Attacked url: http://hyrabostader.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Fri, 16 Jun 2017 12:20:50 +0200

Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: hyrabostader.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Fri, 16 Jun 2017 10:20:49 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497608449.6674509; expires=Mon, 14-Jun-2027 10:20:49 GMT
Location: http://ww11.hyrabostader.se/
Connection: close
Content-Type: text/html; charset=UTF-8


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: hyrabostader.se
Referer: http://www.google.com/search?q=hyrabostader.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Fri, 16 Jun 2017 10:20:48 GMT
Server: Apache
X-Powered-By: PHP/5.6.30-0+deb8u1
Set-Cookie: __tad=1497608448.4850257; expires=Mon, 14-Jun-2027 10:20:48 GMT; Max-Age=315360000
Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT1U1o%2BKUv4rf2BTvW5%2FdxJx1c8fflTMWSMSpxIsgh21CRuayIyucIqThfPhGTdIwZNJW61yy4RfnaWS%2BsAI5on4kp2PJqRox1E0nVqbVrgigQfJl%2FBFyqIZWLgTs46j8B3QLjVV%2FFG4nn1U007XVxtb6hABpZ5IaxlZk%2F3FNcMNUgASU9hZ68nN0CMpALOrtxoE1KXnuL2gZCmIrdSraZHwp%2FlGeqyr7L24%2FhdMqReUBGq7fqOcwIn3dP8qDi5LSMVMKNnMW2M4%2B5OLYIcL1W4vPuNAPOlgfT4BfFAdFocv8dKR%2BUrncc8fAuZdIRABpUgYCr%2B20CPeNKoG6rQWQQdmOZrxPpd%2Fu1OMzQ0MQtYy7e7kB4CrU7qmbDlsjGYHQENPV2ftaU2H8%2B19i5NkwSejTMtkWdf0q8trhEl9nE79wKgsQ7d1mHz%2FpnPk0RcT%2BHwr1AIjyAekQSlfvKLduMBDo6V88X%2BHuZcfbuFmC%2B1IdROHvOJcweMVsiJpH7Fl9jY5KGd9SSjAr06fZ%2FJUrOTK5BdxPMrDWkNcEHGfTZA8Totv9AVbVz1E%3D
Connection: close
Content-Type: text/html; charset=UTF-8

hyrabostader.se is on 103.224.212.195
ASN for 103.224.212.195: 133618
Abusix contact information: abuse@trellian.com (information only)
103.224.212.195 corresponds with lb-212-195.above.com
Abuse.net does not have any reliable address for lb-212-195.above.com
Abuse address not found in whois.
Best guess from abuse.net: abuse@above.com abuse@lb-212-195.above.com