OpenPhish identifies phishing sites and performs intelligence analysis in real time without human intervention and without using any external resources, such as blacklists.

Integration with LogicHub

Connecting with OpenPhish

To connect to OpenPhish following details are required:

  • Label: Connection name.

Actions with OpenPhish

URL Scan

Compares URL(s) against OpenPhish's database of domains involved with Phishing. Based off of the results, automate how Incident Response is handled.

Inputs to this Action

  • Connections: Choose a connection that you have created.
  • Column Name: Column name from parent table to lookup value for.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: scans the URL to find the number of phishing matches.
   "matches": [],
   "num_matches": 0,
   "has_error": false,
   "url": "",
   "error": null

Did this page help you?