Attacked url: http://rickyrou.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Thu, 18 Jul 2019 17:05:29 +0200

Visitors with referer are redirected to http://www.selfmadehero.com/title.php?isbn=9781906838829&edition_id=254

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: rickyrou.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Thu, 18 Jul 2019 15:05:29 GMT
Content-Type: text/html
Content-Length: 166
Connection: close


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: rickyrou.se
Referer: http://www.google.com/search?q=rickyrou.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 18 Jul 2019 15:05:29 GMT
Content-Type: text/html
Connection: close
Location: http://www.selfmadehero.com/title.php?isbn=9781906838829&edition_id=254
Cache-Control: max-age=10800
Vary: Accept-Language

rickyrou.se is on 217.70.184.38
ASN for 217.70.184.38: 29169
Abusix contact information: abuse@gandi.net (information only)
217.70.184.38 corresponds with webredir.vip.gandi.net
Abuse.net has 1 reliable address(es) for gandi.net
Found address(es): abuse@gandi.net