| Hostnames |
autodiscover.nutrin.cz remote.nutrin.cz |
| Domains | nutrin.cz |
| Country | Czechia |
| City | Prague |
| Organization | O2 Czech Republic, a.s. |
| ISP | O2 Czech Republic, a.s. |
| ASN | AS5610 |
| Operating System | Windows |
HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: 85e6e386-bf53-445f-8267-364457991aec X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Fri, 21 Mar 2025 10:35:40 GMT Content-Length: 58705 Microsoft Exchange: Name: Exchange Server 2019 CU12 Nov23SU Build Number: 15.2.1118.40 Build Date: November 14, 2023
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:de:c4:ab:c1:9e:b0:53:2e:8b:b8:37:6c:9a:a4:ad:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R11
Validity
Not Before: Mar 21 08:56:58 2025 GMT
Not After : Jun 19 08:56:57 2025 GMT
Subject: CN=remote.nutrin.cz
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:a8:49:7f:6f:ff:68:87:4d:0a:39:56:fe:70:91:
be:72:2b:43:ba:6e:ed:f8:d8:18:ab:c1:65:46:0d:
92:10:3b:4c:54:8c:9a:91:04:61:5e:92:67:58:aa:
d9:bc:00:79:f6:6b:ec:c3:fc:ba:69:96:42:d8:53:
f0:48:0d:67:0a:6f:0e:c3:74:35:ef:67:8b:d7:26:
ab:7e:15:78:cf:9e:0c:24:a0:6c:e2:72:4f:be:36:
55:90:bc:ad:ff:dd:03:12:5e:f2:a0:31:99:59:fa:
1f:79:52:f5:66:59:8f:7a:bc:c8:a1:b8:c9:49:97:
8a:fd:8c:34:18:38:44:ea:10:f5:44:6c:98:b0:49:
6d:20:b3:77:64:13:8e:98:c3:96:53:4e:87:58:a8:
ea:6c:e5:81:95:f1:a9:12:b8:af:5c:63:e9:e7:b8:
50:b8:11:02:2d:b8:95:04:13:81:7d:a1:59:17:11:
09:2a:c3:03:93:f0:2d:96:2a:f6:ca:de:6c:b9:f5:
59:d3:13:2e:7c:45:f1:83:05:14:63:f2:ae:1f:ec:
99:21:ca:90:40:f2:f1:f3:41:1c:cc:84:68:94:40:
d5:75:7a:71:d9:33:b8:71:94:9e:34:11:38:67:76:
95:a9:22:59:95:e2:ee:53:c8:85:d3:6a:f1:a2:24:
f9:59:e8:4d:8c:74:e7:f7:80:6f:61:76:8f:8a:eb:
39:aa:c5:8e:09:b4:f8:ed:36:d8:44:8d:bc:9b:c5:
cf:d6:ff:1b:16:bf:2a:f7:d3:0c:9e:a5:69:38:8b:
24:bd:b1:08:89:54:65:2e:56:07:f4:fc:29:69:1f:
1c:61:c7:d3:06:0c:f8:e5:7f:a5:40:e0:c4:d6:b2:
9a:43:cc:df:48:d9:4f:88:34:19:24:dc:76:1f:56:
20:f4:fa:5b:a7:fd:f1:e5:a9:3f:f6:f5:5e:8a:28:
d4:5c:35:32:49:78:75:e8:99:0e:20:62:61:ad:b6:
39:8f:46:21:41:9f:73:c8:93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
53:EE:79:BA:F4:CF:C9:6B:F0:D6:CB:11:CB:31:54:E2:16:EA:3A:9B
X509v3 Authority Key Identifier:
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
Authority Information Access:
OCSP - URI:http://r11.o.lencr.org
CA Issuers - URI:http://r11.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:autodiscover.nutrin.cz, DNS:remote.nutrin.cz
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r11.c.lencr.org/70.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Mar 21 09:55:28.930 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B4:0D:CD:08:BF:D4:CF:60:E7:A6:4A:
