id: mx-fingerprint
info:
name: MX Fingerprint
author: pdteam
severity: info
tags: dns,mx
dns:
- name: "{{FQDN}}"
type: MX
matchers:
- type: word
words:
- "IN\tMX"
extractors:
- type: regex
group: 1
regex:
- "IN\tMX\t(.+)"