Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: united-shotas.tumblr.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 12 Dec 2015 03:52:36 GMT
Vary: X-UA-Device
Content-Type: text/html; charset=utf-8
Link: <http://33.media.tumblr.com/avatar_909a9626fe47_128.png>; rel=icon
P3P: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
X-Tumblr-Pixel: 6
X-Tumblr-Pixel-0: http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoidXJsIiwidXJsIjoiaHR0cDpcL1wvdW5pdGVkLXNob3Rhcy50dW1ibHIuY29tXC8iLCJyZXF0eXBlIjowLCJyb3V0ZSI6IlwvIn0=&U=CGNFIJJNCM&K=12b097160a94e193a987b300f82f681a65c160aa3e40cf3f60615250f2039e05--http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6XC9cL3VuaXRlZC1zaG90YXMudHVtYmxyLmNvbVwvIiwicmVxdHlwZSI6MCwicm91dGUiOiJcLyIsInBvc3RzIjpbeyJwb3N0aWQiOiI0NzI2MDk2NDU5NSIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM3
X-Tumblr-Pixel-1: 0seyJwb3N0aWQiOiI0NzI2MDc5NDcyNiIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM30seyJyb290X2Jsb2dpZCI6IjIwNTQ0OTgyIiwicm9vdF9wb3N0aWQiOjQ3MTMxODg5NjkzLCJwb3N0aWQiOiI0NzI2MDY4NTM3MCIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM30seyJyb290X2Jsb2dpZCI6IjE2MTYyODE1Iiwicm9vdF9wb3N0aWQiOiIxMjUzMzUxNzMyOSIsInBvc3RpZCI6IjQ3MjU5NTUwODMyIiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMzY2ODkwOTciLCJyb290X3Bvc3RpZCI6NDY5NTY1OTE4MjksInBvc3RpZCI6IjQ3MjU5NDY0OTAwIiwiYmxvZ2lkIjoiODM3NDQz
X-Tumblr-Pixel-2: MTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiNzY0MDAwNzUiLCJyb290X3Bvc3RpZCI6NDcyNTc2MzE2MzksInBvc3RpZCI6IjQ3MjU4MTAzNzc1IiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMjQ0MjU3OTEiLCJyb290X3Bvc3RpZCI6IjQyNzExOTIxNzc1IiwicG9zdGlkIjoiNDcyMzU0NzYzODkiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9XX0=&U=PDABGOKEFA&K=19547b5c6d2400a0f1d8f82cfa0c65dacff44a9fcac3647afdaf8b64e78bc93a--http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6XC9cL3V
X-Tumblr-Pixel-3: uaXRlZC1zaG90YXMudHVtYmxyLmNvbVwvIiwicmVxdHlwZSI6MCwicm91dGUiOiJcLyIsInBvc3RzIjpbeyJyb290X2Jsb2dpZCI6IjQ4MDE4MDQ2Iiwicm9vdF9wb3N0aWQiOiI0NjQxODYxMDAzOSIsInBvc3RpZCI6IjQ3MjM1MjkxNzcyIiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiNTI4MTU3MTgiLCJyb290X3Bvc3RpZCI6NDcxMDg5MDQyMjcsInBvc3RpZCI6IjQ3MjM0OTM4NTg0IiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMTM0NjU0MTgiLCJyb290X3Bvc3RpZCI6IjQ3MDE0ODA1NTM4IiwicG9zdGlkIjoiNDcyMzQyMjcxNzgiLCJibG9naWQiOiI4M
X-Tumblr-Pixel-4: zc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiIxNjU0MzYyMiIsInJvb3RfcG9zdGlkIjo0MzcxNDUzMzY0NSwicG9zdGlkIjoiNDcyMzM5NzQ2NjMiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI5NTc3OTg0OCIsInJvb3RfcG9zdGlkIjo0NzIxNDM0MTE4MiwicG9zdGlkIjoiNDcyMzM4ODQ1NzUiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI2ODc2MDY3NCIsInJvb3RfcG9zdGlkIjo0NjQ2MTc1Mjc3MiwicG9zdGlkIjoiNDcyMzMyMzkyMTEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI1NTE1MzU
X-Tumblr-Pixel-5: zOSIsInJvb3RfcG9zdGlkIjo0NzE4NTM3NjgwNiwicG9zdGlkIjoiNDcyMzMyMTQ4MjEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI4NTUzNjE1MyIsInJvb3RfcG9zdGlkIjo0Njk0MDY1Nzg2NiwicG9zdGlkIjoiNDcyMzI4Nzc0NDEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9XX0=&U=NGOGLPGLFN&K=5b251fe135728ef3a7664d5f2d49acf7cd5cd1b574ae6ae3b5cc311c28e6ff8a
