Hostnames |
autodiscover.aig.com mail.o365am.aig.com mail.o365eu.aig.com autodiscover.aig.onmicrosoft.com autodiscover.aig.mail.onmicrosoft.com namp115-provisioning.internal.outlook.com pod51118.outlook.com pod51118-pri.outlook.com pod51118ip.outlook.com pod51118psh.outlook.com pod51120.outlook.com pod51120-pri.outlook.com pod51120ip.outlook.com pod51120psh.outlook.com |
Domains | aig.com onmicrosoft.com outlook.com |
Country | Netherlands |
City | Amsterdam |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
-1876724102 | 2024-09-15T09:23:50.54257425 / tcp
220 AM8P115CA0003.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 15 Sep 2024 09:23:24 +0000 [08DCD478B6D7A177] 250-AM8P115CA0003.outlook.office365.com Hello [224.35.39.88] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e4:bb:59:74:c2:a9:7f:31:4e:e7:99:58:3b:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:51:54 2024 GMT Not After : Sep 4 17:51:53 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ea:18:43:a6:ed:65:a9:13:57:3a:2b:e5:d7:eb: 2d:53:cf:e0:48:cd:a1:dc:15:ae:ad:89:ea:73:da: d9:a1:da:cf:97:44:52:d5:79:79:65:50:57:d8:19: 8d:8c:a3:f8:e6:78:18:99:51:56:98:62:fb:97:bb: ce:13:d2:38:e6:d9:a2:4d:cd:b0:b0:27:cd:f1:d7: 14:ff:fa:99:8e:3d:36:83:a2:c1:53:fe:e9:aa:b9: ee:d2:0c:95:39:eb:79:f3:a3:74:6a:87:6c:86:ad: 32:d4:b7:3a:f0:5a:6c:47:dc:88:8d:4d:84:ae:ae: b2:2c:00:e7:ab:9b:04:da:3a:9c:f9:1c:96:1d:a2: 3d:73:bc:11:80:4b:f7:ad:a1:d6:ef:0f:2a:02:97: b0:45:dd:9b:c1:7d:56:5c:1e:e0:b3:72:85:b7:43: 66:57:38:d2:77:51:91:c1:ce:42:51:97:b4:b2:20: 19:b1:65:f9:ce:bb:64:55:98:e5:0c:c1:1d:1b:59: 4f:82:4d:cd:32:5d:3d:b7:69:b3:c2:ce:01:ce:73: 10:ce:a2:60:1d:fb:f7:86:1d:6c:20:69:60:09:f0: b2:da:ec:bb:d9:60:9c:21:23:78:e6:44:3a:fc:a9: fc:15:c5:5a:8f:84:31:b3:b8:a8:5e:f0:94:fb:0f: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: AE:D9:A3:06:14:FF:2B:34:08:34:16:3E:69:FC:42:53:1F:5C:3E:82 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:51:54.784 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:00:C0:29:61:27:BC:C1:FE:59:18: FA:8C:B2:88:A5:0F:50:8A:9C:05:E1:74:30:A5:F7:1D: 51:2B:77:D3:DA:02:21:00:97:73:24:72:DE:76:0D:7F: 94:5C:D2:D6:C7:6D:DB:FB:5B:6B:8C:16:50:79:40:0B: C1:DB:26:DA:3E:D2:DC:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:51:54.843 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A8:5C:94:58:B3:5D:A6:F9:D8:91:22: 65:A7:4F:62:55:EF:30:BE:32:E2:7E:F6:27:E0:8F:65: A1:17:0C:66:53:02:20:66:C6:73:26:9E:7A:3A:1E:1B: 22:0D:09:78:9B:94:51:CB:D0:78:E3:8E:AC:00:DB:C7: 59:87:52:F8:C8:94:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:51:54.855 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4E:39:E2:85:DC:0A:CE:16:C8:4A:17:67: DD:53:60:E9:D7:89:5C:78:89:FA:48:EE:81:42:2D:03: 4E:BF:55:B7:02:20:51:DB:D9:51:13:E0:6C:40:7E:5F: EA:6C:0A:39:15:8D:C0:1A:BF:DC:59:2C:1A:64:95:2D: 9B:12:CF:0C:22:0D Signature Algorithm: sha256WithRSAEncryption Signature Value: 85:5c:9b:4d:20:be:ab:e1:1f:99:81:6d:93:93:cb:99:72:cd: ce:a8:8a:5e:1a:85:2d:d3:f3:00:13:64:ee:8f:40:2f:df:91: e6:a6:bd:16:9b:ff:5b:6b:c5:74:c5:31:0b:2d:65:db:d3:82: 2b:ae:92:d3:4d:fb:85:29:af:af:00:2a:24:52:c7:28:bf:29: f5:62:eb:75:ef:03:1d:4e:fc:a4:41:92:ce:3f:b7:03:eb:6a: aa:b8:79:bf:41:0c:b0:e4:26:4f:1f:22:1e:5c:79:0f:c7:47: d8:b3:67:2b:53:02:d2:f5:4f:06:9f:18:de:e5:70:75:35:95: b7:a8:9a:63:c0:a5:80:d7:38:18:79:fd:63:78:b1:20:c4:4c: 56:71:fd:56:cf:a1:ad:8a:ec:45:35:17:e5:4f:65:9c:c8:07: f4:94:88:1b:33:5f:04:1c:a3:b6:d2:a1:f3:81:cc:7b:16:cd: fc:8e:34:49:13:e2:2c:47:47:27:cb:ef:a0:e1:df:7d:09:c3: 67:68:02:49:bd:92:f9:18:22:3b:36:98:19:15:b0:96:69:cf: 55:1a:f8:24:b5:49:54:97:e0:9b:1f:d7:5a:49:c9:53:67:9d: 8b:af:46:a9:a2:00:a2:43:9b:71:26:01:d3:19:9f:0e:1c:43: bf:6d:da:dc
461237475 | 2024-09-10T14:26:54.36794580 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.98.166.166/owa/ Server: Microsoft-IIS/10.0 request-id: 3e0e7dfb-1156-c80e-6058-e14c537b4cae X-FEServer: AM8P115CA0004 X-RequestId: 52c860f4-53be-4c2c-a566-4ba34bd87084 X-FEProxyInfo: AM8P115CA0004.NAMP115.PROD.OUTLOOK.COM X-FEEFZInfo: AMS MS-CV: +30OPlYRDshgWOFMU3tMrg.0 X-Powered-By: ASP.NET X-FEServer: AM8P115CA0004 Date: Tue, 10 Sep 2024 14:26:53 GMT Connection: close Content-Length: 0
-765752911 | 2024-09-13T15:48:27.439338110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QQBNADgAUAAxADEANQBDAEEAMAAwADAAMgAuAE4AQQBNAFAAMQAxADUALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e4:bb:59:74:c2:a9:7f:31:4e:e7:99:58:3b:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:51:54 2024 GMT Not After : Sep 4 17:51:53 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ea:18:43:a6:ed:65:a9:13:57:3a:2b:e5:d7:eb: 2d:53:cf:e0:48:cd:a1:dc:15:ae:ad:89:ea:73:da: d9:a1:da:cf:97:44:52:d5:79:79:65:50:57:d8:19: 8d:8c:a3:f8:e6:78:18:99:51:56:98:62:fb:97:bb: ce:13:d2:38:e6:d9:a2:4d:cd:b0:b0:27:cd:f1:d7: 14:ff:fa:99:8e:3d:36:83:a2:c1:53:fe:e9:aa:b9: ee:d2:0c:95:39:eb:79:f3:a3:74:6a:87:6c:86:ad: 32:d4:b7:3a:f0:5a:6c:47:dc:88:8d:4d:84:ae:ae: b2:2c:00:e7:ab:9b:04:da:3a:9c:f9:1c:96:1d:a2: 3d:73:bc:11:80:4b:f7:ad:a1:d6:ef:0f:2a:02:97: b0:45:dd:9b:c1:7d:56:5c:1e:e0:b3:72:85:b7:43: 66:57:38:d2:77:51:91:c1:ce:42:51:97:b4:b2:20: 19:b1:65:f9:ce:bb:64:55:98:e5:0c:c1:1d:1b:59: 4f:82:4d:cd:32:5d:3d:b7:69:b3:c2:ce:01:ce:73: 10:ce:a2:60:1d:fb:f7:86:1d:6c:20:69:60:09:f0: b2:da:ec:bb:d9:60:9c:21:23:78:e6:44:3a:fc:a9: fc:15:c5:5a:8f:84:31:b3:b8:a8:5e:f0:94:fb:0f: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: AE:D9:A3:06:14:FF:2B:34:08:34:16:3E:69:FC:42:53:1F:5C:3E:82 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:51:54.784 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:00:C0:29:61:27:BC:C1:FE:59:18: FA:8C:B2:88:A5:0F:50:8A:9C:05:E1:74:30:A5:F7:1D: 51:2B:77:D3:DA:02:21:00:97:73:24:72:DE:76:0D:7F: 94:5C:D2:D6:C7:6D:DB:FB:5B:6B:8C:16:50:79:40:0B: C1:DB:26:DA:3E:D2:DC:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:51:54.843 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A8:5C:94:58:B3:5D:A6:F9:D8:91:22: 65:A7:4F:62:55:EF:30:BE:32:E2:7E:F6:27:E0:8F:65: A1:17:0C:66:53:02:20:66:C6:73:26:9E:7A:3A:1E:1B: 22:0D:09:78:9B:94:51:CB:D0:78:E3:8E:AC:00:DB:C7: 59:87:52:F8:C8:94:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:51:54.855 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4E:39:E2:85:DC:0A:CE:16:C8:4A:17:67: DD:53:60:E9:D7:89:5C:78:89:FA:48:EE:81:42:2D:03: 