25 /
tcp
-1489937291 | 2025-02-04T07:34:21.851773
220 mail.frostyserver.com
250-mail.frostyserver.com Hello [224.51.245.127]
250-SIZE 52428800
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 OK
26 /
tcp
-2032422440 | 2025-01-30T07:54:45.173374
220 mail.frostyserver.com\r\n
-827624346 | 2025-02-04T01:04:05.520002
<empty title>
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 04 Feb 2025 01:04:05 GMT
Content-Length: 4958
135 /
tcp
-2072157111 | 2025-02-01T21:34:55.510345
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 96.44.149.195:49152
ncalrpc: WindowsShutdown
ncacn_np: \\HFESTMAIL2\PIPE\InitShutdown
ncalrpc: WMsgKRpc095870
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\HFESTMAIL2\PIPE\InitShutdown
ncalrpc: WMsgKRpc095870
ncalrpc: WMsgKRpc096541
ncalrpc: WMsgKRpc01F22BC42
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-d797ca825a0432716d
ncalrpc: actkernel
ncalrpc: umpo
ncacn_np: \\HFESTMAIL2\PIPE\srvsvc
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncalrpc: dhcpcsvc
ncalrpc: LRPC-994b06f08d1ce849cc
ncacn_ip_tcp: 96.44.149.195:49153
ncacn_np: \\HFESTMAIL2\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: LRPC-994b06f08d1ce849cc
ncacn_ip_tcp: 96.44.149.195:49153
ncacn_np: \\HFESTMAIL2\pipe\eventlog
ncalrpc: eventlog
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-994b06f08d1ce849cc
ncacn_ip_tcp: 96.44.149.195:49153
ncacn_np: \\HFESTMAIL2\pipe\eventlog
ncalrpc: eventlog
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 96.44.149.195:49153
ncacn_np: \\HFESTMAIL2\pipe\eventlog
ncalrpc: eventlog
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-37c98e4c14a8cdf18c
ncacn_np: \\HFESTMAIL2\PIPE\srvsvc
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 96.44.149.195:49155
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\HFESTMAIL2\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: senssvc
ncalrpc: OLE7CD5BC50A874550C0B9E8FD35A71
ncalrpc: IUserProfile2
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
annotation: Group Policy RPC Interface
provider: gpsvc.dll
ncalrpc: LRPC-40c3c62db151b0d4ff
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc096541
ncalrpc: WMsgKRpc01F22BC42
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\HFESTMAIL2\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
ncalrpc: LRPC-f85b0e8754d0391a55
ncalrpc: OLE287D1D9CE01FB4BB1E8B285685D6
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-f85b0e8754d0391a55
ncalrpc: OLE287D1D9CE01FB4BB1E8B285685D6
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 96.44.149.195:49154
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\HFESTMAIL2\pipe\lsass
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-295555bf985df6cc05
ncalrpc: LRPC-6077c3a43cad4b071a
