id: servfail-refused-hosts

info:
  name: DNS Servfail Host Finder
  author: pdteam
  severity: info
  description: A DNS ServFail error occurred. ServFail errors occur when there is an error communicating with a DNS server. This could have a number of causes, including an error on the DNS server itself, or a temporary networking issue.
  classification:
    cwe-id: CWE-200
  metadata:
    max-request: 1
  tags: dns,takeover,discovery

dns:
  - name: "{{FQDN}}"
    type: A
    matchers:
      - type: word
        words:
          - "SERVFAIL"
          - "REFUSED"
# digest: 4b0a00483046022100fa4ea71003dc0696ee425f6538a7d73d7cde0a8d62f91d8be4a3359b540cd407022100bd437e35deaed7192e0a223cb61201b76d76bc84795495e11d3905c5d7b5883b:922c64590222798bb761d5b6d8e72950