Some Popular RogueAV Redirectors

These have been pretty popular lately, they redirect to RogueAV infections currently.

HTTP Request Method = GET
Regex HTTP URI for \/vd\/[0-9]{1,3};

See examples of RogueAV /vd/ Redirectors on UrlQuery.net

HTTP Request Method = GET
Regex HTTP URI for promo_opt=[0-9]$

See examples of RogueAV Promo Redirectors on UrlQuery.net

HTTP Request Method = GET
HTTP URI contains /api/urls/ OR /api/stats/install/

See examples of RogueAV /api/ Redirectors on UrlQuery.net

Comments are closed.