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-295555bf985df6cc05
ncalrpc: LRPC-6077c3a43cad4b071a
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-295555bf985df6cc05
ncalrpc: LRPC-6077c3a43cad4b071a
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-6077c3a43cad4b071a
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\HFESTMAIL2\PIPE\wkssvc
ncalrpc: LRPC-1cc285b9f23035d360
ncalrpc: DNSResolver
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-1cc285b9f23035d360
ncalrpc: DNSResolver
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-1cc285b9f23035d360
ncalrpc: DNSResolver
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
annotation: Spooler function endpoint
provider: spoolsv.exe
ncalrpc: spoolss
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
annotation: Spooler base remote object endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
annotation: Spooler function endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 96.44.149.195:49156
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: LRPC-17bc723c3a2215e8cb
ncacn_ip_tcp: 96.44.149.195:49158
6b5bdd1e-528c-422c-af8c-a4079be4fe48
version: v1.0
annotation: Remote Fw APIs
protocol: [MS-FASP]: Firewall and Advanced Security Protocol
provider: FwRemoteSvr.dll
ncacn_ip_tcp: 96.44.149.195:49158
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-ecfad1cc50a6be766e
ncalrpc: OLEA033D81BD6B6A3CC9C2ECE4EB014
ncalrpc: LRPC-603842b1c57547edfa
ncalrpc: LRPC-603842b1c57547edfa
ncalrpc: LRPC-603842b1c57547edfa
143 /
tcp
-255056663 | 2025-01-30T01:03:34.796766
* OK IMAP4rev1 SmarterMail
* CAPABILITY IMAP4rev1 AUTH=CRAM-MD5 UIDPLUS QUOTA XLIST CHILDREN IDLE
A001 OK CAPABILITY completed
A002 BAD Command does not exist or is not implemented
A003 BAD Command does not exist or is not implemented
* BYE IMAP4rev1 Server logging out
A004 OK LOGOUT completed
-827624346 | 2025-01-29T08:16:36.504024
<empty title>
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 29 Jan 2025 08:16:36 GMT
Content-Length: 4958
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a8:d6:73:49:2d:34:92:a0:5d:dd:79:bc:7b:f7:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA
Validity
Not Before: Jan 23 00:00:00 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=mail.frostyserver.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b8:11:6a:e6:31:3c:52:e3:b9:95:f9:0c:d4:d1:
29:38:f5:3d:23:b4:82:8a:b1:18:b7:0e:5c:08:96:
05:43:91:90:a8:9c:4b:ea:cf:0c:0c:96:ac:1f:60:
b1:0c:62:c6:b5:44:3e:9a:ed:ff:78:d7:90:41:15:
ce:9f:41:90:71:a3:85:35:91:81:3e:34:d0:21:f5:
99:46:6c:3b:09:87:9c:06:63:a5:a6:82:ae:87:27:
c4:87:28:ab:01:6c:aa:6a:b2:5d:13:28:5e:dd:ff:
5a:2c:fd:20:ea:fd:9a:7f:a5:44:d3:ce:58:f8:c8:
0c:6c:e8:2c:9e:d1:af:d8:80:30:c2:a7:ca:5d:8f:
b2:a5:81:7b:19:c7:3b:a2:7d:15:d3:f4:15:ea:b0:
a7:a2:6d:9c:ef:d4:b7:45:b7:bf:be:ea:11:b6:a6:
f5:22:b9:d3:20:5d:df:1a:8a:bd:7f:3f:f7:ab:ee:
30:53:81:c9:b0:ba:3c:e5:97:b3:f3:9c:d3:64:2b:
ea:99:f9:d1:0a:9c:6a:cf:63:d9:ff:99:ef:50:be:
e9:02:26:97:d0:61:67:0d:6e:ff:94:6e:1d:2c:fa:
96:3a:eb:14:4c:be:6c:ac:3c:7e:38:c2:59:87:aa:
89:55:cd:2d:db:85:06:13:04:a3:54:3e:f2:40:87:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
X509v3 Subject Key Identifier:
74:5D:69:E3:69:77:0E:79:8C:A3:E3:11:0A:66:3A:49:A0:73:1B:F1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.64
CPS: https://cps.usertrust.com
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
Authority Information Access:
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt
OCSP - URI:http://ocsp.usertrust.com
X509v3 Subject Alternative Name:
DNS:mail.frostyserver.com, DNS:www.mail.frostyserver.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Jan 23 19:39:07.233 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D7:4E:D0:CD:DF:0D:6C:1E:FD:4D:5B:
3C:31:F8:3C:46:3A:F8:E1:52:F6:4B:42:4B:D4:05:57:
4B:FB:FA:E7:C9:02:20:73:1F:C9:5B:10:79:31:FE:A7:
F1:03:40:5F:27:22:23:A3:15:C0:0C:87:30:4A:3B:BC:
F3:46:32:52:E0:64:6E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 23 19:39:07.162 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5B:F0:AC:84:11:1C:E4:6F:3E:1B:98:5C:
2D:7E:76:C6:C9:DA:AD:DD:66:A3:BA:37:30:99:55:0E:
43:C3:CA:52:02:21:00:83:C6:87:96:14:4E:99:57:E8:
78:91:38:6F:A5:FC:DB:5C:0C:2D:2D:4D:86:5F:88:5A:
40:2E:8F:63:0C:0C:F2
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
4e:41:4e:a4:a5:8e:00:e2:c6:f2:63:8e:43:9c:08:41:d8:3b:
71:00:8a:41:b5:b1:23:21:6a:05:67:af:ff:19:f9:a7:6b:7a:
cb:ee:c5:99:55:04:ef:68:81:97:80:89:40:f0:32:ac:67:bd:
df:4b:6b:81:71:8b:88:cd:f6:8c:ef:28:c7:44:69:95:04:6a:
bb:6f:a5:76:11:a3:f0:79:c0:60:d0:fd:53:4b:39:e7:2c:6e:
9e:57:7c:9e:5b:75:67:d0:62:45:e3:78:a0:d9:da:01:ab:ba:
72:ee:e5:42:47:5c:d5:0d:93:29:26:df:19:19:fe:c0:fa:cc:
0a:12:ea:1c:4b:5c:53:94:27:a2:e5:73:2e:b8:d7:a3:e1:68:
25:c9:b0:e7:6f:82:16:54:d8:c9:f2:1e:d9:db:2c:40:97:4a:
42:9e:64:2e:2d:83:b0:b6:4f:50:48:c7:8f:37:9b:9b:d6:9e:
dc:b6:08:38:e9:5d:3b:6c:01:26:f7:53:5a:ef:96:9b:4a:08:
ab:e5:08:56:f7:86:ce:55:c9:db:03:55:ca:49:b6:95:9b:92:
38:1a:13:c0:5d:df:a8:f1:c6:da:14:cd:13:0b:95:1e:ab:66:
3a:54:78:3b:8a:8e:40:05:47:19:65:10:77:f7:9f:87:dc:74:
cc:cd:3c:11
445 /
tcp
973987490 | 2025-01-31T13:46:07.361409
SMB Status:
Authentication: enabled
SMB Version: 1
OS: Windows Server 2012 Standard 9200
Software: Windows Server 2012 Standard 6.2
Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
465 /
tcp
1521459560 | 2025-01-29T12:41:16.589670
220 mail.frostyserver.com
250-mail.frostyserver.com Hello [224.252.128.184]
