Säkrare hemsida med .sehttp://marktmedia.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://marktmedia.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Wed, 21 Jun 2017 03:21:43 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3OnBIzJNWcRgvk79gtlWt29Mg%2B40fVZMghl3lJQo%2FjKO9JKK%2Fw4x%2BEBXAUaU1qLy5wHYmKyXvhB6zoBOe2HsaBeKldXR2%2BybNb95qvnJm7HSVT46poULdla3xO7o8Fm3zc3pejauJdhy0oQ28iG39Tumz5Q2H9z0z3NJTNMUylbH9rXNfBQVOoLoB4RP%2B94%2FrHNOhi2zKOsOfZGouw5CHZcxqdsuvWPl7%2FPLGeogT%2FCNdluykbB9GP59FAKpd2%2BNLxo8pJAfKALjyUGVA2ULj0REZOGhgwGFGEkpDw6FMlZ%2BKfP9ebjzr14aw2X9DePvgZgMTnVtH7qZroMSJL514V%2BeQauDUN4vlCIpChNfkS4q%2Bw8sxC74e0zRXzRdh%2B4Ao4Ga5cvyb7TFVplRqPhhXMSmhyh5rh7R%2B171sHup10L1rSsr1YCIuC19T91I9VNvLCfr3osy6d75dW5OOr2tG%2FSSNIPaWT67D0NNT6FR2OY3GASuwWNNfQAR7uJwu%2BBK%2F4mcnQQelDWkMpnggCPSkK2eE1RtrlDPA%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: marktmedia.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 21 Jun 2017 01:21:44 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498008104.8636732; expires=Sat, 19-Jun-2027 01:21:44 GMT; Max-Age=315360000 <br>Location: http://ww11.marktmedia.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: marktmedia.se <br>Referer: http://www.google.com/search?q=marktmedia.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Wed, 21 Jun 2017 01:21:43 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1498008103.5356352; expires=Sat, 19-Jun-2027 01:21:43 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3OnBIzJNWcRgvk79gtlWt29Mg%2B40fVZMghl3lJQo%2FjKO9JKK%2Fw4x%2BEBXAUaU1qLy5wHYmKyXvhB6zoBOe2HsaBeKldXR2%2BybNb95qvnJm7HSVT46poULdla3xO7o8Fm3zc3pejauJdhy0oQ28iG39Tumz5Q2H9z0z3NJTNMUylbH9rXNfBQVOoLoB4RP%2B94%2FrHNOhi2zKOsOfZGouw5CHZcxqdsuvWPl7%2FPLGeogT%2FCNdluykbB9GP59FAKpd2%2BNLxo8pJAfKALjyUGVA2ULj0REZOGhgwGFGEkpDw6FMlZ%2BKfP9ebjzr14aw2X9DePvgZgMTnVtH7qZroMSJL514V%2BeQauDUN4vlCIpChNfkS4q%2Bw8sxC74e0zRXzRdh%2B4Ao4Ga5cvyb7TFVplRqPhhXMSmhyh5rh7R%2B171sHup10L1rSsr1YCIuC19T91I9VNvLCfr3osy6d75dW5OOr2tG%2FSSNIPaWT67D0NNT6FR2OY3GASuwWNNfQAR7uJwu%2BBK%2F4mcnQQelDWkMpnggCPSkK2eE1RtrlDPA%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>marktmedia.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1498050207http://niinis.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://niinis.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 01:44:18 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjJvHJhvP4q8J8JSYC4Cj1WXvXnPisT69VSn652%2BxUnujuGgBpI4FcQGcq7qtMV7mMTbmumOrTPc%2FxoowXQHuhBJrCsYmfjAr9eGeSceh7MWEih7ku7hMY2oGjIuQZaZ%2BMxxXXhgA4XZkwLiye%2BbBfvE6vZWo0APvGT345Jb4sWyICV%2FvyGKLFcPYDvBdX%2Fil0L0P%2Foux5U%2BVsNhqEvq7uCgog4vKMxv4k0Lms9iCUZOPEuPUhu%2BquDq3SmLxSDdjbmMT0fIV7HrcV8E6gg5SC8m%2BgipV%2F047ThLOqMwv%2FDWxIFmZiDDWBUiUq3aAgNdHV0cHDHmFadnJHpQUe4ghpJRBdUuuTzTyVkOtXASfZ9KZBBWVTtVullWCZcNfA3wO2HTpjczC%2BaPi20nCp5E6qdC0GHUEHz3aQ5xQ5UauTMfnmr6F67uXVulv3hbLGXt4e2XmC52oXGOi%2BCk0xSyYziLaE3BdNqd122lVOF64phJR5vRoPxrWrCdGvITOk2a0Z <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: niinis.