FF:B0:4F:E8:4F:8F:BD:22:10:72:14:B6:E3:D1:F8:81:
CB:84:34:9D:05:02:21:00:E9:83:4A:E1:38:8B:1C:AE:
31:22:48:81:DE:65:99:ED:E6:B4:E2:0B:44:86:B1:EE:
76:5A:55:DA:4D:4A:BE:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Mar 21 09:55:28.949 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:12:E7:74:89:BE:47:1C:8E:15:1D:C9:BD:
10:80:B0:A4:E2:81:51:E0:63:68:6B:63:71:35:06:AF:
58:4F:72:19:02:20:60:FC:F8:ED:D8:85:97:E4:D1:4B:
D6:F5:B4:A9:A2:0C:C9:18:76:27:86:92:6B:B3:12:0B:
7B:3F:47:14:88:CF
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
30:d2:95:2d:62:9f:9f:7f:92:a1:9d:b4:a9:84:58:c8:99:d1:
f8:da:be:e7:f2:41:ac:0a:3a:c0:78:bd:5d:0b:7c:63:07:ef:
15:10:be:fd:6b:c3:b1:29:5f:8d:a0:e8:9d:80:2c:56:07:33:
e6:ad:27:ff:c0:9d:91:66:7c:66:e0:45:d6:a3:33:b9:cd:58:
9e:02:03:9d:d4:9f:58:22:a7:db:66:0d:5f:ea:cd:b3:20:90:
88:e6:19:cc:c7:43:28:fe:78:75:cd:a2:15:49:92:25:ef:09:
45:fa:48:28:99:4b:f9:71:3b:a1:43:26:46:6e:ed:55:34:89:
64:16:d4:7d:37:31:c6:fb:06:4b:b8:1e:3e:dd:e0:40:85:7a:
72:d3:88:d7:7a:91:82:b4:37:6e:96:c6:91:d3:1c:d9:41:c7:
18:af:fc:8d:b6:06:65:fa:6f:02:86:dd:b0:0c:90:8e:2c:65:
32:24:b5:f0:01:ad:f7:50:d4:d5:61:38:e5:0a:7a:e8:1e:82:
c5:ce:47:81:41:28:ad:da:8c:d4:8c:9f:31:69:37:35:d9:97:
ac:7f:3e:0f:57:9b:a9:60:f3:2f:6b:54:8c:35:27:7a:dd:c6:
d8:41:2d:9c:35:77:aa:be:16:13:24:a8:37:d0:53:39:f3:cb:
a3:c7:9c:28
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 10 (version 2004)/Windows Server (version 2004) OS Build: 10.0.19041 Target Name: NUTRIN-KAMERY NetBIOS Domain Name: NUTRIN-KAMERY NetBIOS Computer Name: NUTRIN-KAMERY DNS Domain Name: nutrin-kamery FQDN: nutrin-kamery All your valiable data has been encrypted! Hello! Sorry, but we have inform you that your order has been blocked due to the issue of securities. Make sure your data is not blocked. All your valuable files were encrypted with strong encryption algorithms AES-256 4 RSA-2048 CHACHA and renamed. You can read about these algorithms in Google. Your unique encryption key is stored securely on our server and your data can be decrypted quickly and securely. We can prove that we can decrypt all of your data. Please just send us 3 small encrypted files which are randomly stored on your server. We will decrypt these files and send them to you as a proof. Please note that files for free test decryption should not contain valuable information. As you know information is the most valuable resource in the world. Thats why all of your confidential data was uploaded to our servers. If you will not start a dialogue with us in 