Attacked url: http://seetex.se/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Sun, 04 Mar 2018 14:59:48 +0100

Visitors with referer are redirected to http://www.serverjump.com/jump.aspx?jumpid=0sichm

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: seetex.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 10326
Content-Type: text/html
Server: Microsoft-IIS/8.5
Set-Cookie: ASPSESSIONIDCQBBATBS=HMPFALPBPOCIAHGDIKPOBFLM; path=/
X-Powered-By: ASP.NET
Date: Sun, 04 Mar 2018 13:59:50 GMT
Connection: close


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: seetex.se
Referer: http://www.google.com/search?q=seetex.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 170
Content-Type: text/html
Location: http://www.serverjump.com/jump.aspx?jumpid=0sichm
Server: Microsoft-IIS/8.5
Set-Cookie: ASPSESSIONIDCQBBATBS=GMPFALPBPHKLAHOOLHMPKIII; path=/
X-Powered-By: ASP.NET
Date: Sun, 04 Mar 2018 13:59:50 GMT
Connection: close

seetex.se is on 81.26.42.232
ASN for 81.26.42.232: 43200
Abusix contact information: abuse@pcsupport.no (information only)
81.26.42.232 corresponds with pcsweb12.pcsupport.no
Abuse.net does not have any reliable address for pcsweb12.pcsupport.no
Found address in whois: abuse@pcsupport.no