home

www.nicolascoolman.com

LADINETTI Nicolas

Domain Information

The domain www.nicolascoolman.com registered by LADINETTI Nicolas was initially registered in May of 2015 through OVH. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Tuesday, May 19, 2015

Expires date:
Friday, May 19, 2017

Updated date:
Friday, March 11, 2016

ASN:
AS16276 OVH , FR

Root domain:
nicolascoolman.com

Whois:
2 nicolascoolman.com records

The domain www.nicolascoolman.com has been seen to resolve to the following 3 IP addresses.

37.59.33.64
ns3047581.ip-37-59-33.eu
August 25, 2016

149.202.79.145
ns3016129.ip-149-202-79.eu
April 4, 2016

213.186.33.87
cluster014.ovh.net
June 30, 2015

File downloads found at URLs served by www.nicolascoolman.com.

0 / 68
http://www.nicolascoolman.com/fr/download/.../?wpdmdl=2148  (zhpcleaner.exe)

2 / 68
http://www.nicolascoolman.com/fr/download/.../?wpdmdl=803  (zhpdiag3.exe)

0 / 68
http://www.nicolascoolman.com/.../ZHPCleaner.exe  (39f5f2c9ed5c96b82d344488633ba109)

1 / 68
http://www.nicolascoolman.com/fr/download/.../?wpdmdl=856  (zhpfix.exe)

0 / 68
http://www.nicolascoolman.com/fr/download/.../?wpdmdl=866  (zhp2016setup.exe)

0 / 68
http://www.nicolascoolman.com/fr/download/.../  (zhpdiag3.exe)

3 / 68      (inconclusive)
http://www.nicolascoolman.com/download/.../?wpdmdl=18  (zhpcleaner.exe)

The following 13 files have been seen to comunicate with www.nicolascoolman.com in live environments.

TCP » 213.186.33.87:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
jingling.exe

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
onlineguardian-v2.exe

TCP » 213.186.33.87:25
www.exe

TCP » 213.186.33.87:80
Havij.exe (Havij by ITSecTeam)

TCP » 213.186.33.87:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 213.186.33.87:80
Milouz Market.exe (Market by Milouz Corp)

TCP » 213.186.33.87:80
Milouz Market.exe (Market by Milouz Corp)

TCP » 213.186.33.87:587
w.exe

URL:
http://www.nicolascoolman.com/

Google Analytics:
UA-63376259

Title:
“Security Blog Software | By Nicolas Coolman...”

Description:
“NICOLAS COOLMAN SOFTWARE Software library by Nicolas Coolman. The Toolkit in case of infection! All downloads are free ! For assistance in”

Web server:
nginx (PHP/5.6.19,PleskLin)

Facebook:
Likes:  8
Shares:  2
Comments:  7

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.