250-SIZE 52428800
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 OK
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a8:d6:73:49:2d:34:92:a0:5d:dd:79:bc:7b:f7:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA
Validity
Not Before: Jan 23 00:00:00 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=mail.frostyserver.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b8:11:6a:e6:31:3c:52:e3:b9:95:f9:0c:d4:d1:
29:38:f5:3d:23:b4:82:8a:b1:18:b7:0e:5c:08:96:
05:43:91:90:a8:9c:4b:ea:cf:0c:0c:96:ac:1f:60:
b1:0c:62:c6:b5:44:3e:9a:ed:ff:78:d7:90:41:15:
ce:9f:41:90:71:a3:85:35:91:81:3e:34:d0:21:f5:
99:46:6c:3b:09:87:9c:06:63:a5:a6:82:ae:87:27:
c4:87:28:ab:01:6c:aa:6a:b2:5d:13:28:5e:dd:ff:
5a:2c:fd:20:ea:fd:9a:7f:a5:44:d3:ce:58:f8:c8:
0c:6c:e8:2c:9e:d1:af:d8:80:30:c2:a7:ca:5d:8f:
b2:a5:81:7b:19:c7:3b:a2:7d:15:d3:f4:15:ea:b0:
a7:a2:6d:9c:ef:d4:b7:45:b7:bf:be:ea:11:b6:a6:
f5:22:b9:d3:20:5d:df:1a:8a:bd:7f:3f:f7:ab:ee:
30:53:81:c9:b0:ba:3c:e5:97:b3:f3:9c:d3:64:2b:
ea:99:f9:d1:0a:9c:6a:cf:63:d9:ff:99:ef:50:be:
e9:02:26:97:d0:61:67:0d:6e:ff:94:6e:1d:2c:fa:
96:3a:eb:14:4c:be:6c:ac:3c:7e:38:c2:59:87:aa:
89:55:cd:2d:db:85:06:13:04:a3:54:3e:f2:40:87:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
X509v3 Subject Key Identifier:
74:5D:69:E3:69:77:0E:79:8C:A3:E3:11:0A:66:3A:49:A0:73:1B:F1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.64
CPS: https://cps.usertrust.com
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
Authority Information Access:
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt
OCSP - URI:http://ocsp.usertrust.com
X509v3 Subject Alternative Name:
DNS:mail.frostyserver.com, DNS:www.mail.frostyserver.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Jan 23 19:39:07.233 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D7:4E:D0:CD:DF:0D:6C:1E:FD:4D:5B:
3C:31:F8:3C:46:3A:F8:E1:52:F6:4B:42:4B:D4:05:57:
4B:FB:FA:E7:C9:02:20:73:1F:C9:5B:10:79:31:FE:A7:
F1:03:40:5F:27:22:23:A3:15:C0:0C:87:30:4A:3B:BC:
F3:46:32:52:E0:64:6E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 23 19:39:07.162 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5B:F0:AC:84:11:1C:E4:6F:3E:1B:98:5C:
2D:7E:76:C6:C9:DA:AD:DD:66:A3:BA:37:30:99:55:0E:
43:C3:CA:52:02:21:00:83:C6:87:96:14:4E:99:57:E8:
78:91:38:6F:A5:FC:DB:5C:0C:2D:2D:4D:86:5F:88:5A:
40:2E:8F:63:0C:0C:F2
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
4e:41:4e:a4:a5:8e:00:e2:c6:f2:63:8e:43:9c:08:41:d8:3b:
71:00:8a:41:b5:b1:23:21:6a:05:67:af:ff:19:f9:a7:6b:7a:
cb:ee:c5:99:55:04:ef:68:81:97:80:89:40:f0:32:ac:67:bd:
df:4b:6b:81:71:8b:88:cd:f6:8c:ef:28:c7:44:69:95:04:6a:
bb:6f:a5:76:11:a3:f0:79:c0:60:d0:fd:53:4b:39:e7:2c:6e:
9e:57:7c:9e:5b:75:67:d0:62:45:e3:78:a0:d9:da:01:ab:ba:
