Hostnames |
autodiscover.capitalone.com mail.capitalone.com autodiscover.capitalone.onmicrosoft.com autodiscover.capitalone.mail.onmicrosoft.com namp103-provisioning.internal.outlook.com pod51092.outlook.com pod51092-pri.outlook.com pod51092ip.outlook.com pod51092psh.outlook.com |
Domains | capitalone.com onmicrosoft.com outlook.com |
Country | United States |
City | Des Moines |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
-1671250176 | 2024-09-07T02:18:00.26598925 / tcp
220 DM8P103CA0003.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 7 Sep 2024 02:17:54 +0000 [08DCCE5A371C4B50] 250-DM8P103CA0003.outlook.office365.com Hello [224.160.46.133] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 58:ed:f9:04:c3:24:19:06:99:43:d0:c5:77:f0:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:14:58 2024 GMT Not After : Jun 6 09:14:57 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a1:fb:9b:d5:6b:b7:00:52:34:93:dd:91:07:49: 6c:bf:d2:48:a3:08:bc:34:e7:b1:47:22:c6:e6:1c: d0:8d:db:1b:59:2d:13:41:f9:d9:d5:56:ca:af:51: 44:cb:58:8b:2d:d5:ff:5d:48:b5:70:75:d7:d4:b8: bf:63:59:24:a2:70:b0:63:ea:47:37:48:23:72:c2: 5b:a7:44:dc:7d:5f:1e:4c:ba:b7:3f:0f:3c:cf:9a: 94:53:10:cb:e9:a1:68:93:54:a9:ca:26:19:16:78: 4a:75:ca:4c:1c:1b:29:74:f3:c5:9b:7a:a3:1c:bf: e2:b8:b2:ef:4c:15:61:0f:37:0f:7f:73:13:86:4d: ce:cb:39:40:38:00:02:87:1f:2b:1c:f4:28:d5:3a: 33:7f:a2:1c:45:ff:bf:79:2f:e0:26:f7:ab:cf:28: e8:88:29:be:fc:d5:83:7e:d4:64:0d:f8:4e:a3:0a: ab:fc:a4:fc:30:a9:d8:e2:a5:4a:47:2c:f6:d4:5b: 11:b4:15:30:76:37:4c:7e:ef:5c:4c:74:63:0e:f8: 48:4c:a9:ee:27:70:b0:36:4b:4d:34:1b:d6:dd:c7: 77:32:61:10:58:36:9b:5d:83:45:61:bd:cb:40:06: 20:08:5c:90:6d:46:d6:62:20:a1:05:f7:7b:d2:8f: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 21:0A:31:EB:54:77:59:8E:1D:A3:8E:F8:59:6A:F9:32:68:A5:E6:EF X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:14:58.479 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:E4:8F:7B:44:02:46:33:2D:CB:32: 7C:B4:5A:86:C1:52:DB:13:E3:55:D5:82:03:C0:C1:65: 85:20:BC:D8:97:02:20:3B:5D:F0:00:12:CF:1E:C9:12: D6:AA:98:04:1D:F9:E8:E3:B7:01:C1:81:0B:39:43:98: 79:08:B8:85:E6:35:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:14:58.487 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:43:CD:73:65:DC:9B:16:01:B8:A6:3C:25: 73:FF:5E:14:10:3A:59:19:A4:7C:4E:20:AD:C5:24:B7: F1:4F:CE:1F:02:21:00:87:FA:53:1F:9E:27:BE:7E:71: 22:55:38:66:DA:16:55:93:BA:4B:43:59:13:F4:B0:C7: CB:53:F3:66:E6:BD:F0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:14:58.511 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:3E:70:AD:CD:6F:42:53:09:53:65: 34:9C:11:DB:0E:DC:30:85:10:28:AD:D0:D1:E1:B4:A9: 41:93:FF:B5:F1:02:20:23:9C:A0:F1:CF:E4:76:85:4A: FB:12:0F:6B:75:96:4A:CE:20:F4:97:EC:E8:76:89:16: CF:AC:8B:06:69:3B:80 Signature Algorithm: sha256WithRSAEncryption Signature Value: 66:fa:88:0c:32:7b:70:ba:c4:05:ed:7b:d9:ca:93:d8:98:0e: 3c:12:57:a7:28:a1:0f:16:4d:9b:91:24:64:ce:64:57:a9:8a: 43:d1:d0:ac:93:a2:ca:04:cc:cc:ab:62:c7:f1:38:96:88:e8: 0a:1c:25:92:f2:92:71:71:27:e2:6f:aa:49:51:ba:10:c2:ef: f5:52:fc:4f:8e:85:2e:4f:a5:41:1e:0d:06:82:73:94:61:33: 9c:9a:2e:f8:6d:b1:e0:f1:8f:24:ce:a0:db:6e:00:d0:54:b7: 59:97:e9:55:62:eb:b2:ff:88:92:51:02:96:d3:0c:9f:d3:ac: 13:9a:9f:2c:2a:c2:db:3f:e1:13:5b:62:a3:13:b7:96:59:bf: dd:ca:95:9c:34:80:81:98:44:e0:50:03:a8:bd:23:3a:49:58: 08:d5:5f:16:48:8e:89:c4:66:c8:d7:27:65:d9:74:e8:99:a7: f4:72:27:d1:0f:e2:5a:70:36:f5:a2:ef:b2:fa:7c:a6:4c:b5: 4b:4b:2a:25:9f:bc:c3:11:e9:74:c3:1f:31:b3:04:78:4c:7d: 8b:b8:84:50:81:bc:6e:c7:36:05:4b:c9:ab:16:b2:43:72:37: bf:57:84:64:57:39:2f:ca:cb:8a:ff:8a:12:97:c4:fc:b2:17: bd:80:02:65
