home

duck.whatbox.ca

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS16265 FIBERRING LeaseWeb B.V.

Root domain:
whatbox.ca

The domain duck.whatbox.ca has been seen to resolve to the following IP address.

95.211.174.194
duck.whatbox.ca
March 15, 2014

File downloads found at URLs served by duck.whatbox.ca.

4 / 68      (inconclusive)
http://duck.whatbox.ca/webui/plugins/.../action.php?hash=049B66A1D6D90CF5416072D6FA7ECFE2E3DEB4EB&no=0  (kmspico_setup.exe)

The following 2 files have been seen to comunicate with duck.whatbox.ca in live environments.

TCP » 95.211.174.194:61029
bitcomet.exe (BitComet 64-bit by www.BitComet.com)

TCP » 95.211.174.194:56159
emuletorrent.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.