adding signal whois for sender domain (#793)

sublime-security · Oct 6, 2023 · 46a0b49 · 46a0b49
1 parent c67418b
commit 46a0b49
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/signals/sender/sender_domain_whois_days_old.yml b/signals/sender/sender_domain_whois_days_old.yml
@@ -0,0 +1,4 @@
+name: "Sender: Whois on sender domain"
+type: "query"
+source: |
+  beta.whois(sender.email.domain).days_old