Hostnames |
autodiscover.metlife.com outlook.metlife.com outlook-ams.metlife.com webmail.metlife.com autodiscover.metlife.mail.onmicrosoft.com autodiscover.metlife.onmicrosoft.com namp173-provisioning.internal.outlook.com pod51270.outlook.com pod51270-pri.outlook.com pod51270ip.outlook.com pod51270psh.outlook.com |
Domains | metlife.com onmicrosoft.com outlook.com |
Country | United States |
City | Phoenix |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
Operating System | Windows |
505445230 | 2024-09-14T01:16:42.74747825 / tcp
220 PH8P173CA0003.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 14 Sep 2024 01:16:35 +0000 [08DCD3C1CEFF2A32] 250-PH8P173CA0003.outlook.office365.com Hello [224.10.112.4] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:26:d7:f8:c6:8b:90:f0:fc:3b:bc:30:71:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:59:15 2024 GMT Not After : Sep 4 17:59:14 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:eb:9a:76:91:fc:fa:ee:f9:b6:31:ab:37:ad:8f: da:b3:74:16:e1:27:c6:31:85:5f:cb:34:51:ae:24: d0:17:58:cb:cb:20:c7:10:f8:0f:33:15:00:84:91: 39:49:9a:ee:c1:84:9d:89:33:29:28:75:53:b3:dc: 94:de:be:85:e7:d1:d4:df:42:cb:fb:f1:09:09:10: 5b:73:e6:cf:54:d9:47:bc:cf:e4:f8:e2:2c:39:02: c4:37:8c:25:75:f3:ea:00:d1:72:39:da:3e:04:b8: 73:81:53:ff:c4:3c:38:1f:99:3e:b6:70:24:de:17: 13:1d:b0:5c:b3:16:7d:01:19:77:09:3b:76:a9:e7: 55:43:0d:62:f9:5e:0a:b6:a3:48:ec:25:2f:8b:c1: a8:f3:54:16:9b:38:4c:4e:a0:53:5d:ce:31:00:45: 57:09:fb:33:1e:e8:a1:ac:b5:0f:95:4f:5b:ca:23: 81:eb:26:85:36:04:1f:f0:81:02:d7:50:ce:52:a9: 21:3b:34:96:4e:ee:d9:24:0f:c6:a0:85:d5:e1:f0: 3c:e1:6b:c9:90:af:53:17:6b:72:7a:88:7a:a1:c8: 99:d9:de:1f:24:3f:af:07:1e:9e:b8:ee:a3:36:9e: 51:19:2a:dc:30:da:aa:e9:32:e2:b8:ff:12:d9:c5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A2:CA:31:2A:2C:CA:D3:C0:8B:4F:52:35:47:1C:2B:51:B2:D6:30:D5 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:59:16.016 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:E4:29:A6:7F:AF:DB:4D:6B:91:72: D9:F9:3C:68:07:63:38:5F:AB:EE:D9:6E:42:36:69:93: C9:DC:5D:65:3F:02:20:71:D2:0F:A2:56:12:69:6D:1D: C3:59:03:6B:B3:87:A2:F4:4C:F1:C9:D5:08:29:E5:98: F5:45:CD:82:4B:A5:E4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:59:16.015 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:14:28:5D:E5:A3:31:13:17:1A:45: A7:2A:10:81:5B:42:D7:08:54:93:63:FD:A3:DD:0B:45: 59:CF:32:62:E5:02:21:00:AC:D3:2A:97:30:B0:38:C4: 7E:A7:20:81:E9:32:5E:E1:66:CC:92:DC:47:CC:5F:56: 54:2C:A1:50:34:4F:0E:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:59:16.045 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:98:1E:A5:14:32:D8:20:0A:8B:1B: 05:8B:E5:03:CA:0B:DF:0A:C3:27:81:75:DE:11:A0:0A: C1:5B:44:D1:5A:02:21:00:83:9D:F8:E8:1B:19:F7:DC: CF:53:FF:72:56:F3:9E:E9:CD:11:17:BE:A0:D1:E3:E8: 5C:51:9B:34:13:81:D1:C2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 5d:ae:f0:c3:af:16:45:94:ae:ce:e6:8a:cc:84:61:f6:01:5a: 4e:66:85:b6:99:af:88:61:c4:e6:9e:d1:85:86:50:a5:ff:f0: 87:f9:3e:8b:f4:0a:08:29:8e:1c:78:2c:88:4a:e2:d7:d4:ea: 78:6c:66:2e:33:fd:64:33:17:41:6d:1a:aa:77:c6:94:3d:e1: 8a:f8:83:11:95:5c:27:fe:7f:76:1b:7b:3e:a6:9b:5a:65:c1: e2:cf:ce:a4:fb:5f:9b:fb:3a:01:40:f9:4d:2e:04:6f:7c:7d: 29:dd:6b:e2:68:6c:ac:50:5e:71:79:75:15:ad:3a:a6:56:c4: 23:c2:e1:8a:da:91:24:e0:2f:9e:c0:14:08:5d:45:68:09:4a: 6a:4c:90:13:d7:b6:d8:5f:78:b9:cd:02:75:6c:57:75:5b:3e: b2:c0:1f:ac:37:5c:e4:43:83:55:39:7f:16:da:c6:93:0a:10: fc:48:58:68:da:6f:96:d3:28:37:d1:fc:0e:17:fc:ae:13:b6: 9c:88:cd:c9:d0:5e:25:c4:96:43:63:11:c1:9e:ba:1e:d2:a9: 4b:e9:cb:f9:97:dd:85:b7:a1:19:77:fa:07:a9:74:47:7b:03: 47:e8:07:fd:e8:cc:da:fe:41:80:9e:8e:60:9b:af:7d:99:fc: bb:c4:68:b6
-204306477 | 2024-09-08T03:37:51.25151880 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.96.232.70/owa/ Server: Microsoft-IIS/10.0 request-id: 15b34458-c71a-2db1-5db4-46b2341928ed X-FEServer: PH8P173CA0002 X-RequestId: 8de6faab-76df-4099-904b-83cc2e6ad257 X-FEProxyInfo: PH8P173CA0002.NAMP173.PROD.OUTLOOK.COM X-FEEFZInfo: PHX MS-CV: WESzFRrHsS1dtEayNBko7Q.0 X-Powered-By: ASP.NET X-FEServer: PH8P173CA0002 Date: Sun, 08 Sep 2024 03:37:50 GMT Connection: close Content-Length: 0
1281988452 | 2024-09-13T09:36:17.099083110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [UABIADgAUAAxADcAMwBDAEEAMAAwADAANgAuAE4AQQBNAFAAMQA3ADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:26:d7:f8:c6:8b:90:f0:fc:3b:bc:30:71:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:59:15 2024 GMT Not After : Sep 4 17:59:14 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:eb:9a:76:91:fc:fa:ee:f9:b6:31:ab:37:ad:8f: da:b3:74:16:e1:27:c6:31:85:5f:cb:34:51:ae:24: d0:17:58:cb:cb:20:c7:10:f8:0f:33:15:00:84:91: 39:49:9a:ee:c1:84:9d:89:33:29:28:75:53:b3:dc: 94:de:be:85:e7:d1:d4:df:42:cb:fb:f1:09:09:10: 5b:73:e6:cf:54:d9:47:bc:cf:e4:f8:e2:2c:39:02: c4:37:8c:25:75:f3:ea:00:d1:72:39:da:3e:04:b8: 73:81:53:ff:c4:3c:38:1f:99:3e:b6:70:24:de:17: 13:1d:b0:5c:b3:16:7d:01:19:77:09:3b:76:a9:e7: 55:43:0d:62:f9:5e:0a:b6:a3:48:ec:25:2f:8b:c1: a8:f3:54:16:9b:38:4c:4e:a0:53:5d:ce:31:00:45: 57:09:fb:33:1e:e8:a1:ac:b5:0f:95:4f:5b:ca:23: 81:eb:26:85:36:04:1f:f0:81:02:d7:50:ce:52:a9: 21:3b:34:96:4e:ee:d9:24:0f:c6:a0:85:d5:e1:f0: 3c:e1:6b:c9:90:af:53:17:6b:72:7a:88:7a:a1:c8: 99:d9:de:1f:24:3f:af:07:1e:9e:b8:ee:a3:36:9e: 51:19:2a:dc:30:da:aa:e9:32:e2:b8:ff:12:d9:c5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A2:CA:31:2A:2C:CA:D3:C0:8B:4F:52:35:47:1C:2B:51:B2:D6:30:D5 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:59:16.016 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:E4:29:A6:7F:AF:DB:4D:6B:91:72: D9:F9:3C:68:07:63:38:5F:AB:EE:D9:6E:42:36:69:93: C9:DC:5D:65:3F:02:20:71:D2:0F:A2:56:12:69:6D:1D: C3:59:03:6B:B3:87:A2:F4:4C:F1:C9:D5:08:29:E5:98: F5:45:CD:82:4B:A5:E4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:59:16.015 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:14:28:5D:E5:A3:31:13:17:1A:45: A7:2A:10:81:5B:42:D7:08:54:93:63:FD:A3:DD:0B:45: 59:CF:32:62:E5:02:21:00:AC:D3:2A:97:30:B0:38:C4: 7E:A7:20:81:E9:32:5E:E1:66:CC:92:DC:47:CC:5F:56: 54:2C:A1:50:34:4F:0E:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:59:16.045 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:98:1E:A5:14:32:D8:20:0A:8B:1B: 05:8B:E5:03:CA:0B:DF:0A:C3:27:81:75:DE:11:A0:0A: C1:5B:44:D1:5A:02:21:00:83:9D:F8:E8:1B:19:F7:DC: CF:53:FF:72:56:F3:9E:E9:CD:11:17:BE:A0:D1:E3:E8: 