25 /
tcp
302716109 | 2025-01-19T08:11:04.089404
220 ex2.HostedExchange.local Microsoft ESMTP MAIL Service ready at Sun, 19 Jan 2025 09:10:51 +0100
250-ex2.HostedExchange.local Hello [10.40.14.141]
250-SIZE 104857600
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250-SMTPUTF8
250 XRDST
SMTP NTLM Info:
OS: Windows Server 2022
OS Build: 10.0.20348
Target Name: HOSTEDEXCHANGE
NetBIOS Domain Name: HOSTEDEXCHANGE
NetBIOS Computer Name: EX2
DNS Domain Name: HostedExchange.local
DNS Tree Name: HostedExchange.local
FQDN: ex2.HostedExchange.local
1524863801 | 2025-01-18T01:08:04.156207
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://he1.danaweb.org/owa/
Server: Microsoft-IIS/10.0
Date: Sat, 18 Jan 2025 01:08:03 GMT
Content-Length: 151
110 /
tcp
-2126211945 | 2025-01-26T15:36:45.045652
+OK The Microsoft Exchange POP3 service is ready.
+OK
TOP
UIDL
STLS
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:36:6c:5e:11:28:33:9f:08:8a:16:49:7b:22:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: CN=he1.danaweb.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:e1:1e:87:7e:83:af:3d:b4:9f:ad:a6:4c:b4:
35:ea:ca:a3:6f:ed:1c:b0:60:13:ad:82:fd:9c:58:
05:20:16:45:4c:80:0c:00:f3:f7:b6:55:e6:e9:9b:
e1:98:47:5f:9b:7f:8a:d1:09:4c:79:15:b8:1b:49:
cd:4a:d2:97:bb:1b:ed:e6:50:89:fb:88:af:10:ef:
91:25:8a:7a:cc:61:eb:90:6e:c7:bc:5f:86:94:97:
20:c1:17:ba:ea:67:c4:53:a9:bb:87:76:8f:1b:f6:
9a:35:8a:9f:2d:de:21:f9:54:ee:31:8f:e4:e3:de:
7c:c5:b8:13:0c:f5:00:6c:c0:24:3f:ab:2b:f3:cf:
34:54:bd:96:a4:36:1f:5b:ab:ef:a7:92:9d:74:08:
02:bc:2e:0f:77:33:c4:5a:e9:46:52:b6:d6:fa:ef:
1c:7b:18:f1:7a:66:65:e2:85:64:ed:f6:3f:b3:a4:
71:fa:6b:bd:8f:d5:a0:50:e1:df:ef:be:d9:c7:8e:
6d:5c:e1:66:5d:99:1b:78:4a:16:d5:0b:d5:5e:90:
c8:21:d4:37:17:27:96:0f:f7:6a:af:1c:46:6c:19:
96:cf:0c:8c:9f:c3:50:21:c3:82:01:74:05:1a:41:
bc:05:b8:c7:52:07:0b:73:f9:3e:bb:60:80:99:03:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
C9:F1:E8:71:86:55:2B:F5:53:94:52:3D:3B:E8:3D:C0:71:D4:2C:DA
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 21 09:09:23.139 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:21:00:9E:DA:64:D9:38:E2:42:DA:07:C5:73:
C2:77:EC:FA:E5:C5:39:50:B1:77:85:01:68:75:78:9C:
D9:5A:7A:D8:18:02:1F:1B:C1:91:5B:E4:3C:FE:01:79:
2A:55:5A:88:35:CC:9C:09:79:97:43:29:57:06:B3:AA:
C7:B1:FA:0B:DB:87
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 21 09:09:23.111 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:D8:AA:6D:93:0E:A3:0E:00:B1:FF:94:
78:D7:41:23:67:75:A6:A5:7C:97:C9:FA:59:E6:2C:BD:
5C:51:7F:6A:02:21:00:E5:D3:5C:F0:0A:BB:B5:4D:BF:
26:C3:1C:E5:1B:73:3E:DC:9A:C3:51:82:5A:55:B4:FC:
71:F3:AC:20:AF:48:9D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 21 09:09:23.106 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9D:DE:5A:FD:F0:C9:F4:3B:CF:2A:
E7:CF:EB:50:47:3A:A5:2F:BA:87:0C:1C:FE:81:05:5B:
86:4C:88:99:B8:02:20:18:3A:BD:36:D3:D2:D6:85:2B:
62:1C:B5:60:B1:86:1B:66:2A:C0:F6:4B:7F:57:CF:BD:
61:93:A3:AD:7D:EC:1E
X509v3 Subject Alternative Name:
DNS:he1.danaweb.org, DNS:autodiscover.he1.danaweb.org, DNS:redirect.he1.danaweb.org
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
68:dd:25:05:ca:c1:b5:34:bf:a7:82:23:f5:62:39:0c:63:4a:
d3:e5:ae:5a:84:43:85:be:81:27:3e:3f:ff:66:93:c2:e7:06:
87:48:92:37:63:cc:28:b0:0a:73:29:53:f2:89:e5:74:db:65:
ac:f4:78:ac:9e:d0:ea:8e:ff:03:f0:60:4c:a8:94:39:6e:51:
46:03:77:2c:26:da:35:e0:5b:2f:aa:02:92:00:15:04:13:1f:
72:96:6a:08:92:d1:d9:5f:0a:00:fb:3c:3d:0c:d1:b0:5f:48:
da:79:25:2d:5a:2a:b4:fd:3e:ad:b9:7a:be:f4:83:e6:14:5d:
42:4c:5a:27:7a:95:29:c8:6b:bf:99:94:54:06:e0:8a:21:3f:
15:73:4c:91:30:8d:dd:b9:ff:65:31:ae:68:f3:0a:0b:56:dd:
d2:df:f3:c2:47:a8:6d:77:08:75:a5:ee:89:cf:20:5e:d6:1c:
9f:6d:c1:c2:24:d5:0c:52:e7:1f:c0:f4:44:b7:c3:78:6d:f2:
a9:61:64:52:10:76:bb:c7:c7:4f:ba:4e:ce:31:d8:22:a7:ef:
e3:0b:93:e1:1d:79:79:94:8a:72:95:1b:ba:35:44:b2:17:8b:
e0:f4:dc:59:a6:1b:4b:26:4c:e4:e2:ad:da:b4:a7:c4:65:57:
82:64:fc:e2
143 /
tcp
-254523612 | 2025-01-22T13:42:18.568409
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS MOVE ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.2")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2016 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:36:6c:5e:11:28:33:9f:08:8a:16:49:7b:22:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: CN=he1.danaweb.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:e1:1e:87:7e:83:af:3d:b4:9f:ad:a6:4c:b4:
35:ea:ca:a3:6f:ed:1c:b0:60:13:ad:82:fd:9c:58:
05:20:16:45:4c:80:0c:00:f3:f7:b6:55:e6:e9:9b:
e1:98:47:5f:9b:7f:8a:d1:09:4c:79:15:b8:1b:49:
cd:4a:d2:97:bb:1b:ed:e6:50:89:fb:88:af:10:ef:
91:25:8a:7a:cc:61:eb:90:6e:c7:bc:5f:86:94:97:
20:c1:17:ba:ea:67:c4:53:a9:bb:87:76:8f:1b:f6:
9a:35:8a:9f:2d:de:21:f9:54:ee:31:8f:e4:e3:de:
7c:c5:b8:13:0c:f5:00:6c:c0:24:3f:ab:2b:f3:cf:
34:54:bd:96:a4:36:1f:5b:ab:ef:a7:92:9d:74:08:
02:bc:2e:0f:77:33:c4:5a:e9:46:52:b6:d6:fa:ef:
1c:7b:18:f1:7a:66:65:e2:85:64:ed:f6:3f:b3:a4:
71:fa:6b:bd:8f:d5:a0:50:e1:df:ef:be:d9:c7:8e:
6d:5c:e1:66:5d:99:1b:78:4a:16:d5:0b:d5:5e:90:
c8:21:d4:37:17:27:96:0f:f7:6a:af:1c:46:6c:19:
96:cf:0c:8c:9f:c3:50:21:c3:82:01:74:05:1a:41:
bc:05:b8:c7:52:07:0b:73:f9:3e:bb:60:80:99:03:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
C9:F1:E8:71:86:55:2B:F5:53:94:52:3D:3B:E8:3D:C0:71:D4:2C:DA
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 21 09:09:23.139 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:21:00:9E:DA:64:D9:38:E2:42:DA:07:C5:73:
C2:77:EC:FA:E5:C5:39:50:B1:77:85:01:68:75:78:9C:
D9:5A:7A:D8:18:02:1F:1B:C1:91:5B:E4:3C:FE:01:79:
2A:55:5A:88:35:CC:9C:09:79:97:43:29:57:06:B3:AA:
C7:B1:FA:0B:DB:87
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 21 09:09:23.111 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:D8:AA:6D:93:0E:A3:0E:00:B1:FF:94:
78:D7:41:23:67:75:A6:A5:7C:97:C9:FA:59:E6:2C:BD:
5C:51:7F:6A:02:21:00:E5:D3:5C:F0:0A:BB:B5:4D:BF:
26:C3:1C:E5:1B:73:3E:DC:9A:C3:51:82:5A:55:B4:FC:
71:F3:AC:20:AF:48:9D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 21 09:09:23.106 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9D:DE:5A:FD:F0:C9:F4:3B:CF:2A:
E7:CF:EB:50:47:3A:A5:2F:BA:87:0C:1C:FE:81:05:5B:
86:4C:88:99:B8:02:20:18:3A:BD:36:D3:D2:D6:85:2B:
62:1C:B5:60:B1:86:1B:66:2A:C0:F6:4B:7F:57:CF:BD:
61:93:A3:AD:7D:EC:1E
X509v3 Subject Alternative Name:
DNS:he1.danaweb.org, DNS:autodiscover.he1.danaweb.org, DNS:redirect.he1.danaweb.org
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
68:dd:25:05:ca:c1:b5:34:bf:a7:82:23:f5:62:39:0c:63:4a:
d3:e5:ae:5a:84:43:85:be:81:27:3e:3f:ff:66:93:c2:e7:06:
87:48:92:37:63:cc:28:b0:0a:73:29:53:f2:89:e5:74:db:65:
ac:f4:78:ac:9e:d0:ea:8e:ff:03:f0:60:4c:a8:94:39:6e:51:
46:03:77:2c:26:da:35:e0:5b:2f:aa:02:92:00:15:04:13:1f:
72:96:6a:08:92:d1:d9:5f:0a:00:fb:3c:3d:0c:d1:b0:5f:48:
da:79:25:2d:5a:2a:b4:fd:3e:ad:b9:7a:be:f4:83:e6:14:5d:
42:4c:5a:27:7a:95:29:c8:6b:bf:99:94:54:06:e0:8a:21:3f:
15:73:4c:91:30:8d:dd:b9:ff:65:31:ae:68:f3:0a:0b:56:dd:
d2:df:f3:c2:47:a8:6d:77:08:75:a5:ee:89:cf:20:5e:d6:1c:
9f:6d:c1:c2:24:d5:0c:52:e7:1f:c0:f4:44:b7:c3:78:6d:f2:
a9:61:64:52:10:76:bb:c7:c7:4f:ba:4e:ce:31:d8:22:a7:ef:
e3:0b:93:e1:1d:79:79:94:8a:72:95:1b:ba:35:44:b2:17:8b:
e0:f4:dc:59:a6:1b:4b:26:4c:e4:e2:ad:da:b4:a7:c4:65:57:
82:64:fc:e2
-1137061518 | 2025-01-18T01:08:08.443737
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: f1088476-2c26-4dda-8769-281a85922993
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 18 Jan 2025 01:08:08 GMT
