Hostnames |
autodiscover.gap.com mail.gap.com o365.mail.gap.com autodiscover.gapincorp.onmicrosoft.com autodiscover.gapincorp.mail.onmicrosoft.com namp134-provisioning.internal.outlook.com pod51187.outlook.com pod51187-pri.outlook.com pod51187ip.outlook.com pod51187psh.outlook.com |
Domains | gap.com onmicrosoft.com outlook.com |
Country | United States |
City | Ashburn |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
-1787909939 | 2024-09-15T23:15:18.21639025 / tcp
220 BL0P134CA0004.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 15 Sep 2024 23:15:11 +0000 [08DCD4796EF7E6F8] 250-BL0P134CA0004.outlook.office365.com Hello [224.160.46.133] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:b9:46:11:b8:91:7f:da:d0:51:30:25:67:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:53:09 2024 GMT Not After : Sep 4 17:53:08 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:7f:b4:27:45:a1:3e:65:cf:8e:14:24:a7:43: 38:96:6e:1c:9c:f6:51:8e:bb:4c:8f:54:a4:bf:a3: 41:58:43:11:d0:03:0c:ef:0e:ed:96:df:92:f4:a6: a1:80:a6:ed:66:aa:e2:30:06:80:a3:4b:fa:48:b8: 11:f8:a6:ff:01:9c:a3:09:5c:ee:3d:ea:4a:1e:0d: f2:7d:80:09:8f:a8:9d:bb:13:f0:2b:cd:d2:19:90: 05:87:13:0c:49:e2:8c:03:54:26:93:a7:b0:8e:ac: 5b:03:cf:d8:14:2e:88:a7:6f:dc:7c:48:94:a4:59: ac:8f:03:90:82:6c:d3:fa:0b:d1:d8:c9:95:02:53: f5:f2:30:e2:41:22:d3:58:b2:aa:0b:f5:81:bb:4d: 3e:3e:b0:15:17:e0:91:a8:75:24:95:b0:80:ef:f9: 55:ca:3b:7c:3c:72:da:62:b3:36:28:c5:be:3d:03: 29:a7:38:e4:98:61:9c:4f:9d:3f:5d:a3:50:e1:37: 84:15:dc:3a:40:49:d8:b6:d2:3f:93:6d:2e:98:4e: fb:a9:37:c4:62:a2:6f:fb:cc:83:49:46:ef:ca:d3: 5c:ad:f7:6a:6f:e3:78:73:98:d0:c3:39:03:ac:8b: d3:b9:5b:f1:84:a8:48:a6:97:ad:c5:58:d3:03:95: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 9B:82:8F:9B:F4:8D:CA:EB:BE:12:93:77:FC:37:0F:7E:3E:4E:F8:3F X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:53:10.257 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7F:39:5B:E2:E2:F7:DA:AE:46:C1:D7:77: F3:EC:5A:8F:F9:E8:62:B1:DA:66:8D:FC:F8:C5:0F:12: 3D:E5:96:28:02:20:56:EF:87:E0:10:89:25:DB:BF:35: EA:2E:F7:39:7E:B3:ED:24:8C:AD:8B:F5:A3:13:67:A5: BE:E9:C1:37:49:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:53:10.270 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:A8:5D:2D:0F:E4:07:70:FE:A4:F7:93: E3:FF:77:54:8D:0D:29:1E:01:97:90:2E:8F:97:2C:CF: 6E:71:54:9E:02:21:00:A0:98:04:E8:10:65:73:52:1D: 14:FB:19:3D:27:EA:00:64:F3:90:6E:E9:3F:A7:4A:EC: 47:F7:9D:9B:C3:BF:07 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:53:10.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6E:51:4D:26:CD:56:78:A6:25:2C:68:1F: 30:54:6F:4A:97:70:DE:23:A8:C2:D7:48:63:18:6A:BE: D2:22:50:19:02:20:4D:A3:E2:B3:0E:D9:71:2E:2B:A2: F5:9A:9C:6E:48:6A:05:89:0F:A4:21:D2:FA:8D:AA:47: C1:6B:D2:4A:7E:EF Signature Algorithm: sha256WithRSAEncryption Signature Value: 1c:62:f9:8f:7e:39:82:f1:db:28:5d:f7:f5:22:26:95:6d:2a: c4:26:9c:98:a1:3d:4c:1f:bb:35:92:c5:fd:86:a8:66:77:41: 5d:bc:d3:e7:9a:74:67:59:93:3d:72:1c:43:90:76:73:76:23: b1:1c:dd:b1:f8:b8:b6:c6:81:f7:8e:58:7d:1a:80:e0:3b:b9: eb:90:99:c6:e0:3b:0c:a0:3b:c6:5d:a5:9d:0e:3b:70:8e:b9: 2a:37:5d:77:6d:d8:c5:80:9c:ff:34:41:98:21:89:78:c1:13: 85:1a:52:7b:36:6b:2b:6c:83:be:b4:30:2b:f3:96:69:57:61: 75:08:57:34:56:7d:f6:31:1b:95:58:e8:a1:0d:e7:0b:39:84: 5c:5c:80:8e:17:19:06:2f:fb:0e:48:06:db:05:a6:fc:35:32: 01:e7:f7:ae:2b:ec:bb:a7:fa:94:64:74:87:0e:d9:9f:8a:27: f7:7c:55:f5:49:2e:e2:a0:09:e1:56:f4:44:fc:0e:1f:c6:c3: a3:41:bf:1e:b5:69:87:80:fa:e4:11:3c:a2:fa:d8:46:b6:d7: 1f:9a:ff:d4:2d:b7:3c:57:02:89:df:ca:35:9d:f6:c4:cb:e5: f4:d0:12:ba:d0:07:35:ff:94:4c:5b:7c:97:f0:36:e1:86:ca: 75:17:83:32
