-140860865 | 2024-09-07T00:31:38.234452
80 /
tcp
HTTP/1.1 302 Object moved
Cache-Control: private,private
Pragma: no-cache
Content-Length: 141
Content-Type: text/html
Expires: Sat, 07 Sep 2024 00:31:38 GMT
Location: https://www.sagit.cz
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDAQSDTCAD=GFEJEBBBOMBNDENCNMEINEGL; path=/
X-Powered-By: ASP.NET
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Date: Sat, 07 Sep 2024 00:31:38 GMT
-27234107 | 2024-09-10T08:53:09.004890
135 /
tcp
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 89.187.143.27:49152
ncalrpc: WindowsShutdown
ncacn_np: \\VELKY\PIPE\InitShutdown
ncalrpc: WMsgKRpc049E10
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\VELKY\PIPE\InitShutdown
ncalrpc: WMsgKRpc049E10
ncalrpc: WMsgKRpc049E91
ncalrpc: WMsgKRpc0344412
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-6e9ca9391cefe252a8
ncacn_np: \\VELKY\PIPE\srvsvc
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
24019106-a203-4642-b88d-82dae9158929
version: v1.0
provider: authui.dll
ncalrpc: LRPC-d49c06837904bf2d8a
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 89.187.143.27:49153
ncacn_np: \\VELKY\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 89.187.143.27:49153
ncacn_np: \\VELKY\pipe\eventlog
ncalrpc: eventlog
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncacn_ip_tcp: 89.187.143.27:49153
ncacn_np: \\VELKY\pipe\eventlog
ncalrpc: eventlog
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 89.187.143.27:49153
ncacn_np: \\VELKY\pipe\eventlog
ncalrpc: eventlog
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncacn_np: \\VELKY\PIPE\srvsvc
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 89.187.143.27:49155
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\VELKY\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: senssvc
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
provider: gpsvc.dll
ncalrpc: OLE99FDCDA4914D46C88B70061A54BB
ncalrpc: IUserProfile2
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\VELKY\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
ncalrpc: LRPC-e63a816f746b795563
ncalrpc: OLE7E55A0EEAEB24FC99BD1B9893D66
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-e63a816f746b795563
ncalrpc: OLE7E55A0EEAEB24FC99BD1B9893D66
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 89.187.143.27:49154
ncalrpc: samss lpc
ncalrpc: dsrole
ncacn_np: \\VELKY\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncalrpc: LRPC-eb0497f5d768e28838
ncacn_np: \\VELKY\pipe\lsass
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-3b9b05c0b82e388afd
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-3b9b05c0b82e388afd
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-3b9b05c0b82e388afd
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
annotation: Spooler function endpoint
provider: spoolsv.exe
ncalrpc: spoolss
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
annotation: Spooler base remote object endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
annotation: Spooler function endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
1a9134dd-7b39-45ba-ad88-44d01ca47f28
version: v1.0
annotation: Message Queuing - RemoteRead V1
protocol: [MS-MQRR]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 89.187.143.27:2105
ncacn_ip_tcp: 89.187.143.27:2103
