Example 1 - 10/6/2015) ia15.org is redirecting to creeper-1krautschneider.bennet.ws IP 206.222.25.61 US/OH XLHost, ANGLER exploit kit Packet capture E....'@.|..q.Jwn...=.v.P..j7ap..P.......GET /civis/search.php?keywords=4o&fid0=74137.677d2ph610i5ut84 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: http://www.ia15.org/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: creeper-1krautschneider.bennet.ws