72:ee:e5:42:47:5c:d5:0d:93:29:26:df:19:19:fe:c0:fa:cc:
0a:12:ea:1c:4b:5c:53:94:27:a2:e5:73:2e:b8:d7:a3:e1:68:
25:c9:b0:e7:6f:82:16:54:d8:c9:f2:1e:d9:db:2c:40:97:4a:
42:9e:64:2e:2d:83:b0:b6:4f:50:48:c7:8f:37:9b:9b:d6:9e:
dc:b6:08:38:e9:5d:3b:6c:01:26:f7:53:5a:ef:96:9b:4a:08:
ab:e5:08:56:f7:86:ce:55:c9:db:03:55:ca:49:b6:95:9b:92:
38:1a:13:c0:5d:df:a8:f1:c6:da:14:cd:13:0b:95:1e:ab:66:
3a:54:78:3b:8a:8e:40:05:47:19:65:10:77:f7:9f:87:dc:74:
cc:cd:3c:11
587 /
tcp
123502694 | 2025-01-23T09:34:16.588090
220 mail.frostyserver.com
250-mail.frostyserver.com Hello [224.208.157.5]
250-SIZE 52428800
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 OK
993 /
tcp
-255056663 | 2025-01-22T12:54:28.780801
* OK IMAP4rev1 SmarterMail
* CAPABILITY IMAP4rev1 AUTH=CRAM-MD5 UIDPLUS QUOTA XLIST CHILDREN IDLE
A001 OK CAPABILITY completed
A002 BAD Command does not exist or is not implemented
A003 BAD Command does not exist or is not implemented
* BYE IMAP4rev1 Server logging out
A004 OK LOGOUT completed
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
96:a1:5c:82:7b:32:ab:1d:16:d2:24:99:86:f7:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA
Validity
Not Before: Oct 19 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=mail.frostyserver.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c5:2d:9e:a7:4d:fb:5b:dd:1c:2e:9d:ec:b4:04:
cc:26:cf:79:ff:b8:99:c0:c5:38:07:12:b6:85:03:
fc:0f:d7:f2:0d:e4:53:37:a9:3e:c7:31:1b:d9:56:
af:5c:3b:19:6f:86:85:4d:0e:d0:2b:c7:28:d3:3a:
e7:a4:8e:1a:9e:b0:66:67:3f:55:2c:27:d4:71:84:
9b:34:b9:b4:a1:68:34:9f:50:fe:9f:ae:0d:ea:8f:
da:f3:1e:79:b6:93:10:cd:9b:f9:2c:f6:44:08:63:
7a:87:61:f3:9e:23:e2:de:bf:65:09:10:ed:cd:90:
b9:92:cc:9f:19:dc:76:d3:a1:10:63:f7:51:05:ae:
e1:9b:92:33:18:ac:ed:ed:40:96:77:ca:2a:c6:02:
b4:9e:75:56:41:a5:bf:a1:4e:d3:94:51:b4:4a:76:
20:93:a1:19:79:42:b1:9f:dd:fe:0d:45:3a:dd:03:
6d:64:18:8b:ed:b9:23:03:8e:f8:75:35:a9:85:ca:
03:b8:7b:f9:71:b0:d8:fa:f4:4f:a7:7a:1e:bb:09:
be:43:85:ad:bb:17:ff:f6:db:03:c1:cb:c5:90:1e:
35:ac:46:00:e1:42:35:f8:78:5d:ef:9b:45:11:12:
6f:9a:ec:c0:9c:c2:a2:19:9e:e3:65:14:95:f9:e7:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
X509v3 Subject Key Identifier:
CB:75:C1:2C:08:1B:B9:D4:32:EF:FD:83:4D:18:33:05:31:47:CC:B9
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.64
CPS: https://cps.usertrust.com
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
Authority Information Access:
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt
OCSP - URI:http://ocsp.usertrust.com
X509v3 Subject Alternative Name:
DNS:mail.frostyserver.com, DNS:www.mail.frostyserver.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Oct 19 16:54:11.537 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:06:BE:C1:8B:5D:4F:82:71:B9:3E:F7:5F:
