Skip to main content

Virtual host and website duplicates

A website is the combination of a host, a port, a domain and a path. Red Kite creates one website for every combination it finds: each HTTP(S) port of a host gets one website per domain pointing to that host, plus one for the IP address alone.

This is how Red Kite finds virtual hosts that serve different content on the same server. It also means that the same site is often found several times.

Grid and list views​

The Websites page has a toggle at the top to switch between two views:

  • The grid view shows a screenshot of each website. It is the best way to quickly spot login pages, default server pages, forgotten applications or sites that clearly do not belong to you. You can choose the number of columns.
  • The list view shows the websites in a table, like the other resources. It makes selecting many websites and applying bulk changes much easier.

Merging websites​

Merging lets one main website represent all of its variations. For instance, https://red-kite.io can represent:

  • http://red-kite.io
  • https://www.red-kite.io
  • http://www.red-kite.io

A merged website is ignored by the automation, which only works on the main website. In the example above, website scans go from four scans to one. Merging reduces the number of requests Red Kite sends to your websites, which your WAF and web teams will appreciate, and it removes duplicates from your results.

How to merge​

  1. On the Websites page, switch to the list view and filter the websites, for instance domain:*red-kite.io.
  2. Select the websites that are the same site.
  3. Click Merge.
  4. Select the merge destination: the website that will represent the others. Usually, the HTTPS version of the main domain.
  5. Review the merge preview and click Confirm merge.

Merged websites are hidden by the default -is:merged filter of the Websites page. Remove it, or use is:merged, to see them. A merged website's page shows the website it was merged in.

tip

Only merge websites that serve the same content. Two virtual hosts on the same IP and port can serve completely different applications: compare their screenshots in the grid view before merging.

Unmerging​

If you merged a website by mistake, open the merged website and click Unmerge. It will be considered as a separate website again and will be included in the automation.