Säkrare hemsida med .sehttp://trend7tra.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://trend7tra.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Tue, 20 Jun 2017 02:32:11 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4XKo%2Fgxkdz1HmTwvZPcuyosKYU5dp8wQNyyWJiqx%2FIeX2roPJiCEM2WXXnrAD7IXUp9GSFOjrM68lvAVePinx0NuKHHsEZRAzgSU112p3L5NAIvRwr%2F9SGr9r4VSbVwqd5WzK42JAFS2hyPkyPk6KnTnvKLacCVLp1jokeCe2RwY24kGu%2BhX%2BAUclStNK%2FqH%2BFo%2F86Q7oENXXU7PN6dZiU4MABoDQp6c8BQBN%2Bq5hnEfLpDvQCkbDfjQaKJPNIYDE%2FXJBE5mh3U6ARh%2BpdRmR%2FANzIwRIfsDrZP5QR0iOUrjJOeMWamPFJ0G1r3gL0LIevOgQIrVNUMPSgCfd6FD4Vhxa8n4MGNDIs8rjscKdBlLoHGEDPH3eCrTe4tUUaYXjrpcDetSH7ms6GLXez7HNHxEZDfOsLlAKIrt19YLoY6ReX1KxYkdgp4BWPdiZ1muLHuoaI0DK4O9JkrowbS0vJFpFyfv%2Fpzd7RQa2dnnAxV%2BdtSVLfjo%2BAuIKGxO92i1VVZzvxsWGDHg5hWLGW2lZ8ifbZKmP58UA%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: trend7tra.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Tue, 20 Jun 2017 00:32:12 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497918732.1088573; expires=Fri, 18-Jun-2027 00:32:12 GMT; Max-Age=315360000 <br>Location: http://ww11.trend7tra.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: trend7tra.nu <br>Referer: http://www.google.com/search?q=trend7tra.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Tue, 20 Jun 2017 00:32:11 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497918731.6918405; expires=Fri, 18-Jun-2027 00:32:11 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4XKo%2Fgxkdz1HmTwvZPcuyosKYU5dp8wQNyyWJiqx%2FIeX2roPJiCEM2WXXnrAD7IXUp9GSFOjrM68lvAVePinx0NuKHHsEZRAzgSU112p3L5NAIvRwr%2F9SGr9r4VSbVwqd5WzK42JAFS2hyPkyPk6KnTnvKLacCVLp1jokeCe2RwY24kGu%2BhX%2BAUclStNK%2FqH%2BFo%2F86Q7oENXXU7PN6dZiU4MABoDQp6c8BQBN%2Bq5hnEfLpDvQCkbDfjQaKJPNIYDE%2FXJBE5mh3U6ARh%2BpdRmR%2FANzIwRIfsDrZP5QR0iOUrjJOeMWamPFJ0G1r3gL0LIevOgQIrVNUMPSgCfd6FD4Vhxa8n4MGNDIs8rjscKdBlLoHGEDPH3eCrTe4tUUaYXjrpcDetSH7ms6GLXez7HNHxEZDfOsLlAKIrt19YLoY6ReX1KxYkdgp4BWPdiZ1muLHuoaI0DK4O9JkrowbS0vJFpFyfv%2Fpzd7RQa2dnnAxV%2BdtSVLfjo%2BAuIKGxO92i1VVZzvxsWGDHg5hWLGW2lZ8ifbZKmP58UA%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>trend7tra.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-182-249.above.com abuse@above.com1497971084http://christina-aguilera.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://christina-aguilera.