Säkrare hemsida med .sehttp://aftpnbladet.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://aftpnbladet.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Wed, 12 Jul 2017 11:39:50 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT%2Bzwn10jVoD4rwIU0%2Bs%2FVpadwLsXiUXR7j0mo56mV8Y1aieyqysSIjn5lp7dWTSGWMxUYZVajIFiJR8%2B9cJ1RNFcI%2F0%2BKiGcBLrxpKresjGUpA0f%2FfdPhPzFgzjvYpMvKnYoTTeVFsPPFQCuO6FwDw%2FGPbb6HkMwf5Ih8fiiGaopo30OKWOHuZUp29D0Gyq0oqaczN5PIKk9X8OwQUSDis%2Bm1%2BPX5dBE3ha8Eg4PqBGb2D3sygLhb6XK66OctS1Vj9AXpHxphd6tpHi%2BtNhLJKbFQjbDXickCozvm%2Fb5L6d25y1hyRCBSkkmcX69SPCIAJEXuRTzJBWzKXXRJTKXlzwb2WZ1rtXQnP9RQEb%2BbcjnkNU3WPuZKdlqBH5Ouq334x4fm9ocEG7us59lbybxyOIiB2FEHfQrCW9KLj8Fmi2JAPH6u8ebSOh0LI72lBmi7Q9freBIanf34kx0DCv99fAMVMOdXaLg2RE2f3PlS%2Bgg4A0qCpPGrMZ5pr%2B1588XH9Hw2fBtRVsOedx7RcnCS5Op5c05b%2BxzDdp7t4F27hnZ <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: aftpnbladet.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 12 Jul 2017 09:39:57 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499852397.7700387; expires=Sat, 10-Jul-2027 09:39:57 GMT; Max-Age=315360000 <br>Location: http://ww38.aftpnbladet.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: aftpnbladet.se <br>Referer: http://www.google.com/search?q=aftpnbladet.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 12 Jul 2017 09:39:56 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499852396.5526884; expires=Sat, 10-Jul-2027 09:39:56 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT%2Bzwn10jVoD4rwIU0%2Bs%2FVpadwLsXiUXR7j0mo56mV8Y1aieyqysSIjn5lp7dWTSGWMxUYZVajIFiJR8%2B9cJ1RNFcI%2F0%2BKiGcBLrxpKresjGUpA0f%2FfdPhPzFgzjvYpMvKnYoTTeVFsPPFQCuO6FwDw%2FGPbb6HkMwf5Ih8fiiGaopo30OKWOHuZUp29D0Gyq0oqaczN5PIKk9X8OwQUSDis%2Bm1%2BPX5dBE3ha8Eg4PqBGb2D3sygLhb6XK66OctS1Vj9AXpHxphd6tpHi%2BtNhLJKbFQjbDXickCozvm%2Fb5L6d25y1hyRCBSkkmcX69SPCIAJEXuRTzJBWzKXXRJTKXlzwb2WZ1rtXQnP9RQEb%2BbcjnkNU3WPuZKdlqBH5Ouq334x4fm9ocEG7us59lbybxyOIiB2FEHfQrCW9KLj8Fmi2JAPH6u8ebSOh0LI72lBmi7Q9freBIanf34kx0DCv99fAMVMOdXaLg2RE2f3PlS%2Bgg4A0qCpPGrMZ5pr%2B1588XH9Hw2fBtRVsOedx7RcnCS5Op5c05b%2BxzDdp7t4F27hnZ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>aftpnbladet.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1499859727http://abilar.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://abilar.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 03 Jul 2017 06:02:30 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4H%2FTForGCHADg%2B%2BmjD%2FTZgAiKRg9INwzxhSRRz0WCSDpoPKtxPCD3945x9dLcjoJoBVzcaWYsWD1%2BzvXsN%2F%2B8RykwKlIdm6P4tLvZazqEWhMsz1yfTf0n71V6pErOmUfhUkUnUyBEuaLyquyKpHEtI5j8PTS9kR7VJaDvpgFkLV50DRMjSqmmKU6Aiy5PDCF5QaPsTl%2B%2FJKfF1Z7Dj5MQ8cUZH1tR1dAtb11JxX8J%2FAk6zprkVxnTWp5SK7TglZGAXA4t5aqMRTeUMgsd4OEjEo412LIVyIYZhLO6yrx95Qd6E%2F4LDlVCY4eNLl61gZLfppaNG1QEWivTZO2%2FlMagJSFI5kDWDdvJcMtkV4Ho0vOszwo%2FOtxBYuDRDcssCrVVFWLlxigEYz%2Bc4ZZfJznsHhEDMsEm2SS0eJYltt5uFJ4BILdFrFWPCjN062Pnf%2FuDwjIjhrIUlin3gwC5KK5r2JFOC%2BypRQMdW%2Bp9eGJ4hZQipUBSuKu5k3LQp67UeINYgLGaNsut7XfBvW7wihdow%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: abilar.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 03 Jul 2017 04:02:35 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499054555.6408529; expires=Thu, 01-Jul-2027 04:02:35 GMT; Max-Age=315360000 <br>Location: http://ww11.abilar.