-665046063 | 2024-09-12T19:24:06.33269280 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.96.125.71/owa/ Server: Microsoft-IIS/10.0 request-id: 09d0f8db-07f3-0877-a431-6584be479b2d X-FEServer: DM8P103CA0001 X-RequestId: 944af3d9-d0d0-43ae-b6f4-cf35d1422bc9 X-FEProxyInfo: DM8P103CA0001.NAMP103.PROD.OUTLOOK.COM X-FEEFZInfo: DSM MS-CV: 2/jQCfMHdwikMWWEvkebLQ.0 X-Powered-By: ASP.NET X-FEServer: DM8P103CA0001 Date: Thu, 12 Sep 2024 19:24:04 GMT Connection: close Content-Length: 0
-840965796 | 2024-09-17T16:59:29.978068110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [RABNADgAUAAxADAAMwBDAEEAMAAwADAANgAuAE4AQQBNAFAAMQAwADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 74:86:9e:9e:03:b0:a2:69:1f:48:cf:b3:bb:5f:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:58:39 2024 GMT Not After : Sep 4 17:58:38 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9c:cf:fa:fc:a3:7b:8d:cf:48:4b:93:f1:83:aa: 72:ec:46:0d:01:be:25:92:c8:19:8b:a5:57:d8:a5: e1:df:02:31:f5:c2:aa:f4:d2:04:01:af:be:0f:a9: 8b:8a:68:da:96:da:94:d8:9f:ff:8a:e6:f3:f6:77: df:54:bc:61:6b:30:6b:9a:38:c6:06:86:92:0c:a7: 60:96:6c:b6:fe:3a:83:66:b9:3a:27:11:9a:62:21: 27:33:b1:b4:23:20:35:89:b6:e0:35:c5:f9:6f:2d: b1:6d:df:e6:b7:ea:a0:61:6e:1a:67:bf:8f:3b:98: 98:bd:9b:3c:39:99:5e:f8:29:b8:5d:86:ba:26:59: 53:f6:4a:df:6b:07:ed:d6:23:19:ac:7b:6f:bf:ed: 12:92:69:d9:aa:2d:75:e8:bd:fd:6a:31:b7:57:ec: 6a:ee:22:bd:df:53:f5:51:0d:d0:a8:80:c7:c8:2a: b9:61:d6:f2:d2:bf:8d:12:eb:e9:58:9d:6a:f3:a5: b8:75:9c:58:61:34:52:39:6d:6a:b6:02:dc:4a:73: 54:36:ea:5a:de:9c:57:80:91:a8:9f:a5:31:d9:ab: 26:12:0d:9e:24:86:cb:81:3d:da:c1:59:66:eb:32: da:f6:3d:a8:21:68:f4:5b:39:1c:35:63:09:35:f5: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 5E:6F:3D:46:44:1F:0A:D6:59:8A:F7:C1:8B:D0:D6:59:EF:88:B5:41 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4: 67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D Timestamp : Sep 4 17:58:39.403 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7D:15:42:E0:9D:10:3F:3F:07:B4:74:6C: 4C:EE:BC:AF:04:92:11:56:75:1C:93:D6:B7:97:0F:C3: 94:43:4A:30:02:21:00:AA:BE:60:CF:41:90:7E:0A:47: BA:03:51:9F:26:2F:F4:50:A0:38:76:8A:E8:EF:69:0E: 7C:4A:FC:34:D0:F5:C5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:58:39.443 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1D:88:F6:6A:78:D9:C2:05:B4:6C:D2:4D: 4B:B7:8D:4F:F7:9A:43:48:69:5C:9B:FF:12:9F:31:37: 99:C1:2A:4F:02:21:00:E0:61:F2:C3:D0:F9:52:0A:3D: 5D:A2:49:97:85:39:36:D0:B4:81:9B:73:F0:58:B1:60: 9D:7E:46:47:2B:97:29 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:58:39.462 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:70:A7:97:D3:A5:77:4F:03:4D:D0:95:A1: 16:09:05:EE:EC:B3:E3:DF:05:CB:2A:3F:BC:2C:0F:83: C1:DD:AE:D0:02:20:7C:FC:12:AD:04:95:3A:ED:B4:A8: 