5C:51:9B:34:13:81:D1:C2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 5d:ae:f0:c3:af:16:45:94:ae:ce:e6:8a:cc:84:61:f6:01:5a: 4e:66:85:b6:99:af:88:61:c4:e6:9e:d1:85:86:50:a5:ff:f0: 87:f9:3e:8b:f4:0a:08:29:8e:1c:78:2c:88:4a:e2:d7:d4:ea: 78:6c:66:2e:33:fd:64:33:17:41:6d:1a:aa:77:c6:94:3d:e1: 8a:f8:83:11:95:5c:27:fe:7f:76:1b:7b:3e:a6:9b:5a:65:c1: e2:cf:ce:a4:fb:5f:9b:fb:3a:01:40:f9:4d:2e:04:6f:7c:7d: 29:dd:6b:e2:68:6c:ac:50:5e:71:79:75:15:ad:3a:a6:56:c4: 23:c2:e1:8a:da:91:24:e0:2f:9e:c0:14:08:5d:45:68:09:4a: 6a:4c:90:13:d7:b6:d8:5f:78:b9:cd:02:75:6c:57:75:5b:3e: b2:c0:1f:ac:37:5c:e4:43:83:55:39:7f:16:da:c6:93:0a:10: fc:48:58:68:da:6f:96:d3:28:37:d1:fc:0e:17:fc:ae:13:b6: 9c:88:cd:c9:d0:5e:25:c4:96:43:63:11:c1:9e:ba:1e:d2:a9: 4b:e9:cb:f9:97:dd:85:b7:a1:19:77:fa:07:a9:74:47:7b:03: 47:e8:07:fd:e8:cc:da:fe:41:80:9e:8e:60:9b:af:7d:99:fc: bb:c4:68:b6
1968440409 | 2024-09-14T03:18:20.276339143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [UABIADgAUAAxADcAMwBDAEEAMAAwADAAMgAuAE4AQQBNAFAAMQA3ADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:26:d7:f8:c6:8b:90:f0:fc:3b:bc:30:71:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:59:15 2024 GMT Not After : Sep 4 17:59:14 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:eb:9a:76:91:fc:fa:ee:f9:b6:31:ab:37:ad:8f: da:b3:74:16:e1:27:c6:31:85:5f:cb:34:51:ae:24: d0:17:58:cb:cb:20:c7:10:f8:0f:33:15:00:84:91: 39:49:9a:ee:c1:84:9d:89:33:29:28:75:53:b3:dc: 94:de:be:85:e7:d1:d4:df:42:cb:fb:f1:09:09:10: 5b:73:e6:cf:54:d9:47:bc:cf:e4:f8:e2:2c:39:02: c4:37:8c:25:75:f3:ea:00:d1:72:39:da:3e:04:b8: 73:81:53:ff:c4:3c:38:1f:99:3e:b6:70:24:de:17: 13:1d:b0:5c:b3:16:7d:01:19:77:09:3b:76:a9:e7: 55:43:0d:62:f9:5e:0a:b6:a3:48:ec:25:2f:8b:c1: a8:f3:54:16:9b:38:4c:4e:a0:53:5d:ce:31:00:45: 57:09:fb:33:1e:e8:a1:ac:b5:0f:95:4f:5b:ca:23: 81:eb:26:85:36:04:1f:f0:81:02:d7:50:ce:52:a9: 21:3b:34:96:4e:ee:d9:24:0f:c6:a0:85:d5:e1:f0: 3c:e1:6b:c9:90:af:53:17:6b:72:7a:88:7a:a1:c8: 99:d9:de:1f:24:3f:af:07:1e:9e:b8:ee:a3:36:9e: 51:19:2a:dc:30:da:aa:e9:32:e2:b8:ff:12:d9:c5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A2:CA:31:2A:2C:CA:D3:C0:8B:4F:52:35:47:1C:2B:51:B2:D6:30:D5 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:59:16.016 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:E4:29:A6:7F:AF:DB:4D:6B:91:72: D9:F9:3C:68:07:63:38:5F:AB:EE:D9:6E:42:36:69:93: C9:DC:5D:65:3F:02:20:71:D2:0F:A2:56:12:69:6D:1D: C3:59:03:6B:B3:87:A2:F4:4C:F1:C9:D5:08:29:E5:98: F5:45:CD:82:4B:A5:E4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:59:16.015 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:14:28:5D:E5:A3:31:13:17:1A:45: A7:2A:10:81:5B:42:D7:08:54:93:63:FD:A3:DD:0B:45: 59:CF:32:62:E5:02:21:00:AC:D3:2A:97:30:B0:38:C4: 7E:A7:20:81:E9:32:5E:E1:66:CC:92:DC:47:CC:5F:56: 54:2C:A1:50:34:4F:0E:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:59:16.045 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:98:1E:A5:14:32:D8:20:0A:8B:1B: 05:8B:E5:03:CA:0B:DF:0A:C3:27:81:75:DE:11:A0:0A: C1:5B:44:D1:5A:02:21:00:83:9D:F8:E8:1B:19:F7:DC: CF:53:FF:72:56:F3:9E:E9:CD:11:17:BE:A0:D1:E3:E8: 5C:51:9B:34:13:81:D1:C2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 