Hostnames |
email21.mywebmailserver.com safesecureweb.com |
Domains | mywebmailserver.com safesecureweb.com |
Country | United States |
City | Chicago |
Organization | Ntirety, Inc. |
ISP | Ntirety, Inc. |
ASN | AS20021 |
1339418875 | 2024-09-15T14:08:37.49419225 / tcp
220 email21.mywebmailserver.com 250-email21.mywebmailserver.com Hello [224.187.88.22] 250-SIZE 31457280 250-AUTH LOGIN CRAM-MD5 250-STARTTLS 250 OK
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
-1882608523 | 2024-09-15T06:39:43.51229480 / tcp
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://merrick.safesecureweb.com/ Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sun, 15 Sep 2024 06:39:43 GMT Content-Length: 157
-634338313 | 2024-09-16T04:25:10.525463110 / tcp
+OK POP3 server ready <418c235a-8703-400e-a955-b11d48882a63@email21.mywebmailserver.com> +OK Capability list follows TOP USER UIDL STLS IMPLEMENTATION Smartertools_SmarterMail_1.5 .
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
-52896008 | 2024-09-07T16:15:14.848163135 / tcp
Microsoft RPC Endpoint Mapper c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-949b72abceaa175dc6 ncacn_np: \\SOLO\PIPE\srvsvc ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\SOLO\PIPE\ROUTER ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\SOLO\PIPE\InitShutdown ncalrpc: WMsgKRpc079580 ncalrpc: WMsgKRpc07BD21 d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 199.231.136.134:49152 ncalrpc: WindowsShutdown ncacn_np: \\SOLO\PIPE\InitShutdown ncalrpc: WMsgKRpc079580 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 199.231.136.134:49153 ncacn_np: \\SOLO\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 199.231.136.134:49153 ncacn_np: \\SOLO\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 199.231.136.134:49153 ncacn_np: \\SOLO\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 199.231.136.134:49153 ncacn_np: \\SOLO\pipe\eventlog ncalrpc: eventlog 8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 version: v1.0 provider: appmgmts.dll ncacn_np: \\SOLO\PIPE\srvsvc ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\SOLO\PIPE\ROUTER ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncacn_np: \\SOLO\PIPE\srvsvc ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\SOLO\PIPE\ROUTER ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: RasmanLrpc ncacn_np: \\SOLO\PIPE\ROUTER ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 199.231.136.134:49154 ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\SOLO\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: senssvc ncalrpc: OLEA0AB424146CE44A0B79ED9753B99 ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 provider: gpsvc.dll ncalrpc: IUserProfile2 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\SOLO\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-e1f9fe88f797e387de ncalrpc: OLE23E073663881401A8B06FB36492E 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-e1f9fe88f797e387de ncalrpc: OLE23E073663881401A8B06FB36492E 24019106-a203-4642-b88d-82dae9158929 version: v1.0 provider: authui.dll ncalrpc: LRPC-e087f68ad0b893728b 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-7c4da0801ee4ba6c93 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-7c4da0801ee4ba6c93 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-7c4da0801ee4ba6c93 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 199.231.136.134:49155 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\SOLO\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-d58a2f510741b4089c ncacn_np: \\SOLO\pipe\lsass 2f5f6521-cb55-1059-b446-00df0bce31db version: v1.0 annotation: Unimodem LRPC Endpoint ncalrpc: unimdmsvc ncalrpc: tapsrvlpc ncacn_np: \\SOLO\pipe\tapsrv 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 199.231.136.134:49189 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-74e3e767f555fc7dff 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-5d0dc778aa78590090 ncalrpc: LRPC-5d0dc778aa78590090 ncalrpc: LRPC-5d0dc778aa78590090 ncalrpc: LRPC-5d0dc778aa78590090
2001785636 | 2024-09-12T20:05:28.917191143 / tcp
* OK IMAP4rev1 SmarterMail * CAPABILITY IMAP4rev1 UIDPLUS XLIST STARTTLS A001 OK CAPABILITY completed A002 BAD Command does not exist or is not implemented A003 BAD Command does not exist or is not implemented * BYE IMAP4rev1 Server logging out A004 OK LOGOUT completed
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
-1373883827 | 2024-09-13T21:53:00.667611443 / tcp
HTTP/1.1 200 OK Cache-Control: private Content-Length: 6964 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 Set-Cookie: ASP.NET_SessionId=0gju1dviajpehrvgkxyjufjw; path=/; HttpOnly X-Powered-By: ASP.NET X-UA-Compatible: IE=edge Date: Fri, 13 Sep 2024 21:52:41 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
1641389631 | 2024-09-11T13:36:30.164961445 / tcp
SMB Status: Authentication: enabled SMB Version: 1 OS: Windows Server 2008 R2 Standard 7601 Service Pack 1 Software: Windows Server 2008 R2 Standard 6.1 Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
-1744260115 | 2024-09-14T13:14:03.602479465 / tcp
220 email21.mywebmailserver.com 250-email21.mywebmailserver.com Hello [224.61.102.105] 250-SIZE 31457280 250-AUTH LOGIN CRAM-MD5 250 OK
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
715474372 | 2024-08-30T07:27:50.143048587 / tcp
220 email21.mywebmailserver.com 250-email21.mywebmailserver.com Hello [224.64.145.139] 250-SIZE 31457280 250-AUTH LOGIN CRAM-MD5 250 OK
51433088 | 2024-09-07T20:37:50.726144993 / tcp
* OK IMAP4rev1 SmarterMail * CAPABILITY IMAP4rev1 UIDPLUS XLIST A001 OK CAPABILITY completed A002 BAD Command does not exist or is not implemented A003 BAD Command does not exist or is not implemented * BYE IMAP4rev1 Server logging out A004 OK LOGOUT completed
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
-655936262 | 2024-09-15T23:51:54.310358995 / tcp
+OK POP3 server ready <c563bd2d-c04a-4d46-a597-7a9fe6a7ead2@email21.mywebmailserver.com> +
Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:19:b9:84:80:fe:8a:10:58:45:7c:60:9f:9b:20:90:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Viking Cloud, Inc., CN=Viking Cloud Organization Validation CA, Level 1 Validity Not Before: Mar 20 16:13:52 2024 GMT Not After : Apr 3 16:12:52 2025 GMT Subject: C=US, ST=Colorado, L=Denver, O=Ntirety, CN=*.safesecureweb.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:88:d9:7a:0a:5b:74:fa:ac:e4:2a:f3:58:14:61: 55:82:da:c3:56:8f:a1:d3:fe:0f:a7:6e:ae:fe:11: b9:34:42:8f:39:0f:2a:6f:18:d3:7b:45:2f:02:7d: 97:47:d0:5a:ab:3f:16:df:c4:67:1d:be:ac:42:9f: 1c:65:dc:42:b7:ee:9f:82:11:52:f1:c4:a7:c7:d3: 46:d2:6f:83:a9:85:c7:06:5d:f9:de:20:d2:a7:3b: 14:92:bb:d1:fa:eb:0d:af:71:90:2a:18:e6:35:80: a2:63:bf:2f:d1:d2:04:7c:c9:8f:f9:d2:22:70:2f: 36:26:ff:5d:69:a7:0a:b0:69:c7:d0:7f:05:65:50: f7:ee:71:52:a0:32:b3:f4:24:7e:26:9a:d8:af:15: 13:db:f2:42:da:54:f2:74:b5:d8:32:34:31:a6:5b: 3d:1f:44:4b:7a:ac:fd:2e:f9:aa:3c:dc:68:2f:c3: 6c:d5:b8:86:82:e6:ff:8b:01:77:af:0a:50:47:ec: 40:d1:49:d7:a3:51:65:98:ef:de:8a:5c:82:89:79: b8:d7:64:76:96:b2:dd:2c:ca:55:9a:76:8d:cd:2d: 9e:2d:c7:ff:a0:79:c7:d1:fb:7a:5a:0e:1d:61:53: 12:b8:c4:39:04:38:a6:f2:8e:26:cd:1a:6e:9f:f7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication X509v3 Subject Key Identifier: 81:56:86:63:73:15:F6:FD:64:6E:48:F4:56:FC:CF:C8:2A:5E:94:DF X509v3 Authority Key Identifier: 84:F7:19:CE:7B:40:54:50:42:4E:0C:D2:32:50:DC:7A:2F:72:56:6C X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CPS: https://certs.securetrust.com/CA X509v3 Subject Alternative Name: DNS:*.safesecureweb.com, DNS:safesecureweb.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.vikingcloud.com/VCOVCA_L1.crl Authority Information Access: OCSP - URI:http://ocsp.vikingcloud.com/ CA Issuers - URI:http://certs.securetrust.com/issuers/VCOVCA_L1.crt CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 20 22:13:52.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A4:85:92:EF:04:3B:92:57:B8:23:DB: 0C:BB:91:E3:DD:E6:56:7A:06:78:63:A0:F1:62:C1:54: 20:FF:06:7B:27:02:20:5B:62:1A:FE:BB:F8:20:A2:B2: 19:AC:F0:62:BA:77:72:5A:F8:6A:DD:7C:80:0A:B7:78: AD:35:5E:F8:A8:9D:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Mar 20 22:13:52.475 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BC:45:76:C0:DF:84:2C:AD:D0:11:F9: 39:A5:CC:B2:EE:8E:CE:9F:94:26:77:9E:67:9F:E9:35: CF:F3:79:FE:E9:02:20:56:E5:12:AD:8F:73:F8:99:5C: E1:76:71:2D:90:6A:91:37:19:41:97:24:F2:AF:47:A0: 10:22:71:D4:0D:A3:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 28:2C:8B:DD:81:0F:F9:09:12:0A:CE:16:D6:E0:EC:20: 1B:EA:82:A3:A4:AF:19:D9:EF:FB:59:E8:3F:DC:42:68 Timestamp : Mar 20 22:13:52.886 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:E0:C5:28:36:FA:1C:0A:02:CF:36: BF:3C:66:B5:A2:FB:B2:61:2D:C4:EA:E6:CB:7E:BD:92: 9A:79:A2:E1:C0:02:21:00:C4:8D:26:0B:3B:2D:63:82: B4:56:2F:E6:23:66:34:07:00:65:27:58:10:D9:E7:93: 76:60:71:23:A4:36:67:68 Signature Algorithm: sha256WithRSAEncryption Signature Value: 02:30:df:1c:ea:81:73:35:4a:f9:3c:2c:b8:7a:84:8c:ac:57: 2d:f0:bb:3d:bd:b1:d9:ba:2f:e5:68:ce:e5:a8:a3:0e:e7:cc: 9d:18:d2:5c:6d:21:38:d6:f0:fe:ec:06:89:b5:71:9c:a4:8a: a8:ee:94:1f:77:aa:6d:a1:ba:ec:11:bc:07:4e:c3:43:82:16: aa:2c:3d:fd:26:41:89:7d:51:3c:38:5c:9c:5c:c5:26:12:e2: b8:2c:e4:8d:7f:d7:fa:f1:c3:9c:22:7a:23:49:9b:97:6c:b4: 12:3f:e3:53:7f:40:21:e6:24:7e:61:1a:1e:5f:18:29:c4:99: 9c:12:c4:f3:88:35:14:73:4b:71:d6:54:58:88:67:e8:85:9d: 1b:45:e4:ca:e4:80:7a:03:01:fd:d0:d1:a3:bb:d3:b4:2b:e4: 3d:78:ee:68:f7:74:ad:74:00:a6:ef:94:c0:c6:7f:5e:0b:8f: b5:4d:2a:16:d8:06:4c:a3:b5:e0:eb:84:17:c6:24:b6:2e:51: 84:5c:ec:22:4f:c6:36:13:78:f2:47:d0:90:54:da:5d:fb:74: 74:fb:52:e3:74:b6:a4:69:ed:77:72:84:0a:1d:4d:79:15:05: 71:4a:d4:a4:be:7e:a9:03:44:d2:d9:96:df:f5:5a:05:4e:21: 1d:e3:d7:c2
1862957764 | 2024-09-03T23:44:24.5399861167 / tcp
\x00\x00\x01.R\xab\x02\n\x14\x08\xa3\x80\x04\x10\x02\x18\x00 \x00*\x08NOTFOUND\x10\x00\x1a\x90\x02-----BEGIN PUBLIC KEY-----\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCVbMlGZi77BiTOMZbdeFXR347\njIBj+8/LnZ38mKpvYRx193d3PCKwwAl1EiXQleDbq+f4c1Yj01M17zbJpHJ2Py+u\njWIlk+BBLeDkQv9f7u7OrM2AirYV1hyJrJRZyGdqANBwXcIDX+20GB52YqlP/ffm\nDIBGHCXLdWeL0OdfcQIDAQAB\n-----END PUBLIC KEY-----\n