4E:BF:55:B7:02:20:51:DB:D9:51:13:E0:6C:40:7E:5F: EA:6C:0A:39:15:8D:C0:1A:BF:DC:59:2C:1A:64:95:2D: 9B:12:CF:0C:22:0D Signature Algorithm: sha256WithRSAEncryption Signature Value: 85:5c:9b:4d:20:be:ab:e1:1f:99:81:6d:93:93:cb:99:72:cd: ce:a8:8a:5e:1a:85:2d:d3:f3:00:13:64:ee:8f:40:2f:df:91: e6:a6:bd:16:9b:ff:5b:6b:c5:74:c5:31:0b:2d:65:db:d3:82: 2b:ae:92:d3:4d:fb:85:29:af:af:00:2a:24:52:c7:28:bf:29: f5:62:eb:75:ef:03:1d:4e:fc:a4:41:92:ce:3f:b7:03:eb:6a: aa:b8:79:bf:41:0c:b0:e4:26:4f:1f:22:1e:5c:79:0f:c7:47: d8:b3:67:2b:53:02:d2:f5:4f:06:9f:18:de:e5:70:75:35:95: b7:a8:9a:63:c0:a5:80:d7:38:18:79:fd:63:78:b1:20:c4:4c: 56:71:fd:56:cf:a1:ad:8a:ec:45:35:17:e5:4f:65:9c:c8:07: f4:94:88:1b:33:5f:04:1c:a3:b6:d2:a1:f3:81:cc:7b:16:cd: fc:8e:34:49:13:e2:2c:47:47:27:cb:ef:a0:e1:df:7d:09:c3: 67:68:02:49:bd:92:f9:18:22:3b:36:98:19:15:b0:96:69:cf: 55:1a:f8:24:b5:49:54:97:e0:9b:1f:d7:5a:49:c9:53:67:9d: 8b:af:46:a9:a2:00:a2:43:9b:71:26:01:d3:19:9f:0e:1c:43: bf:6d:da:dc
-460348437 | 2024-09-11T11:06:30.306446143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QQBNADgAUAAxADEANQBDAEEAMAAwADAANAAuAE4AQQBNAFAAMQAxADUALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:e1:6e:f8:a5:64:2d:2a:a8:65:54:e9:50:82:9d Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:13:50 2024 GMT Not After : Jun 6 09:13:49 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:bf:11:b6:5f:71:f8:cd:0e:2f:f9:90:59:b3:7c: ef:8e:a3:9d:84:33:94:89:10:38:70:8c:c2:f7:e0: 31:f0:43:46:f9:47:bc:5e:20:54:31:58:ce:92:8a: 03:0b:b5:f6:7a:08:b2:5a:3a:6a:cb:91:22:63:72: cf:8d:cc:8b:81:63:df:b7:ed:77:24:68:87:6b:7c: ac:f9:ef:59:0c:1d:a2:60:b0:1b:85:d3:c4:d8:12: 26:98:45:f2:4d:7e:97:05:b4:87:a8:32:5b:14:38: fd:03:8a:9f:ba:2c:ca:bd:30:2c:5d:37:e8:03:2e: bf:d6:f1:24:29:94:e1:be:bb:ff:f3:0d:9b:a3:97: f6:0c:c4:e9:e6:af:4d:31:fd:21:03:9a:99:20:0e: 40:91:8b:5b:1d:d9:c9:53:91:04:52:48:53:f9:dc: 53:ed:c1:69:5d:fe:b9:3c:e3:c7:66:88:64:ab:a4: 70:67:7f:9b:af:98:d4:63:5f:ab:2e:b1:b9:23:56: bb:ca:f2:6e:c0:3e:6e:4a:2f:4c:97:db:8b:5e:c1: 45:c2:a5:9b:aa:fb:7f:5b:98:8f:75:71:b9:19:ab: 73:88:44:cc:ed:c1:82:8c:5c:8a:65:f6:32:70:4b: 03:df:e1:18:35:b0:50:83:21:cf:e8:df:fc:d0:61: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A9:AE:2E:EF:09:E1:45:E6:CB:0F:15:F1:9C:9F:09:9C:6E:B3:30:68 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1A:34:B3:00:E0:76:F6:C0:B1:E7:06:40: 13:B6:DF:89:D1:26:7E:63:E1:30:87:73:4F:50:C3:8C: 54:A6:1D:D2:02:21:00:C6:70:EA:60:52:78:8C:99:1C: 39:41:00:F2:72:8F:88:16:2B:37:75:71:CF:4A:A8:F3: C6:D1:5F:07:97:A5:8C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:5C:22:65:46:CB:A3:DF:B0:8E:36: A8:12:AC:97:C4:85:9B:E5:59:0D:4A:D7:41:25:38:9F: 36:4B:6B:E2:E5:02:20:0E:3E:D8:45:C4:6B:23:3E:FE: FA:AE:6C:EA:1D:A4:29:7B:2C:89:42:B4:F5:66:43:27: 69:57:B4:B1:16:E3:3E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:13:50.945 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:7F:C9:F1:FE:34:55:AD:C5:A7:03: 16:3F:62:3D:E5:E6:4E:45:83:81:84:FF:65:FC:E2:FB: 2B:C9:7A:6F:BC:02:21:00:AB:1A:A0:6B:27:43:D6:45: AB:83:9E:52:CB:FB:DC:4D:DF:DD:BC:6D:8F:8A:DD:81: DA:08:AF:87:F2:97:CC:40 Signature Algorithm: sha256WithRSAEncryption Signature Value: 