Domain > chocolatecovers.com

More information on this domain is in AlienVault OTX

Files that talk to chocolatecovers.com

MD5	A/V
c05f0c46dbc6bfe046ad7ca12cf9f98e	[W32.Cloda2c.Trojan.5c7a] [PWSZbot-FLN!C05F0C46DBC6] [Spyware.Zbot] [TrojanSpy.Zbot!d3kAaGLa0Gg] [Suspicious.Cloud] [TSPY_ZBOT.WGJ] [Trojan-Spy.Win32.Zbot.qqte] [Trojan.Win32.Zbot.cmzhij] [Trojan.PWS.Panda.4379] [TR/Spy.ZBot.anb.1] [Win32.Troj.Zbot.qq.(kcloud)] [PWS:Win32/Zbot] [Win32/Spy.Zbot.AAU] [Trojan-PWS.Win32.Zbot] [W32/Zbot.QQTE!tr] [Trojan.Win32.Zbot.Ax]
4ef765e9cbbcc279b3ad373c5c46f1b7	[Artemis!4EF765E9CBBC] [Backdoor/Win32.Androm] [Trojan.PWS.Panda.4379]
33d59790d4d3544afd6451254ec798b1	[W32.DalverT.Trojan] [Backdoor/W32.Pushdo.89600.B] [Backdoor.Pushdo.rw4] [Spyware.ZeuS] [Trojan.Win32.Bulknet.czolua] [W32/Trojan2.OEJI] [Backdoor.Trojan] [Win32/Cutwail.CCE] [TROJ_CUTWAIL.YAI] [Backdoor.Win32.Pushdo.rmj] [Backdoor.Pushdo!XgbPif+v0XE] [Backdoor.Win32.A.Pushdo.89600] [UnclassifiedMalware] [BackDoor.Bulknet.1442] [Backdoor.Pushdo.Win32.715] [TR/Cutwail.A.75] [Mal/Zbot-QL] [Trojan[Backdoor]/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.RRZR-0800] [Backdoor.Pushdo] [Trj/WLT.A] [Win32/Wigon.PH] [Win32.Backdoor.Pushdo.Lkxp] [Trojan.Cutwail] [W32/Pushdo.RMJ!tr.bdr] [Trojan.Win32.Wigon.bPH] [Win32/Trojan.3ea] [Backdoor.Pushdo.r4]
390fc8a6672ba631df610de3fc76ad22	[Heur.Win32.Veebee.1!O] [Trojan.LVBP.ED] [W32/Trojan2.OAPU] [TROJ_FORUCON.BMC] [Trojan-PSW.Win32.Tepfer.swki] [Trojan.PWS.Stealer.3128] [TR/Dropper.VB.7976] [W32/Trojan.VAGS-5670] [Trojan-PWS.Win32.Tepfer] [Trojan.Win32.InfoStealer.AY]
42d2401c479fc20e5d1d8c6efca7f19e	[Trojan.Downloader.JQRA] [Trojan.Cutwail.rw4] [RDN/Downloader.a!qm] [Trojan.Cutwail!mQbvvMquKfg] [W32/Trojan2.OEGP] [ZBot.UPRE] [Win32/Cutwail.ReCaaAD] [TROJ_SPNR.0BEM14] [Trojan.Win32.Cutwail.ctz] [Trojan.Win32.Cutwail.cydmbj] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TR/Jaik.1660.4] [Mal/Zbot-PT] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.AFBM-0787] [Win32/Wigon.PI] [Trj/WLT.A] [Win32.Trojan.Cutwail.Pdmg] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CTZ!tr] [Trojan.Win32.Wigon.bPI] [Win32/Trojan.a00]
b84dc225a3c93b1a2a403a332a27257c	[W32.WingMaI.Trojan] [RDN/Downloader.a!qm] [WS.Reputation.1] [Cutwail.COY] [Backdoor.Win32.Pushdo.rmc] [Backdoor.Pushdo!JByiFQxqnkU] [TR/Cutwail.A.68] [Mal/Zbot-PY] [TrojanDownloader:Win32/Cutwail] [Trj/dtcontx.L] [Win32/Wigon.PI] [Win32.Backdoor.Pushdo.Pezl] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PI!tr] [Backdoor.Win32.Pushdo.Awv] [Win32/Trojan.9f9]