5d:ae:f0:c3:af:16:45:94:ae:ce:e6:8a:cc:84:61:f6:01:5a: 4e:66:85:b6:99:af:88:61:c4:e6:9e:d1:85:86:50:a5:ff:f0: 87:f9:3e:8b:f4:0a:08:29:8e:1c:78:2c:88:4a:e2:d7:d4:ea: 78:6c:66:2e:33:fd:64:33:17:41:6d:1a:aa:77:c6:94:3d:e1: 8a:f8:83:11:95:5c:27:fe:7f:76:1b:7b:3e:a6:9b:5a:65:c1: e2:cf:ce:a4:fb:5f:9b:fb:3a:01:40:f9:4d:2e:04:6f:7c:7d: 29:dd:6b:e2:68:6c:ac:50:5e:71:79:75:15:ad:3a:a6:56:c4: 23:c2:e1:8a:da:91:24:e0:2f:9e:c0:14:08:5d:45:68:09:4a: 6a:4c:90:13:d7:b6:d8:5f:78:b9:cd:02:75:6c:57:75:5b:3e: b2:c0:1f:ac:37:5c:e4:43:83:55:39:7f:16:da:c6:93:0a:10: fc:48:58:68:da:6f:96:d3:28:37:d1:fc:0e:17:fc:ae:13:b6: 9c:88:cd:c9:d0:5e:25:c4:96:43:63:11:c1:9e:ba:1e:d2:a9: 4b:e9:cb:f9:97:dd:85:b7:a1:19:77:fa:07:a9:74:47:7b:03: 47:e8:07:fd:e8:cc:da:fe:41:80:9e:8e:60:9b:af:7d:99:fc: bb:c4:68:b6
-1440190220 | 2024-09-11T12:10:14.887643443 / tcp
HTTP/1.1 302 Content-Length: 776 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f52.96.232.70%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=d5496d33-6ba2-34fb-26c7-216698bed9c8&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638616534131899888.31730db4-ef29-492b-b863-f70deb132141&state=DcsxEoAwCABBouNzMCEggefIJLaWfl-Kve4KAOxpS6VlYCibkl4sxGTuZnYyDW4zBNfTHcV7YJgyPqPNFcSdhEq-R32_u_4 Server: Microsoft-IIS/10.0 request-id: d5496d33-6ba2-34fb-26c7-216698bed9c8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: SA9P173MB0139.NAMP173.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=D57C9B83F0594B55A1467068C1ECD10C; expires=Thu, 11-Sep-2025 12:10:13 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=D57C9B83F0594B55A1467068C1ECD10C; expires=Thu, 11-Sep-2025 12:10:13 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 11-Mar-2025 12:10:13 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.cHuKDDxAB0saNdRWams8BfpAJ6LmnX6TPftdmf7YRDk=638616534131899888.31730db4-ef29-492b-b863-f70deb132141; expires=Wed, 11-Sep-2024 13:10:13 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=D57C9B83F0594B55A1467068C1ECD10C; expires=Thu, 11-Sep-2025 12:10:13 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 11-Mar-2025 12:10:13 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.232.70; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.cHuKDDxAB0saNdRWams8BfpAJ6LmnX6TPftdmf7YRDk=638616534131899888.31730db4-ef29-492b-b863-f70deb132141; expires=Wed, 11-Sep-2024 13:10:13 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 11-Sep-1994 12:10:13 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BdOChsFrS3Ag; expires=Wed, 11-Sep-2024 18:12:13 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 4;0;0; X-BackEnd-Begin: 2024-09-11T12:10:13.189 X-BackEnd-End: 2024-09-11T12:10:13.189 X-DiagInfo: SA9P173MB0139 X-BEServer: SA9P173MB0139 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=PHX&RemoteIP=185.142.236.