[urls]
guid = everyone
feed = 'http://data.phishtank.com/data/XXXXXXXXXXXXXXXXXXXXXXXXXXXX INSERT YOUR KEY HERE XXXXXXXXXXXXXXXXXXXXXX/online-valid.json.gz'
parser = json
assessment = 'phishing'
source = 'phishtank.com'
fields = 'submission_time,url,target,phish_detail_url'
fields_map = 'detecttime,url,description,alternativeid'
severity = 'medium'
confidence = 85
restriction = 'need-to-know'
alternativeid_restriction = 'public'
mirror = /tmp