441602805 | 2024-09-15T05:25:31.02150380 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.96.53.38/owa/ Server: Microsoft-IIS/10.0 request-id: b1679595-c4d6-c050-5f85-191eb0dce04d X-FEServer: BL0P134CA0001 X-RequestId: 245731d3-f961-458c-9c78-0dbda1877560 X-FEProxyInfo: BL0P134CA0001.NAMP134.PROD.OUTLOOK.COM X-FEEFZInfo: MNZ MS-CV: lZVnsdbEUMBfhRkesNzgTQ.0 X-Powered-By: ASP.NET X-FEServer: BL0P134CA0001 Date: Sun, 15 Sep 2024 05:25:29 GMT Connection: close Content-Length: 0
510279535 | 2024-09-02T03:56:21.537588110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QgBMADAAUAAxADMANABDAEEAMAAwADAANAAuAE4AQQBNAFAAMQAzADQALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:a8:f1:34:39:06:2a:e5:cc:4e:87:62:10:b9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:15:05 2024 GMT Not After : Jun 6 09:15:04 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:d8:5b:53:42:ef:fa:a6:2b:4d:c9:ea:c8:40:89: 17:78:47:3c:55:af:c0:cd:1e:01:6b:8a:f9:31:17: 93:d5:8e:f8:56:8d:9b:d8:88:c9:56:d2:7b:78:94: 46:52:d6:6f:d5:00:3e:b4:b6:65:76:d7:45:ac:5c: 7f:43:e5:39:b3:ed:bc:fe:81:a7:7a:0c:ac:9b:5a: 78:6f:87:b3:f0:c0:1e:d5:f8:0c:30:b9:cf:d1:25: 97:a1:85:07:96:fc:78:aa:93:c4:04:31:5f:36:f9: 1a:f1:bb:fa:55:6d:da:98:d1:c5:2e:bd:56:39:e4: f0:61:e8:a8:a7:02:87:7a:52:26:65:3b:95:78:b7: ab:0c:da:8f:b3:32:2e:45:27:36:ad:1f:9d:4a:7f: 8d:27:12:c1:6b:ee:43:9a:df:d4:7b:6b:1b:0c:f6: 82:3c:98:b8:ef:16:e1:b8:05:c6:25:46:c3:af:ae: 7a:dd:07:7a:76:af:69:3b:ba:d8:0f:09:e6:99:e9: 5e:0c:a4:fd:51:1f:9d:32:a9:08:54:57:9e:61:db: a0:32:fd:13:00:99:08:53:ca:54:f8:25:29:60:fa: 15:7b:1a:04:f3:c1:c9:ab:4f:a6:9d:7e:a4:93:16: 29:6b:75:72:88:a1:f9:18:15:3c:52:73:1d:79:a6: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 71:B4:43:56:2D:CD:F2:F6:32:E2:00:9D:6E:6A:82:31:9C:77:2E:18 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:15:05.547 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:36:69:77:64:B7:08:9B:DC:C5:F3:08:69: F7:79:7D:D1:AF:39:48:0B:5B:CC:C4:00:46:D5:1D:31: C5:E3:79:D4:02:21:00:98:7A:10:E9:1B:05:0A:08:F1: 33:DE:8F:CF:88:EA:8E:5E:99:9C:CA:06:8B:BA:51:C7: 7A:2D:A5:F0:A6:18:14 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:15:05.566 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3C:58:96:32:C2:D5:20:1C:86:D7:A1:56: 68:FE:1F:D8:12:98:86:95:89:C7:7E:D9:66:1F:3D:00: E7:43:B0:2C:02:20:07:BF:F8:15:C5:D7:29:FB:4F:F7: 2B:BE:95:86:44:9A:7C:60:77:61:CF:2E:A0:AA:B4:DE: 87:D6:12:41:15:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:15:05.562 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:BA:98:01:B8:DE:AD:58:C0:4B:0F: 01:7A:B0:73:E2:A0:5E:0F:D6:8B:C6:CD:F5:2E:AE:6B: B7:4A:E1:34:9B:02:21:00:D5:C0:84:DC:D5:9F:25:66: 35:52:A5:4A:B3:EB:8D:FD:A1:CB:08:87:7E:B5:52:02: 