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: abilar.se <br>Referer: http://www.google.com/search?q=abilar.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 03 Jul 2017 04:02:34 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499054554.5523102; expires=Thu, 01-Jul-2027 04:02:34 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4H%2FTForGCHADg%2B%2BmjD%2FTZgAiKRg9INwzxhSRRz0WCSDpoPKtxPCD3945x9dLcjoJoBVzcaWYsWD1%2BzvXsN%2F%2B8RykwKlIdm6P4tLvZazqEWhMsz1yfTf0n71V6pErOmUfhUkUnUyBEuaLyquyKpHEtI5j8PTS9kR7VJaDvpgFkLV50DRMjSqmmKU6Aiy5PDCF5QaPsTl%2B%2FJKfF1Z7Dj5MQ8cUZH1tR1dAtb11JxX8J%2FAk6zprkVxnTWp5SK7TglZGAXA4t5aqMRTeUMgsd4OEjEo412LIVyIYZhLO6yrx95Qd6E%2F4LDlVCY4eNLl61gZLfppaNG1QEWivTZO2%2FlMagJSFI5kDWDdvJcMtkV4Ho0vOszwo%2FOtxBYuDRDcssCrVVFWLlxigEYz%2Bc4ZZfJznsHhEDMsEm2SS0eJYltt5uFJ4BILdFrFWPCjN062Pnf%2FuDwjIjhrIUlin3gwC5KK5r2JFOC%2BypRQMdW%2Bp9eGJ4hZQipUBSuKu5k3LQp67UeINYgLGaNsut7XfBvW7wihdow%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>abilar.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1499087681http://sgsforest.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://sgsforest.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Sun, 02 Jul 2017 16:44:46 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4H%2FTForGCHAoqAPdxXuKhlCBdfAYKhCL3cOJ%2Fd4YBhY0rAKch8Yf0j3gIM%2BypUpqpWI42%2BRkeBr2ECc%2BlQhgRItmkw37ztAkg0pm7%2ByfL%2FH4zntkQ0J%2BMR66WCFg3pVoaZHIOgcJ6OSBaqTiLXOZpCi0S0%2F%2BC28D5kN8nDh3YJc9dnIhPE89iBORL2DF0x9VQOPsZP4zLIY4bgkF%2BepC%2BDtOLL65q5tIBBtZDGefLNmrL2%2BUnwCjNkSwbfxLQ5H2X7ABXmYnKNuUoKZaYAX5TXgdbWKXrabVJO07zsLWlQH3TPMZ4Nxwfw3jfsEUkQ0AgnAjaPEkAgPYgCUfNb0ztBImbYe5MA0qf%2BaVvIvJI3ktWVpQOjah0ZbIu0tDvgOGY3E%2Bahn4vXa29mtYWxC4q4g5CbwnNO%2BFWUROnCj2qrd77vC%2Bot5NyMDNeG3cSREOYfnvMGxvMEreXN9xxtvv7cxsyHXWk0dd3oN8OX8vg0rD4rs8rY%2Byw%2FakeDNxqVopjBzMTKyeMngCiv97LGLPYw%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sgsforest.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 02 Jul 2017 14:44:50 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499006690.6072806; expires=Wed, 30-Jun-2027 14:44:50 GMT; Max-Age=315360000 <br>Location: http://ww11.sgsforest.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sgsforest.se <br>Referer: http://www.google.com/search?q=sgsforest.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 02 Jul 2017 14:44:49 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1499006689.8508481; expires=Wed, 30-Jun-2027 14:44:49 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT4H%2FTForGCHAoqAPdxXuKhlCBdfAYKhCL3cOJ%2Fd4YBhY0rAKch8Yf0j3gIM%2BypUpqpWI42%2BRkeBr2ECc%2BlQhgRItmkw37ztAkg0pm7%2ByfL%2FH4zntkQ0J%2BMR66WCFg3pVoaZHIOgcJ6OSBaqTiLXOZpCi0S0%2F%2BC28D5kN8nDh3YJc9dnIhPE89iBORL2DF0x9VQOPsZP4zLIY4bgkF%2BepC%2BDtOLL65q5tIBBtZDGefLNmrL2%2BUnwCjNkSwbfxLQ5H2X7ABXmYnKNuUoKZaYAX5TXgdbWKXrabVJO07zsLWlQH3TPMZ4Nxwfw3jfsEUkQ0AgnAjaPEkAgPYgCUfNb0ztBImbYe5MA0qf%2BaVvIvJI3ktWVpQOjah0ZbIu0tDvgOGY3E%2Bahn4vXa29mtYWxC4q4g5CbwnNO%2BFWUROnCj2qrd77vC%2Bot5NyMDNeG3cSREOYfnvMGxvMEreXN9xxtvv7cxsyHXWk0dd3oN8OX8vg0rD4rs8rY%2Byw%2FakeDNxqVopjBzMTKyeMngCiv97LGLPYw%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>sgsforest.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1499087587http://yiproffs.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://yiproffs.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Tue, 27 Jun 2017 22:20:44 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT52gR5xz5JzTlXx5kxhb4BtMqmHoCtUsjBBd2rs2TrCQRVM3xP7FiThi8BnRUw5alMZGU6SZUwhTNnn9BhpUK2uB7uLgV3mRoiA1r4TsCflM7pA6rinDkNMqXqURqGM6vAMDzIdlbSZVV8OzbzWBZ7YOoYPIZ4Envmd3qUJaIl5E9acSBlBMkxXjz8teKHujxsvQgHUipfDCN63tJidU4RcCWyV%2FHlrvgRs5WHaYYmn2gLE4PId%2FoLgbi1h9ILqHn8viHQ2XsgkQCysAr5Q1RhItS%2Bq7tPxxijU7yYeHFxBTaboAXL%2BRKf65pVUt%2FamqHd5HEbGD54hjbz4yfYpeDMBIUkAllezQ0m34t5t8k%2BMDG97yVb7d8OrwUl1rIIVTlhBQBmqH0bIgGCDbKGDYhH6YQRoI4dy%2B2eMw0%2Bm%2Fb6IiIK7kOBSj0Y9OGhpsUEp7mPo7nqQrUgu7%2B6dr0zvvGnWn2DUVqo7Zx1cE3hYuZWAStJwCZYcKrRQymhntDweqQdPJ7w3IoDVia0t1eQhTRKI%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: yiproffs.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Tue, 27 Jun 2017 20:20:47 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498594847.1524521; expires=Fri, 25-Jun-2027 20:20:47 GMT; Max-Age=315360000 <br>Location: http://ww11.yiproffs.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: yiproffs.se <br>Referer: http://www.google.com/search?q=yiproffs.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Tue, 27 Jun 2017 20:20:47 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498594847.7523238; expires=Fri, 25-Jun-2027 20:20:47 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT52gR5xz5JzTlXx5kxhb4BtMqmHoCtUsjBBd2rs2TrCQRVM3xP7FiThi8BnRUw5alMZGU6SZUwhTNnn9BhpUK2uB7uLgV3mRoiA1r4TsCflM7pA6rinDkNMqXqURqGM6vAMDzIdlbSZVV8OzbzWBZ7YOoYPIZ4Envmd3qUJaIl5E9acSBlBMkxXjz8teKHujxsvQgHUipfDCN63tJidU4RcCWyV%2FHlrvgRs5WHaYYmn2gLE4PId%2FoLgbi1h9ILqHn8viHQ2XsgkQCysAr5Q1RhItS%2Bq7tPxxijU7yYeHFxBTaboAXL%2BRKf65pVUt%2FamqHd5HEbGD54hjbz4yfYpeDMBIUkAllezQ0m34t5t8k%2BMDG97yVb7d8OrwUl1rIIVTlhBQBmqH0bIgGCDbKGDYhH6YQRoI4dy%2B2eMw0%2Bm%2Fb6IiIK7kOBSj0Y9OGhpsUEp7mPo7nqQrUgu7%2B6dr0zvvGnWn2DUVqo7Zx1cE3hYuZWAStJwCZYcKrRQymhntDweqQdPJ7w3IoDVia0t1eQhTRKI%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>yiproffs.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1498637333http://thecharmshop.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://thecharmshop.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 26 Jun 2017 08:45:11 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT6sSzkBksKiZt6x%2F41Br1G6A5OxOSTspIr035Z%2F2UCj5%2B84m12iNKrjVyQiGeZYghUThZbFg1PmhwtMut9ZLfW%2FmyKnckwZpugGr1dMNxezzthJMBx%2FqKxOqFQCQKozQdZOEGuUPzuVkVPMZ4Pv%2FR6J08%2B7nahITw0CHbpT0c8OJcc32CWplOzMeYQtlbYd43GtWUw9643ZNTUi1Cn8cXakOIytVoIvTc9Z3z4U23V3HeJwYirNLcXnYS%2FQ9QtALS1xS32Xg5K7OBB%2FaItsLEoBNXbqdYs8YCw%2B0JtgaRXGZDQjq%2Fz3TRanhFUj5OvC34%2FFh9cCBmWF7t1Cvj3iZBjSoe5yGgZCeXO6CYH9yp7Mc3s%2FF8HZPotuhKzmMA1X0w1WcGFj67Gyl%2FIH%2B399%2BfOU5r43qDj9QqTzLwaF4zN7T1yvigXzaFRavgMYvulhENbztkjBuMqZykVd2WGygIE9GLNH83w0wBWpX3UoPmwO0fEz%2Fruzt6BhMw5vCpO1Xa6eRiyK%2BA%2BXm5z1CPx2bnyYrMlBpC%2BUJt8dv3cs%2BPqQ4 <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: thecharmshop.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 26 Jun 2017 06:45:11 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498459511.7552617; expires=Thu, 24-Jun-2027 06:45:11 GMT; Max-Age=315360000 <br>Location: http://ww11.thecharmshop.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: thecharmshop.se <br>Referer: http://www.google.com/search?q=thecharmshop.