Attacked url: http://www.online-casino-bonus.se/casinospel-regler/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Mon, 12 Jan 2015 17:03:54 +0100

Visitors with referer are redirected to http://all-open-24.net/

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: www.online-casino-bonus.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 200 OK
Date: Mon, 12 Jan 2015 16:12:26 GMT
Server: Apache/2.2.22 (Debian)
Last-Modified: Mon, 15 Dec 2014 13:22:16 GMT
ETag: "c40b5a-5fcd6-50a4121952a70"
Accept-Ranges: bytes
Content-Length: 392406
Vary: Accept-Encoding
Connection: close
Content-Type: text/html


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: www.online-casino-bonus.se
Referer: http://www.google.com/search?q=www.online-casino-bonus.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Jan 2015 16:12:25 GMT
Server: Apache/2.2.22 (Debian)
Location: http://all-open-24.net/
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=iso-8859-1

www.online-casino-bonus.se is on 5.133.197.141
ASN for 5.133.197.141: 0
5.133.197.141 manually set to use abuse@portlane.com