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:44:18 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497829458.8107049; expires=Wed, 16-Jun-2027 23:44:18 GMT; Max-Age=315360000 <br>Location: http://ww38.niinis.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: niinis.se <br>Referer: http://www.google.com/search?q=niinis.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 23:44:17 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497829457.1472079; expires=Wed, 16-Jun-2027 23:44:17 GMT <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjJvHJhvP4q8J8JSYC4Cj1WXvXnPisT69VSn652%2BxUnujuGgBpI4FcQGcq7qtMV7mMTbmumOrTPc%2FxoowXQHuhBJrCsYmfjAr9eGeSceh7MWEih7ku7hMY2oGjIuQZaZ%2BMxxXXhgA4XZkwLiye%2BbBfvE6vZWo0APvGT345Jb4sWyICV%2FvyGKLFcPYDvBdX%2Fil0L0P%2Foux5U%2BVsNhqEvq7uCgog4vKMxv4k0Lms9iCUZOPEuPUhu%2BquDq3SmLxSDdjbmMT0fIV7HrcV8E6gg5SC8m%2BgipV%2F047ThLOqMwv%2FDWxIFmZiDDWBUiUq3aAgNdHV0cHDHmFadnJHpQUe4ghpJRBdUuuTzTyVkOtXASfZ9KZBBWVTtVullWCZcNfA3wO2HTpjczC%2BaPi20nCp5E6qdC0GHUEHz3aQ5xQ5UauTMfnmr6F67uXVulv3hbLGXt4e2XmC52oXGOi%2BCk0xSyYziLaE3BdNqd122lVOF64phJR5vRoPxrWrCdGvITOk2a0Z <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>niinis.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497853540http://hrcommittment.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://hrcommittment.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 19 Jun 2017 00:23:40 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjZBXIXJ2PKx68NoD%2BriNeKkbmT%2FynmSKuT8HRjHuL4LfnLSMUa9cZyMt%2F6Ksix0%2BwZvwaE4Eala8v6tRVyVa4SA3YIRpRjXT7QW6giILWy65e9WgO2fFohQcKK2KMW%2FOG0i5erFjd1ixZJPa07cTjMzXfFIu7MYa7nvzYim48Uu4wJvjT2JY00dDv%2FnzVigGDgc8eFRE3%2BXsSWDMIIsIhfKp%2B8djqXAW6vQPnf5rnoLDRzlvvPmv%2B0jYJaO6z9yJqU0xbyUxGPpBZNe0W1%2BdJQkSq9fynMGmgI7FS1xgpH%2BlNlDbYWgYA7g%2FaM3vwj4LIpUButZRBQf43omnGZlHUUNHQyy07eZREinTLR45oxsanZg3qL7HMYh0ruhX%2Bxr%2FraQ3jLMKvosAUEIBXPEqXD1t75CCg1FsIg0FsgtARXyhA8HH6D4rh1dWXli4qF0LEJnrTDW27MC31FJuq2owbfvnaB325o1Y%2Bn8Jp9%2FaVRvw7rsCmn%2FDPkneaEldh%2BsRy3JbAGDzn6%2ByB%2B2rGn8uVeAzOkGRW1cAV4YJ%2FXmmZAgg%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hrcommittment.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 22:23:41 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497824621.1672618; expires=Wed, 16-Jun-2027 22:23:41 GMT; Max-Age=315360000 <br>Location: http://ww11.hrcommittment.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hrcommittment.se <br>Referer: http://www.google.com/search?q=hrcommittment.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 22:23:40 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497824620.3209166; expires=Wed, 16-Jun-2027 22:23:40 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjZBXIXJ2PKx68NoD%2BriNeKkbmT%2FynmSKuT8HRjHuL4LfnLSMUa9cZyMt%2F6Ksix0%2BwZvwaE4Eala8v6tRVyVa4SA3YIRpRjXT7QW6giILWy65e9WgO2fFohQcKK2KMW%2FOG0i5erFjd1ixZJPa07cTjMzXfFIu7MYa7nvzYim48Uu4wJvjT2JY00dDv%2FnzVigGDgc8eFRE3%2BXsSWDMIIsIhfKp%2B8djqXAW6vQPnf5rnoLDRzlvvPmv%2B0jYJaO6z9yJqU0xbyUxGPpBZNe0W1%2BdJQkSq9fynMGmgI7FS1xgpH%2BlNlDbYWgYA7g%2FaM3vwj4LIpUButZRBQf43omnGZlHUUNHQyy07eZREinTLR45oxsanZg3qL7HMYh0ruhX%2Bxr%2FraQ3jLMKvosAUEIBXPEqXD1t75CCg1FsIg0FsgtARXyhA8HH6D4rh1dWXli4qF0LEJnrTDW27MC31FJuq2owbfvnaB325o1Y%2Bn8Jp9%2FaVRvw7rsCmn%2FDPkneaEldh%2BsRy3JbAGDzn6%2ByB%2B2rGn8uVeAzOkGRW1cAV4YJ%2FXmmZAgg%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>hrcommittment.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1497853532http://pokemast.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://pokemast.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Sun, 18 Jun 2017 22:48:01 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjA6RlB3Gjni43ltFvpWS5YKDwaKFIhO2N33XoR4XrnWkt%2B2n9kkQut%2FurTci74pIBpeuPrs02dw0x6S8f800k1trERcIUxhtCTZ1z%2FoBP1%2Fmwu9jIcl%2F9e97tzyZNPE5UZ2PRsztGgjeHh%2BI7b9HZmUnWQ4VDZeM%2FHTIEn5PzkyQLAUttub2YSdTLZAPpxclr5Ay0RIx3uubVWu%2FrkQbETjWdLoFjJL%2BVPV2p9ShfN8V0YaLNnYKG3Wgt%2FUvl3Ifdc1aRhqlf%2Fa0riHO0rXBp10ZANYZRx92EP6i9L%2BjDkynK1J%2FBcLQF87AvU%2F9hH%2BX8xuTiNmJlJ84%2B%2FIo1Hwbrh3BJ6%2FZcYiNce18j4GMKMu%2F3KcyoZ9mnSSLF%2B8%2FrABPm3vlSR2Pxog1ei00feBQ2KD2nl7aMAWtAAzDwHl%2FyMCJf156QseZ4cgZ6xRxBESvNm%2FSlY5%2BWpW2%2F%2BmM3OF%2BPYNGLhjjoyGgQHuwWDBDZdmlzs85MvJrBCzjurm5R5BKSOMfjdNbJCgI%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: pokemast.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 20:48:02 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497818882.5084805; expires=Wed, 16-Jun-2027 20:48:02 GMT <br>Location: http://ww11.pokemast.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: pokemast.se <br>Referer: http://www.google.com/search?q=pokemast.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Sun, 18 Jun 2017 20:48:01 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497818881.4283170; expires=Wed, 16-Jun-2027 20:48:01 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVjA6RlB3Gjni43ltFvpWS5YKDwaKFIhO2N33XoR4XrnWkt%2B2n9kkQut%2FurTci74pIBpeuPrs02dw0x6S8f800k1trERcIUxhtCTZ1z%2FoBP1%2Fmwu9jIcl%2F9e97tzyZNPE5UZ2PRsztGgjeHh%2BI7b9HZmUnWQ4VDZeM%2FHTIEn5PzkyQLAUttub2YSdTLZAPpxclr5Ay0RIx3uubVWu%2FrkQbETjWdLoFjJL%2BVPV2p9ShfN8V0YaLNnYKG3Wgt%2FUvl3Ifdc1aRhqlf%2Fa0riHO0rXBp10ZANYZRx92EP6i9L%2BjDkynK1J%2FBcLQF87AvU%2F9hH%2BX8xuTiNmJlJ84%2B%2FIo1Hwbrh3BJ6%2FZcYiNce18j4GMKMu%2F3KcyoZ9mnSSLF%2B8%2FrABPm3vlSR2Pxog1ei00feBQ2KD2nl7aMAWtAAzDwHl%2FyMCJf156QseZ4cgZ6xRxBESvNm%2FSlY5%2BWpW2%2F%2BmM3OF%2BPYNGLhjjoyGgQHuwWDBDZdmlzs85MvJrBCzjurm5R5BKSOMfjdNbJCgI%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>pokemast.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@lb-212-195.above.com abuse@above.com1497853509http://hyrabostader.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://hyrabostader.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 12:20:50 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hyrabostader.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 10:20:49 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497608449.6674509; expires=Mon, 14-Jun-2027 10:20:49 GMT <br>Location: http://ww11.hyrabostader.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: hyrabostader.se <br>Referer: http://www.google.com/search?q=hyrabostader.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 10:20:48 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497608448.4850257; expires=Mon, 14-Jun-2027 10:20:48 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>hyrabostader.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497625750http://sweru.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://sweru.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Fri, 16 Jun 2017 04:28:09 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfmn9r89F7JUY0HppnNZAN44aTjkfm3P8dWP3wwoRBw16lOB5Ks%2BVmMxzaEpR%2FBDuPdsklV0Xzs2nFMM7Wbl%2BLo3KDy8pU16j1WMVBQOEdeYoI1708FLJYTHwuhHmslNIEuhwWZiGAB%2BDWyDUgeOKt1y5ztxjNgLr8u5Mn0MZNu6Y26xrVjwGxzW9kzmiNpvaYY1zGvR70UhqfaPXnCySZk4c%2BFdk5Un7h7Eql%2BkwryZNouL722DbAp%2Bq53TgPMd3S2Sao%2B04BcuChS4BE1k%2Bgcycd2rYB%2Bdgy35g54hhAjFkCSlmziLw3cqoWRUMiQ3J%2BX5qT5t28efQmSjzo1jxrySWFuq%2BDIKfHpnKV87sOemruxhM0AQX7CK7eNA8eqqOAt3HpltQj7pmh1wuNaFLf2TjzRgWuN3mNBe2yOaIbxy4b4Ratj3%2FoT4yBCCv%2FHVwswspB6k6jxJhv4zVy6qtzKPJwqSJ3PO0rE6eFeSCg070vh4N47Nf%2FF9AqtHCpySVCBPw3J6foEyk%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sweru.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 02:28:09 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497580089.6871549; expires=Mon, 14-Jun-2027 02:28:09 GMT; Max-Age=315360000 <br>Location: http://ww11.sweru.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: sweru.se <br>Referer: http://www.google.com/search?q=sweru.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Fri, 16 Jun 2017 02:28:08 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.6.30-0+deb8u1 <br>Set-Cookie: __tad=1497580088.1968508; expires=Mon, 14-Jun-2027 02:28:08 GMT; Max-Age=315360000 <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfmn9r89F7JUY0HppnNZAN44aTjkfm3P8dWP3wwoRBw16lOB5Ks%2BVmMxzaEpR%2FBDuPdsklV0Xzs2nFMM7Wbl%2BLo3KDy8pU16j1WMVBQOEdeYoI1708FLJYTHwuhHmslNIEuhwWZiGAB%2BDWyDUgeOKt1y5ztxjNgLr8u5Mn0MZNu6Y26xrVjwGxzW9kzmiNpvaYY1zGvR70UhqfaPXnCySZk4c%2BFdk5Un7h7Eql%2BkwryZNouL722DbAp%2Bq53TgPMd3S2Sao%2B04BcuChS4BE1k%2Bgcycd2rYB%2Bdgy35g54hhAjFkCSlmziLw3cqoWRUMiQ3J%2BX5qT5t28efQmSjzo1jxrySWFuq%2BDIKfHpnKV87sOemruxhM0AQX7CK7eNA8eqqOAt3HpltQj7pmh1wuNaFLf2TjzRgWuN3mNBe2yOaIbxy4b4Ratj3%2FoT4yBCCv%2FHVwswspB6k6jxJhv4zVy6qtzKPJwqSJ3PO0rE6eFeSCg070vh4N47Nf%2FF9AqtHCpySVCBPw3J6foEyk%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>sweru.