Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tripular.com.br
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tripular.com.br/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tripular.com.br
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Wed, 16 Apr 2014 02:28:05 GMT
Location: http://www.tripular.com.br/
Server: ghs
Content-Length: 224
Content-Type: text/html; charset=UTF-8
Alternate-Protocol: 80:quic
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
...224 bytes of data.
GET / HTTP/1.1
Host: tripular.com.br
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Wed, 16 Apr 2014 02:28:05 GMT
Location: http://www.tripular.com.br/
Server: ghs
Content-Length: 224
Content-Type: text/html; charset=UTF-8
Alternate-Protocol: 80:quic
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
...224 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tripular.com.br
Referer: http://www.google.com/search?q=tripular.com.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tripular.com.br
Referer: http://www.google.com/search?q=tripular.com.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://tripular.com.br/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 02:28:05 GMT Location: http://www.tripular.com.br/ Server: ghs Content-Length: 224 Content-Type: text/html; charset=UTF-8 Alternate-Protocol: 80:quic X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block | clean |
http://www.tripular.com.br/ | HTTP/1.1 302 Found Connection: close Date: Wed, 16 Apr 2014 02:28:06 GMT Location: http://www.tripular.com.br/sao-paulo/promocao-e-desconto/ Server: Google Frontend Content-Length: 0 Content-Type: text/html Expires: Thu, 01 Jan 1970 00:00:00 GMT Alternate-Protocol: 80:quic,80:quic Set-Cookie: JSESSIONID=mK-hky0k5V-8kr920N1xNw;Path=/ Set-Cookie: ou__last_visited_region=sao-paulo;Path=/;Expires=Thu, 16-Apr-15 02:28:06 GMT X-XRDS-Location: http://www.tripular.com.br/_ah/xrds | clean |
http://www.tripular.com.br/sao-paulo/promocao-e-desconto/ | 200 OK Content-Length: 66870 Content-Type: text/html | clean |
http://www.tripular.com.br/ajaxapps/webapplication/webapplication.nocache.js | 200 OK Content-Length: 6072 Content-Type: application/x-javascript | clean |
http://tripular.com.br/static/bundle.min.js?2.5.6 | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 02:28:07 GMT Location: http://www.tripular.com.br/static/bundle.min.js?2.5.6 Server: ghs Content-Length: 250 Content-Type: text/html; charset=UTF-8 Alternate-Protocol: 80:quic X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block | clean |
http://www.tripular.com.br/static/bundle.min.js?2.5.6 | 200 OK Content-Length: 151580 Content-Type: application/x-javascript | clean |
http://tripular.com.br/oferta-nacional/promocao-e-desconto/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 02:28:08 GMT Location: http://www.tripular.com.br/oferta-nacional/promocao-e-desconto/ Server: ghs Content-Length: 260 Content-Type: text/html; charset=UTF-8 Alternate-Protocol: 80:quic X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block | clean |
http://www.tripular.com.br/oferta-nacional/promocao-e-desconto/ | 200 OK Content-Length: 66876 Content-Type: text/html | clean |
http://www.tripular.com.br/abcd-sp/promocao-e-desconto/ | 200 OK Content-Length: 66868 Content-Type: text/html | clean |
http://www.tripular.com.br/alphaville/promocao-e-desconto/ | 200 OK Content-Length: 66871 Content-Type: text/html | clean |
http://www.tripular.com.br/americana/promocao-e-desconto/ | 200 OK Content-Length: 66870 Content-Type: text/html | clean |
http://www.tripular.com.br/angra-dos-reis/promocao-e-desconto/ | 200 OK Content-Length: 66875 Content-Type: text/html | clean |
http://www.tripular.com.br/anapolis/promocao-e-desconto/ | 200 OK Content-Length: 66869 Content-Type: text/html | clean |
http://www.tripular.com.br/aracaju/promocao-e-desconto/ | 200 OK Content-Length: 66868 Content-Type: text/html | clean |
http://www.tripular.com.br/araguari/promocao-e-desconto/ | 200 OK Content-Length: 66869 Content-Type: text/html | clean |
http://www.tripular.com.br/araraquara/promocao-e-desconto/ | 200 OK Content-Length: 66871 Content-Type: text/html | clean |
http://www.tripular.com.br/araxa/promocao-e-desconto/ | 200 OK Content-Length: 66866 Content-Type: text/html | clean |
http://www.tripular.com.br/aracatuba/promocao-e-desconto/ | 200 OK Content-Length: 66870 Content-Type: text/html | clean |
http://www.tripular.com.br/atibaia/promocao-e-desconto/ | 200 OK Content-Length: 66868 Content-Type: text/html | clean |