id: filter-wildcard

info:
  name: Wildcard Filter
  author: mzack9999
  severity: informative

dns:
  - name: "0831058744.{{FQDN}}"  # Random prefix
    type: A
    class: inet
    recursion: true
    retries: 3
    matchers:
      - type: word
        words:
          - "NXDOMAIN"
          - "SERVFAIL"
          - "REFUSED"