4E:63:A6:1C:3E:B9:91:C3 Signature Algorithm: sha256WithRSAEncryption Signature Value: 1e:e3:ae:22:6b:c8:ec:3c:48:1a:18:4c:2f:30:bc:15:c8:67: 0e:54:2e:ad:4f:7b:ab:f9:75:a4:6b:4c:a1:6a:0a:27:64:3f: 10:c9:87:b7:ab:66:c4:a5:4a:54:15:e6:dd:79:72:66:90:3e: 53:3c:76:7f:18:4e:ac:7d:6a:2d:d6:28:c4:16:35:c0:e1:0d: ec:8e:ca:b9:44:e9:1c:1b:9b:60:35:f7:7b:59:f4:f5:dd:13: 99:11:ff:f7:72:9d:86:fb:e9:bc:d6:af:46:91:f8:4d:5a:69: 5d:fc:0f:55:d3:19:00:77:12:50:0a:57:d4:ec:dc:8d:44:c2: 4a:46:5f:89:9a:08:f4:33:a1:20:1e:4c:8a:22:e9:ca:0f:7b: ab:ff:88:ed:9f:da:f6:b5:4c:f6:19:99:63:65:67:19:30:d1: fe:9f:9d:df:1d:97:89:b6:78:78:d3:6c:10:bf:21:e1:91:55: ac:2f:d7:55:ee:c0:82:8c:36:36:d7:b2:e1:1f:4b:31:17:13: 36:54:88:69:1c:b8:76:56:db:b6:b6:c0:4c:31:01:a2:9e:9b: c9:6e:d9:8d:70:9f:fa:e8:22:3f:01:13:68:6b:6f:c5:4b:fa: b4:a7:02:25:ca:7b:b1:ad:3b:52:95:9d:75:6d:e2:d3:7d:87: cb:78:b0:6b
1863892797 | 2024-09-08T08:27:42.729863143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QgBMADAAUAAxADMANABDAEEAMAAwADAANQAuAE4AQQBNAFAAMQAzADQALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:a8:f1:34:39:06:2a:e5:cc:4e:87:62:10:b9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:15:05 2024 GMT Not After : Jun 6 09:15:04 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:d8:5b:53:42:ef:fa:a6:2b:4d:c9:ea:c8:40:89: 17:78:47:3c:55:af:c0:cd:1e:01:6b:8a:f9:31:17: 93:d5:8e:f8:56:8d:9b:d8:88:c9:56:d2:7b:78:94: 46:52:d6:6f:d5:00:3e:b4:b6:65:76:d7:45:ac:5c: 7f:43:e5:39:b3:ed:bc:fe:81:a7:7a:0c:ac:9b:5a: 78:6f:87:b3:f0:c0:1e:d5:f8:0c:30:b9:cf:d1:25: 97:a1:85:07:96:fc:78:aa:93:c4:04:31:5f:36:f9: 1a:f1:bb:fa:55:6d:da:98:d1:c5:2e:bd:56:39:e4: f0:61:e8:a8:a7:02:87:7a:52:26:65:3b:95:78:b7: ab:0c:da:8f:b3:32:2e:45:27:36:ad:1f:9d:4a:7f: 8d:27:12:c1:6b:ee:43:9a:df:d4:7b:6b:1b:0c:f6: 82:3c:98:b8:ef:16:e1:b8:05:c6:25:46:c3:af:ae: 7a:dd:07:7a:76:af:69:3b:ba:d8:0f:09:e6:99:e9: 5e:0c:a4:fd:51:1f:9d:32:a9:08:54:57:9e:61:db: a0:32:fd:13:00:99:08:53:ca:54:f8:25:29:60:fa: 15:7b:1a:04:f3:c1:c9:ab:4f:a6:9d:7e:a4:93:16: 29:6b:75:72:88:a1:f9:18:15:3c:52:73:1d:79:a6: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 71:B4:43:56:2D:CD:F2:F6:32:E2:00:9D:6E:6A:82:31:9C:77:2E:18 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:15:05.547 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:36:69:77:64:B7:08:9B:DC:C5:F3:08:69: F7:79:7D:D1:AF:39:48:0B:5B:CC:C4:00:46:D5:1D:31: C5:E3:79:D4:02:21:00:98:7A:10:E9:1B:05:0A:08:F1: 33:DE:8F:CF:88:EA:8E:5E:99:9C:CA:06:8B:BA:51:C7: 7A:2D:A5:F0:A6:18:14 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:15:05.566 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3C:58:96:32:C2:D5:20:1C:86:D7:A1:56: 68:FE:1F:D8:12:98:86:95:89:C7:7E:D9:66:1F:3D:00: E7:43:B0:2C:02:20:07:BF:F8:15:C5:D7:29:FB:4F:F7: 2B:BE:95:86:44:9A:7C:60:77:61:CF:2E:A0:AA:B4:DE: 87:D6:12:41:15:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:15:05.562 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:BA:98:01:B8:DE:AD:58:C0:4B:0F: 01:7A:B0:73:E2:A0:5E:0F:D6:8B:C6:CD:F5:2E:AE:6B: B7:4A:E1:34:9B:02:21:00:D5:C0:84:DC:D5:9F:25:66: 35:52:A5:4A:B3:EB:8D:FD:A1:CB:08:87:7E:B5:52:02: 4E:63:A6:1C:3E:B9:91:C3 Signature Algorithm: sha256WithRSAEncryption Signature Value: 1e:e3:ae:22:6b:c8:ec:3c:48:1a:18:4c:2f:30:bc:15:c8:67: 0e:54:2e:ad:4f:7b:ab:f9:75:a4:6b:4c:a1:6a:0a:27:64:3f: 10:c9:87:b7:ab:66:c4:a5:4a:54:15:e6:dd:79:72:66:90:3e: 53:3c:76:7f:18:4e:ac:7d:6a:2d:d6:28:c4:16:35:c0:e1:0d: ec:8e:ca:b9:44:e9:1c:1b:9b:60:35:f7:7b:59:f4:f5:dd:13: 99:11:ff:f7:72:9d:86:fb:e9:bc:d6:af:46:91:f8:4d:5a:69: 5d:fc:0f:55:d3:19:00:77:12:50:0a:57:d4:ec:dc:8d:44:c2: 4a:46:5f:89:9a:08:f4:33:a1:20:1e:4c:8a:22:e9:ca:0f:7b: ab:ff:88:ed:9f:da:f6:b5:4c:f6:19:99:63:65:67:19:30:d1: fe:9f:9d:df:1d:97:89:b6:78:78:d3:6c:10:bf:21:e1:91:55: ac:2f:d7:55:ee:c0:82:8c:36:36:d7:b2:e1:1f:4b:31:17:13: 36:54:88:69:1c:b8:76:56:db:b6:b6:c0:4c:31:01:a2:9e:9b: c9:6e:d9:8d:70:9f:fa:e8:22:3f:01:13:68:6b:6f:c5:4b:fa: b4:a7:02:25:ca:7b:b1:ad:3b:52:95:9d:75:6d:e2:d3:7d:87: cb:78:b0:6b
-652143225 | 2024-09-15T23:33:11.613091443 / tcp
HTTP/1.1 302 Content-Length: 776 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f52.96.53.38%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=56f4a0e3-406d-5d88-648b-ad15d9844bc1&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638620399912374370.cf0e0831-7015-4ce5-90bf-baef40bb43b0&state=DcsxEoAgDAVR0PE4kQ8JhhyHMNBaen0p3nYbQwjndmwRO0Efbk8Bm1kurMKKeyxMNM6kyJVkzEoGX-R9LoG7sCPu90rv19MP Server: Microsoft-IIS/10.0 request-id: 56f4a0e3-406d-5d88-648b-ad15d9844bc1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: BL1P134MB0116.NAMP134.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=C641A1B2890C4B6BBF1BC30675641F33; expires=Mon, 15-Sep-2025 23:33:11 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=C641A1B2890C4B6BBF1BC30675641F33; expires=Mon, 15-Sep-2025 23:33:11 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 15-Mar-2025 23:33:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.yq4PsWsqbiKcLB8cEWEwGA90P5Q4BhbFVC9DlqLD4oc=638620399912374370.cf0e0831-7015-4ce5-90bf-baef40bb43b0; expires=Mon, 16-Sep-2024 00:33:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=C641A1B2890C4B6BBF1BC30675641F33; expires=Mon, 15-Sep-2025 23:33:11 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 15-Mar-2025 23:33:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.53.38; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.yq4PsWsqbiKcLB8cEWEwGA90P5Q4BhbFVC9DlqLD4oc=638620399912374370.cf0e0831-7015-4ce5-90bf-baef40bb43b0; expires=Mon, 16-Sep-2024 00:33:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 15-Sep-1994 23:33:11 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BYlAYw97V3Ag; expires=Mon, 16-Sep-2024 05:35:11 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 4;0;0; X-BackEnd-Begin: 2024-09-15T23:33:11.237 X-BackEnd-End: 2024-09-15T23:33:11.237 X-DiagInfo: BL1P134MB0116 X-BEServer: BL1P134MB0116 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=MNZ&RemoteIP=185.142.236.