96:f6:d1:42:7a:45:18:cb:93:d9:04:9e:10:60:94:17:84:2f: f0:c7:fc:62:44:9d:8a:6d:c2:d3:09:46:10:fc:31:52:63:39: 41:0e:f9:65:6f:6b:03:38:51:20:53:d3:4c:c8:1a:47:c3:9f: 0e:dc:bf:aa:07:ea:3b:a3:ce:22:e0:21:0c:61:be:aa:c8:94: a6:32:d0:4f:91:89:82:8e:4a:ff:cf:3b:f0:95:0f:40:89:0a: bf:bb:09:de:7a:36:3d:7a:85:c9:ab:98:67:24:41:cc:ba:ed: 29:69:6f:bd:bb:33:95:62:13:60:2a:e0:ac:0e:cd:09:14:2a: fa:db:80:10:dd:c5:b4:72:89:1f:70:a6:07:f5:3e:ca:41:de: 3a:c2:6f:23:ab:cb:ca:5f:8c:f7:9a:6d:fd:7a:95:2b:53:8a: 0d:eb:3d:05:97:7d:4e:c4:a7:16:2b:ac:9f:66:27:2a:00:ae: 78:3c:e9:1e:90:5c:cd:73:d1:9b:45:b2:57:b9:e4:72:1f:60: 20:a0:3b:7a:c6:c6:e8:a3:22:76:98:92:10:d3:4b:71:30:d9: 00:fc:d4:30:f1:cd:96:c3:b9:41:15:d0:9a:93:b9:8a:6b:6d: 60:5d:13:08:c7:7f:13:57:b7:21:cc:7c:ae:e8:ed:98:24:7f: 5f:a1:13:18
-2049027000 | 2024-09-17T18:22:08.145345443 / tcp
HTTP/1.1 302 Content-Length: 778 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f52.98.166.166%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=df52a5a0-5154-d752-3348-d279218d4707&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638621941276467594.6fc5e419-12d5-4601-a172-ee68c9c6b57f&state=Dcs7FoAgDABB0OdxIiTmQ46DCK2l1zfFbLc5pbSHLeQaSaZXU0JnJFNWE-dT15DJ6ID0CLBWhI5GMKe24UNvsZXjPcr79fID Server: Microsoft-IIS/10.0 request-id: df52a5a0-5154-d752-3348-d279218d4707 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: AM8P115MB0161.NAMP115.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=1EE023579F6F40258465EF58579D3139; expires=Wed, 17-Sep-2025 18:22:07 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=1EE023579F6F40258465EF58579D3139; expires=Wed, 17-Sep-2025 18:22:07 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Mon, 17-Mar-2025 18:22:07 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.u2WN-9Kuu7-kwpv3J82V5aU5tB5Pth_gSA9eUQB9aTo=638621941276467594.6fc5e419-12d5-4601-a172-ee68c9c6b57f; expires=Tue, 17-Sep-2024 19:22:07 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=1EE023579F6F40258465EF58579D3139; expires=Wed, 17-Sep-2025 18:22:07 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Mon, 17-Mar-2025 18:22:07 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.98.166.166; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.u2WN-9Kuu7-kwpv3J82V5aU5tB5Pth_gSA9eUQB9aTo=638621941276467594.6fc5e419-12d5-4601-a172-ee68c9c6b57f; expires=Tue, 17-Sep-2024 19:22:07 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 17-Sep-1994 18:22:07 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BiuGNo0XX3Ag; expires=Wed, 18-Sep-2024 00:24:07 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 6;0;0; X-BackEnd-Begin: 2024-09-17T18:22:07.631 X-BackEnd-End: 2024-09-17T18:22:07.646 X-DiagInfo: AM8P115MB0161 X-BEServer: AM8P115MB0161 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=AMS&RemoteIP=185.142.236.