8043461e3d18f379dfd5c1d3dda25c6f	[TrojanDownloader.Cutwail.BS4] [PWS-FBOF!] [Spyware.Zbot] [Trojan.Cutwail!ksLthdR/J5A] [W32/Trojan2.OBNX] [Backdoor.Trojan] [Kryptik.CDDW] [Win32/Cutwail.CAK] [BKDR_PUSHDO.IP] [Trojan.Win32.Cutwail.chg] [Trojan.Win32.Cutwail.cucyjl] [Trojan.Win32.A.Cutwail.87552] [TrojWare.Win32.Spy.Zbot.FRIN] [Trojan.PWS.Panda.5756] [TR/Injector.90112.43] [Trojan/Cutwail.ab] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/Trojan.WQFW-5190] [Trj/WLT.A] [Win32/Wigon.PI] [Win32.Trojan.Cutwail.Dxcl] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CHG!tr] [SHeur4.BRVM] [Trojan.Win32.Cutwail.aG]
f15be0daa762c12cda891a6390d77e86	[WS.Reputation.1] [TROJ_CRILOCK.RNT] [Backdoor.Win32.Pushdo.rks] [TR/Crypt.ZPACK.40047] [Trojan[Backdoor]/Win32.Pushdo] [W32/Pushdo.RKS!tr.bdr] [SHeur4.BTFZ]
1dc798c5cda1dfb8e321e68f1cf116c4	[W32.DalverM.Trojan] [Trojan.Cutwail.r5] [RDN/Downloader.a!qr] [Trojan.Cutwail] [TROJ_CUTWAIL.YAJ] [Trojan.Win32.Cutwail.cuo] [Trojan.Cutwail!Dw5GluQCwY0] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail.BS] [W32/Trojan.LTBF-7078] [Trj/CI.A] [Win32.Trojan.Cutwail.Eclb] [Trojan] [W32/Cutwail.CBPJ!tr] [Crypt3.OXR] [Trojan.Win32.Kryptik.BCBPJ] [Win32/Trojan.Multi.daf]
aea74f40aff4430d316990208de17d13	[SHeur4.BQMT] [TrojanDownloader*Win32/Cutwail.BS]
556c3819778ac91261be8821206aa1ca	[Trojan.Zbot.cw3] [Trojan.Crypt.NKN] [Trojan.VBKrypt.Win32.226775] [Trojan.Win32.VBKrypt.cvwaev] [W32/Trojan4.AFNE] [WS.Reputation.1] [Win32/Zbot.IDY] [TROJ_FORUCON.BMC] [Trojan.Win32.VBKrypt.uqco] [Trojan.VBKrypt!sgvTFCNPRto] [UnclassifiedMalware] [BackDoor.Andromeda.273] [TR/Dropper.VB.12577] [Trojan/VBKrypt.jafc] [PWS:Win32/Zbot] [Backdoor/Win32.Androm] [W32/Trojan.XEYN-6246] [Virus.Win32.Heur.p] [Trj/WLT.A] [Win32/Wigon.PH] [Virus.Win32.VBInject] [W32/VBKrypt.PH!tr] [SHeur4.BSLG] [Trojan.Win32.VBKrypt.ahI] [Win32/Trojan.Multi.daf]
9e79c93a017e5a7232fb2c8de35d3d19	[RDN/Downloader.a!qh] [Spyware.ZeuS] [Trojan.Cutwail!YdjtHWnkh+w] [WS.Reputation.1] [ZBot.UPRE] [TROJ_CUTWAIL.XZQ] [Trojan.Win32.Cutwail.csw] [UnclassifiedMalware] [TR/Changeling.A.1489] [Mal/Zbot-PT] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.Cutwail] [W32/Trojan.IGDL-1304] [Trojan.Cutwail] [Win32/Wigon.PH] [Trojan-Dropper.Necurs] [W32/Cutwail.CSW!tr] [Trojan.Win32.Wigon.PH] [Win32/Trojan.Multi.daf]
7cdb7bd134239bf0fc686cdec723ff12	[Trojan] [Backdoor.Trojan] [TrojanDownloader:Win32/Cutwail] [W32/Backdoor.UMOH-9056] [Backdoor/Win32.Androm] [Win32/Wigon.PH] [W32/Wigon.PH] [Crypt2.BOOA] [Trojan.Win32.Kryptik.BMUN]
5a39cb50b1ae4f84cbda561194969220	[W32.VariantCgripkE.Trojan] [Backdoor.Pushdo.r4] [RDN/Downloader.a!qf] [Trojan/Kryptik.caki] [WS.Reputation.1] [ZBot.STQQ] [TROJ_SPNR.1ADP14] [Backdoor.Win32.Pushdo.rlq] [Trojan.Inject1.41930] [TR/Dldr.Cutwail.120] [Troj/Wonton-BX] [TrojanDownloader:Win32/Cutwail] [Dropper/Win32.Necurs] [W32/Trojan.QKYI-1976] [Trojan.Win32.Kryptik.CAKI] [Trojan-Dropper.Necurs] [W32/KRYPTIK.BX!tr] [Win32/Backdoor.8e5]
6edad6fbda6f8bb8ea04d1cb7842ccbe	[TrojanDownloader.Cutwail.bs] [PWSZbot-FFC!6EDAD6FBDA6F] [Riskware] [WS.Reputation.1] [Virus.Win32.Heur.c] [UnclassifiedMalware] [Trj/dtcontx.H] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.Bublik] [BScope.Malware-Cryptor.Bubblik] [Virus.Win32.Zbot] [W32/Kryptik.BKIT] [Zbot.BOV]
f98670433bdaef14b0af3feeb1c02282	[Virus.Win32.Heur.c] [Artemis!F98670433BDA] [Backdoor.Win32.Pushdo.qye] [Spyware/Win32.Zbot] [Trj/dtcontx.G]
8bb8a34edd755c342e3755ab3490e182	[W32/Trojan3.GLN] [Trojan.Zbot] [Trojan.Win32.Bublik.bkef] [Trojan.DownLoad3.28161] [TR/Drop.Zbot.Q] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC] [W32/Trojan.VYIA-4984] [Trojan/Win32.Zbot] [Trojan.Spy.Zbot.FHM] [Trojan.Dropper] [Trojan-Spy.Zbot] [W32/Small.BS!tr.dldr]
0d1d9a600c4f323abb335a778c760dbe	[Suspicious.Cloud.5] [Win32/Wigon.PH]
e0dd0139dda0decec433d4ca03bcf98b	[Backdoor.Pushdo!EjcShSXKblg] [Kryptik.CDNW] [Backdoor.Win32.Pushdo.rko] [Trojan.Win32.Pushdo.cwbpfm] [Backdoor.Win32.A.Pushdo.96256] [TR/Crypt.ZPACK.35529] [Trojan[Backdoor]/Win32.Pushdo] [Spyware/Win32.Zbot] [Virus.Win32.Injector] [W32/Pushdo.RKO!tr.bdr] [Pakes_c.BLLI] [Trojan.Win32.Kryptik.BYZC] [Win32/Trojan.a4e]
8016f017cd252788a6e7e6802c10e0b2	[Trojan.Pushdo.D] [Trojan.Cryptor.r4] [Trojan.Necurs] [Backdoor.Pushdo!QBuGAcEYs7o] [Backdoor.Trojan] [ZBot.UPRE] [Win32/Cutwail.DVCWUKD] [TROJ_KRYPTIK.YVV] [Backdoor.Win32.Pushdo.rkx] [Trojan.Win32.Pushdo.cwhqoj] [TrojWare.Win32.UMal.~A] [BackDoor.Bulknet.1150] [Backdoor.Pushdo.Win32.713] [TR/Cutwail.A.55] [Mal/Zbot-PT] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.SCHC-6463] [Backdoor/Win32.Necurs] [Backdoor.Pushdo] [Win32/Wigon.PH] [Win32.Backdoor.Pushdo.Dvza] [Trojan-Dropper.Necurs] [W32/Pushdo.BZGH!tr.bdr] [Crypt3.IEL] [BackDoor.Win32.Pushdo.77] [Win32/Backdoor.4da]

Whois

Property	Value
Email	DREG2@DATAHOST.COM
NameServer	NS2.RACKSPACE.COM
Created	2000-03-11 00:00:00
Changed	2013-11-17 00:00:00
Expires	2016-03-11 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2013-08-07	67.192.11.2 (ClassC)
2013-09-05	127.0.0.1 (ClassC)
2013-10-04	190.93.241.98 (ClassC)
2013-10-04	190.93.242.98 (ClassC)
2013-10-04	141.101.123.98 (ClassC)
2013-10-04	190.93.243.98 (ClassC)
2013-10-04	141.101.123.98 (ClassC)
2013-10-04	190.93.240.98 (ClassC)
2013-10-06	190.93.240.98 (ClassC)
2013-11-18	67.192.11.9 (ClassC)
2013-11-19	67.192.11.8 (ClassC)
2019-08-15	67.192.11.8 (ClassC)
2021-03-06	69.16.203.25 (ClassC)
2023-07-19	161.47.47.185 (ClassC)
2025-10-04	141.193.213.11 (ClassC)
2025-10-25	141.193.213.10 (ClassC)
2026-01-06	185.230.63.107 (ClassC)

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 20:14:40 GMTServer: Apache/2.2.15 (Red Hat)Set-Cookie: mightymerchanthpqbctelft3n9rhu7nsmamucl2; path/; HttpOnlyExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Contro

!DOCTYPE html>html langen>head>  meta http-equivContent-Type contenttext/html; charsetUTF-8>  meta charsetutf-8>  !-- Title and other stuffs -->  title>ChocolateCovers - Custom Candy Bar Wrappers for any Occasion/title>  meta nameviewport contentwidthdevice-width, initial-scale1.0>  meta namedescription contentSweeten any occasion with custom candy bar wrappers around Hershey bars.  Perfect for businesses, schools, weddings, showers, anniversaries, holidays, reunions, and so much more!>  meta namekeywords contentcustom candy wrappers, Chocolate Covers, Custom Candy Bar Wrappers, Custom Hershey Bar, Personalized Wrapper, custom>  meta nameauthor contentMightyMerchant v5.1>  link relcanonical hrefhttp://www.chocolatecovers.com />	meta propertyog:title contentChocolateCovers - Custom Candy Bar Wrappers for any Occasion/>	meta propertyog:site_name contentChocolateCovers LTD/>	meta propertyog:url contenthttp://www.chocolatecovers.com//>	meta propertyog:description contentSweeten any occasion with custom candy bar wrappers around Hershey bars.  Perfect for businesses, schools, weddings, showers, anniversaries, holidays, reunions, and so much more!/>	meta propertyfb:admins content />    link hrefhttps://fonts.googleapis.com/css?familyOpen+Sans:400,400italic,600,600italic relstylesheet typetext/css>	link hrefhttps://fonts.googleapis.com/css?familyOpen+Sans+Condensed:300,300italic,700 relstylesheet typetext/css>	link hrefhttps://fonts.googleapis.com/css?familyLora:400,400italic,700,700italic relstylesheet typetext/css>  !-- Stylesheets -->	  link hrefhttp://assets.mightymerchant.com/bootstrap_332/css/bootstrap.min.css relstylesheet>  link hrefhttp://assets.mightymerchant.com/bootstrap_332/css/bootstrap-theme.min.css relstylesheet>		 !--CSSASSETS-->link relstylesheet hrefhttp://assets.mightymerchant.com/plug-ins/carouFredSel6-2-1/carouFredSel.css>link relstylesheet hrefhttp://assets.mightymerchant.com/mm-css/sliders/carousel-basic-dots.css>link relstylesheet hrefhttp://assets.mightymerchant.com/mm-css/sliders/captions/.css

Subdomains

Date	Domain	IP
www.chocolatecovers.com	2015-07-14	67.192.11.8

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > chocolatecovers.com

Is this malicious?

Files that talk to chocolatecovers.com

Whois

DNS Resolutions

Port 80

Subdomains