U @6^% @s8ddlZddlZddlmZmZmZGdddeZdS)N) SpiderFootSpiderFootPluginSpiderFootEventc@sNeZdZdZiZiZdZdZefddZ ddZ dd Z d d Z d d Z dS) sfp_emailrepzgEmailRep:Footprint,Investigate,Passive:Search Engines::Search EmailRep.io for email address reputation.NFcCs:||_||_d|_t|D]}|||j|<q"dS)NF)sf tempStorageresults errorStatelistkeysopts)selfsfcuserOptsoptr7/var/www/spiderfoot.crq.systems/modules/sfp_emailrep.pysetups  zsfp_emailrep.setupcCsdgS)N EMAILADDRrr rrr watchedEvents%szsfp_emailrep.watchedEventscCs dddgS)N RAW_RIR_DATAEMAILADDR_COMPROMISEDMALICIOUS_EMAILADDRrrrrrproducedEvents(szsfp_emailrep.producedEventsc Cs|jjd|d|jdd}td|ddkr6dS|ddkrZ|jd d d |_dS|dd kr~|jd d d |_dS|ddkr|jd|dd d |_dSzt|d}Wn<t k r}z|j dt |WYdSd}~XYnX|S)Nzhttps://emailrep.io/Zcurl _fetchtimeout) useragenttimeoutcontentcode400zAPI error: Bad requestFT429zAPI error: Too Many Requests200z#Unexpected reply from EmailRep.io: z Error processing JSON response: ) rfetchUrlr timesleeperrorr jsonloads BaseExceptiondebugstr)r qryresdataerrrquery,s2      zsfp_emailrep.queryc Cs|j}|j}|j}||jkr dSd|j|<|jd|d|||}|dkrXdStdt||j |}| || d}|sdS| d}|rtd|d|j |}| || d } | rtd d |d |j |}| |dS) NTzReceived event, z, from rdetailscredentials_leakedrz [Unknown]malicious_activityrz EmailRep []) eventTypemoduler/rrr+r1rr,__name__notifyListenersget) r event eventName srcModuleName eventDatar.evtr2r3r4rrr handleEventNs.        zsfp_emailrep.handleEvent)r8 __module__ __qualname____doc__r optdescsrr dictrrrr1r@rrrrrs"r)r(r%sflibrrrrrrrr s