Attacked url: http://majab.se/sok-personal/
Attack type: SERP-hijacking (see http://ikyon.com/attack-types/ for description)
Attack detected Tue, 26 Aug 2014 17:51:11 +0200

Visitors with referer are redirected to http://doctoraccess.eu/

HTTP traffic without referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: majab.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 200 OK
Date: Tue, 26 Aug 2014 15:51:11 GMT
Server: LiteSpeed
Connection: close
X-Powered-By: PHP/5.3.28
Content-Type: text/html


HTTP traffic with referer:
HTTP headers sent:
HEAD / HTTP/1.1
Host: majab.se
Referer: http://www.google.com/search?q=majab.se
Connection: Close

HTTP headers recieved:
HTTP/1.1 301 Moved Permanently
Date: Tue, 26 Aug 2014 15:51:11 GMT
Server: LiteSpeed
Connection: close
Location: http://doctoraccess.eu/

majab.se is on 212.97.132.175
ASN for 212.97.132.175: 9120
Abusix contact information: abuse@surftown.com (information only)
212.97.132.175 corresponds with ws62.surf-town.net
Abuse.net has 2 reliable address(es) for surf-town.net
Found address(es): abuse@surf-town.net abuse@cohaesio.com