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 26 Jun 2017 06:45:10 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498459510.2697324; expires=Thu, 24-Jun-2027 06:45:10 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT6sSzkBksKiZt6x%2F41Br1G6A5OxOSTspIr035Z%2F2UCj5%2B84m12iNKrjVyQiGeZYghUThZbFg1PmhwtMut9ZLfW%2FmyKnckwZpugGr1dMNxezzthJMBx%2FqKxOqFQCQKozQdZOEGuUPzuVkVPMZ4Pv%2FR6J08%2B7nahITw0CHbpT0c8OJcc32CWplOzMeYQtlbYd43GtWUw9643ZNTUi1Cn8cXakOIytVoIvTc9Z3z4U23V3HeJwYirNLcXnYS%2FQ9QtALS1xS32Xg5K7OBB%2FaItsLEoBNXbqdYs8YCw%2B0JtgaRXGZDQjq%2Fz3TRanhFUj5OvC34%2FFh9cCBmWF7t1Cvj3iZBjSoe5yGgZCeXO6CYH9yp7Mc3s%2FF8HZPotuhKzmMA1X0w1WcGFj67Gyl%2FIH%2B399%2BfOU5r43qDj9QqTzLwaF4zN7T1yvigXzaFRavgMYvulhENbztkjBuMqZykVd2WGygIE9GLNH83w0wBWpX3UoPmwO0fEz%2Fruzt6BhMw5vCpO1Xa6eRiyK%2BA%2BXm5z1CPx2bnyYrMlBpC%2BUJt8dv3cs%2BPqQ4 <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>thecharmshop.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1498482284http://uetd.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://uetd.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Sun, 25 Jun 2017 23:58:59 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT6sSzkBksKiZ%2BZPUKYXra0%2FFhnuHdyleb1wED%2BXhV8lh%2FxBJMbPwH5EPmOke8N1O93HvXq0wi3%2BW6djtMP3V5BcHksE%2FdS7LWs78JXQuQcUbkyjj4vdHGoE0QBh%2FImSjZcJRBLvtZasfFieFJO12v%2FYHVUOaH%2FgyoHZ2qW1%2BrD5OGFqSpmCp68%2FOIO2PmILRy5neT0YQisUldiXGBtd%2BdSBl5mRJbwSNkkgQuFr2xyRBlfq8qeuJPkcB3wFgJKAiig8nmVzV5Sm1PNDSpXEf5rkbaDEqJzcAJiy71JqRY8UU8gx%2Fk56JqAOCFW4cFgMDYIiq2vLp4TFjefb0UG4MPUJzYZOvCOc47rMyO0vcv9WB%2Benc2muU%2B0iycGU54y9iVRkhypjCLBvygJ%2F%2FsL9GmrBR8dp6OhyLlNQqqqYyEdeqsQAE9lCep5r3fpF%2FMTJ0FK7zo0lHjJKb73PD0G4OSR5AxaRKHy%2FLcnnKZwyXkiZxnenL25AJBt2veYqJZx%2FGMZWR4jUKfFwn <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: uetd.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 25 Jun 2017 21:59:02 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498427942.6234080; expires=Wed, 23-Jun-2027 21:59:02 GMT; Max-Age=315360000 <br>Location: http://ww11.uetd.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: uetd.se <br>Referer: http://www.google.com/search?q=uetd.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 25 Jun 2017 21:59:01 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498427941.4928501; expires=Wed, 23-Jun-2027 21:59:01 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT6sSzkBksKiZ%2BZPUKYXra0%2FFhnuHdyleb1wED%2BXhV8lh%2FxBJMbPwH5EPmOke8N1O93HvXq0wi3%2BW6djtMP3V5BcHksE%2FdS7LWs78JXQuQcUbkyjj4vdHGoE0QBh%2FImSjZcJRBLvtZasfFieFJO12v%2FYHVUOaH%2FgyoHZ2qW1%2BrD5OGFqSpmCp68%2FOIO2PmILRy5neT0YQisUldiXGBtd%2BdSBl5mRJbwSNkkgQuFr2xyRBlfq8qeuJPkcB3wFgJKAiig8nmVzV5Sm1PNDSpXEf5rkbaDEqJzcAJiy71JqRY8UU8gx%2Fk56JqAOCFW4cFgMDYIiq2vLp4TFjefb0UG4MPUJzYZOvCOc47rMyO0vcv9WB%2Benc2muU%2B0iycGU54y9iVRkhypjCLBvygJ%2F%2FsL9GmrBR8dp6OhyLlNQqqqYyEdeqsQAE9lCep5r3fpF%2FMTJ0FK7zo0lHjJKb73PD0G4OSR5AxaRKHy%2FLcnnKZwyXkiZxnenL25AJBt2veYqJZx%2FGMZWR4jUKfFwn <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>uetd.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1498482240http://marktmedia.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://marktmedia.