Redkit Random Gates

Here’s some more recent strings to locate redkit gates.

Regex HTTP URI for “\/(hfrn|azhd|eesb|hfqf|mapn|wmhd|mzyp|oegu|efgv|acsu|acej|hmod|aoei|aoef|asyq|asju|awtg|zmyg|awtg|
wesn|hawf|actu|ozzi|hcwf|wehf|aces|mhes|mhos|efxq|acgu|eotp|cctg|hmpu|aiyh|pztp|mayp|ezzi|ewci|aced|hzws|eitr|
mzai|aesr|asjs|ezzf|gsjj|zhsu)\.html?”

Can regex with \/[a-z]{4}\.html?$

There will be false positives, use a 4-letter-word dictionary as a csv to weed out common words.

See examples of Random Redkit Gates on UrlQuery.net

Some Redkit Gates also have a parameter on the end of the gate url which makes it easier to weed out fp’s.

eg.

http://forum.ymsite.com/mzcs.html?j=1317756
http://alphafenceflorida.com/heiu.htm?h=756208
http://treatmentregistry.org/ccms.html?i=1127744

Can regex with \/[a-z]{4}\.html?\?[a-z]=[0-9]+$

See examples of Redkit Gate w/ Param on UrlQuery.net

Comments are closed.