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 02:42:58 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjyecYeRbyGG%2BvX0m4jYju3btOinrsg5SYMmTfE6EO5FWwvrP3bZeRf%2BW0OPMkA%2BKVns%2FPxdRZW3h8tGfVrzFRzh1rQWBglrsqikMe8Q2j6h9OFP9N7ibUDdiOhTF9RRU9bpfAyOv%2FlgnDQTTOpUmaQGvh4s0581h8FUwJq2lXTFZWHFXORjY0VG6VuXqGqVqR18TBR3MpzLEbaLfacey4wh%2Ban8Piawip23Kn%2B5qvC7ybIqENGnVuBGgJ1Gm8tNiUHR8kpQPe%2B9PUYcv1iAFsM3cDAqsQlCHbi0mimv8lEw8dpY3t5lL5DgBumJvBa4WrCHtMGZoaojTLBLc1bNVYiof0exp8%2B8p8MdCgNMwDlGljbGfuD2ykoND%2Fx1UWOzeCllML2DdeLGpcwSHfOpJTXxjkN2mongoiInv6S49fGQEhvfdTQ89kwosG9PdtU0XjaI6fmpWwac2JDGx5Om0AtpWGPihLXyA906EPFIyRbpSohksOk7VNy50Vb3bwngdXOEek0iw5ceeQEMVJQolFsyLbWrEatVNIlolLuRzVvfmcG0BKDiF9Q8W1J9N8Jcsg <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: christina-aguilera.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 19 Jun 2017 00:42:58 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497832978.4204740; expires=Thu, 17-Jun-2027 00:42:58 GMT <br>Location: http://ww11.christina-aguilera.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: christina-aguilera.nu <br>Referer: http://www.google.com/search?q=christina-aguilera.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 19 Jun 2017 00:42:57 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497832977.5696951; expires=Thu, 17-Jun-2027 00:42:57 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjyecYeRbyGG%2BvX0m4jYju3btOinrsg5SYMmTfE6EO5FWwvrP3bZeRf%2BW0OPMkA%2BKVns%2FPxdRZW3h8tGfVrzFRzh1rQWBglrsqikMe8Q2j6h9OFP9N7ibUDdiOhTF9RRU9bpfAyOv%2FlgnDQTTOpUmaQGvh4s0581h8FUwJq2lXTFZWHFXORjY0VG6VuXqGqVqR18TBR3MpzLEbaLfacey4wh%2Ban8Piawip23Kn%2B5qvC7ybIqENGnVuBGgJ1Gm8tNiUHR8kpQPe%2B9PUYcv1iAFsM3cDAqsQlCHbi0mimv8lEw8dpY3t5lL5DgBumJvBa4WrCHtMGZoaojTLBLc1bNVYiof0exp8%2B8p8MdCgNMwDlGljbGfuD2ykoND%2Fx1UWOzeCllML2DdeLGpcwSHfOpJTXxjkN2mongoiInv6S49fGQEhvfdTQ89kwosG9PdtU0XjaI6fmpWwac2JDGx5Om0AtpWGPihLXyA906EPFIyRbpSohksOk7VNy50Vb3bwngdXOEek0iw5ceeQEMVJQolFsyLbWrEatVNIlolLuRzVvfmcG0BKDiF9Q8W1J9N8Jcsg <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>christina-aguilera.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-182-249.above.com1497853543http://hjarntorget.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://hjarntorget.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 01:07:55 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjirmy8PGgNC2YvwLwaVR04yKZFU3%2FqqQ30HQz7YtD00Iy%2BGEJJLEYx2yw0qf7E%2Fxl90%2F31089ZbY57NKNkrNwT9qxx2fkdvRXezCyXIhEkSHGdJw99bEsDNXKloD5aQ9aBUwNq9lruKb3EISl9kmrhGRJ%2BsV%2Bp6vKM1IhIf%2FJYhwr6Wcfav%2BjO6zaH4mhAhfglJa%2F7ep7WlJR3DNAGOxZgQNmq7JlsrT5NpruMZW8kiScUdLfKRnNTBZJTljYZ7GbztIbbSpTAJmyvTg9os3llK6h7GERleAt54hPc7Qk1juBIlJQlcTtsPlKvsULrt3y%2BJsmVOGCoyWYLIq5MTcpZI2Dpdw%2BH1gkNyc8Y4yl3qkXpKJYZ9hqW7ruy%2FcU%2BkiNatqt7gfxwuxmTZrGlcpDhkEjni%2BOAPE8QnyesnrNl6Le0afUFsGoI%2B8x5bvl54qbKWalrHxQYS09VOZbkeeJy4%2FEKJcerr5B6BYso9d4sTFTAi6hdux%2FQfHlkam%2BQrXrgt7GK93vKHTmV%2BI5iHwUQg%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hjarntorget.