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: MNZ X-FEProxyInfo: BL0P134CA0004.NAMP134.PROD.OUTLOOK.COM X-FEEFZInfo: MNZ X-FEServer: BL0P134CA0004 Date: Sun, 15 Sep 2024 23:33:10 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:b9:46:11:b8:91:7f:da:d0:51:30:25:67:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:53:09 2024 GMT Not After : Sep 4 17:53:08 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:7f:b4:27:45:a1:3e:65:cf:8e:14:24:a7:43: 38:96:6e:1c:9c:f6:51:8e:bb:4c:8f:54:a4:bf:a3: 41:58:43:11:d0:03:0c:ef:0e:ed:96:df:92:f4:a6: a1:80:a6:ed:66:aa:e2:30:06:80:a3:4b:fa:48:b8: 11:f8:a6:ff:01:9c:a3:09:5c:ee:3d:ea:4a:1e:0d: f2:7d:80:09:8f:a8:9d:bb:13:f0:2b:cd:d2:19:90: 05:87:13:0c:49:e2:8c:03:54:26:93:a7:b0:8e:ac: 5b:03:cf:d8:14:2e:88:a7:6f:dc:7c:48:94:a4:59: ac:8f:03:90:82:6c:d3:fa:0b:d1:d8:c9:95:02:53: f5:f2:30:e2:41:22:d3:58:b2:aa:0b:f5:81:bb:4d: 3e:3e:b0:15:17:e0:91:a8:75:24:95:b0:80:ef:f9: 55:ca:3b:7c:3c:72:da:62:b3:36:28:c5:be:3d:03: 29:a7:38:e4:98:61:9c:4f:9d:3f:5d:a3:50:e1:37: 84:15:dc:3a:40:49:d8:b6:d2:3f:93:6d:2e:98:4e: fb:a9:37:c4:62:a2:6f:fb:cc:83:49:46:ef:ca:d3: 5c:ad:f7:6a:6f:e3:78:73:98:d0:c3:39:03:ac:8b: d3:b9:5b:f1:84:a8:48:a6:97:ad:c5:58:d3:03:95: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 9B:82:8F:9B:F4:8D:CA:EB:BE:12:93:77:FC:37:0F:7E:3E:4E:F8:3F X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:53:10.257 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7F:39:5B:E2:E2:F7:DA:AE:46:C1:D7:77: F3:EC:5A:8F:F9:E8:62:B1:DA:66:8D:FC:F8:C5:0F:12: 3D:E5:96:28:02:20:56:EF:87:E0:10:89:25:DB:BF:35: EA:2E:F7:39:7E:B3:ED:24:8C:AD:8B:F5:A3:13:67:A5: BE:E9:C1:37:49:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:53:10.270 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:A8:5D:2D:0F:E4:07:70:FE:A4:F7:93: E3:FF:77:54:8D:0D:29:1E:01:97:90:2E:8F:97:2C:CF: 6E:71:54:9E:02:21:00:A0:98:04:E8:10:65:73:52:1D: 14:FB:19:3D:27:EA:00:64:F3:90:6E:E9:3F:A7:4A:EC: 47:F7:9D:9B:C3:BF:07 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:53:10.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6E:51:4D:26:CD:56:78:A6:25:2C:68:1F: 30:54:6F:4A:97:70:DE:23:A8:C2:D7:48:63:18:6A:BE: D2:22:50:19:02:20:4D:A3:E2:B3:0E:D9:71:2E:2B:A2: F5:9A:9C:6E:48:6A:05:89:0F:A4:21:D2:FA:8D:AA:47: C1:6B:D2:4A:7E:EF Signature Algorithm: sha256WithRSAEncryption Signature Value: 1c:62:f9:8f:7e:39:82:f1:db:28:5d:f7:f5:22:26:95:6d:2a: c4:26:9c:98:a1:3d:4c:1f:bb:35:92:c5:fd:86:a8:66:77:41: 5d:bc:d3:e7:9a:74:67:59:93:3d:72:1c:43:90:76:73:76:23: b1:1c:dd:b1:f8:b8:b6:c6:81:f7:8e:58:7d:1a:80:e0:3b:b9: eb:90:99:c6:e0:3b:0c:a0:3b:c6:5d:a5:9d:0e:3b:70:8e:b9: 2a:37:5d:77:6d:d8:c5:80:9c:ff:34:41:98:21:89:78:c1:13: 85:1a:52:7b:36:6b:2b:6c:83:be:b4:30:2b:f3:96:69:57:61: 75:08:57:34:56:7d:f6:31:1b:95:58:e8:a1:0d:e7:0b:39:84: 5c:5c:80:8e:17:19:06:2f:fb:0e:48:06:db:05:a6:fc:35:32: 01:e7:f7:ae:2b:ec:bb:a7:fa:94:64:74:87:0e:d9:9f:8a:27: f7:7c:55:f5:49:2e:e2:a0:09:e1:56:f4:44:fc:0e:1f:c6:c3: a3:41:bf:1e:b5:69:87:80:fa:e4:11:3c:a2:fa:d8:46:b6:d7: 1f:9a:ff:d4:2d:b7:3c:57:02:89:df:ca:35:9d:f6:c4:cb:e5: f4:d0:12:ba:d0:07:35:ff:94:4c:5b:7c:97:f0:36:e1:86:ca: 75:17:83:32
-766494694 | 2024-09-11T06:10:33.399890587 / tcp