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Wed, 21 Jun 2017 03:21:43 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3OnBIzJNWcRgvk79gtlWt29Mg%2B40fVZMghl3lJQo%2FjKO9JKK%2Fw4x%2BEBXAUaU1qLy5wHYmKyXvhB6zoBOe2HsaBeKldXR2%2BybNb95qvnJm7HSVT46poULdla3xO7o8Fm3zc3pejauJdhy0oQ28iG39Tumz5Q2H9z0z3NJTNMUylbH9rXNfBQVOoLoB4RP%2B94%2FrHNOhi2zKOsOfZGouw5CHZcxqdsuvWPl7%2FPLGeogT%2FCNdluykbB9GP59FAKpd2%2BNLxo8pJAfKALjyUGVA2ULj0REZOGhgwGFGEkpDw6FMlZ%2BKfP9ebjzr14aw2X9DePvgZgMTnVtH7qZroMSJL514V%2BeQauDUN4vlCIpChNfkS4q%2Bw8sxC74e0zRXzRdh%2B4Ao4Ga5cvyb7TFVplRqPhhXMSmhyh5rh7R%2B171sHup10L1rSsr1YCIuC19T91I9VNvLCfr3osy6d75dW5OOr2tG%2FSSNIPaWT67D0NNT6FR2OY3GASuwWNNfQAR7uJwu%2BBK%2F4mcnQQelDWkMpnggCPSkK2eE1RtrlDPA%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: marktmedia.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 21 Jun 2017 01:21:44 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498008104.8636732; expires=Sat, 19-Jun-2027 01:21:44 GMT; Max-Age=315360000 <br>Location: http://ww11.marktmedia.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: marktmedia.se <br>Referer: http://www.google.com/search?q=marktmedia.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 21 Jun 2017 01:21:43 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498008103.5356352; expires=Sat, 19-Jun-2027 01:21:43 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3OnBIzJNWcRgvk79gtlWt29Mg%2B40fVZMghl3lJQo%2FjKO9JKK%2Fw4x%2BEBXAUaU1qLy5wHYmKyXvhB6zoBOe2HsaBeKldXR2%2BybNb95qvnJm7HSVT46poULdla3xO7o8Fm3zc3pejauJdhy0oQ28iG39Tumz5Q2H9z0z3NJTNMUylbH9rXNfBQVOoLoB4RP%2B94%2FrHNOhi2zKOsOfZGouw5CHZcxqdsuvWPl7%2FPLGeogT%2FCNdluykbB9GP59FAKpd2%2BNLxo8pJAfKALjyUGVA2ULj0REZOGhgwGFGEkpDw6FMlZ%2BKfP9ebjzr14aw2X9DePvgZgMTnVtH7qZroMSJL514V%2BeQauDUN4vlCIpChNfkS4q%2Bw8sxC74e0zRXzRdh%2B4Ao4Ga5cvyb7TFVplRqPhhXMSmhyh5rh7R%2B171sHup10L1rSsr1YCIuC19T91I9VNvLCfr3osy6d75dW5OOr2tG%2FSSNIPaWT67D0NNT6FR2OY3GASuwWNNfQAR7uJwu%2BBK%2F4mcnQQelDWkMpnggCPSkK2eE1RtrlDPA%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>marktmedia.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1498050207http://niinis.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://niinis.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 01:44:18 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjJvHJhvP4q8J8JSYC4Cj1WXvXnPisT69VSn652%2BxUnujuGgBpI4FcQGcq7qtMV7mMTbmumOrTPc%2FxoowXQHuhBJrCsYmfjAr9eGeSceh7MWEih7ku7hMY2oGjIuQZaZ%2BMxxXXhgA4XZkwLiye%2BbBfvE6vZWo0APvGT345Jb4sWyICV%2FvyGKLFcPYDvBdX%2Fil0L0P%2Foux5U%2BVsNhqEvq7uCgog4vKMxv4k0Lms9iCUZOPEuPUhu%2BquDq3SmLxSDdjbmMT0fIV7HrcV8E6gg5SC8m%2BgipV%2F047ThLOqMwv%2FDWxIFmZiDDWBUiUq3aAgNdHV0cHDHmFadnJHpQUe4ghpJRBdUuuTzTyVkOtXASfZ9KZBBWVTtVullWCZcNfA3wO2HTpjczC%2BaPi20nCp5E6qdC0GHUEHz3aQ5xQ5UauTMfnmr6F67uXVulv3hbLGXt4e2XmC52oXGOi%2BCk0xSyYziLaE3BdNqd122lVOF64phJR5vRoPxrWrCdGvITOk2a0Z <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: niinis.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:44:18 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497829458.8107049; expires=Wed, 16-Jun-2027 23:44:18 GMT; Max-Age=315360000 <br>Location: http://ww38.niinis.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: niinis.se <br>Referer: http://www.google.com/search?q=niinis.