Attacked url: http://thaiambassy.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Fri, 16 Jun 2017 07:04:56 +0200

Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfWFI%2FnbZcgOg16M6H89zpRwa7WPvqKGxCto%2BJZVXz3XDtX9JCELcEM2tTM43VVUZ5%2FFl0UHo32rZ8%2FhCJH1qvG6WfzCcseYE%2BvxC3hS0kizd5mFbdvCUAqkkxPLWo7oihbjFxTrgfwoIWHYT1cE%2B%2BFZRASwvCwgjm3yvQ7J%2BL07QLbApa9V4xxLUusFzb1DMwAlI7%2BmnDVdb86jjZG2USvG1k%2FkYnzXNLYeVl0V8P8CUOcfh8xOEm0e0KsJJ3rU7NWrdQ8sS2DVCmRQ5%2FDrgcIE4d25G7zyDmNRCHpcy3Md9tnr00%2BZXdhC8CKJnjq2gfAIcTxEH%2B%2FMiOo%2Fga1%2F3re%2Blgmt96UffWN5cKnhqkoOCBDGv7x6bALHd8801SZdCPmEXD5sG8XU2%2FbrFmc2eFqlz%2FyEogc2grORD9BDgUPyoP00HisZGdAZsZG6LX%2BoHYYGm2xPFKZ2P9R1gXnlvrR9XtYtpS9uub32TuEI7OpAX31VZFAIHCT%2B56Lw2AFUW7082Za%2Fqyci%2FerY43J80%2BTA%3D%3D

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: thaiambassy.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Fri, 16 Jun 2017 05:04:56 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497589496.6783221; expires=Mon, 14-Jun-2027 05:04:56 GMT
Location: http://ww38.thaiambassy.se/
Connection: close
Content-Type: text/html; charset=UTF-8


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: thaiambassy.se
Referer: http://www.google.com/search?q=thaiambassy.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Fri, 16 Jun 2017 05:04:55 GMT
Server: Apache
X-Powered-By: PHP/5.6.30-0+deb8u1
Set-Cookie: __tad=1497589495.2977338; expires=Mon, 14-Jun-2027 05:04:55 GMT; Max-Age=315360000
Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rfWFI%2FnbZcgOg16M6H89zpRwa7WPvqKGxCto%2BJZVXz3XDtX9JCELcEM2tTM43VVUZ5%2FFl0UHo32rZ8%2FhCJH1qvG6WfzCcseYE%2BvxC3hS0kizd5mFbdvCUAqkkxPLWo7oihbjFxTrgfwoIWHYT1cE%2B%2BFZRASwvCwgjm3yvQ7J%2BL07QLbApa9V4xxLUusFzb1DMwAlI7%2BmnDVdb86jjZG2USvG1k%2FkYnzXNLYeVl0V8P8CUOcfh8xOEm0e0KsJJ3rU7NWrdQ8sS2DVCmRQ5%2FDrgcIE4d25G7zyDmNRCHpcy3Md9tnr00%2BZXdhC8CKJnjq2gfAIcTxEH%2B%2FMiOo%2Fga1%2F3re%2Blgmt96UffWN5cKnhqkoOCBDGv7x6bALHd8801SZdCPmEXD5sG8XU2%2FbrFmc2eFqlz%2FyEogc2grORD9BDgUPyoP00HisZGdAZsZG6LX%2BoHYYGm2xPFKZ2P9R1gXnlvrR9XtYtpS9uub32TuEI7OpAX31VZFAIHCT%2B56Lw2AFUW7082Za%2Fqyci%2FerY43J80%2BTA%3D%3D
Connection: close
Content-Type: text/html; charset=UTF-8

thaiambassy.se is on 103.224.212.192
ASN for 103.224.212.192: 133618
Abusix contact information: abuse@trellian.com (information only)
103.224.212.192 corresponds with lb-212-192.above.com
Abuse.net does not have any reliable address for lb-212-192.above.com
Abuse address not found in whois.
Best guess from abuse.net: abuse@lb-212-192.above.com abuse@above.com