220 BL0P134CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Wed, 11 Sep 2024 06:10:23 +0000 [08DCD20DD0C48240] 250-BL0P134CA0005.outlook.office365.com Hello [224.27.52.141] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:a8:f1:34:39:06:2a:e5:cc:4e:87:62:10:b9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:15:05 2024 GMT Not After : Jun 6 09:15:04 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:d8:5b:53:42:ef:fa:a6:2b:4d:c9:ea:c8:40:89: 17:78:47:3c:55:af:c0:cd:1e:01:6b:8a:f9:31:17: 93:d5:8e:f8:56:8d:9b:d8:88:c9:56:d2:7b:78:94: 46:52:d6:6f:d5:00:3e:b4:b6:65:76:d7:45:ac:5c: 7f:43:e5:39:b3:ed:bc:fe:81:a7:7a:0c:ac:9b:5a: 78:6f:87:b3:f0:c0:1e:d5:f8:0c:30:b9:cf:d1:25: 97:a1:85:07:96:fc:78:aa:93:c4:04:31:5f:36:f9: 1a:f1:bb:fa:55:6d:da:98:d1:c5:2e:bd:56:39:e4: f0:61:e8:a8:a7:02:87:7a:52:26:65:3b:95:78:b7: ab:0c:da:8f:b3:32:2e:45:27:36:ad:1f:9d:4a:7f: 8d:27:12:c1:6b:ee:43:9a:df:d4:7b:6b:1b:0c:f6: 82:3c:98:b8:ef:16:e1:b8:05:c6:25:46:c3:af:ae: 7a:dd:07:7a:76:af:69:3b:ba:d8:0f:09:e6:99:e9: 5e:0c:a4:fd:51:1f:9d:32:a9:08:54:57:9e:61:db: a0:32:fd:13:00:99:08:53:ca:54:f8:25:29:60:fa: 15:7b:1a:04:f3:c1:c9:ab:4f:a6:9d:7e:a4:93:16: 29:6b:75:72:88:a1:f9:18:15:3c:52:73:1d:79:a6: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 71:B4:43:56:2D:CD:F2:F6:32:E2:00:9D:6E:6A:82:31:9C:77:2E:18 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:15:05.547 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:36:69:77:64:B7:08:9B:DC:C5:F3:08:69: F7:79:7D:D1:AF:39:48:0B:5B:CC:C4:00:46:D5:1D:31: C5:E3:79:D4:02:21:00:98:7A:10:E9:1B:05:0A:08:F1: 33:DE:8F:CF:88:EA:8E:5E:99:9C:CA:06:8B:BA:51:C7: 7A:2D:A5:F0:A6:18:14 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:15:05.566 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3C:58:96:32:C2:D5:20:1C:86:D7:A1:56: 68:FE:1F:D8:12:98:86:95:89:C7:7E:D9:66:1F:3D:00: E7:43:B0:2C:02:20:07:BF:F8:15:C5:D7:29:FB:4F:F7: 2B:BE:95:86:44:9A:7C:60:77:61:CF:2E:A0:AA:B4:DE: 87:D6:12:41:15:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:15:05.562 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:BA:98:01:B8:DE:AD:58:C0:4B:0F: 01:7A:B0:73:E2:A0:5E:0F:D6:8B:C6:CD:F5:2E:AE:6B: B7:4A:E1:34:9B:02:21:00:D5:C0:84:DC:D5:9F:25:66: 35:52:A5:4A:B3:EB:8D:FD:A1:CB:08:87:7E:B5:52:02: 4E:63:A6:1C:3E:B9:91:C3 Signature Algorithm: sha256WithRSAEncryption Signature Value: 1e:e3:ae:22:6b:c8:ec:3c:48:1a:18:4c:2f:30:bc:15:c8:67: 0e:54:2e:ad:4f:7b:ab:f9:75:a4:6b:4c:a1:6a:0a:27:64:3f: 10:c9:87:b7:ab:66:c4:a5:4a:54:15:e6:dd:79:72:66:90:3e: 53:3c:76:7f:18:4e:ac:7d:6a:2d:d6:28:c4:16:35:c0:e1:0d: ec:8e:ca:b9:44:e9:1c:1b:9b:60:35:f7:7b:59:f4:f5:dd:13: 99:11:ff:f7:72:9d:86:fb:e9:bc:d6:af:46:91:f8:4d:5a:69: 5d:fc:0f:55:d3:19:00:77:12:50:0a:57:d4:ec:dc:8d:44:c2: 4a:46:5f:89:9a:08:f4:33:a1:20:1e:4c:8a:22:e9:ca:0f:7b: ab:ff:88:ed:9f:da:f6:b5:4c:f6:19:99:63:65:67:19:30:d1: fe:9f:9d:df:1d:97:89:b6:78:78:d3:6c:10:bf:21:e1:91:55: ac:2f:d7:55:ee:c0:82:8c:36:36:d7:b2:e1:1f:4b:31:17:13: 36:54:88:69:1c:b8:76:56:db:b6:b6:c0:4c:31:01:a2:9e:9b: c9:6e:d9:8d:70:9f:fa:e8:22:3f:01:13:68:6b:6f:c5:4b:fa: b4:a7:02:25:ca:7b:b1:ad:3b:52:95:9d:75:6d:e2:d3:7d:87: cb:78:b0:6b