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: PHX X-FEProxyInfo: PH8P173CA0006.NAMP173.PROD.OUTLOOK.COM X-FEEFZInfo: PHX X-FEServer: PH8P173CA0006 Date: Wed, 11 Sep 2024 12:10:12 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 31:ad:c9:9f:79:dd:d8:5a:ea:7a:d9:cd:e6:90:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:13:22 2024 GMT Not After : Jun 6 09:13:21 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e4:e2:16:56:cf:35:25:b8:96:63:07:41:cf:13: e6:cf:02:32:a6:4e:ba:08:98:87:4e:04:bd:48:59: 1d:42:a0:a3:60:76:da:83:83:40:ce:2f:39:86:b7: c8:f9:94:56:15:80:02:05:63:e8:83:ee:ce:53:16: 1f:50:11:74:2b:15:5e:6e:33:4c:67:82:85:8a:95: 4e:d5:07:10:fa:dc:2c:eb:09:6a:bf:43:9f:2a:eb: 1b:46:f5:5e:8e:65:e7:e6:b4:8c:a3:a5:e5:04:01: 14:d7:bc:c6:a7:06:3f:29:35:35:91:0d:a5:e1:df: 34:07:ca:2d:34:53:8f:2b:9a:11:d4:85:e1:f9:fb: 61:ce:d6:ba:e2:ac:91:a4:7c:b7:06:5f:ae:82:c2: 55:b2:de:77:54:58:b8:f1:5e:05:63:4f:84:e9:79: d8:7c:11:e1:26:b6:f7:8d:5e:f3:de:ec:d0:de:f0: 15:17:7d:9a:13:34:d7:10:7c:d4:f9:ca:63:ae:28: dc:6e:d4:9b:a3:f0:b0:44:e2:a4:6e:6a:d1:b6:d2: 3c:a2:16:e8:10:d4:35:e8:89:3e:e5:e2:ef:8c:c2: 9b:3b:af:ba:92:43:53:dc:53:72:be:b4:a0:6f:4c: e6:75:ae:3d:5a:59:d4:1b:db:0a:ad:ff:25:c0:4f: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: D2:89:52:B5:B3:CB:5C:31:F2:A9:B3:9C:90:F4:10:66:FE:D9:98:9C X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:13:22.371 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5A:6D:5E:ED:C5:9E:FF:04:2B:23:2B:34: 5D:EA:F5:7B:CC:E3:76:C5:F9:47:F4:97:53:78:EB:2C: 5C:BC:AD:C1:02:20:2B:51:20:8E:C5:47:50:56:A8:ED: 8E:D3:2F:E9:DB:F9:12:01:3C:28:92:D8:57:DD:A1:30: F7:B5:E8:4C:7D:69 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:13:22.376 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2D:2B:8A:21:81:66:AB:58:1B:E3:98:4C: E6:E6:81:18:D7:59:C4:11:8A:C3:07:B5:13:54:8D:CE: 26:34:8E:35:02:21:00:E3:AE:86:7D:EE:31:E8:76:57: 6D:BC:A9:23:66:C0:9F:46:AE:0A:93:EF:7F:FE:6D:37: AC:92:12:AF:DD:20:D0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:13:22.406 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:28:15:7D:1A:10:46:6A:9D:D9:17: 97:15:1C:AC:5C:1F:16:39:A0:83:8F:BF:81:1A:B8:73: 00:39:9B:1A:1D:02:20:15:19:FF:23:E1:EC:65:EB:E2: 79:03:54:FE:16:3F:1B:53:4C:0C:E0:43:55:3F:4F:7C: 5B:90:52:5A:07:97:48 Signature Algorithm: sha256WithRSAEncryption Signature Value: b4:0b:97:bf:b1:33:37:4c:42:c7:a9:2f:9f:9b:d1:50:74:bf: 9a:6c:13:5f:46:a6:3d:14:98:e2:a8:ab:e3:81:9c:7a:57:ae: 08:4e:3a:5f:94:71:33:8c:10:72:65:21:65:b0:2d:8d:b2:be: f8:27:0c:2c:d5:e2:c2:83:c5:08:a1:75:8e:c4:fd:ad:f0:dc: b7:93:f6:b6:aa:c0:68:fe:50:a7:25:b5:1c:28:d7:65:26:17: d2:22:92:27:ea:e7:13:59:2b:fd:25:28:d4:9c:cf:4a:bc:67: 0e:c7:88:e7:55:da:18:24:71:ae:d0:5f:b7:b2:b1:8d:dc:8f: 41:f2:5a:fb:99:7e:72:16:56:0d:26:25:d0:ce:c0:63:20:c4: c6:3c:50:96:ae:07:55:ee:60:b1:16:4c:93:57:42:6a:3b:0d: f8:fe:4e:3d:0b:00:7b:4d:c5:93:a5:cc:3d:e2:7b:2e:37:bc: d1:dc:f9:82:4a:25:ed:32:ad:bf:c6:0c:76:c7:27:01:2c:83: 5c:65:ae:2d:08:c2:15:39:52:4d:4c:8a:4c:49:ce:d2:27:03: 26:e0:81:32:52:7e:28:51:64:2f:6a:25:4b:02:fc:ba:52:52: 1d:3d:4b:fd:b1:d1:66:e0:a4:92:65:5a:18:7d:84:b2:1c:99: 0b:66:61:8f
1807607279 | 2024-09-14T14:51:14.710163587 / tcp
220 PH8P173CA0006.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 14 Sep 2024 14:51:07 +0000 [08DCD467EEF8CB9F] 250-PH8P173CA0006.outlook.office365.com Hello [224.240.126.237] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:26:d7:f8:c6:8b:90:f0:fc:3b:bc:30:71:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:59:15 2024 GMT Not After : Sep 4 17:59:14 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:eb:9a:76:91:fc:fa:ee:f9:b6:31:ab:37:ad:8f: da:b3:74:16:e1:27:c6:31:85:5f:cb:34:51:ae:24: d0:17:58:cb:cb:20:c7:10:f8:0f:33:15:00:84:91: 39:49:9a:ee:c1:84:9d:89:33:29:28:75:53:b3:dc: 94:de:be:85:e7:d1:d4:df:42:cb:fb:f1:09:09:10: 5b:73:e6:cf:54:d9:47:bc:cf:e4:f8:e2:2c:39:02: c4:37:8c:25:75:f3:ea:00:d1:72:39:da:3e:04:b8: 73:81:53:ff:c4:3c:38:1f:99:3e:b6:70:24:de:17: 13:1d:b0:5c:b3:16:7d:01:19:77:09:3b:76:a9:e7: 55:43:0d:62:f9:5e:0a:b6:a3:48:ec:25:2f:8b:c1: a8:f3:54:16:9b:38:4c:4e:a0:53:5d:ce:31:00:45: 57:09:fb:33:1e:e8:a1:ac:b5:0f:95:4f:5b:ca:23: 81:eb:26:85:36:04:1f:f0:81:02:d7:50:ce:52:a9: 21:3b:34:96:4e:ee:d9:24:0f:c6:a0:85:d5:e1:f0: 3c:e1:6b:c9:90:af:53:17:6b:72:7a:88:7a:a1:c8: 99:d9:de:1f:24:3f:af:07:1e:9e:b8:ee:a3:36:9e: 51:19:2a:dc:30:da:aa:e9:32:e2:b8:ff:12:d9:c5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A2:CA:31:2A:2C:CA:D3:C0:8B:4F:52:35:47:1C:2B:51:B2:D6:30:D5 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:59:16.016 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:E4:29:A6:7F:AF:DB:4D:6B:91:72: D9:F9:3C:68:07:63:38:5F:AB:EE:D9:6E:42:36:69:93: C9:DC:5D:65:3F:02:20:71:D2:0F:A2:56:12:69:6D:1D: C3:59:03:6B:B3:87:A2:F4:4C:F1:C9:D5:08:29:E5:98: F5:45:CD:82:4B:A5:E4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:59:16.015 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:14:28:5D:E5:A3:31:13:17:1A:45: A7:2A:10:81:5B:42:D7:08:54:93:63:FD:A3:DD:0B:45: 59:CF:32:62:E5:02:21:00:AC:D3:2A:97:30:B0:38:C4: 7E:A7:20:81:E9:32:5E:E1:66:CC:92:DC:47:CC:5F:56: 54:2C:A1:50:34:4F:0E:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:59:16.045 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:98:1E:A5:14:32:D8:20:0A:8B:1B: 05:8B:E5:03:CA:0B:DF:0A:C3:27:81:75:DE:11:A0:0A: C1:5B:44:D1:5A:02:21:00:83:9D:F8:E8:1B:19:F7:DC: CF:53:FF:72:56:F3:9E:E9:CD:11:17:BE:A0:D1:E3:E8: 5C:51:9B:34:13:81:D1:C2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 5d:ae:f0:c3:af:16:45:94:ae:ce:e6:8a:cc:84:61:f6:01:5a: 4e:66:85:b6:99:af:88:61:c4:e6:9e:d1:85:86:50:a5:ff:f0: 87:f9:3e:8b:f4:0a:08:29:8e:1c:78:2c:88:4a:e2:d7:d4:ea: 78:6c:66:2e:33:fd:64:33:17:41:6d:1a:aa:77:c6:94:3d:e1: 8a:f8:83:11:95:5c:27:fe:7f:76:1b:7b:3e:a6:9b:5a:65:c1: e2:cf:ce:a4:fb:5f:9b:fb:3a:01:40:f9:4d:2e:04:6f:7c:7d: 29:dd:6b:e2:68:6c:ac:50:5e:71:79:75:15:ad:3a:a6:56:c4: 23:c2:e1:8a:da:91:24:e0:2f:9e:c0:14:08:5d:45:68:09:4a: 6a:4c:90:13:d7:b6:d8:5f:78:b9:cd:02:75:6c:57:75:5b:3e: b2:c0:1f:ac:37:5c:e4:43:83:55:39:7f:16:da:c6:93:0a:10: fc:48:58:68:da:6f:96:d3:28:37:d1:fc:0e:17:fc:ae:13:b6: 9c:88:cd:c9:d0:5e:25:c4:96:43:63:11:c1:9e:ba:1e:d2:a9: 4b:e9:cb:f9:97:dd:85:b7:a1:19:77:fa:07:a9:74:47:7b:03: 47:e8:07:fd:e8:cc:da:fe:41:80:9e:8e:60:9b:af:7d:99:fc: bb:c4:68:b6