5C:08:AD:4B:0C:8C:B5:3B:76:4A:C0:AE:1B:61:18:79: E5:37:2B:0F:F7:B2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 25:8b:60:38:1b:bb:d4:bf:71:6b:64:fc:0c:b6:bf:4a:27:fb: b4:b8:f0:e9:87:dc:01:69:ed:41:8d:75:a6:bc:63:49:c3:8e: 70:85:7d:e5:da:70:64:bc:66:7a:26:bb:8d:a9:ff:bf:40:74: 0e:49:ce:5e:9e:60:f2:72:f9:73:40:1c:a7:d3:fe:0a:82:ab: 19:74:c9:14:21:ce:74:3b:22:68:95:1f:e0:05:d5:0c:22:0c: 52:89:5e:3b:96:4e:b8:32:37:3a:94:a0:18:5b:98:eb:9d:22: ea:34:3a:b7:8f:98:53:f7:26:f7:07:ca:88:19:57:23:3b:c8: ba:61:bf:6a:ec:e7:30:ae:b2:fb:a2:9a:92:e2:16:1b:52:5b: 3b:43:f0:05:d0:25:12:05:e3:44:d3:51:33:15:6c:25:50:b6: b8:74:79:14:2b:aa:b6:2a:1d:06:9f:c2:6a:27:78:7b:58:68: 9c:8a:b9:bc:17:09:29:5e:f9:e5:d0:da:0a:a9:be:d8:58:7f: cb:a4:02:be:02:cc:6c:7e:7f:eb:9d:4d:ac:ef:45:c1:f3:7c: a9:28:db:6d:23:77:b6:24:93:1e:f9:5f:c3:53:07:c1:f5:aa: 19:d3:83:99:9f:2f:2a:5b:7a:06:e5:0c:c2:21:b4:a5:52:64: 0b:f0:64:e4
-1083507331 | 2024-09-12T03:57:55.890878143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [RABNADgAUAAxADAAMwBDAEEAMAAwADAANAAuAE4AQQBNAFAAMQAwADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 58:ed:f9:04:c3:24:19:06:99:43:d0:c5:77:f0:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:14:58 2024 GMT Not After : Jun 6 09:14:57 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a1:fb:9b:d5:6b:b7:00:52:34:93:dd:91:07:49: 6c:bf:d2:48:a3:08:bc:34:e7:b1:47:22:c6:e6:1c: d0:8d:db:1b:59:2d:13:41:f9:d9:d5:56:ca:af:51: 44:cb:58:8b:2d:d5:ff:5d:48:b5:70:75:d7:d4:b8: bf:63:59:24:a2:70:b0:63:ea:47:37:48:23:72:c2: 5b:a7:44:dc:7d:5f:1e:4c:ba:b7:3f:0f:3c:cf:9a: 94:53:10:cb:e9:a1:68:93:54:a9:ca:26:19:16:78: 4a:75:ca:4c:1c:1b:29:74:f3:c5:9b:7a:a3:1c:bf: e2:b8:b2:ef:4c:15:61:0f:37:0f:7f:73:13:86:4d: ce:cb:39:40:38:00:02:87:1f:2b:1c:f4:28:d5:3a: 33:7f:a2:1c:45:ff:bf:79:2f:e0:26:f7:ab:cf:28: e8:88:29:be:fc:d5:83:7e:d4:64:0d:f8:4e:a3:0a: ab:fc:a4:fc:30:a9:d8:e2:a5:4a:47:2c:f6:d4:5b: 11:b4:15:30:76:37:4c:7e:ef:5c:4c:74:63:0e:f8: 48:4c:a9:ee:27:70:b0:36:4b:4d:34:1b:d6:dd:c7: 77:32:61:10:58:36:9b:5d:83:45:61:bd:cb:40:06: 20:08:5c:90:6d:46:d6:62:20:a1:05:f7:7b:d2:8f: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 21:0A:31:EB:54:77:59:8E:1D:A3:8E:F8:59:6A:F9:32:68:A5:E6:EF X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:14:58.479 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:E4:8F:7B:44:02:46:33:2D:CB:32: 7C:B4:5A:86:C1:52:DB:13:E3:55:D5:82:03:C0:C1:65: 85:20:BC:D8:97:02:20:3B:5D:F0:00:12:CF:1E:C9:12: D6:AA:98:04:1D:F9:E8:E3:B7:01:C1:81:0B:39:43:98: 79:08:B8:85:E6:35:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:14:58.487 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:43:CD:73:65:DC:9B:16:01:B8:A6:3C:25: 73:FF:5E:14:10:3A:59:19:A4:7C:4E:20:AD:C5:24:B7: F1:4F:CE:1F:02:21:00:87:FA:53:1F:9E:27:BE:7E:71: 22:55:38:66:DA:16:55:93:BA:4B:43:59:13:F4:B0:C7: CB:53:F3:66:E6:BD:F0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:14:58.511 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:3E:70:AD:CD:6F:42:53:09:53:65: 34:9C:11:DB:0E:DC:30:85:10:28:AD:D0:D1:E1:B4:A9: 41:93:FF:B5:F1:02:20:23:9C:A0:F1:CF:E4:76:85:4A: FB:12:0F:6B:75:96:4A:CE:20:F4:97:EC:E8:76:89:16: CF:AC:8B:06:69:3B:80 Signature Algorithm: sha256WithRSAEncryption