category: Data Enrichment & Threat Intelligence
provider: OpenPhish
commonfields:
  id: OpenPhish_v2
  version: -1
configuration:
- defaultvalue: 'false'
  display: Use HTTPS connection
  name: https
  type: 8
  required: false
- display: Database refresh interval (hours)
  name: fetchIntervalHours
  defaultvalue: 1
  type: 0
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: C - Fairly reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  type: 15
  required: false
- defaultvalue: indicatorType
  name: feedExpirationPolicy
  display: ''
  options:
  - never
  - interval
  - indicatorType
  - suddenDeath
  type: 17
  required: false
- defaultvalue: '20160'
  name: feedExpirationInterval
  display: ''
  type: 1
  required: false
description: OpenPhish uses proprietary Artificial Intelligence algorithms to automatically identify zero-day phishing sites and provide comprehensive, actionable, real-time threat intelligence.
name: OpenPhish_v2
display: OpenPhish v2
script:
  dockerimage: demisto/python3:3.12.13.10116658
  commands:
  - name: url
    arguments:
    - name: url
      isArray: true
      required: true
      default: true
      description: URL to check.
    outputs:
    - contextPath: URL.Data
      description: The URL.
    - contextPath: URL.Malicious.Vendor
      description: The vendor reporting the URL as malicious.
    - contextPath: URL.Malicious.Description
      description: A description of the malicious URL.
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
    - contextPath: DBotScore.Type
      description: The indicator type.
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
    - contextPath: DBotScore.Score
      description: The actual score.
    description: Checks the reputation of a URL.
  - name: openphish-reload
    arguments: []
    description: Reload OpenPhish database.
  - name: openphish-status
    arguments: []
    description: Show OpenPhish database status.
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- No test