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:44:17 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497829457.1472079; expires=Wed, 16-Jun-2027 23:44:17 GMT <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjJvHJhvP4q8J8JSYC4Cj1WXvXnPisT69VSn652%2BxUnujuGgBpI4FcQGcq7qtMV7mMTbmumOrTPc%2FxoowXQHuhBJrCsYmfjAr9eGeSceh7MWEih7ku7hMY2oGjIuQZaZ%2BMxxXXhgA4XZkwLiye%2BbBfvE6vZWo0APvGT345Jb4sWyICV%2FvyGKLFcPYDvBdX%2Fil0L0P%2Foux5U%2BVsNhqEvq7uCgog4vKMxv4k0Lms9iCUZOPEuPUhu%2BquDq3SmLxSDdjbmMT0fIV7HrcV8E6gg5SC8m%2BgipV%2F047ThLOqMwv%2FDWxIFmZiDDWBUiUq3aAgNdHV0cHDHmFadnJHpQUe4ghpJRBdUuuTzTyVkOtXASfZ9KZBBWVTtVullWCZcNfA3wO2HTpjczC%2BaPi20nCp5E6qdC0GHUEHz3aQ5xQ5UauTMfnmr6F67uXVulv3hbLGXt4e2XmC52oXGOi%2BCk0xSyYziLaE3BdNqd122lVOF64phJR5vRoPxrWrCdGvITOk2a0Z <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>niinis.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497853540http://hrcommittment.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://hrcommittment.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 00:23:40 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjZBXIXJ2PKx68NoD%2BriNeKkbmT%2FynmSKuT8HRjHuL4LfnLSMUa9cZyMt%2F6Ksix0%2BwZvwaE4Eala8v6tRVyVa4SA3YIRpRjXT7QW6giILWy65e9WgO2fFohQcKK2KMW%2FOG0i5erFjd1ixZJPa07cTjMzXfFIu7MYa7nvzYim48Uu4wJvjT2JY00dDv%2FnzVigGDgc8eFRE3%2BXsSWDMIIsIhfKp%2B8djqXAW6vQPnf5rnoLDRzlvvPmv%2B0jYJaO6z9yJqU0xbyUxGPpBZNe0W1%2BdJQkSq9fynMGmgI7FS1xgpH%2BlNlDbYWgYA7g%2FaM3vwj4LIpUButZRBQf43omnGZlHUUNHQyy07eZREinTLR45oxsanZg3qL7HMYh0ruhX%2Bxr%2FraQ3jLMKvosAUEIBXPEqXD1t75CCg1FsIg0FsgtARXyhA8HH6D4rh1dWXli4qF0LEJnrTDW27MC31FJuq2owbfvnaB325o1Y%2Bn8Jp9%2FaVRvw7rsCmn%2FDPkneaEldh%2BsRy3JbAGDzn6%2ByB%2B2rGn8uVeAzOkGRW1cAV4YJ%2FXmmZAgg%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hrcommittment.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 22:23:41 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497824621.1672618; expires=Wed, 16-Jun-2027 22:23:41 GMT; Max-Age=315360000 <br>Location: http://ww11.hrcommittment.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hrcommittment.se <br>Referer: http://www.google.com/search?q=hrcommittment.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 22:23:40 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497824620.3209166; expires=Wed, 16-Jun-2027 22:23:40 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjZBXIXJ2PKx68NoD%2BriNeKkbmT%2FynmSKuT8HRjHuL4LfnLSMUa9cZyMt%2F6Ksix0%2BwZvwaE4Eala8v6tRVyVa4SA3YIRpRjXT7QW6giILWy65e9WgO2fFohQcKK2KMW%2FOG0i5erFjd1ixZJPa07cTjMzXfFIu7MYa7nvzYim48Uu4wJvjT2JY00dDv%2FnzVigGDgc8eFRE3%2BXsSWDMIIsIhfKp%2B8djqXAW6vQPnf5rnoLDRzlvvPmv%2B0jYJaO6z9yJqU0xbyUxGPpBZNe0W1%2BdJQkSq9fynMGmgI7FS1xgpH%2BlNlDbYWgYA7g%2FaM3vwj4LIpUButZRBQf43omnGZlHUUNHQyy07eZREinTLR45oxsanZg3qL7HMYh0ruhX%2Bxr%2FraQ3jLMKvosAUEIBXPEqXD1t75CCg1FsIg0FsgtARXyhA8HH6D4rh1dWXli4qF0LEJnrTDW27MC31FJuq2owbfvnaB325o1Y%2Bn8Jp9%2FaVRvw7rsCmn%2FDPkneaEldh%2BsRy3JbAGDzn6%2ByB%2B2rGn8uVeAzOkGRW1cAV4YJ%2FXmmZAgg%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>hrcommittment.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1497853532http://pokemast.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://pokemast.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Sun, 18 Jun 2017 22:48:01 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjA6RlB3Gjni43ltFvpWS5YKDwaKFIhO2N33XoR4XrnWkt%2B2n9kkQut%2FurTci74pIBpeuPrs02dw0x6S8f800k1trERcIUxhtCTZ1z%2FoBP1%2Fmwu9jIcl%2F9e97tzyZNPE5UZ2PRsztGgjeHh%2BI7b9HZmUnWQ4VDZeM%2FHTIEn5PzkyQLAUttub2YSdTLZAPpxclr5Ay0RIx3uubVWu%2FrkQbETjWdLoFjJL%2BVPV2p9ShfN8V0YaLNnYKG3Wgt%2FUvl3Ifdc1aRhqlf%2Fa0riHO0rXBp10ZANYZRx92EP6i9L%2BjDkynK1J%2FBcLQF87AvU%2F9hH%2BX8xuTiNmJlJ84%2B%2FIo1Hwbrh3BJ6%2FZcYiNce18j4GMKMu%2F3KcyoZ9mnSSLF%2B8%2FrABPm3vlSR2Pxog1ei00feBQ2KD2nl7aMAWtAAzDwHl%2FyMCJf156QseZ4cgZ6xRxBESvNm%2FSlY5%2BWpW2%2F%2BmM3OF%2BPYNGLhjjoyGgQHuwWDBDZdmlzs85MvJrBCzjurm5R5BKSOMfjdNbJCgI%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: pokemast.