Signature Value: 66:fa:88:0c:32:7b:70:ba:c4:05:ed:7b:d9:ca:93:d8:98:0e: 3c:12:57:a7:28:a1:0f:16:4d:9b:91:24:64:ce:64:57:a9:8a: 43:d1:d0:ac:93:a2:ca:04:cc:cc:ab:62:c7:f1:38:96:88:e8: 0a:1c:25:92:f2:92:71:71:27:e2:6f:aa:49:51:ba:10:c2:ef: f5:52:fc:4f:8e:85:2e:4f:a5:41:1e:0d:06:82:73:94:61:33: 9c:9a:2e:f8:6d:b1:e0:f1:8f:24:ce:a0:db:6e:00:d0:54:b7: 59:97:e9:55:62:eb:b2:ff:88:92:51:02:96:d3:0c:9f:d3:ac: 13:9a:9f:2c:2a:c2:db:3f:e1:13:5b:62:a3:13:b7:96:59:bf: dd:ca:95:9c:34:80:81:98:44:e0:50:03:a8:bd:23:3a:49:58: 08:d5:5f:16:48:8e:89:c4:66:c8:d7:27:65:d9:74:e8:99:a7: f4:72:27:d1:0f:e2:5a:70:36:f5:a2:ef:b2:fa:7c:a6:4c:b5: 4b:4b:2a:25:9f:bc:c3:11:e9:74:c3:1f:31:b3:04:78:4c:7d: 8b:b8:84:50:81:bc:6e:c7:36:05:4b:c9:ab:16:b2:43:72:37: bf:57:84:64:57:39:2f:ca:cb:8a:ff:8a:12:97:c4:fc:b2:17: bd:80:02:65
1315683212 | 2024-09-15T00:51:19.072007443 / tcp
HTTP/1.1 302 Content-Length: 782 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2fmail.capitalone.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=6b0caafa-a4f4-b5a2-ab21-2cc4a016630d&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638619582779702441.02c9737d-a463-44a4-803b-b6905a633aba&state=DctBFoAgCABRzNdxSBQEOQ7WvmXXj8Wf3RQAqOlIhTJgyku7zzXM3GiI9IvG7cb2YIgyioTgIt641WmGMseOku_Z3i_aDw Server: Microsoft-IIS/10.0 request-id: 6b0caafa-a4f4-b5a2-ab21-2cc4a016630d Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: SJ0P103MB0270.NAMP103.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=B2801874AFC1466E9BFBB2EC2D16B6F4; expires=Mon, 15-Sep-2025 00:51:17 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=B2801874AFC1466E9BFBB2EC2D16B6F4; expires=Mon, 15-Sep-2025 00:51:17 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 15-Mar-2025 00:51:17 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.pKsxwZ7Z8yFGCAiBqNLVtgZT8y3QZSh6kzA5Xml-t90=638619582779702441.02c9737d-a463-44a4-803b-b6905a633aba; expires=Sun, 15-Sep-2024 01:51:17 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=B2801874AFC1466E9BFBB2EC2D16B6F4; expires=Mon, 15-Sep-2025 00:51:17 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 15-Mar-2025 00:51:17 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=mail.capitalone.com; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.pKsxwZ7Z8yFGCAiBqNLVtgZT8y3QZSh6kzA5Xml-t90=638619582779702441.02c9737d-a463-44a4-803b-b6905a633aba; expires=Sun, 15-Sep-2024 01:51:17 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 15-Sep-1994 00:51:17 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BqTwxgiDV3Ag; expires=Sun, 15-Sep-2024 06:53:17 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 3;0;0; X-BackEnd-Begin: 2024-09-15T00:51:17.970 X-BackEnd-End: 2024-09-15T00:51:17.970 X-DiagInfo: SJ0P103MB0270 X-BEServer: SJ0P103MB0270 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DSM&RemoteIP=94.102.49.