polonus
2
Same snort alert other site: http://urlquery.net/report.php?id=8135652
We are being advised not to go to site: http://scanurl.net/?u=http%3A%2F%2Fmercantilexport.com%2F&uesb=Check+This+URL#results
blacklisted: http://maldb.com/mercantilexport.com/
Also infected with malware according to Sucuri’s: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fmercantilexport.com%2F
and zulu.zscaler: http://zulu.zscaler.com/submission/show/0f07de41b3796c42dd339ebe39ec61cc-1386110900
When you are not being stopped by Google Safebrowsing from going to this site, avast detect as HTML:Iframe-ZG [Trj]
There is also an old friend here doing the rounds: hxtp://mercantilexport.com/counter.php
Read on the malware connectionsn of counter.php: http://www.securelist.com/en/blog/9151/Visit_from_an_old_friend_Counter_php
(above link article author = Vincente Diaz)
polonus