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: AMS X-FEProxyInfo: AM8P115CA0005.NAMP115.PROD.OUTLOOK.COM X-FEEFZInfo: AMS X-FEServer: AM8P115CA0005 Date: Tue, 17 Sep 2024 18:22:07 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e4:bb:59:74:c2:a9:7f:31:4e:e7:99:58:3b:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:51:54 2024 GMT Not After : Sep 4 17:51:53 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ea:18:43:a6:ed:65:a9:13:57:3a:2b:e5:d7:eb: 2d:53:cf:e0:48:cd:a1:dc:15:ae:ad:89:ea:73:da: d9:a1:da:cf:97:44:52:d5:79:79:65:50:57:d8:19: 8d:8c:a3:f8:e6:78:18:99:51:56:98:62:fb:97:bb: ce:13:d2:38:e6:d9:a2:4d:cd:b0:b0:27:cd:f1:d7: 14:ff:fa:99:8e:3d:36:83:a2:c1:53:fe:e9:aa:b9: ee:d2:0c:95:39:eb:79:f3:a3:74:6a:87:6c:86:ad: 32:d4:b7:3a:f0:5a:6c:47:dc:88:8d:4d:84:ae:ae: b2:2c:00:e7:ab:9b:04:da:3a:9c:f9:1c:96:1d:a2: 3d:73:bc:11:80:4b:f7:ad:a1:d6:ef:0f:2a:02:97: b0:45:dd:9b:c1:7d:56:5c:1e:e0:b3:72:85:b7:43: 66:57:38:d2:77:51:91:c1:ce:42:51:97:b4:b2:20: 19:b1:65:f9:ce:bb:64:55:98:e5:0c:c1:1d:1b:59: 4f:82:4d:cd:32:5d:3d:b7:69:b3:c2:ce:01:ce:73: 10:ce:a2:60:1d:fb:f7:86:1d:6c:20:69:60:09:f0: b2:da:ec:bb:d9:60:9c:21:23:78:e6:44:3a:fc:a9: fc:15:c5:5a:8f:84:31:b3:b8:a8:5e:f0:94:fb:0f: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: AE:D9:A3:06:14:FF:2B:34:08:34:16:3E:69:FC:42:53:1F:5C:3E:82 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:51:54.784 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:00:C0:29:61:27:BC:C1:FE:59:18: FA:8C:B2:88:A5:0F:50:8A:9C:05:E1:74:30:A5:F7:1D: 51:2B:77:D3:DA:02:21:00:97:73:24:72:DE:76:0D:7F: 94:5C:D2:D6:C7:6D:DB:FB:5B:6B:8C:16:50:79:40:0B: C1:DB:26:DA:3E:D2:DC:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:51:54.843 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A8:5C:94:58:B3:5D:A6:F9:D8:91:22: 65:A7:4F:62:55:EF:30:BE:32:E2:7E:F6:27:E0:8F:65: A1:17:0C:66:53:02:20:66:C6:73:26:9E:7A:3A:1E:1B: 22:0D:09:78:9B:94:51:CB:D0:78:E3:8E:AC:00:DB:C7: 59:87:52:F8:C8:94:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:51:54.855 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4E:39:E2:85:DC:0A:CE:16:C8:4A:17:67: DD:53:60:E9:D7:89:5C:78:89:FA:48:EE:81:42:2D:03: 4E:BF:55:B7:02:20:51:DB:D9:51:13:E0:6C:40:7E:5F: EA:6C:0A:39:15:8D:C0:1A:BF:DC:59:2C:1A:64:95:2D: 9B:12:CF:0C:22:0D Signature Algorithm: sha256WithRSAEncryption Signature Value: 85:5c:9b:4d:20:be:ab:e1:1f:99:81:6d:93:93:cb:99:72:cd: ce:a8:8a:5e:1a:85:2d:d3:f3:00:13:64:ee:8f:40:2f:df:91: e6:a6:bd:16:9b:ff:5b:6b:c5:74:c5:31:0b:2d:65:db:d3:82: 2b:ae:92:d3:4d:fb:85:29:af:af:00:2a:24:52:c7:28:bf:29: f5:62:eb:75:ef:03:1d:4e:fc:a4:41:92:ce:3f:b7:03:eb:6a: aa:b8:79:bf:41:0c:b0:e4:26:4f:1f:22:1e:5c:79:0f:c7:47: d8:b3:67:2b:53:02:d2:f5:4f:06:9f:18:de:e5:70:75:35:95: b7:a8:9a:63:c0:a5:80:d7:38:18:79:fd:63:78:b1:20:c4:4c: 56:71:fd:56:cf:a1:ad:8a:ec:45:35:17:e5:4f:65:9c:c8:07: f4:94:88:1b:33:5f:04:1c:a3:b6:d2:a1:f3:81:cc:7b:16:cd: fc:8e:34:49:13:e2:2c:47:47:27:cb:ef:a0:e1:df:7d:09:c3: 67:68:02:49:bd:92:f9:18:22:3b:36:98:19:15:b0:96:69:cf: 55:1a:f8:24:b5:49:54:97:e0:9b:1f:d7:5a:49:c9:53:67:9d: 8b:af:46:a9:a2:00:a2:43:9b:71:26:01:d3:19:9f:0e:1c:43: bf:6d:da:dc
1722913437 | 2024-09-09T23:47:31.594154587 / tcp