-1859313604 | 2024-09-13T23:53:53.492885993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [UABIADgAUAAxADcAMwBDAEEAMAAwADAAMgAuAE4AQQBNAFAAMQA3ADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:26:d7:f8:c6:8b:90:f0:fc:3b:bc:30:71:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:59:15 2024 GMT Not After : Sep 4 17:59:14 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:eb:9a:76:91:fc:fa:ee:f9:b6:31:ab:37:ad:8f: da:b3:74:16:e1:27:c6:31:85:5f:cb:34:51:ae:24: d0:17:58:cb:cb:20:c7:10:f8:0f:33:15:00:84:91: 39:49:9a:ee:c1:84:9d:89:33:29:28:75:53:b3:dc: 94:de:be:85:e7:d1:d4:df:42:cb:fb:f1:09:09:10: 5b:73:e6:cf:54:d9:47:bc:cf:e4:f8:e2:2c:39:02: c4:37:8c:25:75:f3:ea:00:d1:72:39:da:3e:04:b8: 73:81:53:ff:c4:3c:38:1f:99:3e:b6:70:24:de:17: 13:1d:b0:5c:b3:16:7d:01:19:77:09:3b:76:a9:e7: 55:43:0d:62:f9:5e:0a:b6:a3:48:ec:25:2f:8b:c1: a8:f3:54:16:9b:38:4c:4e:a0:53:5d:ce:31:00:45: 57:09:fb:33:1e:e8:a1:ac:b5:0f:95:4f:5b:ca:23: 81:eb:26:85:36:04:1f:f0:81:02:d7:50:ce:52:a9: 21:3b:34:96:4e:ee:d9:24:0f:c6:a0:85:d5:e1:f0: 3c:e1:6b:c9:90:af:53:17:6b:72:7a:88:7a:a1:c8: 99:d9:de:1f:24:3f:af:07:1e:9e:b8:ee:a3:36:9e: 51:19:2a:dc:30:da:aa:e9:32:e2:b8:ff:12:d9:c5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A2:CA:31:2A:2C:CA:D3:C0:8B:4F:52:35:47:1C:2B:51:B2:D6:30:D5 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:59:16.016 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:E4:29:A6:7F:AF:DB:4D:6B:91:72: D9:F9:3C:68:07:63:38:5F:AB:EE:D9:6E:42:36:69:93: C9:DC:5D:65:3F:02:20:71:D2:0F:A2:56:12:69:6D:1D: C3:59:03:6B:B3:87:A2:F4:4C:F1:C9:D5:08:29:E5:98: F5:45:CD:82:4B:A5:E4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:59:16.015 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:14:28:5D:E5:A3:31:13:17:1A:45: A7:2A:10:81:5B:42:D7:08:54:93:63:FD:A3:DD:0B:45: 59:CF:32:62:E5:02:21:00:AC:D3:2A:97:30:B0:38:C4: 7E:A7:20:81:E9:32:5E:E1:66:CC:92:DC:47:CC:5F:56: 54:2C:A1:50:34:4F:0E:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:59:16.045 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:98:1E:A5:14:32:D8:20:0A:8B:1B: 05:8B:E5:03:CA:0B:DF:0A:C3:27:81:75:DE:11:A0:0A: C1:5B:44:D1:5A:02:21:00:83:9D:F8:E8:1B:19:F7:DC: CF:53:FF:72:56:F3:9E:E9:CD:11:17:BE:A0:D1:E3:E8: 5C:51:9B:34:13:81:D1:C2 Signature Algorithm: sha256WithRSAEncryption Signature Value: 5d:ae:f0:c3:af:16:45:94:ae:ce:e6:8a:cc:84:61:f6:01:5a: 4e:66:85:b6:99:af:88:61:c4:e6:9e:d1:85:86:50:a5:ff:f0: 87:f9:3e:8b:f4:0a:08:29:8e:1c:78:2c:88:4a:e2:d7:d4:ea: 78:6c:66:2e:33:fd:64:33:17:41:6d:1a:aa:77:c6:94:3d:e1: 8a:f8:83:11:95:5c:27:fe:7f:76:1b:7b:3e:a6:9b:5a:65:c1: e2:cf:ce:a4:fb:5f:9b:fb:3a:01:40:f9:4d:2e:04:6f:7c:7d: 29:dd:6b:e2:68:6c:ac:50:5e:71:79:75:15:ad:3a:a6:56:c4: 23:c2:e1:8a:da:91:24:e0:2f:9e:c0:14:08:5d:45:68:09:4a: 6a:4c:90:13:d7:b6:d8:5f:78:b9:cd:02:75:6c:57:75:5b:3e: b2:c0:1f:ac:37:5c:e4:43:83:55:39:7f:16:da:c6:93:0a:10: fc:48:58:68:da:6f:96:d3:28:37:d1:fc:0e:17:fc:ae:13:b6: 9c:88:cd:c9:d0:5e:25:c4:96:43:63:11:c1:9e:ba:1e:d2:a9: 4b:e9:cb:f9:97:dd:85:b7:a1:19:77:fa:07:a9:74:47:7b:03: 47:e8:07:fd:e8:cc:da:fe:41:80:9e:8e:60:9b:af:7d:99:fc: bb:c4:68:b6