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 20:48:02 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497818882.5084805; expires=Wed, 16-Jun-2027 20:48:02 GMT <br>Location: http://ww11.pokemast.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: pokemast.se <br>Referer: http://www.google.com/search?q=pokemast.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 20:48:01 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497818881.4283170; expires=Wed, 16-Jun-2027 20:48:01 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjA6RlB3Gjni43ltFvpWS5YKDwaKFIhO2N33XoR4XrnWkt%2B2n9kkQut%2FurTci74pIBpeuPrs02dw0x6S8f800k1trERcIUxhtCTZ1z%2FoBP1%2Fmwu9jIcl%2F9e97tzyZNPE5UZ2PRsztGgjeHh%2BI7b9HZmUnWQ4VDZeM%2FHTIEn5PzkyQLAUttub2YSdTLZAPpxclr5Ay0RIx3uubVWu%2FrkQbETjWdLoFjJL%2BVPV2p9ShfN8V0YaLNnYKG3Wgt%2FUvl3Ifdc1aRhqlf%2Fa0riHO0rXBp10ZANYZRx92EP6i9L%2BjDkynK1J%2FBcLQF87AvU%2F9hH%2BX8xuTiNmJlJ84%2B%2FIo1Hwbrh3BJ6%2FZcYiNce18j4GMKMu%2F3KcyoZ9mnSSLF%2B8%2FrABPm3vlSR2Pxog1ei00feBQ2KD2nl7aMAWtAAzDwHl%2FyMCJf156QseZ4cgZ6xRxBESvNm%2FSlY5%2BWpW2%2F%2BmM3OF%2BPYNGLhjjoyGgQHuwWDBDZdmlzs85MvJrBCzjurm5R5BKSOMfjdNbJCgI%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>pokemast.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1497853509http://hyrabostader.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://hyrabostader.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 12:20:50 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hyrabostader.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 10:20:49 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497608449.6674509; expires=Mon, 14-Jun-2027 10:20:49 GMT <br>Location: http://ww11.hyrabostader.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hyrabostader.se <br>Referer: http://www.google.com/search?q=hyrabostader.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 10:20:48 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497608448.4850257; expires=Mon, 14-Jun-2027 10:20:48 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>hyrabostader.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497625750http://sweru.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://sweru.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 04:28:09 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfmn9r89F7JUY0HppnNZAN44aTjkfm3P8dWP3wwoRBw16lOB5Ks%2BVmMxzaEpR%2FBDuPdsklV0Xzs2nFMM7Wbl%2BLo3KDy8pU16j1WMVBQOEdeYoI1708FLJYTHwuhHmslNIEuhwWZiGAB%2BDWyDUgeOKt1y5ztxjNgLr8u5Mn0MZNu6Y26xrVjwGxzW9kzmiNpvaYY1zGvR70UhqfaPXnCySZk4c%2BFdk5Un7h7Eql%2BkwryZNouL722DbAp%2Bq53TgPMd3S2Sao%2B04BcuChS4BE1k%2Bgcycd2rYB%2Bdgy35g54hhAjFkCSlmziLw3cqoWRUMiQ3J%2BX5qT5t28efQmSjzo1jxrySWFuq%2BDIKfHpnKV87sOemruxhM0AQX7CK7eNA8eqqOAt3HpltQj7pmh1wuNaFLf2TjzRgWuN3mNBe2yOaIbxy4b4Ratj3%2FoT4yBCCv%2FHVwswspB6k6jxJhv4zVy6qtzKPJwqSJ3PO0rE6eFeSCg070vh4N47Nf%2FF9AqtHCpySVCBPw3J6foEyk%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sweru.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 02:28:09 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497580089.6871549; expires=Mon, 14-Jun-2027 02:28:09 GMT; Max-Age=315360000 <br>Location: http://ww11.sweru.