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497625578http://xn--kunsngen-3za.se/ (103.224.212.195) - Serp-hijackingAttacked url: http://xn--kunsngen-3za.se/<br>Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)<br>Attack detected Mon, 12 Jun 2017 23:03:04 +0200<br><br>Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDLnsLTWVMlHYbf5mUvyI%2BZAugEYxEczgAktM4g1YUrYmrwU7d%2FkUkbwaTZ5Qvk9xy46dlaN585DbOJ5zeWjmQ7ow5%2FOYqV9%2B2%2FaoDiu6PQEki7I%2FlDr2PdwCI6bakVwLRWrAMDym1vhrE3LT3Sy4YV8%2BQJ0pV3lZBSJsEJA9yzqmof3UTOOrjwhXLFWz95z2asjGy7PSGyMc88aLBI7Tcm6K8OL%2F9GekX3jXo011tgCKypd4Mimj4KS8Pbr%2BV89Q4AfmzBCvfW3oOiUCCYdqdJjrDzYex%2Bq3%2BuQgBF9bt5uKbZTY5WBtkd7wluWA5mWtV%2B5x7e%2B18kTcrcG6bLB72Fo3MnJD%2BqA2O1H0Eps6xOOYRciZl6t8Th%2Fn0PMTLe7H%2BEl%2F4OBmcsRPHHea8rzd1vBxU%2BICFec5si0XMIONmBz8ILC8tileXSuDjc90cAIeWXcS54ZwZqqeMhB7N5%2BaWM%2FWrM0IrfAZ6QWaB8MDeZCLWY3k3wfyfhaqOrNikYm2pSTy9F2sgDaHewwf4cZ7Et51x7cxdK6TkpMXuM2g5OvljmPvcpwzAhg%3D%3D <br><br>HTTP traffic without referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: xn--kunsngen-3za.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 21:03:04 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497301384.5322977; expires=Thu, 10-Jun-2027 21:03:04 GMT <br>Location: http://ww11.xn--kunsngen-3za.se/ <br>Connection: close <br>Content-Type: text/html; charset=UTF-8 <br> <br><br>HTTP traffic with referer:<br>HTTP headers sent:<br>HEAD / HTTP/1.1 <br>Host: xn--kunsngen-3za.se <br>Referer: http://www.google.com/search?q=xn--kunsngen-3za.se <br>Connection: Close <br> <br>HTTP headers recieved:<br>HTTP/1.1 302 Found <br>Date: Mon, 12 Jun 2017 21:03:03 GMT <br>Server: Apache <br>X-Powered-By: PHP/5.4.45-0+deb7u8 <br>Set-Cookie: __tad=1497301383.8976828; expires=Thu, 10-Jun-2027 21:03:03 GMT <br>Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT3gQkIDbz2IDLnsLTWVMlHYbf5mUvyI%2BZAugEYxEczgAktM4g1YUrYmrwU7d%2FkUkbwaTZ5Qvk9xy46dlaN585DbOJ5zeWjmQ7ow5%2FOYqV9%2B2%2FaoDiu6PQEki7I%2FlDr2PdwCI6bakVwLRWrAMDym1vhrE3LT3Sy4YV8%2BQJ0pV3lZBSJsEJA9yzqmof3UTOOrjwhXLFWz95z2asjGy7PSGyMc88aLBI7Tcm6K8OL%2F9GekX3jXo011tgCKypd4Mimj4KS8Pbr%2BV89Q4AfmzBCvfW3oOiUCCYdqdJjrDzYex%2Bq3%2BuQgBF9bt5uKbZTY5WBtkd7wluWA5mWtV%2B5x7e%2B18kTcrcG6bLB72Fo3MnJD%2BqA2O1H0Eps6xOOYRciZl6t8Th%2Fn0PMTLe7H%2BEl%2F4OBmcsRPHHea8rzd1vBxU%2BICFec5si0XMIONmBz8ILC8tileXSuDjc90cAIeWXcS54ZwZqqeMhB7N5%2BaWM%2FWrM0IrfAZ6QWaB8MDeZCLWY3k3wfyfhaqOrNikYm2pSTy9F2sgDaHewwf4cZ7Et51x7cxdK6TkpMXuM2g5OvljmPvcpwzAhg%3D%3D <br>Connection: close <br>Content-Type: text/html; charset=UTF-8<br><br>xn--kunsngen-3za.se is on 103.224.212.195<br>ASN for 103.224.212.195: 133618<br>Abusix contact information: abuse@trellian.com (information only)<br>103.224.212.195 corresponds with lb-212-195.above.com<br>Abuse.net does not have any reliable address for lb-212-195.above.com<br>Abuse address not found in whois.<br>Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com1497349744