only emit ORG_STUB for registered domains

blacklanternsecurity · Dec 15, 2023 · 3261e94 · 3261e94
1 parent d54f681
commit 3261e94
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/bbot/modules/internal/speculate.py b/bbot/modules/internal/speculate.py
@@ -126,9 +126,12 @@ async def handle_event(self, event):
         # ORG_STUB from TLD, SOCIAL, AZURE_TENANT
         org_stubs = set()
         if event.type == "DNS_NAME" and event.scope_distance == 0:
-            tld_stub = getattr(self.helpers.tldextract(event.data), "domain", "")
-            if tld_stub:
-                org_stubs.add(tld_stub)
+            tldextracted = self.helpers.tldextract(event.data)
+            registered_domain = getattr(tldextracted, "registered_domain", "")
+            if registered_domain:
+                tld_stub = getattr(tldextracted, "domain", "")
+                if tld_stub:
+                    org_stubs.add(tld_stub)
         elif event.type == "SOCIAL":
             stub = event.data.get("stub", "")
             if stub: