Hostnames |
autodiscover.lighting.com mail.o365.lighting.com autodiscover.lightingaad.onmicrosoft.com autodiscover.lightingaad.mail.onmicrosoft.com eurp121-provisioning.internal.outlook.com pod51136.outlook.com pod51136-pri.outlook.com pod51136ip.outlook.com pod51136psh.outlook.com |
Domains | lighting.com onmicrosoft.com outlook.com |
Country | France |
City | Paris |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
Operating System | Windows |
-1775492333 | 2024-11-20T10:19:45.28181825 / tcp
220 PA4P121CA0004.outlook.office365.com Microsoft ESMTP MAIL Service ready at Wed, 20 Nov 2024 10:19:33 +0000 [08DD08FFCC4D3E9A] 250-PA4P121CA0004.outlook.office365.com Hello [224.160.46.133] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
-524976342 | 2024-11-03T07:59:19.42864880 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://pod51136.outlook.com/ Server: Microsoft-IIS/10.0 request-id: 88a2e938-87b3-f91e-d5c2-28ee5f03148b X-FEServer: PA4P121CA0004 X-RequestId: cef74b8f-af9b-49ba-ae83-27370f1ff0aa X-FEProxyInfo: PA4P121CA0004.EURP121.PROD.OUTLOOK.COM X-FEEFZInfo: CDG MS-CV: OOmiiLOHHvnVwijuXwMUiw.0 X-Powered-By: ASP.NET X-FEServer: PA4P121CA0004 Date: Sun, 03 Nov 2024 07:59:18 GMT Connection: close Content-Length: 0
2017210301 | 2024-10-30T18:31:00.347318110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [UABBADQAUAAxADIAMQBDAEEAMAAwADAAMgAuAEUAVQBSAFAAMQAyADEALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
1389678973 | 2024-11-19T11:39:35.352770143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [UABBADQAUAAxADIAMQBDAEEAMAAwADAANQAuAEUAVQBSAFAAMQAyADEALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
237540836 | 2024-11-19T12:23:29.234316443 / tcp
HTTP/1.1 302 Content-Length: 776 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f40.99.155.2%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=fd7163c6-0b08-f5cb-1736-d8f23edb562a&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638676158089513183.fca066d6-8fbd-451b-a19c-353850314429&state=Dcs7EoAwCABRouNxMCCBkOPkM2ktvb4Ub7tNAHCGIySKQDVxq8bq5E1Z2OXes5PZMvQ9FhblgZ3bRFFxJeFSnpbivfL79fwD Server: Microsoft-IIS/10.0 request-id: fd7163c6-0b08-f5cb-1736-d8f23edb562a Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: DU2P121MB0119.EURP121.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=8AC70C7D3E0F49A2AE0988A33DEA6684; expires=Wed, 19-Nov-2025 12:23:28 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=8AC70C7D3E0F49A2AE0988A33DEA6684; expires=Wed, 19-Nov-2025 12:23:28 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Mon, 19-May-2025 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.pYJXxjGOVC0XfNxY_N95-St0_lkpfRzuuwUj-MNZn8c=638676158089513183.fca066d6-8fbd-451b-a19c-353850314429; expires=Tue, 19-Nov-2024 13:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: ClientId=8AC70C7D3E0F49A2AE0988A33DEA6684; expires=Wed, 19-Nov-2025 12:23:28 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Mon, 19-May-2025 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=40.99.155.2; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.pYJXxjGOVC0XfNxY_N95-St0_lkpfRzuuwUj-MNZn8c=638676158089513183.fca066d6-8fbd-451b-a19c-353850314429; expires=Tue, 19-Nov-2024 13:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 19-Nov-1994 12:23:28 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14B38hv-ZQI3Qg; expires=Tue, 19-Nov-2024 18:25:28 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-11-19T12:23:28.951 X-BackEnd-End: 2024-11-19T12:23:28.951 X-DiagInfo: DU2P121MB0119 X-BEServer: DU2P121MB0119 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=CDG&RemoteIP=185.165.191.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: CDG X-FEProxyInfo: PA4P121CA0006.EURP121.PROD.OUTLOOK.COM X-FEEFZInfo: CDG X-FEServer: PA4P121CA0006 Date: Tue, 19 Nov 2024 12:23:28 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
-470327474 | 2024-11-18T14:35:19.566921587 / tcp