58724637 | 2024-09-10T10:54:46.513448995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [UABIADgAUAAxADcAMwBDAEEAMAAwADAAMwAuAE4AQQBNAFAAMQA3ADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 31:ad:c9:9f:79:dd:d8:5a:ea:7a:d9:cd:e6:90:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:13:22 2024 GMT Not After : Jun 6 09:13:21 2025 GMT Subject: C=US, ST=New York, L=Troy, O=Metropolitan Life Insurance Co, CN=outlook-ams.metlife.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e4:e2:16:56:cf:35:25:b8:96:63:07:41:cf:13: e6:cf:02:32:a6:4e:ba:08:98:87:4e:04:bd:48:59: 1d:42:a0:a3:60:76:da:83:83:40:ce:2f:39:86:b7: c8:f9:94:56:15:80:02:05:63:e8:83:ee:ce:53:16: 1f:50:11:74:2b:15:5e:6e:33:4c:67:82:85:8a:95: 4e:d5:07:10:fa:dc:2c:eb:09:6a:bf:43:9f:2a:eb: 1b:46:f5:5e:8e:65:e7:e6:b4:8c:a3:a5:e5:04:01: 14:d7:bc:c6:a7:06:3f:29:35:35:91:0d:a5:e1:df: 34:07:ca:2d:34:53:8f:2b:9a:11:d4:85:e1:f9:fb: 61:ce:d6:ba:e2:ac:91:a4:7c:b7:06:5f:ae:82:c2: 55:b2:de:77:54:58:b8:f1:5e:05:63:4f:84:e9:79: d8:7c:11:e1:26:b6:f7:8d:5e:f3:de:ec:d0:de:f0: 15:17:7d:9a:13:34:d7:10:7c:d4:f9:ca:63:ae:28: dc:6e:d4:9b:a3:f0:b0:44:e2:a4:6e:6a:d1:b6:d2: 3c:a2:16:e8:10:d4:35:e8:89:3e:e5:e2:ef:8c:c2: 9b:3b:af:ba:92:43:53:dc:53:72:be:b4:a0:6f:4c: e6:75:ae:3d:5a:59:d4:1b:db:0a:ad:ff:25:c0:4f: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: D2:89:52:B5:B3:CB:5C:31:F2:A9:B3:9C:90:F4:10:66:FE:D9:98:9C X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:outlook-ams.metlife.com, DNS:*.pod51270.outlook.com, DNS:autodiscover.metlife.com, DNS:autodiscover.metlife.mail.onmicrosoft.com, DNS:autodiscover.metlife.onmicrosoft.com, DNS:namp173-provisioning.internal.outlook.com, DNS:outlook.metlife.com, DNS:pod51270.outlook.com, DNS:pod51270ip.outlook.com, DNS:pod51270-pri.outlook.com, DNS:pod51270psh.outlook.com, DNS:webmail.metlife.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:13:22.371 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5A:6D:5E:ED:C5:9E:FF:04:2B:23:2B:34: 5D:EA:F5:7B:CC:E3:76:C5:F9:47:F4:97:53:78:EB:2C: 5C:BC:AD:C1:02:20:2B:51:20:8E:C5:47:50:56:A8:ED: 8E:D3:2F:E9:DB:F9:12:01:3C:28:92:D8:57:DD:A1:30: F7:B5:E8:4C:7D:69 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:13:22.376 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2D:2B:8A:21:81:66:AB:58:1B:E3:98:4C: E6:E6:81:18:D7:59:C4:11:8A:C3:07:B5:13:54:8D:CE: 26:34:8E:35:02:21:00:E3:AE:86:7D:EE:31:E8:76:57: 6D:BC:A9:23:66:C0:9F:46:AE:0A:93:EF:7F:FE:6D:37: AC:92:12:AF:DD:20:D0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:13:22.406 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:28:15:7D:1A:10:46:6A:9D:D9:17: 97:15:1C:AC:5C:1F:16:39:A0:83:8F:BF:81:1A:B8:73: 00:39:9B:1A:1D:02:20:15:19:FF:23:E1:EC:65:EB:E2: 79:03:54:FE:16:3F:1B:53:4C:0C:E0:43:55:3F:4F:7C: 5B:90:52:5A:07:97:48 Signature Algorithm: sha256WithRSAEncryption Signature Value: b4:0b:97:bf:b1:33:37:4c:42:c7:a9:2f:9f:9b:d1:50:74:bf: 9a:6c:13:5f:46:a6:3d:14:98:e2:a8:ab:e3:81:9c:7a:57:ae: 08:4e:3a:5f:94:71:33:8c:10:72:65:21:65:b0:2d:8d:b2:be: f8:27:0c:2c:d5:e2:c2:83:c5:08:a1:75:8e:c4:fd:ad:f0:dc: b7:93:f6:b6:aa:c0:68:fe:50:a7:25:b5:1c:28:d7:65:26:17: d2:22:92:27:ea:e7:13:59:2b:fd:25:28:d4:9c:cf:4a:bc:67: 0e:c7:88:e7:55:da:18:24:71:ae:d0:5f:b7:b2:b1:8d:dc:8f: 41:f2:5a:fb:99:7e:72:16:56:0d:26:25:d0:ce:c0:63:20:c4: c6:3c:50:96:ae:07:55:ee:60:b1:16:4c:93:57:42:6a:3b:0d: f8:fe:4e:3d:0b:00:7b:4d:c5:93:a5:cc:3d:e2:7b:2e:37:bc: d1:dc:f9:82:4a:25:ed:32:ad:bf:c6:0c:76:c7:27:01:2c:83: 5c:65:ae:2d:08:c2:15:39:52:4d:4c:8a:4c:49:ce:d2:27:03: 26:e0:81:32:52:7e:28:51:64:2f:6a:25:4b:02:fc:ba:52:52: 1d:3d:4b:fd:b1:d1:66:e0:a4:92:65:5a:18:7d:84:b2:1c:99: 0b:66:61:8f