1958277027 | 2024-09-16T13:47:45.780988993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QgBMADAAUAAxADMANABDAEEAMAAwADAANgAuAE4AQQBNAFAAMQAzADQALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:b9:46:11:b8:91:7f:da:d0:51:30:25:67:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:53:09 2024 GMT Not After : Sep 4 17:53:08 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:7f:b4:27:45:a1:3e:65:cf:8e:14:24:a7:43: 38:96:6e:1c:9c:f6:51:8e:bb:4c:8f:54:a4:bf:a3: 41:58:43:11:d0:03:0c:ef:0e:ed:96:df:92:f4:a6: a1:80:a6:ed:66:aa:e2:30:06:80:a3:4b:fa:48:b8: 11:f8:a6:ff:01:9c:a3:09:5c:ee:3d:ea:4a:1e:0d: f2:7d:80:09:8f:a8:9d:bb:13:f0:2b:cd:d2:19:90: 05:87:13:0c:49:e2:8c:03:54:26:93:a7:b0:8e:ac: 5b:03:cf:d8:14:2e:88:a7:6f:dc:7c:48:94:a4:59: ac:8f:03:90:82:6c:d3:fa:0b:d1:d8:c9:95:02:53: f5:f2:30:e2:41:22:d3:58:b2:aa:0b:f5:81:bb:4d: 3e:3e:b0:15:17:e0:91:a8:75:24:95:b0:80:ef:f9: 55:ca:3b:7c:3c:72:da:62:b3:36:28:c5:be:3d:03: 29:a7:38:e4:98:61:9c:4f:9d:3f:5d:a3:50:e1:37: 84:15:dc:3a:40:49:d8:b6:d2:3f:93:6d:2e:98:4e: fb:a9:37:c4:62:a2:6f:fb:cc:83:49:46:ef:ca:d3: 5c:ad:f7:6a:6f:e3:78:73:98:d0:c3:39:03:ac:8b: d3:b9:5b:f1:84:a8:48:a6:97:ad:c5:58:d3:03:95: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 9B:82:8F:9B:F4:8D:CA:EB:BE:12:93:77:FC:37:0F:7E:3E:4E:F8:3F X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:53:10.257 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7F:39:5B:E2:E2:F7:DA:AE:46:C1:D7:77: F3:EC:5A:8F:F9:E8:62:B1:DA:66:8D:FC:F8:C5:0F:12: 3D:E5:96:28:02:20:56:EF:87:E0:10:89:25:DB:BF:35: EA:2E:F7:39:7E:B3:ED:24:8C:AD:8B:F5:A3:13:67:A5: BE:E9:C1:37:49:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:53:10.270 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:A8:5D:2D:0F:E4:07:70:FE:A4:F7:93: E3:FF:77:54:8D:0D:29:1E:01:97:90:2E:8F:97:2C:CF: 6E:71:54:9E:02:21:00:A0:98:04:E8:10:65:73:52:1D: 14:FB:19:3D:27:EA:00:64:F3:90:6E:E9:3F:A7:4A:EC: 47:F7:9D:9B:C3:BF:07 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:53:10.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6E:51:4D:26:CD:56:78:A6:25:2C:68:1F: 30:54:6F:4A:97:70:DE:23:A8:C2:D7:48:63:18:6A:BE: D2:22:50:19:02:20:4D:A3:E2:B3:0E:D9:71:2E:2B:A2: F5:9A:9C:6E:48:6A:05:89:0F:A4:21:D2:FA:8D:AA:47: C1:6B:D2:4A:7E:EF Signature Algorithm: sha256WithRSAEncryption Signature Value: 1c:62:f9:8f:7e:39:82:f1:db:28:5d:f7:f5:22:26:95:6d:2a: c4:26:9c:98:a1:3d:4c:1f:bb:35:92:c5:fd:86:a8:66:77:41: 5d:bc:d3:e7:9a:74:67:59:93:3d:72:1c:43:90:76:73:76:23: b1:1c:dd:b1:f8:b8:b6:c6:81:f7:8e:58:7d:1a:80:e0:3b:b9: eb:90:99:c6:e0:3b:0c:a0:3b:c6:5d:a5:9d:0e:3b:70:8e:b9: 2a:37:5d:77:6d:d8:c5:80:9c:ff:34:41:98:21:89:78:c1:13: 85:1a:52:7b:36:6b:2b:6c:83:be:b4:30:2b:f3:96:69:57:61: 75:08:57:34:56:7d:f6:31:1b:95:58:e8:a1:0d:e7:0b:39:84: 5c:5c:80:8e:17:19:06:2f:fb:0e:48:06:db:05:a6:fc:35:32: 01:e7:f7:ae:2b:ec:bb:a7:fa:94:64:74:87:0e:d9:9f:8a:27: f7:7c:55:f5:49:2e:e2:a0:09:e1:56:f4:44:fc:0e:1f:c6:c3: a3:41:bf:1e:b5:69:87:80:fa:e4:11:3c:a2:fa:d8:46:b6:d7: 1f:9a:ff:d4:2d:b7:3c:57:02:89:df:ca:35:9d:f6:c4:cb:e5: f4:d0:12:ba:d0:07:35:ff:94:4c:5b:7c:97:f0:36:e1:86:ca: 75:17:83:32
