displaypassword: MORE API Key name: more_credentials type: 9 required: true hiddenusername: true - section: Connect display: '' displaypassword: WHOIS API Key name: whois_credentials type: 9 required: true hiddenusername: true - section: Collect display: Source Reliability name: integrationReliability defaultvalue: C - Fairly reliable type: 15 required: false options: - A+ - 3rd party enrichment - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged additionalinfo: Reliability of the source providing the intelligence data. - section: Collect display: Create relationships name: create_relationships defaultvalue: 'true' type: 8 required: false additionalinfo: Create relationships between indicators as part of enrichment. - section: Connect advanced: true display: Trust any certificate (not secure) name: insecure type: 8 required: false - section: Connect advanced: true display: Use system proxy settings name: proxy type: 8 required: false script: script: '' type: python commands: - name: email-hippo-email-quota-get outputs: - contextPath: EmailHippo.Quota.quotaUsed description: Total quota used. type: String - contextPath: EmailHippo.Quota.quotaRemaining description: The remaining quota. type: String description: Get the email quota from the API. - name: email arguments: - name: email required: true isArray: true description: A comma-separated list of email addresses to validate. default: true outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String - contextPath: DBotScore.Reliability description: Reliability of the source providing the intelligence data. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: Email.Address description: The email address of the indicator. type: String - contextPath: Email.Domain description: The email domain. type: string - contextPath: EmailHippo.Email.Address description: The email address of the indicator. type: String description: Return email information and reputation. - name: domain arguments: - name: domain required: true isArray: true description: The domain to query (CSV). outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String - contextPath: DBotScore.Reliability description: The reliability score of the vendor. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: Domain.Name description: The name of the domain that was checked. type: String - contextPath: Domain.NameServers description: Name of the servers of the domain. type: String - contextPath: Domain.UpdatedDate description: The date that the domain was last updated. type: Date - contextPath: Domain.CreationDate description: The creation date of the domain. Format is ISO8601 (i.e., '2020-04-30T10:35:00.000Z'). type: Date - contextPath: Domain.Registrar.Name description: The name of the registrar. type: String - contextPath: Domain.Registrar.AbuseEmail description: The email address of the contact for reporting abuse. type: String - contextPath: Domain.Registrar.AbusePhone description: The phone number of the contact for reporting abuse. type: String - contextPath: Domain.Admin.Country description: The country of the domain administrator. type: String - contextPath: Domain.Admin.Email description: The email address of the domain administrator. type: String - contextPath: Domain.Admin.Name description: The name of the domain administrator. type: String - contextPath: Domain.Admin.Phone description: The phone number of the domain administrator. type: String - contextPath: Domain.Tech.Country description: The country of the tech administrator. type: String - contextPath: Domain.Tech.Name description: The name of the tech administrator. type: String - contextPath: Domain.Tech.Email description: The email of the tech administrator. type: String - contextPath: Domain.Tech.Organization description: The organization of the tech administrator. type: String - contextPath: Domain.WHOIS.NameServers description: A CSV string of name servers, for example 'ns1.bla.com, ns2.bla.com'. type: String - contextPath: Domain.WHOIS.CreationDate description: The creation date of the domain. Format is ISO8601 (i.e., '2020-04-30T10:35:00.000Z'). type: Date - contextPath: Domain.WHOIS.UpdatedDate description: The date when the domain was last updated. Format is ISO8601 (i.e., '2020-04-30T10:35:00.000Z'). type: Date - contextPath: Domain.WHOIS.ExpirationDate description: The expiration date of the domain. type: Date description: Returns domain information and reputation. dockerimage: demisto/python3:3.12.13.10116658 runonce: false subtype: python3 fromversion: 6.9.0 tests: - No tests (auto formatted)