nuclei-templates/http/osint/phishing/deezer-phish.yaml

34 lines
826 B
YAML

id: deezer-phish
info:
name: deezer phishing Detection
author: rxerium
severity: info
description: |
A deezer phishing website was detected
reference:
- https://deezer.com
tags: phishing,deezer,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Deezer | Listen to music | Online music streaming platform'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"deezer.com")'
# digest: 4a0a0047304502206f7fd05c9f820823ec9c2227437362942dae0460cbef2fe47b0426d9b4fc4755022100d5bb4018dde2270240d3b431886e7d42cab036c2510d492a3fdba6ef9df2f7e4:922c64590222798bb761d5b6d8e72950