220 AM8P115CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 9 Sep 2024 23:47:19 +0000 [08DCD0848B2B428E] 250-AM8P115CA0005.outlook.office365.com Hello [224.151.29.153] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:e1:6e:f8:a5:64:2d:2a:a8:65:54:e9:50:82:9d Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:13:50 2024 GMT Not After : Jun 6 09:13:49 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:bf:11:b6:5f:71:f8:cd:0e:2f:f9:90:59:b3:7c: ef:8e:a3:9d:84:33:94:89:10:38:70:8c:c2:f7:e0: 31:f0:43:46:f9:47:bc:5e:20:54:31:58:ce:92:8a: 03:0b:b5:f6:7a:08:b2:5a:3a:6a:cb:91:22:63:72: cf:8d:cc:8b:81:63:df:b7:ed:77:24:68:87:6b:7c: ac:f9:ef:59:0c:1d:a2:60:b0:1b:85:d3:c4:d8:12: 26:98:45:f2:4d:7e:97:05:b4:87:a8:32:5b:14:38: fd:03:8a:9f:ba:2c:ca:bd:30:2c:5d:37:e8:03:2e: bf:d6:f1:24:29:94:e1:be:bb:ff:f3:0d:9b:a3:97: f6:0c:c4:e9:e6:af:4d:31:fd:21:03:9a:99:20:0e: 40:91:8b:5b:1d:d9:c9:53:91:04:52:48:53:f9:dc: 53:ed:c1:69:5d:fe:b9:3c:e3:c7:66:88:64:ab:a4: 70:67:7f:9b:af:98:d4:63:5f:ab:2e:b1:b9:23:56: bb:ca:f2:6e:c0:3e:6e:4a:2f:4c:97:db:8b:5e:c1: 45:c2:a5:9b:aa:fb:7f:5b:98:8f:75:71:b9:19:ab: 73:88:44:cc:ed:c1:82:8c:5c:8a:65:f6:32:70:4b: 03:df:e1:18:35:b0:50:83:21:cf:e8:df:fc:d0:61: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A9:AE:2E:EF:09:E1:45:E6:CB:0F:15:F1:9C:9F:09:9C:6E:B3:30:68 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1A:34:B3:00:E0:76:F6:C0:B1:E7:06:40: 13:B6:DF:89:D1:26:7E:63:E1:30:87:73:4F:50:C3:8C: 54:A6:1D:D2:02:21:00:C6:70:EA:60:52:78:8C:99:1C: 39:41:00:F2:72:8F:88:16:2B:37:75:71:CF:4A:A8:F3: C6:D1:5F:07:97:A5:8C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:5C:22:65:46:CB:A3:DF:B0:8E:36: A8:12:AC:97:C4:85:9B:E5:59:0D:4A:D7:41:25:38:9F: 36:4B:6B:E2:E5:02:20:0E:3E:D8:45:C4:6B:23:3E:FE: FA:AE:6C:EA:1D:A4:29:7B:2C:89:42:B4:F5:66:43:27: 69:57:B4:B1:16:E3:3E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:13:50.945 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:7F:C9:F1:FE:34:55:AD:C5:A7:03: 16:3F:62:3D:E5:E6:4E:45:83:81:84:FF:65:FC:E2:FB: 2B:C9:7A:6F:BC:02:21:00:AB:1A:A0:6B:27:43:D6:45: AB:83:9E:52:CB:FB:DC:4D:DF:DD:BC:6D:8F:8A:DD:81: DA:08:AF:87:F2:97:CC:40 Signature Algorithm: sha256WithRSAEncryption Signature Value: 96:f6:d1:42:7a:45:18:cb:93:d9:04:9e:10:60:94:17:84:2f: f0:c7:fc:62:44:9d:8a:6d:c2:d3:09:46:10:fc:31:52:63:39: 41:0e:f9:65:6f:6b:03:38:51:20:53:d3:4c:c8:1a:47:c3:9f: 0e:dc:bf:aa:07:ea:3b:a3:ce:22:e0:21:0c:61:be:aa:c8:94: a6:32:d0:4f:91:89:82:8e:4a:ff:cf:3b:f0:95:0f:40:89:0a: bf:bb:09:de:7a:36:3d:7a:85:c9:ab:98:67:24:41:cc:ba:ed: 29:69:6f:bd:bb:33:95:62:13:60:2a:e0:ac:0e:cd:09:14:2a: fa:db:80:10:dd:c5:b4:72:89:1f:70:a6:07:f5:3e:ca:41:de: 3a:c2:6f:23:ab:cb:ca:5f:8c:f7:9a:6d:fd:7a:95:2b:53:8a: 0d:eb:3d:05:97:7d:4e:c4:a7:16:2b:ac:9f:66:27:2a:00:ae: 78:3c:e9:1e:90:5c:cd:73:d1:9b:45:b2:57:b9:e4:72:1f:60: 20:a0:3b:7a:c6:c6:e8:a3:22:76:98:92:10:d3:4b:71:30:d9: 00:fc:d4:30:f1:cd:96:c3:b9:41:15:d0:9a:93:b9:8a:6b:6d: 60:5d:13:08:c7:7f:13:57:b7:21:cc:7c:ae:e8:ed:98:24:7f: 5f:a1:13:18
676572273 | 2024-09-18T01:44:28.817404993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QQBNADgAUAAxADEANQBDAEEAMAAwADAAMgAuAE4AQQBNAFAAMQAxADUALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e4:bb:59:74:c2:a9:7f:31:4e:e7:99:58:3b:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:51:54 2024 GMT Not After : Sep 4 17:51:53 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ea:18:43:a6:ed:65:a9:13:57:3a:2b:e5:d7:eb: 2d:53:cf:e0:48:cd:a1:dc:15:ae:ad:89:ea:73:da: d9:a1:da:cf:97:44:52:d5:79:79:65:50:57:d8:19: 