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: DSM X-FEProxyInfo: DM8P103CA0005.NAMP103.PROD.OUTLOOK.COM X-FEEFZInfo: DSM X-FEServer: DM8P103CA0005 Date: Sun, 15 Sep 2024 00:51:17 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 74:86:9e:9e:03:b0:a2:69:1f:48:cf:b3:bb:5f:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:58:39 2024 GMT Not After : Sep 4 17:58:38 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9c:cf:fa:fc:a3:7b:8d:cf:48:4b:93:f1:83:aa: 72:ec:46:0d:01:be:25:92:c8:19:8b:a5:57:d8:a5: e1:df:02:31:f5:c2:aa:f4:d2:04:01:af:be:0f:a9: 8b:8a:68:da:96:da:94:d8:9f:ff:8a:e6:f3:f6:77: df:54:bc:61:6b:30:6b:9a:38:c6:06:86:92:0c:a7: 60:96:6c:b6:fe:3a:83:66:b9:3a:27:11:9a:62:21: 27:33:b1:b4:23:20:35:89:b6:e0:35:c5:f9:6f:2d: b1:6d:df:e6:b7:ea:a0:61:6e:1a:67:bf:8f:3b:98: 98:bd:9b:3c:39:99:5e:f8:29:b8:5d:86:ba:26:59: 53:f6:4a:df:6b:07:ed:d6:23:19:ac:7b:6f:bf:ed: 12:92:69:d9:aa:2d:75:e8:bd:fd:6a:31:b7:57:ec: 6a:ee:22:bd:df:53:f5:51:0d:d0:a8:80:c7:c8:2a: b9:61:d6:f2:d2:bf:8d:12:eb:e9:58:9d:6a:f3:a5: b8:75:9c:58:61:34:52:39:6d:6a:b6:02:dc:4a:73: 54:36:ea:5a:de:9c:57:80:91:a8:9f:a5:31:d9:ab: 26:12:0d:9e:24:86:cb:81:3d:da:c1:59:66:eb:32: da:f6:3d:a8:21:68:f4:5b:39:1c:35:63:09:35:f5: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 5E:6F:3D:46:44:1F:0A:D6:59:8A:F7:C1:8B:D0:D6:59:EF:88:B5:41 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4: 67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D Timestamp : Sep 4 17:58:39.403 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7D:15:42:E0:9D:10:3F:3F:07:B4:74:6C: 4C:EE:BC:AF:04:92:11:56:75:1C:93:D6:B7:97:0F:C3: 94:43:4A:30:02:21:00:AA:BE:60:CF:41:90:7E:0A:47: BA:03:51:9F:26:2F:F4:50:A0:38:76:8A:E8:EF:69:0E: 7C:4A:FC:34:D0:F5:C5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:58:39.443 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1D:88:F6:6A:78:D9:C2:05:B4:6C:D2:4D: 4B:B7:8D:4F:F7:9A:43:48:69:5C:9B:FF:12:9F:31:37: 99:C1:2A:4F:02:21:00:E0:61:F2:C3:D0:F9:52:0A:3D: 5D:A2:49:97:85:39:36:D0:B4:81:9B:73:F0:58:B1:60: 9D:7E:46:47:2B:97:29 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:58:39.462 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:70:A7:97:D3:A5:77:4F:03:4D:D0:95:A1: 16:09:05:EE:EC:B3:E3:DF:05:CB:2A:3F:BC:2C:0F:83: C1:DD:AE:D0:02:20:7C:FC:12:AD:04:95:3A:ED:B4:A8: 5C:08:AD:4B:0C:8C:B5:3B:76:4A:C0:AE:1B:61:18:79: E5:37:2B:0F:F7:B2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 25:8b:60:38:1b:bb:d4:bf:71:6b:64:fc:0c:b6:bf:4a:27:fb: b4:b8:f0:e9:87:dc:01:69:ed:41:8d:75:a6:bc:63:49:c3:8e: 70:85:7d:e5:da:70:64:bc:66:7a:26:bb:8d:a9:ff:bf:40:74: 0e:49:ce:5e:9e:60:f2:72:f9:73:40:1c:a7:d3:fe:0a:82:ab: 19:74:c9:14:21:ce:74:3b:22:68:95:1f:e0:05:d5:0c:22:0c: 52:89:5e:3b:96:4e:b8:32:37:3a:94:a0:18:5b:98:eb:9d:22: ea:34:3a:b7:8f:98:53:f7:26:f7:07:ca:88:19:57:23:3b:c8: ba:61:bf:6a:ec:e7:30:ae:b2:fb:a2:9a:92:e2:16:1b:52:5b: 3b:43:f0:05:d0:25:12:05:e3:44:d3:51:33:15:6c:25:50:b6: b8:74:79:14:2b:aa:b6:2a:1d:06:9f:c2:6a:27:78:7b:58:68: 9c:8a:b9:bc:17:09:29:5e:f9:e5:d0:da:0a:a9:be:d8:58:7f: cb:a4:02:be:02:cc:6c:7e:7f:eb:9d:4d:ac:ef:45:c1:f3:7c: a9:28:db:6d:23:77:b6:24:93:1e:f9:5f:c3:53:07:c1:f5:aa: 19:d3:83:99:9f:2f:2a:5b:7a:06:e5:0c:c2:21:b4:a5:52:64: 0b:f0:64:e4
-1485873152 | 2024-08-31T19:40:44.270848587 / tcp