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:07:56 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497827276.2772061; expires=Wed, 16-Jun-2027 23:07:56 GMT; Max-Age=315360000 <br>Location: http://ww11.hjarntorget.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hjarntorget.nu <br>Referer: http://www.google.com/search?q=hjarntorget.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:07:55 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497827275.2614831; expires=Wed, 16-Jun-2027 23:07:55 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjirmy8PGgNC2YvwLwaVR04yKZFU3%2FqqQ30HQz7YtD00Iy%2BGEJJLEYx2yw0qf7E%2Fxl90%2F31089ZbY57NKNkrNwT9qxx2fkdvRXezCyXIhEkSHGdJw99bEsDNXKloD5aQ9aBUwNq9lruKb3EISl9kmrhGRJ%2BsV%2Bp6vKM1IhIf%2FJYhwr6Wcfav%2BjO6zaH4mhAhfglJa%2F7ep7WlJR3DNAGOxZgQNmq7JlsrT5NpruMZW8kiScUdLfKRnNTBZJTljYZ7GbztIbbSpTAJmyvTg9os3llK6h7GERleAt54hPc7Qk1juBIlJQlcTtsPlKvsULrt3y%2BJsmVOGCoyWYLIq5MTcpZI2Dpdw%2BH1gkNyc8Y4yl3qkXpKJYZ9hqW7ruy%2FcU%2BkiNatqt7gfxwuxmTZrGlcpDhkEjni%2BOAPE8QnyesnrNl6Le0afUFsGoI%2B8x5bvl54qbKWalrHxQYS09VOZbkeeJy4%2FEKJcerr5B6BYso9d4sTFTAi6hdux%2FQfHlkam%2BQrXrgt7GK93vKHTmV%2BI5iHwUQg%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>hjarntorget.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-182-249.above.com1497853533http://lokeli.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://lokeli.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 09:27:18 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfz%2FuOa2iv45AADC%2Fo1aGSloLw7wHp8YHxF5c10xsQonJ%2BKZynZT1wprRkc7VhWD2Hr4hq%2FdYXGsEAK5bzbxEEEjFmWfb%2BrIqXsmwVTAZhqHMErREnh4XYe7cixKH7NU4zz%2BoxcD8HFN3gUy3oHB1jNlo0R7C5m3SdfmsiB2Wap1cFYvpXCWQxgbM%2FVqb%2B6L8SQ%2BC0CZc8vMEQARabeOt6bR2Pc%2F5iVOYSBTdAp6JZxb0hLNTGZEyJOGLStxxuPkXxdBDI4TR%2FbjtPTrAPjCCXifdohODtb3xgIZeUUT4NwCld17YB5MtmlozwGg27dbPHHMYTU0Y9kFjxvspbONltJASk3DqRP2NlBJzMAQON3LdhM5cr35f57j6aseM35m7NeP9dlvAKIGHjyxVF2zGk3OePCvYolAu3Fa4hIdF%2FBXCcpHiyDhAfmK1rJ63w1jrju8Ghq1wbJNBw%2FCwFG1bwbWTbBOSsxyWzCuc75Q8JOCKbtFJVHUQdHMX%2BNdttS2aW7kW2dxZaQSU%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: lokeli.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 07:27:18 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497598038.2634970; expires=Mon, 14-Jun-2027 07:27:18 GMT <br>Location: http://ww11.lokeli.