220 PA4P121CA0001.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 18 Nov 2024 14:34:59 +0000 [08DD07692F5F4B8B] 250-PA4P121CA0001.outlook.office365.com Hello [224.27.52.141] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
1419688849 | 2024-10-29T23:58:11.876053993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [UABBADQAUAAxADIAMQBDAEEAMAAwADAANQAuAEUAVQBSAFAAMQAyADEALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0
1932095744 | 2024-11-17T01:46:53.680722995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [UABBADQAUAAxADIAMQBDAEEAMAAwADAAMgAuAEUAVQBSAFAAMQAyADEALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:7a:67:e8:c0:e4:e2:6a:ac:37:6c:f4:12:8b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:49:20 2024 GMT Not After : Sep 4 17:49:19 2025 GMT Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Signify N.V., CN=mail.o365.lighting.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:85:cf:15:57:d3:16:9b:f3:06:79:34:30:d0: 38:02:f1:8b:20:51:84:6a:1b:06:46:e8:66:83:2a: c8:33:ac:2d:5c:5f:0c:81:84:84:2b:65:10:25:7d: 0a:de:00:b7:b5:4c:d6:7c:dd:0b:2a:04:1f:b0:e6: d3:fa:d9:4c:56:51:6e:5e:29:1e:26:c6:95:1d:0c: 1a:78:90:96:c2:95:c3:16:d3:68:d8:9b:71:24:36: 08:50:41:de:c3:ae:5e:65:58:5e:c9:f5:47:88:b0: 91:70:97:00:66:1c:a8:3a:c1:08:e1:1f:e3:06:92: 2d:84:da:2c:e1:66:ad:c6:3a:19:c5:40:b7:7f:5e: b7:0f:ec:3f:d5:5b:dd:e8:2e:ed:c2:e3:89:0d:3a: fa:82:ec:21:d5:5e:bf:c7:98:59:7f:4e:49:5e:1c: d1:cc:95:7b:73:d9:93:a7:fe:a4:6f:76:28:67:18: 91:74:85:f9:2b:3d:f8:ab:1a:83:ad:d2:c2:05:78: d7:28:01:1e:39:c1:f9:dd:40:b8:ad:f6:c9:aa:0a: 95:bf:68:66:e4:16:b5:20:d7:70:30:db:81:7a:f9: 3f:9c:61:02:2c:a3:80:4f:73:34:44:04:f1:aa:52: 0e:38:d2:c1:97:13:5e:d2:e2:47:12:7e:0b:f7:52: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E5:F2:24:4D:99:61:A6:7E:FF:89:18:6F:AE:A7:F3:46:50:DF:E7:19 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365.lighting.com, DNS:*.pod51136.outlook.com, DNS:autodiscover.lighting.com, DNS:autodiscover.lightingaad.mail.onmicrosoft.com, DNS:autodiscover.lightingaad.onmicrosoft.com, DNS:eurp121-provisioning.internal.outlook.com, DNS:pod51136.outlook.com, DNS:pod51136ip.outlook.com, DNS:pod51136-pri.outlook.com, DNS:pod51136psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:49:20.718 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:E5:C7:76:FB:2A:3F:D4:A4:56:C4: 9D:BC:06:A3:8F:D7:BE:28:DE:CA:8D:8A:39:6F:7A:CD: 91:68:E8:EF:C0:02:21:00:F5:06:2F:EC:19:06:9B:05: A2:77:B3:86:37:20:79:BB:00:73:B3:D7:74:BE:37:64: 8B:3E:80:88:90:95:3E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:49:20.786 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:5D:22:29:69:0C:B5:A3:F3:08:A8:88: 2E:32:2E:FB:B3:53:B7:5C:96:B2:7B:35:A3:E6:F7:01: D2:65:B4:22:02:21:00:E3:B8:1C:4B:83:FB:AF:63:EA: 31:DE:91:43:8F:FD:01:47:F8:B0:74:23:4D:42:DA:D7: 88:8A:85:0C:2F:C6:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:49:20.757 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D1:F0:87:7A:77:18:C2:6D:4D:3A:BB: 98:1B:90:CD:4E:32:45:CA:67:B7:9E:C6:9B:D3:C9:42: 02:17:B2:08:74:02:20:76:15:74:5D:A1:7B:61:B1:79: 57:15:CF:30:88:1E:26:3E:81:78:7B:E0:13:40:B1:0F: DE:09:D9:D3:4A:4D:84 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3f:2d:88:6d:d2:d0:0e:a0:a7:b6:bc:90:a6:57:d6:d3:d3:f2: 24:61:fd:b5:81:bf:b0:c6:a7:0a:88:8e:c5:77:87:d9:01:08: b6:54:2e:c7:55:9f:4a:8a:b0:9d:1d:3a:b0:af:d8:24:d0:47: 83:2f:c4:8d:93:1a:c3:45:93:60:98:53:f5:f3:ce:aa:ee:65: f6:93:f2:af:98:dd:fb:08:d0:5f:58:ab:d1:4c:99:af:94:08: 58:a8:5d:07:08:71:df:29:77:af:85:67:94:14:03:4a:bf:bc: 3c:b8:9b:6d:f7:09:f7:9d:61:55:56:e5:34:c0:cd:7d:f1:99: b7:57:ec:16:ab:bb:8b:b7:f8:7e:70:6e:1e:8e:f1:1a:c0:fe: 2e:88:f4:66:39:34:08:6f:de:4a:7c:cb:12:91:a4:ce:06:2a: 70:48:0f:18:29:cc:d7:c0:1a:49:ab:32:1a:61:1b:98:76:a6: 68:99:d2:66:a7:91:72:58:a9:ab:27:0f:95:e6:ad:60:3d:f4: 8c:d7:9d:cb:f1:6b:82:ea:ab:c5:3d:58:5e:22:26:53:fa:1c: c3:64:1e:26:7a:fa:11:94:d3:c9:05:83:12:98:2e:1e:24:ed: 4e:96:bb:99:6c:10:4f:16:03:5d:c3:8a:08:68:4c:0c:ee:30: 7f:df:5e:f0