220 DM8P103CA0001.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 31 Aug 2024 19:40:36 +0000 [08DCC96F5B6CE404] 250-DM8P103CA0001.outlook.office365.com Hello [224.189.71.250] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 58:ed:f9:04:c3:24:19:06:99:43:d0:c5:77:f0:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:14:58 2024 GMT Not After : Jun 6 09:14:57 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a1:fb:9b:d5:6b:b7:00:52:34:93:dd:91:07:49: 6c:bf:d2:48:a3:08:bc:34:e7:b1:47:22:c6:e6:1c: d0:8d:db:1b:59:2d:13:41:f9:d9:d5:56:ca:af:51: 44:cb:58:8b:2d:d5:ff:5d:48:b5:70:75:d7:d4:b8: bf:63:59:24:a2:70:b0:63:ea:47:37:48:23:72:c2: 5b:a7:44:dc:7d:5f:1e:4c:ba:b7:3f:0f:3c:cf:9a: 94:53:10:cb:e9:a1:68:93:54:a9:ca:26:19:16:78: 4a:75:ca:4c:1c:1b:29:74:f3:c5:9b:7a:a3:1c:bf: e2:b8:b2:ef:4c:15:61:0f:37:0f:7f:73:13:86:4d: ce:cb:39:40:38:00:02:87:1f:2b:1c:f4:28:d5:3a: 33:7f:a2:1c:45:ff:bf:79:2f:e0:26:f7:ab:cf:28: e8:88:29:be:fc:d5:83:7e:d4:64:0d:f8:4e:a3:0a: ab:fc:a4:fc:30:a9:d8:e2:a5:4a:47:2c:f6:d4:5b: 11:b4:15:30:76:37:4c:7e:ef:5c:4c:74:63:0e:f8: 48:4c:a9:ee:27:70:b0:36:4b:4d:34:1b:d6:dd:c7: 77:32:61:10:58:36:9b:5d:83:45:61:bd:cb:40:06: 20:08:5c:90:6d:46:d6:62:20:a1:05:f7:7b:d2:8f: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 21:0A:31:EB:54:77:59:8E:1D:A3:8E:F8:59:6A:F9:32:68:A5:E6:EF X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:14:58.479 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:E4:8F:7B:44:02:46:33:2D:CB:32: 7C:B4:5A:86:C1:52:DB:13:E3:55:D5:82:03:C0:C1:65: 85:20:BC:D8:97:02:20:3B:5D:F0:00:12:CF:1E:C9:12: D6:AA:98:04:1D:F9:E8:E3:B7:01:C1:81:0B:39:43:98: 79:08:B8:85:E6:35:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:14:58.487 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:43:CD:73:65:DC:9B:16:01:B8:A6:3C:25: 73:FF:5E:14:10:3A:59:19:A4:7C:4E:20:AD:C5:24:B7: F1:4F:CE:1F:02:21:00:87:FA:53:1F:9E:27:BE:7E:71: 22:55:38:66:DA:16:55:93:BA:4B:43:59:13:F4:B0:C7: CB:53:F3:66:E6:BD:F0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:14:58.511 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:3E:70:AD:CD:6F:42:53:09:53:65: 34:9C:11:DB:0E:DC:30:85:10:28:AD:D0:D1:E1:B4:A9: 41:93:FF:B5:F1:02:20:23:9C:A0:F1:CF:E4:76:85:4A: FB:12:0F:6B:75:96:4A:CE:20:F4:97:EC:E8:76:89:16: CF:AC:8B:06:69:3B:80 Signature Algorithm: sha256WithRSAEncryption Signature Value: 66:fa:88:0c:32:7b:70:ba:c4:05:ed:7b:d9:ca:93:d8:98:0e: 3c:12:57:a7:28:a1:0f:16:4d:9b:91:24:64:ce:64:57:a9:8a: 43:d1:d0:ac:93:a2:ca:04:cc:cc:ab:62:c7:f1:38:96:88:e8: 0a:1c:25:92:f2:92:71:71:27:e2:6f:aa:49:51:ba:10:c2:ef: f5:52:fc:4f:8e:85:2e:4f:a5:41:1e:0d:06:82:73:94:61:33: 9c:9a:2e:f8:6d:b1:e0:f1:8f:24:ce:a0:db:6e:00:d0:54:b7: 59:97:e9:55:62:eb:b2:ff:88:92:51:02:96:d3:0c:9f:d3:ac: 13:9a:9f:2c:2a:c2:db:3f:e1:13:5b:62:a3:13:b7:96:59:bf: dd:ca:95:9c:34:80:81:98:44:e0:50:03:a8:bd:23:3a:49:58: 08:d5:5f:16:48:8e:89:c4:66:c8:d7:27:65:d9:74:e8:99:a7: f4:72:27:d1:0f:e2:5a:70:36:f5:a2:ef:b2:fa:7c:a6:4c:b5: 4b:4b:2a:25:9f:bc:c3:11:e9:74:c3:1f:31:b3:04:78:4c:7d: 8b:b8:84:50:81:bc:6e:c7:36:05:4b:c9:ab:16:b2:43:72:37: bf:57:84:64:57:39:2f:ca:cb:8a:ff:8a:12:97:c4:fc:b2:17: bd:80:02:65
