Attacked url: http://nordencamping.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Thu, 15 Jun 2017 17:21:16 +0200

Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfJ6fWKAJy5hAi8VeEKBge5CrwaDxFRyn9aLgjYyV8YuqplGDxWLJCc%2Bp63FdO%2BZ3C4o2jYT%2FQ0fz3CyHXaMkAQj2LOk0iYYjBDC7Hk5%2F3Z1dOQHp48EtLUlA0vj6LH8D40OpF6oQ71MCeHLyNxqDuA77IOSVe%2BJy2m7eFjcJF6bf0NGWzUebB45lwQRsITzbXQimcMwXjMON6KvfTGmJt%2F%2F41cCzDJG%2FHCeTSnYewbbRM%2BXObRfVkip%2F%2Bk%2BppCsP39v37VoB3%2BwfhDSCq9ox%2BZpwzE%2B773zhAnJ2BAuvS1BnlFx0F%2F3D8O48BcpGcxMgwiaS7kgRSsrNKP21J7SYLtCoCEBpC5HmbWSZ9M9oQJWQGyL%2FuCYaxClgbAzsqbWvjmoemHueglE2XlYD30QDunLL%2BjoN%2BpNfRPsi5%2FhlDkb%2FIgW4iDw4pNE9OuQd9TV%2Bh3Se%2FC1ORAu3KBdwx9bM03UIWw4KB22XZ8wBuJViL4oGqdXMBIQGXIEMd7dloDo19XMHAbctyh%2F9Kzi4c6FXFpgsK9YcB5t%2BB%2BSX9Qlu21zg%3D

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: nordencamping.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Thu, 15 Jun 2017 15:21:16 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497540076.1806771; expires=Sun, 13-Jun-2027 15:21:16 GMT
Location: http://ww11.nordencamping.se/
Connection: close
Content-Type: text/html; charset=UTF-8


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: nordencamping.se
Referer: http://www.google.com/search?q=nordencamping.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Thu, 15 Jun 2017 15:21:15 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497540076.7974564; expires=Sun, 13-Jun-2027 15:21:16 GMT
Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfJ6fWKAJy5hAi8VeEKBge5CrwaDxFRyn9aLgjYyV8YuqplGDxWLJCc%2Bp63FdO%2BZ3C4o2jYT%2FQ0fz3CyHXaMkAQj2LOk0iYYjBDC7Hk5%2F3Z1dOQHp48EtLUlA0vj6LH8D40OpF6oQ71MCeHLyNxqDuA77IOSVe%2BJy2m7eFjcJF6bf0NGWzUebB45lwQRsITzbXQimcMwXjMON6KvfTGmJt%2F%2F41cCzDJG%2FHCeTSnYewbbRM%2BXObRfVkip%2F%2Bk%2BppCsP39v37VoB3%2BwfhDSCq9ox%2BZpwzE%2B773zhAnJ2BAuvS1BnlFx0F%2F3D8O48BcpGcxMgwiaS7kgRSsrNKP21J7SYLtCoCEBpC5HmbWSZ9M9oQJWQGyL%2FuCYaxClgbAzsqbWvjmoemHueglE2XlYD30QDunLL%2BjoN%2BpNfRPsi5%2FhlDkb%2FIgW4iDw4pNE9OuQd9TV%2Bh3Se%2FC1ORAu3KBdwx9bM03UIWw4KB22XZ8wBuJViL4oGqdXMBIQGXIEMd7dloDo19XMHAbctyh%2F9Kzi4c6FXFpgsK9YcB5t%2BB%2BSX9Qlu21zg%3D
Connection: close
Content-Type: text/html; charset=UTF-8

nordencamping.se is on 103.224.212.191
ASN for 103.224.212.191: 133618
Abusix contact information: abuse@trellian.com (information only)
103.224.212.191 corresponds with lb-212-191.above.com
Abuse.net does not have any reliable address for lb-212-191.above.com
Abuse address not found in whois.
Best guess from abuse.net: abuse@above.com abuse@lb-212-191.above.com