Attacked url: http://fotballskanalen.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Mon, 19 Jun 2017 05:12:38 +0200

Visitors with referer are redirected to http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVj9%2BjeSF9LDnLtc2d30z%2BB5D5VslUU3KxI9Mf0LVQitqrgjmZNOChMADzffhPFMpqy%2Fp9s6p%2FFB%2FLMfaLcG3OBtX49gGdQxBm98TH5BDpXUalvw22kCoCE63XNYlogQNW%2BoiUroMzXdr1OhroUdQ79yX0Zpo7TzwzgmZm1JXGZHMTyvGjIhKAywEtzKgmudLCJjos3mVlRoiO%2FUGBdTwtuYnAPs5VfJxXNqjIfPxFmAdsE6KHKqD5rFzbfXzad62Fl6D0HGlhcUiReJ7Ce4yhZEtcGf0ZCBg02U07URTJA%2BQIIA1%2BFUAj2T1LAo%2FBMDhxoNY5H8yVAbb1f04aK9Yh487LxG%2FhgDcQKc%2Fg%2B0pa%2B7MD3LhZ7FaR84zk%2F7yK9DD5oN7F31AwSGgVCKWMtBfoMkjlsoH6MRLitdioDWlchpniuxFVYqnT3BmiLJ7Z1OzyIrHJ6G7emEuyFWbAxKERcquEH30KMelNlMY1P7nOO7C7ZTQhwerMNZWfH8i4rPuUFWIvT%2FkaBClkpm6VX%2BSb7wVxsndOgdechj5bJAofX1KE%3D

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: fotballskanalen.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Mon, 19 Jun 2017 03:12:38 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497841958.4540948; expires=Thu, 17-Jun-2027 03:12:38 GMT
Location: http://ww38.fotballskanalen.se/
Connection: close
Content-Type: text/html; charset=UTF-8


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: fotballskanalen.se
Referer: http://www.google.com/search?q=fotballskanalen.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Found
Date: Mon, 19 Jun 2017 03:12:37 GMT
Server: Apache
X-Powered-By: PHP/5.4.45-0+deb7u8
Set-Cookie: __tad=1497841957.6038958; expires=Thu, 17-Jun-2027 03:12:37 GMT
Location: http://bidr.trellian.com/r2.php?e=cF8L0S4UvzZFbF2sJTBoT9c2HXXKlhVj9%2BjeSF9LDnLtc2d30z%2BB5D5VslUU3KxI9Mf0LVQitqrgjmZNOChMADzffhPFMpqy%2Fp9s6p%2FFB%2FLMfaLcG3OBtX49gGdQxBm98TH5BDpXUalvw22kCoCE63XNYlogQNW%2BoiUroMzXdr1OhroUdQ79yX0Zpo7TzwzgmZm1JXGZHMTyvGjIhKAywEtzKgmudLCJjos3mVlRoiO%2FUGBdTwtuYnAPs5VfJxXNqjIfPxFmAdsE6KHKqD5rFzbfXzad62Fl6D0HGlhcUiReJ7Ce4yhZEtcGf0ZCBg02U07URTJA%2BQIIA1%2BFUAj2T1LAo%2FBMDhxoNY5H8yVAbb1f04aK9Yh487LxG%2FhgDcQKc%2Fg%2B0pa%2B7MD3LhZ7FaR84zk%2F7yK9DD5oN7F31AwSGgVCKWMtBfoMkjlsoH6MRLitdioDWlchpniuxFVYqnT3BmiLJ7Z1OzyIrHJ6G7emEuyFWbAxKERcquEH30KMelNlMY1P7nOO7C7ZTQhwerMNZWfH8i4rPuUFWIvT%2FkaBClkpm6VX%2BSb7wVxsndOgdechj5bJAofX1KE%3D
Connection: close
Content-Type: text/html; charset=UTF-8

fotballskanalen.se is on 103.224.212.186
ASN for 103.224.212.186: 133618
Abusix contact information: abuse@trellian.com (information only)
103.224.212.186 corresponds with lb-212-186.above.com
Abuse.net does not have any reliable address for lb-212-186.above.com
Abuse address not found in whois.
Best guess from abuse.net: abuse@lb-212-186.above.com abuse@above.com