category: Data Enrichment & Threat Intelligence
provider: Open Source
sectionorder:
- Connect
- Collect
commonfields:
  id: PhishTank V2
  version: -1
configuration:
- display: Username
  section: Connect
  name: username
  type: 0
- defaultvalue: 'false'
  section: Connect
  display: Use HTTPS connection
  name: use_https
  type: 8
  required: false
- additionalinfo: Reliability of the source providing the intelligence data.
  section: Collect
  defaultvalue: C - Fairly reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: true
  type: 15
- defaultvalue: '1'
  display: Database refresh interval (number of hours to wait between each loading)
  name: fetchIntervalHours
  section: Collect
  type: 0
  required: false
- display: Use system proxy settings
  section: Connect
  name: proxy
  type: 8
  required: false
- display: Trust any certificate (not secure)
  section: Connect
  name: insecure
  type: 8
  required: false
description: PhishTank is a free community site where anyone can submit, verify, track, and share phishing data.
display: PhishTank v2
name: PhishTank V2
script:
  commands:
  - arguments:
    - default: true
      defaultValue: ""
      description: A comma-separated list of URLs to check the reputation of.
      isArray: true
      name: url
      required: true
    description: Checks the reputation of the supplied URLs.
    name: url
    outputs:
    - contextPath: URL.Data
      description: A list of URLs with a bad reputation.
      type: String
    - contextPath: URL.Malicious.Vendor
      description: For malicious URLs, the vendor that tagged the URL as malicious.
      type: String
    - contextPath: URL.Malicious.Description
      description: For malicious URLs, the reason the vendor tagged the URL as malicious.
      type: String
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: String
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: String
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: String
    - contextPath: DBotScore.Score
      description: The actual score.
      type: Number
    - contextPath: DBotScore.Reliability
      description: Reliability of the source providing the intelligence data.
      type: String
  - description: Reloads the PhishTank downloadable database. PhishTank database is an up to date phishing detection file (updated hourly) .
    name: phishtank-reload
  - description: Shows the status (timestamp) of the last time that PhishTank database was loaded.
    name: phishtank-status
  dockerimage: demisto/python3:3.12.13.10325753
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests
fromversion: 5.0.0