8d:8c:a3:f8:e6:78:18:99:51:56:98:62:fb:97:bb: ce:13:d2:38:e6:d9:a2:4d:cd:b0:b0:27:cd:f1:d7: 14:ff:fa:99:8e:3d:36:83:a2:c1:53:fe:e9:aa:b9: ee:d2:0c:95:39:eb:79:f3:a3:74:6a:87:6c:86:ad: 32:d4:b7:3a:f0:5a:6c:47:dc:88:8d:4d:84:ae:ae: b2:2c:00:e7:ab:9b:04:da:3a:9c:f9:1c:96:1d:a2: 3d:73:bc:11:80:4b:f7:ad:a1:d6:ef:0f:2a:02:97: b0:45:dd:9b:c1:7d:56:5c:1e:e0:b3:72:85:b7:43: 66:57:38:d2:77:51:91:c1:ce:42:51:97:b4:b2:20: 19:b1:65:f9:ce:bb:64:55:98:e5:0c:c1:1d:1b:59: 4f:82:4d:cd:32:5d:3d:b7:69:b3:c2:ce:01:ce:73: 10:ce:a2:60:1d:fb:f7:86:1d:6c:20:69:60:09:f0: b2:da:ec:bb:d9:60:9c:21:23:78:e6:44:3a:fc:a9: fc:15:c5:5a:8f:84:31:b3:b8:a8:5e:f0:94:fb:0f: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: AE:D9:A3:06:14:FF:2B:34:08:34:16:3E:69:FC:42:53:1F:5C:3E:82 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:51:54.784 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:00:C0:29:61:27:BC:C1:FE:59:18: FA:8C:B2:88:A5:0F:50:8A:9C:05:E1:74:30:A5:F7:1D: 51:2B:77:D3:DA:02:21:00:97:73:24:72:DE:76:0D:7F: 94:5C:D2:D6:C7:6D:DB:FB:5B:6B:8C:16:50:79:40:0B: C1:DB:26:DA:3E:D2:DC:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:51:54.843 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A8:5C:94:58:B3:5D:A6:F9:D8:91:22: 65:A7:4F:62:55:EF:30:BE:32:E2:7E:F6:27:E0:8F:65: A1:17:0C:66:53:02:20:66:C6:73:26:9E:7A:3A:1E:1B: 22:0D:09:78:9B:94:51:CB:D0:78:E3:8E:AC:00:DB:C7: 59:87:52:F8:C8:94:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 4 17:51:54.855 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4E:39:E2:85:DC:0A:CE:16:C8:4A:17:67: DD:53:60:E9:D7:89:5C:78:89:FA:48:EE:81:42:2D:03: 4E:BF:55:B7:02:20:51:DB:D9:51:13:E0:6C:40:7E:5F: EA:6C:0A:39:15:8D:C0:1A:BF:DC:59:2C:1A:64:95:2D: 9B:12:CF:0C:22:0D Signature Algorithm: sha256WithRSAEncryption Signature Value: 85:5c:9b:4d:20:be:ab:e1:1f:99:81:6d:93:93:cb:99:72:cd: ce:a8:8a:5e:1a:85:2d:d3:f3:00:13:64:ee:8f:40:2f:df:91: e6:a6:bd:16:9b:ff:5b:6b:c5:74:c5:31:0b:2d:65:db:d3:82: 2b:ae:92:d3:4d:fb:85:29:af:af:00:2a:24:52:c7:28:bf:29: f5:62:eb:75:ef:03:1d:4e:fc:a4:41:92:ce:3f:b7:03:eb:6a: aa:b8:79:bf:41:0c:b0:e4:26:4f:1f:22:1e:5c:79:0f:c7:47: d8:b3:67:2b:53:02:d2:f5:4f:06:9f:18:de:e5:70:75:35:95: b7:a8:9a:63:c0:a5:80:d7:38:18:79:fd:63:78:b1:20:c4:4c: 56:71:fd:56:cf:a1:ad:8a:ec:45:35:17:e5:4f:65:9c:c8:07: f4:94:88:1b:33:5f:04:1c:a3:b6:d2:a1:f3:81:cc:7b:16:cd: fc:8e:34:49:13:e2:2c:47:47:27:cb:ef:a0:e1:df:7d:09:c3: 67:68:02:49:bd:92:f9:18:22:3b:36:98:19:15:b0:96:69:cf: 55:1a:f8:24:b5:49:54:97:e0:9b:1f:d7:5a:49:c9:53:67:9d: 8b:af:46:a9:a2:00:a2:43:9b:71:26:01:d3:19:9f:0e:1c:43: bf:6d:da:dc
-116460240 | 2024-09-09T19:00:16.672960995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QQBNADgAUAAxADEANQBDAEEAMAAwADAAMwAuAE4AQQBNAFAAMQAxADUALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:e1:6e:f8:a5:64:2d:2a:a8:65:54:e9:50:82:9d Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:13:50 2024 GMT Not After : Jun 6 09:13:49 2025 GMT Subject: C=US, ST=Texas, L=Fort Worth, O=American International Group, Inc., CN=mail.o365am.aig.