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: lokeli.nu <br>Referer: http://www.google.com/search?q=lokeli.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 07:27:17 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497598037.8003537; expires=Mon, 14-Jun-2027 07:27:17 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfz%2FuOa2iv45AADC%2Fo1aGSloLw7wHp8YHxF5c10xsQonJ%2BKZynZT1wprRkc7VhWD2Hr4hq%2FdYXGsEAK5bzbxEEEjFmWfb%2BrIqXsmwVTAZhqHMErREnh4XYe7cixKH7NU4zz%2BoxcD8HFN3gUy3oHB1jNlo0R7C5m3SdfmsiB2Wap1cFYvpXCWQxgbM%2FVqb%2B6L8SQ%2BC0CZc8vMEQARabeOt6bR2Pc%2F5iVOYSBTdAp6JZxb0hLNTGZEyJOGLStxxuPkXxdBDI4TR%2FbjtPTrAPjCCXifdohODtb3xgIZeUUT4NwCld17YB5MtmlozwGg27dbPHHMYTU0Y9kFjxvspbONltJASk3DqRP2NlBJzMAQON3LdhM5cr35f57j6aseM35m7NeP9dlvAKIGHjyxVF2zGk3OePCvYolAu3Fa4hIdF%2FBXCcpHiyDhAfmK1rJ63w1jrju8Ghq1wbJNBw%2FCwFG1bwbWTbBOSsxyWzCuc75Q8JOCKbtFJVHUQdHMX%2BNdttS2aW7kW2dxZaQSU%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>lokeli.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-182-249.above.com abuse@above.com1497625693http://stacimodel.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://stacimodel.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 01:55:13 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfPmHOZFsO4WelaDW1cuxX2qYaXTzC3S4WmOT2n%2Bf7H1ALFf1LUtelpqODhzE6J3AMrm8PGGzJ%2FfexrEWgAlLkmVS615Wlq2pAxMgClSWgoAaubH6JsU92G%2BopvXGn7Y4cDI1hlz3pI%2BhkP353sqpM6jkytpfy37AZHZ3qSiyaAeH%2FRdluZYNXaYWxAceYvebyI5PWQmuiDAccRRjWkKE16OeQu6uaqrho1eE7MNu4L3BnVgRPlkwlU3cvDZ7i9JzcNKfTLmTOT4og65CPNE7b2aP9EUGaQ2hxJ2Xsn7xKumSPK14ZgVzOrFwdYujWKrZVPlW%2B7xSw%2BXeDbC568vc9edShuy7eeHUYo4NGQg3XT8X9yLTS5C3PpTZ9BasJOIeZ8aNLim%2BPXabgcZCDhJLyxIJO8Xx0tTXt8Eqwwx7dnreQuaHbT7e3PEOx8Ri5%2BV%2FqPtjhEslDpg7FBg2dJogSQatDIkFLe0cQCbrfzeozWvq8g1dAeY0RLtoW4flGbJuU4w%2B09bfEhoO4xopWIuhqhHSVzLTIf05W <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: stacimodel.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Thu, 15 Jun 2017 23:55:13 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497570913.7451621; expires=Sun, 13-Jun-2027 23:55:13 GMT; Max-Age=315360000 <br>Location: http://ww11.stacimodel.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: stacimodel.nu <br>Referer: http://www.google.com/search?q=stacimodel.