Domain > merceorti.com

More information on this domain is in AlienVault OTX

Files that talk to merceorti.com

MD5	A/V
7c5548b8200650440848b5b47e56b2eb	[Artemis!7C5548B82006] [WS.Reputation.1] [Trojan.Win32.Cutwail.cgs] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Tepfer] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CGS!tr] [Trojan.Win32.Cutwail.Azpq]
4ef765e9cbbcc279b3ad373c5c46f1b7	[Artemis!4EF765E9CBBC] [Backdoor/Win32.Androm] [Trojan.PWS.Panda.4379]
5345aff5ce85c0d99c484f2716071b7a	[Win32.Heur.KVMF58.hy.(kcloud)]
390fc8a6672ba631df610de3fc76ad22	[Heur.Win32.Veebee.1!O] [Trojan.LVBP.ED] [W32/Trojan2.OAPU] [TROJ_FORUCON.BMC] [Trojan-PSW.Win32.Tepfer.swki] [Trojan.PWS.Stealer.3128] [TR/Dropper.VB.7976] [W32/Trojan.VAGS-5670] [Trojan-PWS.Win32.Tepfer] [Trojan.Win32.InfoStealer.AY]
901fd56bd89d217effeca7e998d48b8f	[BC.Heuristic.Trojan.SusPacked.BF-6.A] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader.Upatre.A6] [Downloader-FVD!901FD56BD89D] [Trojan.Downloader] [Trojan.DL.Small!WegiOz7B/54] [W32/Trojan3.GJV] [Trojan.Zbot] [Upatre.X] [TROJ_UPATRE.BU] [Trojan.Win32.DownLoad3.cmcabg] [TrojWare.Win32.Spy.Zbot.ADCX] [TR/Yarwi.B.15] [TrojanDownloader:Win32/Upatre.A] [W32/Trojan.SXFM-2396] [Win32/TrojanDownloader.Small.AAB] [PE:Malware.FakePDF@CV!1.9C28] [Trojan.Injector] [Zbot.DFA] [Trojan.DownLoad3.28]
0f80eb7fbac7a852ee58650a076d7d42	[TrojanDownloader*Win32/Cutwail.BS]
8043461e3d18f379dfd5c1d3dda25c6f	[TrojanDownloader.Cutwail.BS4] [PWS-FBOF!] [Spyware.Zbot] [Trojan.Cutwail!ksLthdR/J5A] [W32/Trojan2.OBNX] [Backdoor.Trojan] [Kryptik.CDDW] [Win32/Cutwail.CAK] [BKDR_PUSHDO.IP] [Trojan.Win32.Cutwail.chg] [Trojan.Win32.Cutwail.cucyjl] [Trojan.Win32.A.Cutwail.87552] [TrojWare.Win32.Spy.Zbot.FRIN] [Trojan.PWS.Panda.5756] [TR/Injector.90112.43] [Trojan/Cutwail.ab] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/Trojan.WQFW-5190] [Trj/WLT.A] [Win32/Wigon.PI] [Win32.Trojan.Cutwail.Dxcl] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CHG!tr] [SHeur4.BRVM] [Trojan.Win32.Cutwail.aG]
005b480a6b845bbd5286e699c29b9426	[Backdoor.Bot] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Win32/Heur] [Virus.Win32.Heur]
899636b5d06c3ad2fccb62462f16c072	[TR/Kryptik.dfs] [TrojanDownloader*Win32/Cutwail.BS]
f15be0daa762c12cda891a6390d77e86	[WS.Reputation.1] [TROJ_CRILOCK.RNT] [Backdoor.Win32.Pushdo.rks] [TR/Crypt.ZPACK.40047] [Trojan[Backdoor]/Win32.Pushdo] [W32/Pushdo.RKS!tr.bdr] [SHeur4.BTFZ]
