id: jitsi-phish

info:
  name: Jitsi phishing Detection
  author: rxerium
  severity: info
  description: |
    A Jitsi phishing website was detected
  reference:
    - https://jitsi.org
  metadata:
    max-request: 1
  tags: phishing,jitsi,video,communication,osint,discovery
http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        words:
          - '<title>Free Video Conferencing Software for Web &amp; Mobile | Jitsi'

      - type: status
        status:
          - 200

      - type: dsl
        dsl:
          - '!contains(host,"jitsi.org")'
          - '!contains(host,"meet.jit.si")'
# digest: 4b0a00483046022100f5f6f56ee81a4be7236a7ebc0d3bf6d23b5e59ea96333c4cd21ae788d76917b0022100c7c339f5f898a50c28b5f8b7e03aa0f7d17776514a9968bf5799c423f9aaa920:922c64590222798bb761d5b6d8e72950