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Thu, 15 Jun 2017 23:55:12 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497570912.8571105; expires=Sun, 13-Jun-2027 23:55:12 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfPmHOZFsO4WelaDW1cuxX2qYaXTzC3S4WmOT2n%2Bf7H1ALFf1LUtelpqODhzE6J3AMrm8PGGzJ%2FfexrEWgAlLkmVS615Wlq2pAxMgClSWgoAaubH6JsU92G%2BopvXGn7Y4cDI1hlz3pI%2BhkP353sqpM6jkytpfy37AZHZ3qSiyaAeH%2FRdluZYNXaYWxAceYvebyI5PWQmuiDAccRRjWkKE16OeQu6uaqrho1eE7MNu4L3BnVgRPlkwlU3cvDZ7i9JzcNKfTLmTOT4og65CPNE7b2aP9EUGaQ2hxJ2Xsn7xKumSPK14ZgVzOrFwdYujWKrZVPlW%2B7xSw%2BXeDbC568vc9edShuy7eeHUYo4NGQg3XT8X9yLTS5C3PpTZ9BasJOIeZ8aNLim%2BPXabgcZCDhJLyxIJO8Xx0tTXt8Eqwwx7dnreQuaHbT7e3PEOx8Ri5%2BV%2FqPtjhEslDpg7FBg2dJogSQatDIkFLe0cQCbrfzeozWvq8g1dAeY0RLtoW4flGbJuU4w%2B09bfEhoO4xopWIuhqhHSVzLTIf05W <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>stacimodel.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-182-249.above.com1497625498http://charmed.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://charmed.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 12 Jun 2017 17:51:53 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDQRvfiNsp5UMsXpzlFEiFYLybykHVCDNwS%2FBHvA%2B4anJ8XZjYUVArbG9E7W9PWQtoP9OTn4RIY3yFpd8hRuyk2soaQ11bxPi3WBPD%2FKL0vQCSuF6Gi4y8bSdi1iMpQPelQk8wgCSack3qM57e2WbzucgCQuTeYd9D7e86g7bTsLRIZpIT%2FMpyejIfa%2B%2FZ%2FDiAaPDBJJ2skqITpEsbl9ZJwZ1wrteT0vWz7WyzPK7FaL%2BxuEx6sCeP3wVEX9GRriUdkXO3L79Nc2vbfVilGfZOUjEWHDy2VNyEeGjZEv7EK019Ca9MR5kweXqKJ1x3V1Yi88CPXuyLqHZFACUnZbKT%2Bfy4T5qaNpanU8Th%2BeswNGLYIvIEqsAQu%2BQ4%2BnFBLekXGgcgncDdoOdbITHYyajzk5X%2FqnQy281bo3h7dw0iF9FoP2zsx2y1F5FVwj9fDywR66KTNDy5p0MglXv%2BH62dX%2FUMt4oHHPyn%2B1w2MZXaew5WAVSGPzHApWgIVZ3N9vPHmg2xdW4Naoc%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: charmed.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 15:52:01 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497282721.3563296; expires=Thu, 10-Jun-2027 15:52:01 GMT; Max-Age=315360000 <br>Location: http://ww11.charmed.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: charmed.nu <br>Referer: http://www.google.com/search?q=charmed.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 15:52:00 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497282720.2852846; expires=Thu, 10-Jun-2027 15:52:00 GMT <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDQRvfiNsp5UMsXpzlFEiFYLybykHVCDNwS%2FBHvA%2B4anJ8XZjYUVArbG9E7W9PWQtoP9OTn4RIY3yFpd8hRuyk2soaQ11bxPi3WBPD%2FKL0vQCSuF6Gi4y8bSdi1iMpQPelQk8wgCSack3qM57e2WbzucgCQuTeYd9D7e86g7bTsLRIZpIT%2FMpyejIfa%2B%2FZ%2FDiAaPDBJJ2skqITpEsbl9ZJwZ1wrteT0vWz7WyzPK7FaL%2BxuEx6sCeP3wVEX9GRriUdkXO3L79Nc2vbfVilGfZOUjEWHDy2VNyEeGjZEv7EK019Ca9MR5kweXqKJ1x3V1Yi88CPXuyLqHZFACUnZbKT%2Bfy4T5qaNpanU8Th%2BeswNGLYIvIEqsAQu%2BQ4%2BnFBLekXGgcgncDdoOdbITHYyajzk5X%2FqnQy281bo3h7dw0iF9FoP2zsx2y1F5FVwj9fDywR66KTNDy5p0MglXv%2BH62dX%2FUMt4oHHPyn%2B1w2MZXaew5WAVSGPzHApWgIVZ3N9vPHmg2xdW4Naoc%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>charmed.