X-Tumblr-User: united-shotas
X-UA-Compatible: IE=Edge,chrome=1
X-UA-Device: desktop
GET / HTTP/1.1
Host: united-shotas.tumblr.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 12 Dec 2015 03:52:36 GMT
Vary: X-UA-Device
Content-Type: text/html; charset=utf-8
Link: <http://33.media.tumblr.com/avatar_909a9626fe47_128.png>; rel=icon
P3P: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
X-Tumblr-Pixel: 6
X-Tumblr-Pixel-0: http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoidXJsIiwidXJsIjoiaHR0cDpcL1wvdW5pdGVkLXNob3Rhcy50dW1ibHIuY29tXC8iLCJyZXF0eXBlIjowLCJyb3V0ZSI6IlwvIn0=&U=CGNFIJJNCM&K=12b097160a94e193a987b300f82f681a65c160aa3e40cf3f60615250f2039e05--http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6XC9cL3VuaXRlZC1zaG90YXMudHVtYmxyLmNvbVwvIiwicmVxdHlwZSI6MCwicm91dGUiOiJcLyIsInBvc3RzIjpbeyJwb3N0aWQiOiI0NzI2MDk2NDU5NSIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM3
X-Tumblr-Pixel-1: 0seyJwb3N0aWQiOiI0NzI2MDc5NDcyNiIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM30seyJyb290X2Jsb2dpZCI6IjIwNTQ0OTgyIiwicm9vdF9wb3N0aWQiOjQ3MTMxODg5NjkzLCJwb3N0aWQiOiI0NzI2MDY4NTM3MCIsImJsb2dpZCI6IjgzNzQ0MzEwIiwic291cmNlIjozM30seyJyb290X2Jsb2dpZCI6IjE2MTYyODE1Iiwicm9vdF9wb3N0aWQiOiIxMjUzMzUxNzMyOSIsInBvc3RpZCI6IjQ3MjU5NTUwODMyIiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMzY2ODkwOTciLCJyb290X3Bvc3RpZCI6NDY5NTY1OTE4MjksInBvc3RpZCI6IjQ3MjU5NDY0OTAwIiwiYmxvZ2lkIjoiODM3NDQz
X-Tumblr-Pixel-2: MTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiNzY0MDAwNzUiLCJyb290X3Bvc3RpZCI6NDcyNTc2MzE2MzksInBvc3RpZCI6IjQ3MjU4MTAzNzc1IiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMjQ0MjU3OTEiLCJyb290X3Bvc3RpZCI6IjQyNzExOTIxNzc1IiwicG9zdGlkIjoiNDcyMzU0NzYzODkiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9XX0=&U=PDABGOKEFA&K=19547b5c6d2400a0f1d8f82cfa0c65dacff44a9fcac3647afdaf8b64e78bc93a--http://px.srvcs.tumblr.com/impixu?T=1449892356&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6XC9cL3V
X-Tumblr-Pixel-3: uaXRlZC1zaG90YXMudHVtYmxyLmNvbVwvIiwicmVxdHlwZSI6MCwicm91dGUiOiJcLyIsInBvc3RzIjpbeyJyb290X2Jsb2dpZCI6IjQ4MDE4MDQ2Iiwicm9vdF9wb3N0aWQiOiI0NjQxODYxMDAzOSIsInBvc3RpZCI6IjQ3MjM1MjkxNzcyIiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiNTI4MTU3MTgiLCJyb290X3Bvc3RpZCI6NDcxMDg5MDQyMjcsInBvc3RpZCI6IjQ3MjM0OTM4NTg0IiwiYmxvZ2lkIjoiODM3NDQzMTAiLCJzb3VyY2UiOjMzfSx7InJvb3RfYmxvZ2lkIjoiMTM0NjU0MTgiLCJyb290X3Bvc3RpZCI6IjQ3MDE0ODA1NTM4IiwicG9zdGlkIjoiNDcyMzQyMjcxNzgiLCJibG9naWQiOiI4M
X-Tumblr-Pixel-4: zc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiIxNjU0MzYyMiIsInJvb3RfcG9zdGlkIjo0MzcxNDUzMzY0NSwicG9zdGlkIjoiNDcyMzM5NzQ2NjMiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI5NTc3OTg0OCIsInJvb3RfcG9zdGlkIjo0NzIxNDM0MTE4MiwicG9zdGlkIjoiNDcyMzM4ODQ1NzUiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI2ODc2MDY3NCIsInJvb3RfcG9zdGlkIjo0NjQ2MTc1Mjc3MiwicG9zdGlkIjoiNDcyMzMyMzkyMTEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI1NTE1MzU
X-Tumblr-Pixel-5: zOSIsInJvb3RfcG9zdGlkIjo0NzE4NTM3NjgwNiwicG9zdGlkIjoiNDcyMzMyMTQ4MjEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9LHsicm9vdF9ibG9naWQiOiI4NTUzNjE1MyIsInJvb3RfcG9zdGlkIjo0Njk0MDY1Nzg2NiwicG9zdGlkIjoiNDcyMzI4Nzc0NDEiLCJibG9naWQiOiI4Mzc0NDMxMCIsInNvdXJjZSI6MzN9XX0=&U=NGOGLPGLFN&K=5b251fe135728ef3a7664d5f2d49acf7cd5cd1b574ae6ae3b5cc311c28e6ff8a
X-Tumblr-User: united-shotas
X-UA-Compatible: IE=Edge,chrome=1
X-UA-Device: desktop
Second query (visit from search engine):
GET / HTTP/1.1
Host: united-shotas.tumblr.com
Referer: http://www.google.com/search?q=united-shotas.tumblr.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: united-shotas.tumblr.com
Referer: http://www.google.com/search?q=united-shotas.tumblr.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://united-shotas.tumblr.com/ | 200 OK Content-Length: 54486 Content-Type: text/html | clean |
http://assets.tumblr.com/assets/scripts/pre_tumblelog.js?_v=4407ac63b04a974114891da19b333539 | 200 OK Content-Length: 3361 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js | 200 OK Content-Length: 57254 Content-Type: text/javascript | clean |
http://static.tumblr.com/xhpdxdi/iGMkinf8r/jqwidont-compressed.js | 200 OK Content-Length: 896 Content-Type: application/x-javascript | clean |
http://static.tumblr.com/xhpdxdi/3mkkinfa8/shortcut.js | 200 OK Content-Length: 5796 Content-Type: application/x-javascript | clean |
http://static.tumblr.com/xhpdxdi/1H9kinfb0/lightbox.js | 200 OK Content-Length: 13034 Content-Type: application/x-javascript | clean |
http://static.tumblr.com/sajzoro/BgXkqqy95/me.js | 200 OK Content-Length: 2638 Content-Type: application/x-javascript | clean |
http://assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js?_v=8b0553f75283ecbeb78be24f096f4c2c | 200 OK Content-Length: 361 Content-Type: application/javascript | clean |
http://assets.tumblr.com/client/prod/standalone/tumblelog/index.js?_v=74e806ed04388c5e93e54a8dbf6edd7b | 200 OK Content-Length: 302632 Content-Type: application/javascript | clean |
http://united-shotas.tumblr.com/ask | 200 OK Content-Length: 19536 Content-Type: text/html | clean |
http://united-shotas.tumblr.com/submit | 200 OK Content-Length: 19692 Content-Type: text/html | clean |
http://united-shotas.tumblr.com/archive | 200 OK Content-Length: 69614 Content-Type: text/html | clean |
http://assets.tumblr.com/client/prod/app/header/index.js?_v=df54dd38e404a9a65de246b3b26f9045 | 200 OK Content-Length: 55318 Content-Type: application/javascript | clean |
http://assets.tumblr.com/client/prod/app/vendor/index.js?_v=aa50ea4f6dd1fe4869a12c7b7125a2c4 | 200 OK Content-Length: 300354 Content-Type: application/javascript | clean |
http://assets.tumblr.com/languages/strings/en_US.js?1343 | 200 OK Content-Length: 2204 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=united-shotas.tumblr.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://united-shotas.tumblr.com/
Result: united-shotas.tumblr.com is not infected or malware details are not published yet.
Result: united-shotas.tumblr.com is not infected or malware details are not published yet.