ncacn_ip_tcp: 89.187.143.27:2107
ncacn_ip_tcp: 89.187.143.27:49156
ncalrpc: QMMgmtFacility$velky
ncalrpc: QMsvc$velky
1088a980-eae5-11d0-8d9b-00a02453c337
version: v1.0
annotation: Message Queuing - QM2QM V1
protocol: [MS-MQQP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 89.187.143.27:2105
ncacn_ip_tcp: 89.187.143.27:2103
ncacn_ip_tcp: 89.187.143.27:2107
ncacn_ip_tcp: 89.187.143.27:49156
ncalrpc: QMMgmtFacility$velky
ncalrpc: QMsvc$velky
76d12b80-3467-11d3-91ff-0090272f9ea3
version: v1.0
annotation: Message Queuing - QMRT V2
protocol: [MS-MQMP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 89.187.143.27:2105
ncacn_ip_tcp: 89.187.143.27:2103
ncacn_ip_tcp: 89.187.143.27:2107
ncacn_ip_tcp: 89.187.143.27:49156
ncalrpc: QMMgmtFacility$velky
ncalrpc: QMsvc$velky
fdb3a030-065f-11d1-bb9b-00a024ea5525
version: v1.0
annotation: Message Queuing - QMRT V1
protocol: [MS-MQMP]: Message Queuing (MSMQ):
provider: mqqm.dll
ncacn_ip_tcp: 89.187.143.27:2105
ncacn_ip_tcp: 89.187.143.27:2103
ncacn_ip_tcp: 89.187.143.27:2107
ncacn_ip_tcp: 89.187.143.27:49156
ncalrpc: QMMgmtFacility$velky
ncalrpc: QMsvc$velky
bfa951d1-2f0e-11d3-bfd1-00c04fa3490a
version: v1.0
provider: aqueue.dll
ncacn_ip_tcp: 89.187.143.27:49159
ncacn_np: \\VELKY\PIPE\SMTPSVC
ncacn_ip_tcp: 89.187.143.27:49158
ncalrpc: SMTPSVC_LPC
ncacn_np: \\VELKY\PIPE\INETINFO
ncacn_ip_tcp: 89.187.143.27:49157
ncalrpc: INETINFO_LPC
ncalrpc: OLE837FF5CD1DEB4B2D96B7B850155A
8cfb5d70-31a4-11cf-a7d8-00805f48a135
version: v3.0
provider: smtpsvc.dll
ncacn_np: \\VELKY\PIPE\SMTPSVC
ncacn_ip_tcp: 89.187.143.27:49158
ncalrpc: SMTPSVC_LPC
ncacn_np: \\VELKY\PIPE\INETINFO
ncacn_ip_tcp: 89.187.143.27:49157
ncalrpc: INETINFO_LPC
ncalrpc: OLE837FF5CD1DEB4B2D96B7B850155A
82ad4280-036b-11cf-972c-00aa006887b0
version: v2.0
protocol: [MS-IRP]: Internet Information Services (IIS) Inetinfo Remote
provider: infocomm.dll
ncacn_np: \\VELKY\PIPE\INETINFO
ncacn_ip_tcp: 89.187.143.27:49157
ncalrpc: INETINFO_LPC
ncalrpc: OLE837FF5CD1DEB4B2D96B7B850155A
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 89.187.143.27:49209
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: LRPC-e77470c6dbc2d909b4
76209fe5-9049-4336-ba84-632d907cb154
version: v1.0
annotation: Interprocess Logon Service
ncalrpc: ReportingServices$MSRS10.MSSQLSERVER
ncalrpc: OLE3E043E728B46458A99979075DCDF
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc0344412
f1ec59ab-4ca9-4c30-b2d0-54ef1db441b7
version: v1.0
annotation: Isolation Communication Endpoint
provider: iertutil.dll
ncalrpc: LRPC-f729f911ac79f1fce7
ncalrpc: OLE6A5297564CEC49A4850FC1B3C2BA
ncalrpc: LRPC-c711cdffdeaf914167
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-0c54045c045ed13848
ncalrpc: LRPC-0c54045c045ed13848
ncalrpc: LRPC-0c54045c045ed13848
ncalrpc: LRPC-0c54045c045ed13848
-252408195 | 2024-09-04T10:09:58.347774
443 /
tcp
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 48871
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: clankyric=4%2E9%2E2024+12%3A09%3A58; expires=Thu, 03-Oct-2024 22:00:00 GMT; domain=www.sagit.cz; path=/
Set-Cookie: clankynyniric=ano; path=/
Set-Cookie: key=20240904Yi41ZxJ343innAwu; expires=Wed, 03-Sep-2025 22:00:00 GMT; path=/
Set-Cookie: test=4%2E9%2E2024+12%3A09%3A58; path=/
Set-Cookie: ASPSESSIONIDCUQCTCBC=GLACIJHDNHMFHAKPCBIMMMBP; secure; path=/