-1438144439 | 2024-09-14T01:11:14.960553995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QgBMADAAUAAxADMANABDAEEAMAAwADAANQAuAE4AQQBNAFAAMQAzADQALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:b9:46:11:b8:91:7f:da:d0:51:30:25:67:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:53:09 2024 GMT Not After : Sep 4 17:53:08 2025 GMT Subject: C=US, ST=California, L=San Francisco, O=The Gap Inc, CN=o365.mail.gap.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:7f:b4:27:45:a1:3e:65:cf:8e:14:24:a7:43: 38:96:6e:1c:9c:f6:51:8e:bb:4c:8f:54:a4:bf:a3: 41:58:43:11:d0:03:0c:ef:0e:ed:96:df:92:f4:a6: a1:80:a6:ed:66:aa:e2:30:06:80:a3:4b:fa:48:b8: 11:f8:a6:ff:01:9c:a3:09:5c:ee:3d:ea:4a:1e:0d: f2:7d:80:09:8f:a8:9d:bb:13:f0:2b:cd:d2:19:90: 05:87:13:0c:49:e2:8c:03:54:26:93:a7:b0:8e:ac: 5b:03:cf:d8:14:2e:88:a7:6f:dc:7c:48:94:a4:59: ac:8f:03:90:82:6c:d3:fa:0b:d1:d8:c9:95:02:53: f5:f2:30:e2:41:22:d3:58:b2:aa:0b:f5:81:bb:4d: 3e:3e:b0:15:17:e0:91:a8:75:24:95:b0:80:ef:f9: 55:ca:3b:7c:3c:72:da:62:b3:36:28:c5:be:3d:03: 29:a7:38:e4:98:61:9c:4f:9d:3f:5d:a3:50:e1:37: 84:15:dc:3a:40:49:d8:b6:d2:3f:93:6d:2e:98:4e: fb:a9:37:c4:62:a2:6f:fb:cc:83:49:46:ef:ca:d3: 5c:ad:f7:6a:6f:e3:78:73:98:d0:c3:39:03:ac:8b: d3:b9:5b:f1:84:a8:48:a6:97:ad:c5:58:d3:03:95: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 9B:82:8F:9B:F4:8D:CA:EB:BE:12:93:77:FC:37:0F:7E:3E:4E:F8:3F X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:o365.mail.gap.com, DNS:*.pod51187.outlook.com, DNS:autodiscover.gap.com, DNS:autodiscover.gapincorp.mail.onmicrosoft.com, DNS:autodiscover.gapincorp.onmicrosoft.com, DNS:mail.gap.com, DNS:namp134-provisioning.internal.outlook.com, DNS:pod51187.outlook.com, DNS:pod51187ip.outlook.com, DNS:pod51187-pri.outlook.com, DNS:pod51187psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:53:10.257 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7F:39:5B:E2:E2:F7:DA:AE:46:C1:D7:77: F3:EC:5A:8F:F9:E8:62:B1:DA:66:8D:FC:F8:C5:0F:12: 3D:E5:96:28:02:20:56:EF:87:E0:10:89:25:DB:BF:35: EA:2E:F7:39:7E:B3:ED:24:8C:AD:8B:F5:A3:13:67:A5: BE:E9:C1:37:49:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Sep 4 17:53:10.270 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:A8:5D:2D:0F:E4:07:70:FE:A4:F7:93: E3:FF:77:54:8D:0D:29:1E:01:97:90:2E:8F:97:2C:CF: 6E:71:54:9E:02:21:00:A0:98:04:E8:10:65:73:52:1D: 14:FB:19:3D:27:EA:00:64:F3:90:6E:E9:3F:A7:4A:EC: 47:F7:9D:9B:C3:BF:07 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:53:10.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6E:51:4D:26:CD:56:78:A6:25:2C:68:1F: 30:54:6F:4A:97:70:DE:23:A8:C2:D7:48:63:18:6A:BE: D2:22:50:19:02:20:4D:A3:E2:B3:0E:D9:71:2E:2B:A2: F5:9A:9C:6E:48:6A:05:89:0F:A4:21:D2:FA:8D:AA:47: C1:6B:D2:4A:7E:EF Signature Algorithm: sha256WithRSAEncryption Signature Value: 1c:62:f9:8f:7e:39:82:f1:db:28:5d:f7:f5:22:26:95:6d:2a: c4:26:9c:98:a1:3d:4c:1f:bb:35:92:c5:fd:86:a8:66:77:41: 5d:bc:d3:e7:9a:74:67:59:93:3d:72:1c:43:90:76:73:76:23: b1:1c:dd:b1:f8:b8:b6:c6:81:f7:8e:58:7d:1a:80:e0:3b:b9: eb:90:99:c6:e0:3b:0c:a0:3b:c6:5d:a5:9d:0e:3b:70:8e:b9: 2a:37:5d:77:6d:d8:c5:80:9c:ff:34:41:98:21:89:78:c1:13: 85:1a:52:7b:36:6b:2b:6c:83:be:b4:30:2b:f3:96:69:57:61: 75:08:57:34:56:7d:f6:31:1b:95:58:e8:a1:0d:e7:0b:39:84: 5c:5c:80:8e:17:19:06:2f:fb:0e:48:06:db:05:a6:fc:35:32: 01:e7:f7:ae:2b:ec:bb:a7:fa:94:64:74:87:0e:d9:9f:8a:27: f7:7c:55:f5:49:2e:e2:a0:09:e1:56:f4:44:fc:0e:1f:c6:c3: a3:41:bf:1e:b5:69:87:80:fa:e4:11:3c:a2:fa:d8:46:b6:d7: 1f:9a:ff:d4:2d:b7:3c:57:02:89:df:ca:35:9d:f6:c4:cb:e5: f4:d0:12:ba:d0:07:35:ff:94:4c:5b:7c:97:f0:36:e1:86:ca: 75:17:83:32