nuclei-templates/http/osint/phishing/aliexpress-phish.yaml

34 lines
856 B
YAML

id: aliexpress-phish
info:
name: aliexpress phishing Detection
author: rxerium
severity: info
description: |
An aliexpress phishing website was detected
reference:
- https://aliexpress.com
tags: phishing,aliexpress,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'AliExpress - Affordable Prices on Top Brands with Free Shipping'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"aliexpress.com")'
# digest: 4a0a00473045022100e17439f0e172529d57df85f53de2512d2ff555352b76573f9fcdd8a41cfb74f8022007a3abf3da797c1b1a76e38b9a701c40568e858550c5c57bf3f0353e55500410:922c64590222798bb761d5b6d8e72950