486125479 | 2024-09-17T13:27:09.200970993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [RABNADgAUAAxADAAMwBDAEEAMAAwADAANAAuAE4AQQBNAFAAMQAwADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 74:86:9e:9e:03:b0:a2:69:1f:48:cf:b3:bb:5f:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:58:39 2024 GMT Not After : Sep 4 17:58:38 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9c:cf:fa:fc:a3:7b:8d:cf:48:4b:93:f1:83:aa: 72:ec:46:0d:01:be:25:92:c8:19:8b:a5:57:d8:a5: e1:df:02:31:f5:c2:aa:f4:d2:04:01:af:be:0f:a9: 8b:8a:68:da:96:da:94:d8:9f:ff:8a:e6:f3:f6:77: df:54:bc:61:6b:30:6b:9a:38:c6:06:86:92:0c:a7: 60:96:6c:b6:fe:3a:83:66:b9:3a:27:11:9a:62:21: 27:33:b1:b4:23:20:35:89:b6:e0:35:c5:f9:6f:2d: b1:6d:df:e6:b7:ea:a0:61:6e:1a:67:bf:8f:3b:98: 98:bd:9b:3c:39:99:5e:f8:29:b8:5d:86:ba:26:59: 53:f6:4a:df:6b:07:ed:d6:23:19:ac:7b:6f:bf:ed: 12:92:69:d9:aa:2d:75:e8:bd:fd:6a:31:b7:57:ec: 6a:ee:22:bd:df:53:f5:51:0d:d0:a8:80:c7:c8:2a: b9:61:d6:f2:d2:bf:8d:12:eb:e9:58:9d:6a:f3:a5: b8:75:9c:58:61:34:52:39:6d:6a:b6:02:dc:4a:73: 54:36:ea:5a:de:9c:57:80:91:a8:9f:a5:31:d9:ab: 26:12:0d:9e:24:86:cb:81:3d:da:c1:59:66:eb:32: da:f6:3d:a8:21:68:f4:5b:39:1c:35:63:09:35:f5: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 5E:6F:3D:46:44:1F:0A:D6:59:8A:F7:C1:8B:D0:D6:59:EF:88:B5:41 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4: 67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D Timestamp : Sep 4 17:58:39.403 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7D:15:42:E0:9D:10:3F:3F:07:B4:74:6C: 4C:EE:BC:AF:04:92:11:56:75:1C:93:D6:B7:97:0F:C3: 94:43:4A:30:02:21:00:AA:BE:60:CF:41:90:7E:0A:47: BA:03:51:9F:26:2F:F4:50:A0:38:76:8A:E8:EF:69:0E: 7C:4A:FC:34:D0:F5:C5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:58:39.443 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1D:88:F6:6A:78:D9:C2:05:B4:6C:D2:4D: 4B:B7:8D:4F:F7:9A:43:48:69:5C:9B:FF:12:9F:31:37: 99:C1:2A:4F:02:21:00:E0:61:F2:C3:D0:F9:52:0A:3D: 5D:A2:49:97:85:39:36:D0:B4:81:9B:73:F0:58:B1:60: 9D:7E:46:47:2B:97:29 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:58:39.462 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:70:A7:97:D3:A5:77:4F:03:4D:D0:95:A1: 16:09:05:EE:EC:B3:E3:DF:05:CB:2A:3F:BC:2C:0F:83: C1:DD:AE:D0:02:20:7C:FC:12:AD:04:95:3A:ED:B4:A8: 5C:08:AD:4B:0C:8C:B5:3B:76:4A:C0:AE:1B:61:18:79: E5:37:2B:0F:F7:B2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 25:8b:60:38:1b:bb:d4:bf:71:6b:64:fc:0c:b6:bf:4a:27:fb: b4:b8:f0:e9:87:dc:01:69:ed:41:8d:75:a6:bc:63:49:c3:8e: 70:85:7d:e5:da:70:64:bc:66:7a:26:bb:8d:a9:ff:bf:40:74: 0e:49:ce:5e:9e:60:f2:72:f9:73:40:1c:a7:d3:fe:0a:82:ab: 19:74:c9:14:21:ce:74:3b:22:68:95:1f:e0:05:d5:0c:22:0c: 52:89:5e:3b:96:4e:b8:32:37:3a:94:a0:18:5b:98:eb:9d:22: ea:34:3a:b7:8f:98:53:f7:26:f7:07:ca:88:19:57:23:3b:c8: ba:61:bf:6a:ec:e7:30:ae:b2:fb:a2:9a:92:e2:16:1b:52:5b: 3b:43:f0:05:d0:25:12:05:e3:44:d3:51:33:15:6c:25:50:b6: b8:74:79:14:2b:aa:b6:2a:1d:06:9f:c2:6a:27:78:7b:58:68: 9c:8a:b9:bc:17:09:29:5e:f9:e5:d0:da:0a:a9:be:d8:58:7f: cb:a4:02:be:02:cc:6c:7e:7f:eb:9d:4d:ac:ef:45:c1:f3:7c: a9:28:db:6d:23:77:b6:24:93:1e:f9:5f:c3:53:07:c1:f5:aa: 19:d3:83:99:9f:2f:2a:5b:7a:06:e5:0c:c2:21:b4:a5:52:64: 0b:f0:64:e4
