*******************************************************************************************************
****************************************** Informations ******************************************
*******************************************************************************************************

This dox is for : cooltra.com
Dox made by Scrap#3264


*******************************************************************************************************
****************************************** Nmap informations ******************************************
*******************************************************************************************************

┌──(root㉿kali)-[/home/kali]
└─# nmap ******* -Pn -O
Starting Nmap 7.92 ( https://nmap.org ) at 2022-11-19 13:21 UTC
Nmap scan report for ******* (13.32.145.88)
Host is up (0.043s latency).
Other addresses for ******* (not scanned): 13.32.145.83 13.32.145.15 13.32.145.18
rDNS record for 13.32.145.88: server-13-32-145-88.cdg50.r.cloudfront.net
Not shown: 997 filtered tcp ports (no-response), 1 filtered tcp ports (port-unreach)
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 11.X|12.X (88%)
OS CPE: cpe:/o:freebsd:freebsd:11.0 cpe:/o:freebsd:freebsd:12.0
Aggressive OS guesses: FreeBSD 11.0-RELEASE (88%), FreeBSD 11.0-STABLE (88%), FreeBSD 11.1-RELEASE (88%), FreeBSD 11.1-STABLE (88%), FreeBSD 12.0-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

OS detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 10.25 seconds

*******************************************************************************************************

──(root㉿kali)-[/home/kali]
└─# nmap -v -A *******
Starting Nmap 7.92 ( https://nmap.org ) at 2022-11-19 13:21 UTC
NSE: Loaded 155 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 13:21
Completed NSE at 13:21, 0.00s elapsed
Initiating NSE at 13:21
Completed NSE at 13:21, 0.00s elapsed
Initiating NSE at 13:21
Completed NSE at 13:21, 0.00s elapsed
Initiating Ping Scan at 13:21
Scanning ******* (13.32.145.18) [4 ports]
Completed Ping Scan at 13:21, 0.06s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 13:21
Completed Parallel DNS resolution of 1 host. at 13:21, 0.04s elapsed
Initiating SYN Stealth Scan at 13:21
Scanning ******* (13.32.145.18) [1000 ports]
Discovered open port 80/tcp on 13.32.145.18
Discovered open port 443/tcp on 13.32.145.18
Completed SYN Stealth Scan at 13:21, 4.77s elapsed (1000 total ports)
Initiating Service scan at 13:21
Scanning 2 services on ******* (13.32.145.18)
Completed Service scan at 13:21, 12.43s elapsed (2 services on 1 host)
Initiating OS detection (try #1) against ******* (13.32.145.18)
Retrying OS detection (try #2) against ******* (13.32.145.18)
Initiating Traceroute at 13:22
Completed Traceroute at 13:22, 3.14s elapsed
Initiating Parallel DNS resolution of 17 hosts. at 13:22
Completed Parallel DNS resolution of 17 hosts. at 13:22, 0.19s elapsed
NSE: Script scanning 13.32.145.18.
Initiating NSE at 13:22
Completed NSE at 13:22, 5.27s elapsed
Initiating NSE at 13:22
Completed NSE at 13:22, 2.63s elapsed
Initiating NSE at 13:22
Completed NSE at 13:22, 0.00s elapsed
Nmap scan report for ******* (13.32.145.18)
Host is up (0.040s latency).
Other addresses for ******* (not scanned): 13.32.145.15 13.32.145.83 13.32.145.88
rDNS record for 13.32.145.18: server-13-32-145-18.cdg50.r.cloudfront.net
Not shown: 997 filtered tcp ports (no-response), 1 filtered tcp ports (port-unreach)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     Amazon CloudFront httpd
|_http-title: Did not follow redirect to https://*******/
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_http-server-header: CloudFront
443/tcp open  ssl/http Amazon CloudFront httpd
|_http-title: 403 Forbidden
| ssl-cert: Subject: commonName=*.*******
| Subject Alternative Name: DNS:*.*******, DNS:*******
| Issuer: commonName=Sectigo RSA Domain Validation Secure Server CA/organizationName=Sectigo Limited/stateOrProvinceName=Greater Manchester/countryName=GB
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2022-05-30T00:00:00
| Not valid after:  2023-06-29T23:59:59
| MD5:   cd6b 78f0 fc07 4ff2 b430 845c cc7e 90e2
|_SHA-1: cebd 36a0 7102 de00 148a ada0 221b 2865 9bd0 f30d
| http-server-header: 
|   Apache
|_  CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 11.X|12.X (88%)
OS CPE: cpe:/o:freebsd:freebsd:11.0 cpe:/o:freebsd:freebsd:12.0
Aggressive OS guesses: FreeBSD 11.0-RELEASE (88%), FreeBSD 11.0-STABLE (88%), FreeBSD 11.1-RELEASE (88%), FreeBSD 11.1-STABLE (88%), FreeBSD 12.0-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Uptime guess: 0.000 days (since Sat Nov 19 13:22:00 2022)
Network Distance: 24 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE (using port 80/tcp)
HOP RTT       ADDRESS
1   5.85 ms   box (192.168.1.1)
2   42.54 ms  193.69.16.109.rev.sfr.net (109.16.69.193)
3   42.91 ms  145.84.0.109.rev.sfr.net (109.0.84.145)
4   34.83 ms  253.75.0.109.rev.sfr.net (109.0.75.253)
5   31.09 ms  209.45.66.86.rev.sfr.net (86.66.45.209)
6   42.57 ms  125.87.66.86.rev.sfr.net (86.66.87.125)
7   34.92 ms  222.110.0.109.rev.sfr.net (109.0.110.222)
8   41.93 ms  101.223.65.86.rev.sfr.net (86.65.223.101)
9   38.82 ms  213.4.118.80.rev.sfr.net (80.118.4.213)
10  110.58 ms v3777.cbv3-co-2.gaoland.net (84.96.251.222)
11  106.21 ms 57.146.6.194.rev.sfr.net (194.6.146.57)
12  86.03 ms  57.146.6.194.rev.sfr.net (194.6.146.57)
13  83.90 ms  99.83.65.104
14  83.43 ms  52.46.95.124
15  83.85 ms  52.93.16.47
16  74.68 ms  52.46.93.211
17  74.12 ms  52.95.60.108
18  74.27 ms  52.46.95.161
19  ... 23
24  43.21 ms  server-13-32-145-18.cdg50.r.cloudfront.net (13.32.145.18)

NSE: Script Post-scanning.
Initiating NSE at 13:22
Completed NSE at 13:22, 0.00s elapsed
Initiating NSE at 13:22
Completed NSE at 13:22, 0.00s elapsed
Initiating NSE at 13:22
Completed NSE at 13:22, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 34.55 seconds
           Raw packets sent: 2116 (97.316KB) | Rcvd: 50 (3.248KB)
           
******************************************************************************************************
***************************************** Whois informations *****************************************
******************************************************************************************************

┌──(root㉿kali)-[/home/kali]
└─# whois *******
   Domain Name: *******
   Registry Domain ID: 183521653_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.ionos.com
   Registrar URL: http://www.ionos.com
   Updated Date: 2022-07-16T07:09:51Z
   Creation Date: 2005-07-15T09:05:04Z
   Registry Expiry Date: 2023-07-15T09:05:04Z
   Registrar: IONOS SE
   Registrar IANA ID: 83
   Registrar Abuse Contact Email: abuse@ionos.com
   Registrar Abuse Contact Phone: +1.6105601459
   Domain Status: ok https://icann.org/epp#ok
   Name Server: NS-13.AWSDNS-01.COM
   Name Server: NS-1370.AWSDNS-43.ORG
   Name Server: NS-1777.AWSDNS-30.CO.UK
   Name Server: NS-981.AWSDNS-58.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2022-11-19T13:38:57Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Domain Name: *******
Registry Domain ID: 183521653_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.ionos.com
Registrar URL: http://ionos.com
Updated Date: 2018-05-29T07:23:52.000Z
Creation Date: 2005-07-15T09:05:04.000Z
Registrar Registration Expiration Date: 2023-07-15T09:05:04.000Z
Registrar: IONOS SE
Registrar IANA ID: 83
Registrar Abuse Contact Email: abuse@ionos.com
Registrar Abuse Contact Phone: +1.8774612631
Reseller: 
Domain Status: ok https://www.icann.org/epp#ok
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: *******os S.L.
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: B
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: ES
Registrant Phone: REDACTED FOR PRIVACY
Registrant Phone Ext: 
Registrant Fax: REDACTED FOR PRIVACY
Registrant Fax Ext: 
Registrant Email: dataprivacyprotected@ionos.de
Registry Admin ID: REDACTED FOR PRIVACY 
Admin Name: REDACTED FOR PRIVACY
Admin Organization: REDACTED FOR PRIVACY
Admin Street: REDACTED FOR PRIVACY
Admin City: REDACTED FOR PRIVACY
Admin State/Province: REDACTED FOR PRIVACY
Admin Postal Code: REDACTED FOR PRIVACY
Admin Country: REDACTED FOR PRIVACY
Admin Phone: REDACTED FOR PRIVACY
Admin Phone Ext: REDACTED FOR PRIVACY
Admin Fax: REDACTED FOR PRIVACY
Admin Fax Ext: REDACTED FOR PRIVACY
Admin Email: dataprivacyprotected@ionos.de
Registry Tech ID: REDACTED FOR PRIVACY
Tech Name: REDACTED FOR PRIVACY
Tech Organization: REDACTED FOR PRIVACY
Tech Street: REDACTED FOR PRIVACY
Tech City: REDACTED FOR PRIVACY
Tech State/Province: REDACTED FOR PRIVACY
Tech Postal Code: REDACTED FOR PRIVACY
Tech Country: REDACTED FOR PRIVACY
Tech Phone: REDACTED FOR PRIVACY
Tech Phone Ext: REDACTED FOR PRIVACY
Tech Fax: REDACTED FOR PRIVACY
Tech Fax Ext: REDACTED FOR PRIVACY
Tech Email: dataprivacyprotected@ionos.de
Nameserver: ns-13.awsdns-01.com
Nameserver: ns-981.awsdns-58.net
Nameserver: ns-1777.awsdns-30.co.uk
Nameserver: ns-1370.awsdns-43.org
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

*******************************************************************************************************
****************************************** Ping informations ******************************************
*******************************************************************************************************

──(root㉿kali)-[/home/kali]
└─# ping *******
PING ******* (52.84.174.106) 56(84) bytes of data.
64 bytes from server-52-84-174-106.cdg50.r.cloudfront.net (52.84.174.106): icmp_seq=1 ttl=246 time=40.6 ms
64 bytes from server-52-84-174-106.cdg50.r.cloudfront.net (52.84.174.106): icmp_seq=2 ttl=246 time=41.5 ms
64 bytes from server-52-84-174-106.cdg50.r.cloudfront.net (52.84.174.106): icmp_seq=3 ttl=246 time=41.3 ms
64 bytes from server-52-84-174-106.cdg50.r.cloudfront.net (52.84.174.106): icmp_seq=4 ttl=246 time=40.0 ms
64 bytes from server-52-84-174-106.cdg50.r.cloudfront.net (52.84.174.106): icmp_seq=5 ttl=246 time=53.8 ms
^C
--- ******* ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 39.985/43.441/53.764/5.189 ms

*******************************************************************************************************
**************************************** Nslookup informations ****************************************
*******************************************************************************************************

┌──(root㉿kali)-[/home/kali]
└─# nslookup *******
Server:         192.168.1.1
Address:        192.168.1.1#53

Non-authoritative answer:
Name:   *******
Address: 52.84.174.113
Name:   *******
Address: 52.84.174.61
Name:   *******
Address: 52.84.174.104
Name:   *******
Address: 52.84.174.106

*******************************************************************************************************
*************************************** Traceroute informations ***************************************
*******************************************************************************************************

┌──(root㉿kali)-[/home/kali]
└─# traceroute *******
traceroute to ******* (52.84.174.104), 30 hops max, 60 byte packets
 1  box (192.168.1.1)  1.728 ms  6.524 ms  6.482 ms
 2  193.69.16.109.rev.sfr.net (109.16.69.193)  27.849 ms  28.718 ms  31.000 ms
 3  145.84.0.109.rev.sfr.net (109.0.84.145)  32.885 ms  33.577 ms  35.707 ms
 4  253.75.0.109.rev.sfr.net (109.0.75.253)  36.541 ms  36.893 ms  38.451 ms
 5  209.45.66.86.rev.sfr.net (86.66.45.209)  42.978 ms  42.659 ms  42.604 ms
 6  125.87.66.86.rev.sfr.net (86.66.87.125)  42.840 ms  41.505 ms  42.764 ms
 7  222.110.0.109.rev.sfr.net (109.0.110.222)  47.073 ms  28.341 ms  29.759 ms
 8  101.223.65.86.rev.sfr.net (86.65.223.101)  31.930 ms  30.000 ms  31.236 ms
 9  205.4.118.80.rev.sfr.net (80.118.4.205)  34.266 ms 37.120.20.93.rev.sfr.net (93.20.120.37)  31.679 ms  32.685 ms
10  202.4.118.80.rev.sfr.net (80.118.4.202)  36.382 ms v3777.cbv3-co-2.gaoland.net (84.96.251.222)  38.229 ms 202.4.118.80.rev.sfr.net (80.118.4.202)  51.855 ms
11  57.146.6.194.rev.sfr.net (194.6.146.57)  51.818 ms  52.157 ms  51.768 ms
12  57.146.6.194.rev.sfr.net (194.6.146.57)  52.295 ms  42.765 ms  43.116 ms
13  99.83.65.104 (99.83.65.104)  42.058 ms  39.787 ms  40.649 ms
14  52.46.95.92 (52.46.95.92)  42.121 ms 52.46.95.132 (52.46.95.132)  40.448 ms 52.46.95.92 (52.46.95.92)  45.569 ms
15  52.93.16.111 (52.93.16.111)  43.908 ms 52.93.16.67 (52.93.16.67)  38.926 ms  39.357 ms
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  52.46.95.240 (52.46.95.240)  47.667 ms  38.616 ms  39.749 ms
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *