Attacked url: http://carqvistbil.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Mon, 19 Jun 2017 02:09:12 +0200

Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVj3%2B9U5CWNdY8BjcI8b1EZIFskQNUu4luN9ubumd7CL%2Bc6V2TuV0WAqWrJEg3437YhAvqGHCalPXuce8xrgZyBCvzsDaOStM8LnNKd3iRkfQ%2BFWtjsKg%2FaPldT%2FoX6SVzGX4TNMhS%2BOa1srp4GIs6jBy2ogeOWKaTBpC%2BtMEDFVWqgl%2FwEOUD33ZP0orHzO0zcY9W7iKNuo5ijTJ%2FRqHu92eab35qIAjeCOoM%2FYfSflpdyPNF%2FyGFDQNHd0swzHe%2Fx7Q0i6d0UVK8GsiACDf%2Fc%2Bz63nT%2FiUGIp2AHEMEndmVcJeJAY%2BwZ1n3ajy3ulnEXGVdKIRF%2BC2u7fF0Qgteb8r8f5sxtx%2BJFomZhEm8jApGdWhNzYUFjAQvimY2VB99jW42Xev5ue7pcsZMlFXj46BnTTyr%2FZCcWekTwBMmy35Mn1hbWFPjeX%2B4Ldk2j0esbwOdlP6pVmDdwKoPnZspDsevdoT%2BbrqZmHrPvo6%2FITgZ9p0Bcq14GWti2VfJPijHZLFjne7Al3kkMONYAJBzT%2F7g%3D%3D

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: carqvistbil.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Mon, 19 Jun 2017 00:09:12 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497830952.1555372; expires=Thu, 17-Jun-2027 00:09:12 GMT
Location: http://ww11.carqvistbil.se/
Connection: close
Content-Type: text/html; charset=UTF-8


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: carqvistbil.se
Referer: http://www.google.com/search?q=carqvistbil.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Mon, 19 Jun 2017 00:09:11 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497830951.3342426; expires=Thu, 17-Jun-2027 00:09:11 GMT
Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVj3%2B9U5CWNdY8BjcI8b1EZIFskQNUu4luN9ubumd7CL%2Bc6V2TuV0WAqWrJEg3437YhAvqGHCalPXuce8xrgZyBCvzsDaOStM8LnNKd3iRkfQ%2BFWtjsKg%2FaPldT%2FoX6SVzGX4TNMhS%2BOa1srp4GIs6jBy2ogeOWKaTBpC%2BtMEDFVWqgl%2FwEOUD33ZP0orHzO0zcY9W7iKNuo5ijTJ%2FRqHu92eab35qIAjeCOoM%2FYfSflpdyPNF%2FyGFDQNHd0swzHe%2Fx7Q0i6d0UVK8GsiACDf%2Fc%2Bz63nT%2FiUGIp2AHEMEndmVcJeJAY%2BwZ1n3ajy3ulnEXGVdKIRF%2BC2u7fF0Qgteb8r8f5sxtx%2BJFomZhEm8jApGdWhNzYUFjAQvimY2VB99jW42Xev5ue7pcsZMlFXj46BnTTyr%2FZCcWekTwBMmy35Mn1hbWFPjeX%2B4Ldk2j0esbwOdlP6pVmDdwKoPnZspDsevdoT%2BbrqZmHrPvo6%2FITgZ9p0Bcq14GWti2VfJPijHZLFjne7Al3kkMONYAJBzT%2F7g%3D%3D
Connection: close
Content-Type: text/html; charset=UTF-8

carqvistbil.se is on 103.224.212.185
ASN for 103.224.212.185: 133618
Abusix contact information: abuse@trellian.com (information only)
103.224.212.185 corresponds with lb-212-185.above.com
Abuse.net does not have any reliable address for lb-212-185.above.com
Abuse address not found in whois.
Best guess from abuse.net: abuse@lb-212-185.above.com abuse@above.com