72 hours we will be forced to publish your files in the Darknet. Your customers and partners will be informed about the data leak by email or phone. This way, your reputation will be ruined. If you will not react, we will be forced to sell the most important information such as databases to interested parties to generate some profit. Please understand that we are just doing our job. We dont want to harm your company. Think of this incident as an opportunity to improve your security. We are opened for dialogue and ready to help you. We are professionals, please dont try to fool us. Out contacts If you want to resolve this situation, please write here: Pi asta aa
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:37:cf:ec:17:b7:a3:4b:6c:95:7e:31:c9:83:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=nutrin-kamery
Validity
Not Before: Nov 11 00:05:24 2024 GMT
Not After : May 13 00:05:24 2025 GMT
Subject: CN=nutrin-kamery
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bc:60:e7:53:51:e4:0e:fb:9e:9f:47:4f:a7:b0:
f8:f9:7d:5b:10:b6:6e:dd:93:29:68:6e:6c:36:a4:
4c:67:86:2e:cd:0e:8b:a3:0f:70:19:f4:48:a3:f7:
80:e3:b7:d6:67:55:20:05:68:f9:99:76:5d:5c:81:
d4:6a:4d:02:39:ea:58:10:4a:e1:b0:a4:fd:a9:39:
fb:09:a6:97:96:2c:3b:fd:7d:bc:55:03:49:ce:13:
be:c3:3e:f6:68:4a:71:31:1b:df:1c:6e:c2:b1:45:
e5:eb:67:bd:d6:2f:78:23:1f:19:af:32:f8:5c:21:
ac:45:8d:ca:73:87:24:f3:a1:9c:18:9d:25:fd:3b:
91:23:8a:82:a0:9b:f5:bc:8c:11:5d:bd:43:53:70:
67:af:b1:42:19:6c:b3:1f:ae:03:dd:a1:cc:ec:69:
f4:de:7d:e8:19:3f:ca:3b:38:23:e7:f2:7c:11:9f:
ef:05:2e:2f:9a:c1:d3:69:f5:8b:11:86:bf:5e:17:
58:21:99:13:57:c2:83:82:b0:e0:f3:ac:bb:ef:86:
69:aa:c0:79:13:58:f2:9c:6e:f7:26:c0:54:89:9e:
20:e6:b8:8f:f3:ac:83:e5:07:22:c4:9d:16:48:4a:
1d:78:42:21:01:55:78:c3:d5:8c:b9:e1:df:9d:96:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3f:af:1d:e1:3f:60:26:0c:0e:1b:88:7a:16:d3:5d:c6:eb:85:
28:54:23:dd:2d:1b:d6:11:3c:c2:8b:8d:b2:88:44:57:01:c6:
61:c1:e4:3d:7e:30:7d:ec:3f:22:11:3f:5f:21:c4:3f:05:35:
85:f6:98:4d:62:67:2f:02:e1:79:82:b8:b2:46:15:51:63:21:
40:49:ed:31:10:11:ad:43:c6:aa:ab:f3:1f:73:88:da:e7:33:
67:c1:d4:4e:29:5f:ef:4b:a6:61:08:42:5b:9c:56:6d:62:8a:
c2:81:77:24:9c:f6:cf:7d:ac:da:12:ba:a6:8b:af:3b:ae:ac:
a7:99:fd:36:1f:97:78:7f:e8:0e:c9:21:02:b3:0f:85:82:41:
25:fb:e7:7f:a4:46:2e:e0:fe:be:9a:e3:da:03:40:e4:80:e9:
8f:5c:ff:83:33:1b:0d:8e:cb:34:98:3a:f8:13:9d:1c:43:dc:
20:68:c2:75:06:47:f5:e1:6b:7e:c6:91:ae:eb:1c:5e:9d:4c:
81:5e:3e:8f:ef:12:1e:7b:dc:b5:5d:20:9e:a3:cb:62:1e:44:
8a:23:e8:b5:35:6d:83:1d:3e:87:7a:fe:85:39:d4:71:83:a7:
3e:3d:f8:b2:b5:32:6e:70:58:54:6a:d7:1b:04:de:75:49:45:
58:28:2e:34