-1055987401 | 2024-09-12T08:04:22.458584995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [RABNADgAUAAxADAAMwBDAEEAMAAwADAANAAuAE4AQQBNAFAAMQAwADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 58:ed:f9:04:c3:24:19:06:99:43:d0:c5:77:f0:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:14:58 2024 GMT Not After : Jun 6 09:14:57 2025 GMT Subject: C=US, ST=Virginia, L=Richmond, O=Capital One, CN=mail.capitalone.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a1:fb:9b:d5:6b:b7:00:52:34:93:dd:91:07:49: 6c:bf:d2:48:a3:08:bc:34:e7:b1:47:22:c6:e6:1c: d0:8d:db:1b:59:2d:13:41:f9:d9:d5:56:ca:af:51: 44:cb:58:8b:2d:d5:ff:5d:48:b5:70:75:d7:d4:b8: bf:63:59:24:a2:70:b0:63:ea:47:37:48:23:72:c2: 5b:a7:44:dc:7d:5f:1e:4c:ba:b7:3f:0f:3c:cf:9a: 94:53:10:cb:e9:a1:68:93:54:a9:ca:26:19:16:78: 4a:75:ca:4c:1c:1b:29:74:f3:c5:9b:7a:a3:1c:bf: e2:b8:b2:ef:4c:15:61:0f:37:0f:7f:73:13:86:4d: ce:cb:39:40:38:00:02:87:1f:2b:1c:f4:28:d5:3a: 33:7f:a2:1c:45:ff:bf:79:2f:e0:26:f7:ab:cf:28: e8:88:29:be:fc:d5:83:7e:d4:64:0d:f8:4e:a3:0a: ab:fc:a4:fc:30:a9:d8:e2:a5:4a:47:2c:f6:d4:5b: 11:b4:15:30:76:37:4c:7e:ef:5c:4c:74:63:0e:f8: 48:4c:a9:ee:27:70:b0:36:4b:4d:34:1b:d6:dd:c7: 77:32:61:10:58:36:9b:5d:83:45:61:bd:cb:40:06: 20:08:5c:90:6d:46:d6:62:20:a1:05:f7:7b:d2:8f: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 21:0A:31:EB:54:77:59:8E:1D:A3:8E:F8:59:6A:F9:32:68:A5:E6:EF X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.capitalone.com, DNS:*.pod51092.outlook.com, DNS:autodiscover.capitalone.com, DNS:autodiscover.capitalone.mail.onmicrosoft.com, DNS:autodiscover.capitalone.onmicrosoft.com, DNS:namp103-provisioning.internal.outlook.com, DNS:pod51092.outlook.com, DNS:pod51092ip.outlook.com, DNS:pod51092-pri.outlook.com, DNS:pod51092psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:14:58.479 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:E4:8F:7B:44:02:46:33:2D:CB:32: 7C:B4:5A:86:C1:52:DB:13:E3:55:D5:82:03:C0:C1:65: 85:20:BC:D8:97:02:20:3B:5D:F0:00:12:CF:1E:C9:12: D6:AA:98:04:1D:F9:E8:E3:B7:01:C1:81:0B:39:43:98: 79:08:B8:85:E6:35:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:14:58.487 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:43:CD:73:65:DC:9B:16:01:B8:A6:3C:25: 73:FF:5E:14:10:3A:59:19:A4:7C:4E:20:AD:C5:24:B7: F1:4F:CE:1F:02:21:00:87:FA:53:1F:9E:27:BE:7E:71: 22:55:38:66:DA:16:55:93:BA:4B:43:59:13:F4:B0:C7: CB:53:F3:66:E6:BD:F0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:14:58.511 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:3E:70:AD:CD:6F:42:53:09:53:65: 34:9C:11:DB:0E:DC:30:85:10:28:AD:D0:D1:E1:B4:A9: 41:93:FF:B5:F1:02:20:23:9C:A0:F1:CF:E4:76:85:4A: FB:12:0F:6B:75:96:4A:CE:20:F4:97:EC:E8:76:89:16: CF:AC:8B:06:69:3B:80 Signature Algorithm: sha256WithRSAEncryption Signature Value: 66:fa:88:0c:32:7b:70:ba:c4:05:ed:7b:d9:ca:93:d8:98:0e: 3c:12:57:a7:28:a1:0f:16:4d:9b:91:24:64:ce:64:57:a9:8a: 43:d1:d0:ac:93:a2:ca:04:cc:cc:ab:62:c7:f1:38:96:88:e8: 0a:1c:25:92:f2:92:71:71:27:e2:6f:aa:49:51:ba:10:c2:ef: f5:52:fc:4f:8e:85:2e:4f:a5:41:1e:0d:06:82:73:94:61:33: 9c:9a:2e:f8:6d:b1:e0:f1:8f:24:ce:a0:db:6e:00:d0:54:b7: 59:97:e9:55:62:eb:b2:ff:88:92:51:02:96:d3:0c:9f:d3:ac: 13:9a:9f:2c:2a:c2:db:3f:e1:13:5b:62:a3:13:b7:96:59:bf: dd:ca:95:9c:34:80:81:98:44:e0:50:03:a8:bd:23:3a:49:58: 08:d5:5f:16:48:8e:89:c4:66:c8:d7:27:65:d9:74:e8:99:a7: f4:72:27:d1:0f:e2:5a:70:36:f5:a2:ef:b2:fa:7c:a6:4c:b5: 4b:4b:2a:25:9f:bc:c3:11:e9:74:c3:1f:31:b3:04:78:4c:7d: 8b:b8:84:50:81:bc:6e:c7:36:05:4b:c9:ab:16:b2:43:72:37: bf:57:84:64:57:39:2f:ca:cb:8a:ff:8a:12:97:c4:fc:b2:17: bd:80:02:65