Content-Length: 58712
Microsoft Exchange:
Name: Exchange Server 2019 CU14 Nov24SUv2
Build Number: 15.2.1544.14
Build Date: November 27, 2024
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:36:6c:5e:11:28:33:9f:08:8a:16:49:7b:22:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: CN=he1.danaweb.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:e1:1e:87:7e:83:af:3d:b4:9f:ad:a6:4c:b4:
35:ea:ca:a3:6f:ed:1c:b0:60:13:ad:82:fd:9c:58:
05:20:16:45:4c:80:0c:00:f3:f7:b6:55:e6:e9:9b:
e1:98:47:5f:9b:7f:8a:d1:09:4c:79:15:b8:1b:49:
cd:4a:d2:97:bb:1b:ed:e6:50:89:fb:88:af:10:ef:
91:25:8a:7a:cc:61:eb:90:6e:c7:bc:5f:86:94:97:
20:c1:17:ba:ea:67:c4:53:a9:bb:87:76:8f:1b:f6:
9a:35:8a:9f:2d:de:21:f9:54:ee:31:8f:e4:e3:de:
7c:c5:b8:13:0c:f5:00:6c:c0:24:3f:ab:2b:f3:cf:
34:54:bd:96:a4:36:1f:5b:ab:ef:a7:92:9d:74:08:
02:bc:2e:0f:77:33:c4:5a:e9:46:52:b6:d6:fa:ef:
1c:7b:18:f1:7a:66:65:e2:85:64:ed:f6:3f:b3:a4:
71:fa:6b:bd:8f:d5:a0:50:e1:df:ef:be:d9:c7:8e:
6d:5c:e1:66:5d:99:1b:78:4a:16:d5:0b:d5:5e:90:
c8:21:d4:37:17:27:96:0f:f7:6a:af:1c:46:6c:19:
96:cf:0c:8c:9f:c3:50:21:c3:82:01:74:05:1a:41:
bc:05:b8:c7:52:07:0b:73:f9:3e:bb:60:80:99:03:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
C9:F1:E8:71:86:55:2B:F5:53:94:52:3D:3B:E8:3D:C0:71:D4:2C:DA
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 21 09:09:23.139 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:21:00:9E:DA:64:D9:38:E2:42:DA:07:C5:73:
C2:77:EC:FA:E5:C5:39:50:B1:77:85:01:68:75:78:9C:
D9:5A:7A:D8:18:02:1F:1B:C1:91:5B:E4:3C:FE:01:79:
2A:55:5A:88:35:CC:9C:09:79:97:43:29:57:06:B3:AA:
C7:B1:FA:0B:DB:87
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 21 09:09:23.111 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:D8:AA:6D:93:0E:A3:0E:00:B1:FF:94:
78:D7:41:23:67:75:A6:A5:7C:97:C9:FA:59:E6:2C:BD:
5C:51:7F:6A:02:21:00:E5:D3:5C:F0:0A:BB:B5:4D:BF:
26:C3:1C:E5:1B:73:3E:DC:9A:C3:51:82:5A:55:B4:FC:
71:F3:AC:20:AF:48:9D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 21 09:09:23.106 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9D:DE:5A:FD:F0:C9:F4:3B:CF:2A:
E7:CF:EB:50:47:3A:A5:2F:BA:87:0C:1C:FE:81:05:5B:
86:4C:88:99:B8:02:20:18:3A:BD:36:D3:D2:D6:85:2B:
62:1C:B5:60:B1:86:1B:66:2A:C0:F6:4B:7F:57:CF:BD:
61:93:A3:AD:7D:EC:1E
X509v3 Subject Alternative Name:
DNS:he1.danaweb.org, DNS:autodiscover.he1.danaweb.org, DNS:redirect.he1.danaweb.org
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
68:dd:25:05:ca:c1:b5:34:bf:a7:82:23:f5:62:39:0c:63:4a:
d3:e5:ae:5a:84:43:85:be:81:27:3e:3f:ff:66:93:c2:e7:06:
87:48:92:37:63:cc:28:b0:0a:73:29:53:f2:89:e5:74:db:65:
ac:f4:78:ac:9e:d0:ea:8e:ff:03:f0:60:4c:a8:94:39:6e:51:
46:03:77:2c:26:da:35:e0:5b:2f:aa:02:92:00:15:04:13:1f:
72:96:6a:08:92:d1:d9:5f:0a:00:fb:3c:3d:0c:d1:b0:5f:48:
da:79:25:2d:5a:2a:b4:fd:3e:ad:b9:7a:be:f4:83:e6:14:5d:
42:4c:5a:27:7a:95:29:c8:6b:bf:99:94:54:06:e0:8a:21:3f:
15:73:4c:91:30:8d:dd:b9:ff:65:31:ae:68:f3:0a:0b:56:dd:
d2:df:f3:c2:47:a8:6d:77:08:75:a5:ee:89:cf:20:5e:d6:1c:
9f:6d:c1:c2:24:d5:0c:52:e7:1f:c0:f4:44:b7:c3:78:6d:f2:
a9:61:64:52:10:76:bb:c7:c7:4f:ba:4e:ce:31:d8:22:a7:ef:
e3:0b:93:e1:1d:79:79:94:8a:72:95:1b:ba:35:44:b2:17:8b:
e0:f4:dc:59:a6:1b:4b:26:4c:e4:e2:ad:da:b4:a7:c4:65:57:
82:64:fc:e2
465 /
tcp
-1273036737 | 2025-01-27T20:55:44.399291
220 ex3.HostedExchange.local Microsoft ESMTP MAIL Service ready at Mon, 27 Jan 2025 21:55:43 +0100\r\n
587 /
tcp
392468050 | 2025-01-25T06:45:13.549931
220 he1.danaweb.org Microsoft ESMTP MAIL Service ready at Sat, 25 Jan 2025 07:45:04 +0100
250-he1.danaweb.org Hello [10.40.14.141]
250-SIZE 104857600
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-AUTH GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 SMTPUTF8
SMTP NTLM Info:
OS: Windows Server 2022
OS Build: 10.0.20348
Target Name: HOSTEDEXCHANGE
NetBIOS Domain Name: HOSTEDEXCHANGE
NetBIOS Computer Name: EX3
DNS Domain Name: HostedExchange.local
DNS Tree Name: HostedExchange.local
FQDN: ex3.HostedExchange.local
993 /
tcp
222507814 | 2025-01-27T13:58:13.892830
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=NTLM AUTH=GSSAPI SASL-IR UIDPLUS MOVE ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.2")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2016 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:36:6c:5e:11:28:33:9f:08:8a:16:49:7b:22:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: CN=he1.danaweb.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:e1:1e:87:7e:83:af:3d:b4:9f:ad:a6:4c:b4:
35:ea:ca:a3:6f:ed:1c:b0:60:13:ad:82:fd:9c:58:
05:20:16:45:4c:80:0c:00:f3:f7:b6:55:e6:e9:9b:
e1:98:47:5f:9b:7f:8a:d1:09:4c:79:15:b8:1b:49:
cd:4a:d2:97:bb:1b:ed:e6:50:89:fb:88:af:10:ef:
91:25:8a:7a:cc:61:eb:90:6e:c7:bc:5f:86:94:97:
20:c1:17:ba:ea:67:c4:53:a9:bb:87:76:8f:1b:f6:
9a:35:8a:9f:2d:de:21:f9:54:ee:31:8f:e4:e3:de:
7c:c5:b8:13:0c:f5:00:6c:c0:24:3f:ab:2b:f3:cf:
34:54:bd:96:a4:36:1f:5b:ab:ef:a7:92:9d:74:08:
02:bc:2e:0f:77:33:c4:5a:e9:46:52:b6:d6:fa:ef:
1c:7b:18:f1:7a:66:65:e2:85:64:ed:f6:3f:b3:a4:
71:fa:6b:bd:8f:d5:a0:50:e1:df:ef:be:d9:c7:8e:
6d:5c:e1:66:5d:99:1b:78:4a:16:d5:0b:d5:5e:90:
c8:21:d4:37:17:27:96:0f:f7:6a:af:1c:46:6c:19:
96:cf:0c:8c:9f:c3:50:21:c3:82:01:74:05:1a:41:
bc:05:b8:c7:52:07:0b:73:f9:3e:bb:60:80:99:03:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
C9:F1:E8:71:86:55:2B:F5:53:94:52:3D:3B:E8:3D:C0:71:D4:2C:DA
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 21 09:09:23.139 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:21:00:9E:DA:64:D9:38:E2:42:DA:07:C5:73:
C2:77:EC:FA:E5:C5:39:50:B1:77:85:01:68:75:78:9C:
D9:5A:7A:D8:18:02:1F:1B:C1:91:5B:E4:3C:FE:01:79:
2A:55:5A:88:35:CC:9C:09:79:97:43:29:57:06:B3:AA:
C7:B1:FA:0B:DB:87
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 21 09:09:23.111 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:D8:AA:6D:93:0E:A3:0E:00:B1:FF:94:
78:D7:41:23:67:75:A6:A5:7C:97:C9:FA:59:E6:2C:BD:
5C:51:7F:6A:02:21:00:E5:D3:5C:F0:0A:BB:B5:4D:BF:
26:C3:1C:E5:1B:73:3E:DC:9A:C3:51:82:5A:55:B4:FC:
71:F3:AC:20:AF:48:9D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 21 09:09:23.106 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9D:DE:5A:FD:F0:C9:F4:3B:CF:2A:
E7:CF:EB:50:47:3A:A5:2F:BA:87:0C:1C:FE:81:05:5B:
86:4C:88:99:B8:02:20:18:3A:BD:36:D3:D2:D6:85:2B:
62:1C:B5:60:B1:86:1B:66:2A:C0:F6:4B:7F:57:CF:BD:
61:93:A3:AD:7D:EC:1E
X509v3 Subject Alternative Name:
DNS:he1.danaweb.org, DNS:autodiscover.he1.danaweb.org, DNS:redirect.he1.danaweb.org
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
68:dd:25:05:ca:c1:b5:34:bf:a7:82:23:f5:62:39:0c:63:4a:
d3:e5:ae:5a:84:43:85:be:81:27:3e:3f:ff:66:93:c2:e7:06:
87:48:92:37:63:cc:28:b0:0a:73:29:53:f2:89:e5:74:db:65:
ac:f4:78:ac:9e:d0:ea:8e:ff:03:f0:60:4c:a8:94:39:6e:51:
46:03:77:2c:26:da:35:e0:5b:2f:aa:02:92:00:15:04:13:1f:
72:96:6a:08:92:d1:d9:5f:0a:00:fb:3c:3d:0c:d1:b0:5f:48:
da:79:25:2d:5a:2a:b4:fd:3e:ad:b9:7a:be:f4:83:e6:14:5d:
42:4c:5a:27:7a:95:29:c8:6b:bf:99:94:54:06:e0:8a:21:3f:
15:73:4c:91:30:8d:dd:b9:ff:65:31:ae:68:f3:0a:0b:56:dd:
d2:df:f3:c2:47:a8:6d:77:08:75:a5:ee:89:cf:20:5e:d6:1c:
9f:6d:c1:c2:24:d5:0c:52:e7:1f:c0:f4:44:b7:c3:78:6d:f2:
a9:61:64:52:10:76:bb:c7:c7:4f:ba:4e:ce:31:d8:22:a7:ef:
e3:0b:93:e1:1d:79:79:94:8a:72:95:1b:ba:35:44:b2:17:8b:
e0:f4:dc:59:a6:1b:4b:26:4c:e4:e2:ad:da:b4:a7:c4:65:57:
82:64:fc:e2
995 /
tcp
1107593961 | 2025-01-18T05:46:12.243975
+OK The Microsoft Exchange POP3 service is ready.
+OK
TOP
UIDL
SASL PLAIN
USER
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:36:6c:5e:11:28:33:9f:08:8a:16:49:7b:22:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: CN=he1.danaweb.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:e1:1e:87:7e:83:af:3d:b4:9f:ad:a6:4c:b4:
35:ea:ca:a3:6f:ed:1c:b0:60:13:ad:82:fd:9c:58:
05:20:16:45:4c:80:0c:00:f3:f7:b6:55:e6:e9:9b:
e1:98:47:5f:9b:7f:8a:d1:09:4c:79:15:b8:1b:49:
cd:4a:d2:97:bb:1b:ed:e6:50:89:fb:88:af:10:ef:
91:25:8a:7a:cc:61:eb:90:6e:c7:bc:5f:86:94:97:
20:c1:17:ba:ea:67:c4:53:a9:bb:87:76:8f:1b:f6:
9a:35:8a:9f:2d:de:21:f9:54:ee:31:8f:e4:e3:de:
7c:c5:b8:13:0c:f5:00:6c:c0:24:3f:ab:2b:f3:cf:
34:54:bd:96:a4:36:1f:5b:ab:ef:a7:92:9d:74:08:
02:bc:2e:0f:77:33:c4:5a:e9:46:52:b6:d6:fa:ef:
1c:7b:18:f1:7a:66:65:e2:85:64:ed:f6:3f:b3:a4:
71:fa:6b:bd:8f:d5:a0:50:e1:df:ef:be:d9:c7:8e:
6d:5c:e1:66:5d:99:1b:78:4a:16:d5:0b:d5:5e:90:
c8:21:d4:37:17:27:96:0f:f7:6a:af:1c:46:6c:19:
96:cf:0c:8c:9f:c3:50:21:c3:82:01:74:05:1a:41:
bc:05:b8:c7:52:07:0b:73:f9:3e:bb:60:80:99:03:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
C9:F1:E8:71:86:55:2B:F5:53:94:52:3D:3B:E8:3D:C0:71:D4:2C:DA
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 21 09:09:23.139 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:21:00:9E:DA:64:D9:38:E2:42:DA:07:C5:73:
C2:77:EC:FA:E5:C5:39:50:B1:77:85:01:68:75:78:9C:
D9:5A:7A:D8:18:02:1F:1B:C1:91:5B:E4:3C:FE:01:79:
2A:55:5A:88:35:CC:9C:09:79:97:43:29:57:06:B3:AA:
C7:B1:FA:0B:DB:87
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 21 09:09:23.111 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:D8:AA:6D:93:0E:A3:0E:00:B1:FF:94:
78:D7:41:23:67:75:A6:A5:7C:97:C9:FA:59:E6:2C:BD:
5C:51:7F:6A:02:21:00:E5:D3:5C:F0:0A:BB:B5:4D:BF:
26:C3:1C:E5:1B:73:3E:DC:9A:C3:51:82:5A:55:B4:FC:
71:F3:AC:20:AF:48:9D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 21 09:09:23.106 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9D:DE:5A:FD:F0:C9:F4:3B:CF:2A:
E7:CF:EB:50:47:3A:A5:2F:BA:87:0C:1C:FE:81:05:5B:
86:4C:88:99:B8:02:20:18:3A:BD:36:D3:D2:D6:85:2B:
62:1C:B5:60:B1:86:1B:66:2A:C0:F6:4B:7F:57:CF:BD:
61:93:A3:AD:7D:EC:1E
X509v3 Subject Alternative Name:
DNS:he1.danaweb.org, DNS:autodiscover.he1.danaweb.org, DNS:redirect.he1.danaweb.org
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
68:dd:25:05:ca:c1:b5:34:bf:a7:82:23:f5:62:39:0c:63:4a:
d3:e5:ae:5a:84:43:85:be:81:27:3e:3f:ff:66:93:c2:e7:06:
87:48:92:37:63:cc:28:b0:0a:73:29:53:f2:89:e5:74:db:65:
ac:f4:78:ac:9e:d0:ea:8e:ff:03:f0:60:4c:a8:94:39:6e:51:
46:03:77:2c:26:da:35:e0:5b:2f:aa:02:92:00:15:04:13:1f:
72:96:6a:08:92:d1:d9:5f:0a:00:fb:3c:3d:0c:d1:b0:5f:48:
da:79:25:2d:5a:2a:b4:fd:3e:ad:b9:7a:be:f4:83:e6:14:5d:
42:4c:5a:27:7a:95:29:c8:6b:bf:99:94:54:06:e0:8a:21:3f:
15:73:4c:91:30:8d:dd:b9:ff:65:31:ae:68:f3:0a:0b:56:dd:
d2:df:f3:c2:47:a8:6d:77:08:75:a5:ee:89:cf:20:5e:d6:1c:
9f:6d:c1:c2:24:d5:0c:52:e7:1f:c0:f4:44:b7:c3:78:6d:f2:
a9:61:64:52:10:76:bb:c7:c7:4f:ba:4e:ce:31:d8:22:a7:ef:
e3:0b:93:e1:1d:79:79:94:8a:72:95:1b:ba:35:44:b2:17:8b:
e0:f4:dc:59:a6:1b:4b:26:4c:e4:e2:ad:da:b4:a7:c4:65:57:
82:64:fc:e2