1dc798c5cda1dfb8e321e68f1cf116c4	[W32.DalverM.Trojan] [Trojan.Cutwail.r5] [RDN/Downloader.a!qr] [Trojan.Cutwail] [TROJ_CUTWAIL.YAJ] [Trojan.Win32.Cutwail.cuo] [Trojan.Cutwail!Dw5GluQCwY0] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail.BS] [W32/Trojan.LTBF-7078] [Trj/CI.A] [Win32.Trojan.Cutwail.Eclb] [Trojan] [W32/Cutwail.CBPJ!tr] [Crypt3.OXR] [Trojan.Win32.Kryptik.BCBPJ] [Win32/Trojan.Multi.daf]
aea74f40aff4430d316990208de17d13	[SHeur4.BQMT] [TrojanDownloader*Win32/Cutwail.BS]
556c3819778ac91261be8821206aa1ca	[Trojan.Zbot.cw3] [Trojan.Crypt.NKN] [Trojan.VBKrypt.Win32.226775] [Trojan.Win32.VBKrypt.cvwaev] [W32/Trojan4.AFNE] [WS.Reputation.1] [Win32/Zbot.IDY] [TROJ_FORUCON.BMC] [Trojan.Win32.VBKrypt.uqco] [Trojan.VBKrypt!sgvTFCNPRto] [UnclassifiedMalware] [BackDoor.Andromeda.273] [TR/Dropper.VB.12577] [Trojan/VBKrypt.jafc] [PWS:Win32/Zbot] [Backdoor/Win32.Androm] [W32/Trojan.XEYN-6246] [Virus.Win32.Heur.p] [Trj/WLT.A] [Win32/Wigon.PH] [Virus.Win32.VBInject] [W32/VBKrypt.PH!tr] [SHeur4.BSLG] [Trojan.Win32.VBKrypt.ahI] [Win32/Trojan.Multi.daf]
befb64cbe1dbd0d82dfbfe4d5ea6249a	[Packed.Win32.Katusha.1!O] [PWSZbot-FTJ!BEFB64CBE1DB] [Spyware.Zbot.ED] [Trojan.Win32.Cutwail.cuodvy] [Trojan.DownLoader9.48272] [Trojan/Win32.Cutwail] [Trojan.Cutwail]
9d5cdd0f0abea2129bde21e709ba7b4a	[HW32.CDB.73ac] [Trojan.Crypt.NKN] [Trojan/Injector.bcve] [Trojan.Inject!UhanpTn6JqY] [Trojan.Win32.Inject.muml] [Trojan.Win32.Inject.cxbmaq] [UnclassifiedMalware] [Trojan.PWS.Panda.5841] [TR/Dropper.VB.14394] [VirTool:Win32/VBInject] [Trojan/Win32.Injector] [Virus.Win32.Heur.p] [Trojan.Inject] [Trojan-Spy.Zbot] [SHeur4.BUMY] [Trojan.Win32.Injector.BCVE] [Win32/Trojan.1a4]
f98670433bdaef14b0af3feeb1c02282	[Virus.Win32.Heur.c] [Artemis!F98670433BDA] [Backdoor.Win32.Pushdo.qye] [Spyware/Win32.Zbot] [Trj/dtcontx.G]
d3c457d16cb688d2425937a01fd884bc	[W32.CarigatA.Trojan] [Trojan] [WS.Reputation.1] [Upatre.X] [Mal/EncPk-ZC] [BackDoor.Bulknet.1150] [TR/Crypt.EPACK.67831] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trj/dtcontx.I] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PH]
ded55f58a5734b05b67d68a2b99b7e61	[Artemis!DED55F58A573] [Kryptik.CCHF] [TROJ_KRYPTIK.SGQ] [UnclassifiedMalware] [Win32.Malware!Drop] [TrojanDownloader:Win32/Cutwail.BS] [SScope.Malware-Cryptor.Fareit.2813] [Trojan.Crypt2] [W32/Kryptik.BIXX] [Crypt2.AXYM]
da53b7983185de17e67579e2de0231be	[Trojan-Dropper.Win32.Dorifel.aguj] [W32/Injector.ALPQ!tr]
1c5953fcd6ba3a14a1480058ca561ad6	[HW32.CDB.Fc8d] [Cutwail.CAS] [Heuristic.LooksLike.Win32.SuspiciousPE.J]

Whois

Property	Value
Email	ortimerce@gmail.com
NameServer	DNS2.ZONADNS.COM
Created	2006-01-17 00:00:00
Changed	2011-12-30 00:00:00
Expires	2017-01-17 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2013-09-09	193.42.143.42 (ClassC)
2013-10-07	80.93.92.146 (ClassC)
2013-10-10	173.194.41.120 (ClassC)
2013-11-19	173.194.41.120 (ClassC)
2014-05-05	80.93.92.146 (ClassC)
2025-04-20	92.222.150.88 (ClassC)
2026-01-27	217.160.163.245 (ClassC)

html>head>meta namerobots contentnoindex, follow>meta http-equivrefresh content60>title>/title>script>    function setCookie(cname, cvalue, exdays) {        var d  new Date();        d.setTime(d.getTime() + (exdays*24*60*60*1000));        var expires  expires+ d.toUTCString();        document.cookie  cname +  + cvalue + ;  + expires;    }    function getCookie(cname) {        var name  cname + ;        var ca  document.cookie.split(;);        for(var i  0; i ca.length; i++) {             var c  cai;            while (c.charAt(0) ) {                c  c.substring(1);            }            if (c.indexOf(name)  0) {                 return c.substring(name.length,c.length);            }        }        return ;    }   document.write(iframe width100% height100% frameborder0 styleoverflow:hidden;height:100%;width:100% srchttp://captcha.webempresa.eu/redirect.php?acp7186.webempresa.eu&b52.40.234.105&c+window.location.href+>/iframe);setTimeout(function(){    var script  document.createElement(script);    script.src  http://captcha.webempresa.eu/tmp/cp7186.webempresa.eu-52.40.234.105.js;    document.getElementsByTagName(head)0.appendChild(script);}, 5000);/script>/head>body>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Tue, 25 Jun 2024 18:51:02 GMTContent-Type: text/htmlContent-Length: 3362Last-Modified: Thu, 17 Nov 2016 06:14:41 GMTConnection: keep-aliveVary: Accept-EncodingAccept-

html>head>    meta namerobots contentnoindex, follow>    meta http-equivrefresh content30>    meta http-equivcache-control contentno-store, no-cache, must-revalidate, post-check0, pre-check0 />    meta http-equivexpires content0 />    meta http-equivexpires contentTue, 01 Jan 1980 1:00:00 GMT />    meta http-equivpragma contentno-cache />    title>/title>    script>        (function(){            use strict;            window.Captcha  window.Captcha || {};                    function setCookie(cname, cvalue, exdays) {                var d  new Date();                d.setTime(d.getTime() + (exdays*24*60*60*1000));                var expires  expires+ d.toUTCString();                document.cookie  cname +  + cvalue + ;  + expires;            };            function getCookie(cname) {                var name  cname + ;                var ca  document.cookie.split(;);                for(var i  0; i ca.length; i++) {                    var c  cai;                    while (c.charAt(0) ) {                         c  c.substring(1);                     }                    if (c.indexOf(name)  0) {                        return c.substring(name.length,c.length);                    }                }                return ;            };            function _doRequest(source){                var source source;                var xmlHttp  new XMLHttpRequest();                    xmlHttp.open( GET, source, false );                     xmlHttp.send( null );                return xmlHttp.responseText;            };            function listed(hostname, ip){                var r _doRequest(https://webempresa.io/api/listed.php?hostname+hostname+&ip+ip);                return (undefined ! typeof r)?r:0;            };            Captcha.init function(){                var selfthis;                var hostname cp320.webempresa.eu;                 var source https://webempresa.io/api/cualesmiip.php;                 var xmlHttp  new XMLHttpRequest();                xmlHttp.open( GET, source, false );                 xmlHttp.send(

Subdomains

Date	Domain	IP
www.merceorti.com	2025-05-01	92.222.150.88

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]