X-Powered-By: ASP.NET
Date: Wed, 04 Sep 2024 10:09:58 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c9:76:05:8e:7b:71:ff:fb:2d:90:52:8f:6c:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1
Validity
Not Before: Mar 20 00:00:00 2024 GMT
Not After : Apr 20 23:59:59 2025 GMT
Subject: CN=*.sagit.cz
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ce:88:de:e2:e8:be:5f:0c:7c:3a:93:79:c7:68:
6f:d5:82:84:f5:41:ac:8e:3f:47:f4:66:23:f0:d0:
e8:a9:eb:0e:73:48:5a:a7:1e:57:3c:16:a6:cd:27:
34:c8:e2:6b:11:2a:75:c8:e5:d4:4d:da:a8:ee:d1:
c9:4f:3b:fc:93:1a:24:48:32:e1:89:a2:91:b4:3f:
b4:fa:51:d7:a1:f2:cd:15:8d:d0:71:be:ba:6b:68:
66:8e:eb:cd:85:c9:a7:80:b3:e3:b2:56:9f:8f:2b:
d1:ac:3e:5b:b2:5f:d3:3c:59:b9:77:16:05:87:55:
f6:14:a8:52:4e:6e:35:84:a7:77:f2:a2:5a:2f:3f:
4c:65:12:24:4a:1f:a1:ad:46:2e:24:bd:19:5c:33:
e3:a0:89:4a:f6:b4:36:a5:b6:79:20:8b:d8:e4:8c:
ae:d9:f0:e6:d0:23:e6:b2:29:47:06:ae:a9:7c:44:
f4:73:68:3c:46:1e:2e:65:ad:4e:1c:c2:c7:2e:1c:
bb:1c:e3:04:ef:76:8c:77:8d:6b:eb:26:99:c7:59:
db:52:87:a1:2c:65:1a:30:88:05:ce:70:9d:8a:ab:
72:f3:2b:c3:cd:2d:c0:70:02:99:3f:9a:0e:88:ac:
89:3f:5a:e2:08:5d:4e:1e:bc:ea:9c:c1:f2:4b:da:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
X509v3 Subject Key Identifier:
AB:BE:1A:24:42:25:04:69:BD:BA:6D:67:5E:DC:33:7B:0A:28:92:39
X509v3 Subject Alternative Name:
DNS:*.sagit.cz, DNS:sagit.cz
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
Authority Information Access:
OCSP - URI:http://status.rapidssl.com
CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Mar 20 09:14:55.909 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:9F:46:67:E8:00:D0:16:CF:FF:BC:52:
F5:1C:E2:A3:EA:06:4A:A5:C4:EC:16:FA:69:1A:3F:79:
E2:20:18:51:7D:02:21:00:EA:C9:21:3F:00:AC:E1:04:
85:91:E5:5A:A8:F4:49:84:8A:5F:D3:38:59:99:3E:B3:
11:EF:97:25:04:A2:39:0E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
Timestamp : Mar 20 09:14:55.845 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:BD:58:12:8F:0F:00:A6:1A:66:23:69:
FE:DB:22:18:19:4D:A5:D8:FE:BE:3A:44:25:E7:76:F6:
0D:5E:D0:05:38:02:20:38:C4:A3:46:58:50:2A:86:14:
A9:76:99:70:4B:63:8F:F5:80:05:C9:55:F6:96:75:1D:
E0:0F:FD:09:6F:C6:BB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Mar 20 09:14:55.871 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:63:09:66:6B:C5:23:5C:1C:58:EE:C6:2A:
FE:DC:24:F3:76:6B:90:09:A3:62:16:B1:28:A0:68:95:
C6:AE:63:90:02:21:00:B6:48:F5:4B:1B:68:D4:5B:AC:
4C:7B:92:44:FC:B5:8D:2E:7B:92:DB:57:1B:C2:59:DB:
12:6B:71:C1:14:87:B2
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
85:14:51:b2:3c:00:38:1c:3f:28:bc:6d:1a:3f:7d:64:af:c5:
24:32:f6:2e:f1:31:5a:aa:6e:bd:10:17:b6:97:11:75:60:0c:
42:cf:3d:ad:1d:2a:bb:29:16:21:8a:54:05:d0:b8:10:94:fb:
d0:67:ba:66:44:73:66:40:22:c1:ea:96:1c:27:b5:21:1a:21:
da:d6:64:3d:53:31:64:26:94:9a:89:f5:af:6b:35:bc:20:a6:
69:e5:e1:49:37:4d:fc:d1:d0:d4:bc:86:cd:54:f2:d5:f7:84:
83:cf:33:87:22:ed:0a:ef:ba:dd:af:76:3e:45:bc:e0:11:ef:
22:7b:1c:ba:d2:9a:eb:8c:3e:e2:42:38:86:85:b5:0d:46:d5:
11:e5:09:66:33:7d:f8:01:de:e6:2f:d9:f6:84:d6:94:0c:c4:
df:48:1f:29:d4:d7:58:93:cb:82:61:4c:77:2c:08:86:25:e9:
90:8e:86:60:8c:d4:9d:db:70:46:fa:ff:e4:04:c0:4d:2b:50:
46:8c:40:ed:fb:01:51:23:6b:78:8a:02:39:09:91:d0:d0:1b:
56:0b:c2:d2:c7:29:e3:85:00:df:ce:f0:0d:97:a8:f1:68:e3:
c4:54:06:af:e2:88:2a:b8:b2:ac:83:c9:01:30:5e:c2:73:65:
e7:8c:1b:45