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:bf:11:b6:5f:71:f8:cd:0e:2f:f9:90:59:b3:7c: ef:8e:a3:9d:84:33:94:89:10:38:70:8c:c2:f7:e0: 31:f0:43:46:f9:47:bc:5e:20:54:31:58:ce:92:8a: 03:0b:b5:f6:7a:08:b2:5a:3a:6a:cb:91:22:63:72: cf:8d:cc:8b:81:63:df:b7:ed:77:24:68:87:6b:7c: ac:f9:ef:59:0c:1d:a2:60:b0:1b:85:d3:c4:d8:12: 26:98:45:f2:4d:7e:97:05:b4:87:a8:32:5b:14:38: fd:03:8a:9f:ba:2c:ca:bd:30:2c:5d:37:e8:03:2e: bf:d6:f1:24:29:94:e1:be:bb:ff:f3:0d:9b:a3:97: f6:0c:c4:e9:e6:af:4d:31:fd:21:03:9a:99:20:0e: 40:91:8b:5b:1d:d9:c9:53:91:04:52:48:53:f9:dc: 53:ed:c1:69:5d:fe:b9:3c:e3:c7:66:88:64:ab:a4: 70:67:7f:9b:af:98:d4:63:5f:ab:2e:b1:b9:23:56: bb:ca:f2:6e:c0:3e:6e:4a:2f:4c:97:db:8b:5e:c1: 45:c2:a5:9b:aa:fb:7f:5b:98:8f:75:71:b9:19:ab: 73:88:44:cc:ed:c1:82:8c:5c:8a:65:f6:32:70:4b: 03:df:e1:18:35:b0:50:83:21:cf:e8:df:fc:d0:61: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A9:AE:2E:EF:09:E1:45:E6:CB:0F:15:F1:9C:9F:09:9C:6E:B3:30:68 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:mail.o365am.aig.com, DNS:*.pod51118.outlook.com, DNS:*.pod51120.outlook.com, DNS:autodiscover.aig.com, DNS:autodiscover.aig.mail.onmicrosoft.com, DNS:autodiscover.aig.onmicrosoft.com, DNS:mail.o365eu.aig.com, DNS:namp115-provisioning.internal.outlook.com, DNS:pod51118.outlook.com, DNS:pod51118ip.outlook.com, DNS:pod51118-pri.outlook.com, DNS:pod51118psh.outlook.com, DNS:pod51120.outlook.com, DNS:pod51120ip.outlook.com, DNS:pod51120-pri.outlook.com, DNS:pod51120psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1A:34:B3:00:E0:76:F6:C0:B1:E7:06:40: 13:B6:DF:89:D1:26:7E:63:E1:30:87:73:4F:50:C3:8C: 54:A6:1D:D2:02:21:00:C6:70:EA:60:52:78:8C:99:1C: 39:41:00:F2:72:8F:88:16:2B:37:75:71:CF:4A:A8:F3: C6:D1:5F:07:97:A5:8C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D: 0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04 Timestamp : Jun 6 09:13:50.927 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:5C:22:65:46:CB:A3:DF:B0:8E:36: A8:12:AC:97:C4:85:9B:E5:59:0D:4A:D7:41:25:38:9F: 36:4B:6B:E2:E5:02:20:0E:3E:D8:45:C4:6B:23:3E:FE: FA:AE:6C:EA:1D:A4:29:7B:2C:89:42:B4:F5:66:43:27: 69:57:B4:B1:16:E3:3E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:13:50.945 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:7F:C9:F1:FE:34:55:AD:C5:A7:03: 16:3F:62:3D:E5:E6:4E:45:83:81:84:FF:65:FC:E2:FB: 2B:C9:7A:6F:BC:02:21:00:AB:1A:A0:6B:27:43:D6:45: AB:83:9E:52:CB:FB:DC:4D:DF:DD:BC:6D:8F:8A:DD:81: DA:08:AF:87:F2:97:CC:40 Signature Algorithm: sha256WithRSAEncryption Signature Value: 96:f6:d1:42:7a:45:18:cb:93:d9:04:9e:10:60:94:17:84:2f: f0:c7:fc:62:44:9d:8a:6d:c2:d3:09:46:10:fc:31:52:63:39: 41:0e:f9:65:6f:6b:03:38:51:20:53:d3:4c:c8:1a:47:c3:9f: 0e:dc:bf:aa:07:ea:3b:a3:ce:22:e0:21:0c:61:be:aa:c8:94: a6:32:d0:4f:91:89:82:8e:4a:ff:cf:3b:f0:95:0f:40:89:0a: bf:bb:09:de:7a:36:3d:7a:85:c9:ab:98:67:24:41:cc:ba:ed: 29:69:6f:bd:bb:33:95:62:13:60:2a:e0:ac:0e:cd:09:14:2a: fa:db:80:10:dd:c5:b4:72:89:1f:70:a6:07:f5:3e:ca:41:de: 3a:c2:6f:23:ab:cb:ca:5f:8c:f7:9a:6d:fd:7a:95:2b:53:8a: 0d:eb:3d:05:97:7d:4e:c4:a7:16:2b:ac:9f:66:27:2a:00:ae: 78:3c:e9:1e:90:5c:cd:73:d1:9b:45:b2:57:b9:e4:72:1f:60: 20:a0:3b:7a:c6:c6:e8:a3:22:76:98:92:10:d3:4b:71:30:d9: 00:fc:d4:30:f1:cd:96:c3:b9:41:15:d0:9a:93:b9:8a:6b:6d: 60:5d:13:08:c7:7f:13:57:b7:21:cc:7c:ae:e8:ed:98:24:7f: 5f:a1:13:18