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-182-249.above.com abuse@above.com1497349108http://direct-tv.nu/ (103.224.182.249) - Serp-hijackingAttacked url: http://direct-tv.nu/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 12 Jun 2017 17:32:56 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDrxaUxwexr1LbazqmySZecH4f%2BgYEhISMxlQXumg6uSIhZONBKXUN4Dy7JCgw09spaXBIQmRpRp3QOONsyfZ3z%2BBOOr87VYQsf%2FuqhIlBM7%2BDG%2FDZ7BsLLTu%2BHSH5JZKztxCdhZ%2Bqiehp0KJp9BL97PKkMj%2FznphehCkAjN5i0rWRdcO3GUnbST%2FoS6vsSpmbjsptrEDzfJjveMK5vwKjACpVaL7bcVS0R2Wxesuv3%2FL4g8lQLL%2Fycfd0gFzJbqDITRLUX8yRGraAC3tKWR0vcIdAZPWazc3dW%2BXZ6QfyXW6XBxq0bLtJTBOc8OuHlu2ljTle1x9Q%2BWhtX1pExAzQfSz0uv7apFXn9RY8cLyNFriJbnU1IoX%2FimHPIhgUYwl0cL0FYIDprSU2fm8YkqOaiF4FHsme4mKuHvR9P7BwRAQkiX9C1oET%2B3lY6ETGhyESwMpv1aPW00M9XG5mymHuoBPm9SsjLFYMRBP98jMOQzX0bIHRh6L6jxXjonoZE2MYcaKw5PBXLdxuuQSZiko9jQ%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: direct-tv.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 15:33:04 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497281584.6493442; expires=Thu, 10-Jun-2027 15:33:04 GMT <br>Location: http://ww11.direct-tv.nu/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: direct-tv.nu <br>Referer: http://www.google.com/search?q=direct-tv.nu <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 15:33:03 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497281583.6164757; expires=Thu, 10-Jun-2027 15:33:03 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDrxaUxwexr1LbazqmySZecH4f%2BgYEhISMxlQXumg6uSIhZONBKXUN4Dy7JCgw09spaXBIQmRpRp3QOONsyfZ3z%2BBOOr87VYQsf%2FuqhIlBM7%2BDG%2FDZ7BsLLTu%2BHSH5JZKztxCdhZ%2Bqiehp0KJp9BL97PKkMj%2FznphehCkAjN5i0rWRdcO3GUnbST%2FoS6vsSpmbjsptrEDzfJjveMK5vwKjACpVaL7bcVS0R2Wxesuv3%2FL4g8lQLL%2Fycfd0gFzJbqDITRLUX8yRGraAC3tKWR0vcIdAZPWazc3dW%2BXZ6QfyXW6XBxq0bLtJTBOc8OuHlu2ljTle1x9Q%2BWhtX1pExAzQfSz0uv7apFXn9RY8cLyNFriJbnU1IoX%2FimHPIhgUYwl0cL0FYIDprSU2fm8YkqOaiF4FHsme4mKuHvR9P7BwRAQkiX9C1oET%2B3lY6ETGhyESwMpv1aPW00M9XG5mymHuoBPm9SsjLFYMRBP98jMOQzX0bIHRh6L6jxXjonoZE2MYcaKw5PBXLdxuuQSZiko9jQ%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>direct-tv.nu is on 103.224.182.249<br>ASN for 103.224.182.249: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.182.249 corresponds with lb-182-249.above.com<br>Abuse.net does not have any reliable address for lb-182-249.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-182-249.above.com abuse@above.com1497349007