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sweru.se <br>Referer: http://www.google.com/search?q=sweru.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 02:28:08 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497580088.1968508; expires=Mon, 14-Jun-2027 02:28:08 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfmn9r89F7JUY0HppnNZAN44aTjkfm3P8dWP3wwoRBw16lOB5Ks%2BVmMxzaEpR%2FBDuPdsklV0Xzs2nFMM7Wbl%2BLo3KDy8pU16j1WMVBQOEdeYoI1708FLJYTHwuhHmslNIEuhwWZiGAB%2BDWyDUgeOKt1y5ztxjNgLr8u5Mn0MZNu6Y26xrVjwGxzW9kzmiNpvaYY1zGvR70UhqfaPXnCySZk4c%2BFdk5Un7h7Eql%2BkwryZNouL722DbAp%2Bq53TgPMd3S2Sao%2B04BcuChS4BE1k%2Bgcycd2rYB%2Bdgy35g54hhAjFkCSlmziLw3cqoWRUMiQ3J%2BX5qT5t28efQmSjzo1jxrySWFuq%2BDIKfHpnKV87sOemruxhM0AQX7CK7eNA8eqqOAt3HpltQj7pmh1wuNaFLf2TjzRgWuN3mNBe2yOaIbxy4b4Ratj3%2FoT4yBCCv%2FHVwswspB6k6jxJhv4zVy6qtzKPJwqSJ3PO0rE6eFeSCg070vh4N47Nf%2FF9AqtHCpySVCBPw3J6foEyk%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>sweru.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497625578http://xn--kunsngen-3za.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://xn--kunsngen-3za.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 12 Jun 2017 23:03:04 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDLnsLTWVMlHYbf5mUvyI%2BZAugEYxEczgAktM4g1YUrYmrwU7d%2FkUkbwaTZ5Qvk9xy46dlaN585DbOJ5zeWjmQ7ow5%2FOYqV9%2B2%2FaoDiu6PQEki7I%2FlDr2PdwCI6bakVwLRWrAMDym1vhrE3LT3Sy4YV8%2BQJ0pV3lZBSJsEJA9yzqmof3UTOOrjwhXLFWz95z2asjGy7PSGyMc88aLBI7Tcm6K8OL%2F9GekX3jXo011tgCKypd4Mimj4KS8Pbr%2BV89Q4AfmzBCvfW3oOiUCCYdqdJjrDzYex%2Bq3%2BuQgBF9bt5uKbZTY5WBtkd7wluWA5mWtV%2B5x7e%2B18kTcrcG6bLB72Fo3MnJD%2BqA2O1H0Eps6xOOYRciZl6t8Th%2Fn0PMTLe7H%2BEl%2F4OBmcsRPHHea8rzd1vBxU%2BICFec5si0XMIONmBz8ILC8tileXSuDjc90cAIeWXcS54ZwZqqeMhB7N5%2BaWM%2FWrM0IrfAZ6QWaB8MDeZCLWY3k3wfyfhaqOrNikYm2pSTy9F2sgDaHewwf4cZ7Et51x7cxdK6TkpMXuM2g5OvljmPvcpwzAhg%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: xn--kunsngen-3za.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 21:03:04 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497301384.5322977; expires=Thu, 10-Jun-2027 21:03:04 GMT <br>Location: http://ww11.xn--kunsngen-3za.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: xn--kunsngen-3za.se <br>Referer: http://www.google.com/search?q=xn--kunsngen-3za.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 21:03:03 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497301383.8976828; expires=Thu, 10-Jun-2027 21:03:03 GMT <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDLnsLTWVMlHYbf5mUvyI%2BZAugEYxEczgAktM4g1YUrYmrwU7d%2FkUkbwaTZ5Qvk9xy46dlaN585DbOJ5zeWjmQ7ow5%2FOYqV9%2B2%2FaoDiu6PQEki7I%2FlDr2PdwCI6bakVwLRWrAMDym1vhrE3LT3Sy4YV8%2BQJ0pV3lZBSJsEJA9yzqmof3UTOOrjwhXLFWz95z2asjGy7PSGyMc88aLBI7Tcm6K8OL%2F9GekX3jXo011tgCKypd4Mimj4KS8Pbr%2BV89Q4AfmzBCvfW3oOiUCCYdqdJjrDzYex%2Bq3%2BuQgBF9bt5uKbZTY5WBtkd7wluWA5mWtV%2B5x7e%2B18kTcrcG6bLB72Fo3MnJD%2BqA2O1H0Eps6xOOYRciZl6t8Th%2Fn0PMTLe7H%2BEl%2F4OBmcsRPHHea8rzd1vBxU%2BICFec5si0XMIONmBz8ILC8tileXSuDjc90cAIeWXcS54ZwZqqeMhB7N5%2BaWM%2FWrM0IrfAZ6QWaB8MDeZCLWY3k3wfyfhaqOrNikYm2pSTy9F2sgDaHewwf4cZ7Et51x7cxdK6TkpMXuM2g5OvljmPvcpwzAhg%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>xn--kunsngen-3za.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497349744