Files
nuclei-templates/dns/soa-detect.yaml
2025-10-24 13:44:29 +00:00

84 lines
1.8 KiB
YAML

id: soa-detect
info:
name: SOA Record Service - Detection
author: rxerium
severity: info
description: |
Detects which domain provider a domain is using, detected through SOA records
reference:
- https://www.cloudflare.com/learning/dns/dns-records/dns-soa-record/
metadata:
verified: true
max-request: 1
tags: dns,soa
dns:
- name: "{{FQDN}}"
type: SOA
matchers-condition: or
matchers:
- type: word
name: "cloudflare"
words:
- "dns.cloudflare.com"
- type: word
name: "amazon-web-services"
words:
- "awsdns"
- type: word
name: "akamai"
words:
- "hostmaster.akamai.com"
- type: word
name: "azure"
words:
- "azure-dns.com"
- type: word
name: "ns1"
words:
- "nsone.net"
- type: word
name: "verizon"
words:
- "verizon.com"
- type: word
name: "google-cloud-platform"
words:
- "googledomains.com"
- "google.com"
- type: word
name: "alibaba"
words:
- "alibabadns.com"
- type: word
name: "safeway"
words:
- "safeway.com"
- type: word
name: "mark-monitor"
words:
- "markmonitor.com"
- "markmonitor.zone"
- type: word
name: "hetznet"
words:
- "hetzner.com"
- type: word
name: "edge-cast"
words:
- "edgecastdns.net"
# digest: 4a0a00473045022100fdf29b4763aad683f26f0a177a2caea39237e2c9d09914b5e2b6bcdf4133e2af0220260f903c6023e996f838bbe6b7366e690e793e6c5d7433827da087eb6d7a97d4:922c64590222798bb761d5b6d8e72950