Update elasticbeantalk-takeover-detection.yaml

2021-09-14 16:59:42 +05:30 · 2021-09-14 16:59:42 +05:30 · 81fbbf0280
parent d38052f05a
commit 81fbbf0280
1 changed files with 6 additions and 2 deletions
--- a/dns/elasticbeantalk-takeover-detection.yaml
+++ b/dns/elasticbeantalk-takeover-detection.yaml
@ -25,17 +25,21 @@ dns:
    class: inet
    recursion: true
    retries: 3
+
    matchers-condition: and
    matchers:
+
      - type: regex
        name: elasticbeanstalk
        regex:
          # Only CNAMEs with region specification are hijackable.
          - \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
        condition: or
+
      - type: word
        words:
          - "NXDOMAIN"
+
    extractors:
      - type: regex
        group: 1