id: worksites-takeover info: name: worksites takeover detection author: melbadry9 severity: high reference: - https://blog.melbadry9.xyz/dangling-dns/xyz-services/ddns-worksites tags: takeover requests: - method: GET path: - "{{BaseURL}}" matchers: - type: regex regex: - "(?:Company Not Found|you’re looking for doesn’t exist)"