E5:DC:E5:3A:8C:6A:94:FF:46:5F:7F:D7:43:E0:FF:25:
DA:65:C8:4B:02:21:00:A7:89:A4:71:08:3F:70:AD:1F:
BB:EA:B2:FD:44:2C:B6:A7:8C:53:1D:29:F7:86:9A:13:
2F:2C:CB:D5:2B:A3:95
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Oct 19 16:54:11.491 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:51:C7:B6:23:93:88:D0:DF:8E:C0:13:ED:
56:76:B2:67:33:BB:F6:5D:C5:BC:9E:61:76:E9:B1:C7:
86:3D:D9:92:02:20:00:FC:C8:60:0C:95:83:B4:81:06:
9A:DB:A9:82:AE:3F:E2:94:AD:A5:66:FB:4C:3B:71:95:
5A:D4:B9:68:CD:71
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
65:69:2d:39:14:db:30:63:33:99:8d:41:4d:0a:af:be:d8:2a:
7c:51:c3:3b:9b:a2:b8:b5:aa:b2:c7:85:f2:08:fa:78:36:bf:
aa:a9:85:d6:4b:c4:e4:d9:07:58:74:da:8c:40:9d:80:f4:cd:
0e:84:2d:dc:ca:41:a3:cc:36:44:b1:9b:34:2b:f8:27:1b:35:
67:33:6e:2d:5f:ed:60:0d:b2:81:e4:ad:3f:86:5a:5f:fc:29:
1e:4b:ca:a8:13:0f:ab:c0:22:78:69:8d:a0:9d:8d:e4:0d:f9:
bc:a7:72:6d:1f:b3:f8:37:5a:82:30:46:85:cc:2d:fd:96:78:
4f:20:30:c2:05:6f:84:19:04:35:42:e4:72:f4:71:9c:58:49:
1d:a7:88:11:4d:aa:a7:ac:a0:62:62:45:64:f0:6b:d1:1c:5a:
69:61:2e:81:61:9e:ad:57:c7:4b:08:f4:39:ab:4e:cb:19:da:
cb:08:8c:a3:30:c7:8c:c0:35:30:0f:40:93:55:67:fa:e7:e9:
f7:e9:ac:ca:cf:31:c3:65:47:20:fb:de:4b:54:5a:0b:d4:d6:
b2:f7:89:d7:a7:d9:c3:9d:e4:ca:12:91:ba:22:ac:fd:a4:6c:
d4:4f:e6:11:63:79:f9:f4:e8:20:e0:29:f4:59:28:15:7f:60:
d0:e5:23:8f
995 /
tcp
-1980247350 | 2025-02-03T21:46:30.110265
+OK POP3 server ready <e1b4d6ba-55e8-47ce-8b07-18d58df502d0@mail.frostyserver.com>
+OK Capability list follows
TOP
USER
UIDL
IMPLEMENTATION Smartertools_SmarterMail_1.5
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a8:d6:73:49:2d:34:92:a0:5d:dd:79:bc:7b:f7:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA
Validity
Not Before: Jan 23 00:00:00 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=mail.frostyserver.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b8:11:6a:e6:31:3c:52:e3:b9:95:f9:0c:d4:d1:
29:38:f5:3d:23:b4:82:8a:b1:18:b7:0e:5c:08:96:
05:43:91:90:a8:9c:4b:ea:cf:0c:0c:96:ac:1f:60:
b1:0c:62:c6:b5:44:3e:9a:ed:ff:78:d7:90:41:15:
ce:9f:41:90:71:a3:85:35:91:81:3e:34:d0:21:f5:
99:46:6c:3b:09:87:9c:06:63:a5:a6:82:ae:87:27:
c4:87:28:ab:01:6c:aa:6a:b2:5d:13:28:5e:dd:ff:
5a:2c:fd:20:ea:fd:9a:7f:a5:44:d3:ce:58:f8:c8:
0c:6c:e8:2c:9e:d1:af:d8:80:30:c2:a7:ca:5d:8f:
b2:a5:81:7b:19:c7:3b:a2:7d:15:d3:f4:15:ea:b0:
a7:a2:6d:9c:ef:d4:b7:45:b7:bf:be:ea:11:b6:a6:
f5:22:b9:d3:20:5d:df:1a:8a:bd:7f:3f:f7:ab:ee:
30:53:81:c9:b0:ba:3c:e5:97:b3:f3:9c:d3:64:2b:
ea:99:f9:d1:0a:9c:6a:cf:63:d9:ff:99:ef:50:be:
e9:02:26:97:d0:61:67:0d:6e:ff:94:6e:1d:2c:fa:
96:3a:eb:14:4c:be:6c:ac:3c:7e:38:c2:59:87:aa:
89:55:cd:2d:db:85:06:13:04:a3:54:3e:f2:40:87:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
X509v3 Subject Key Identifier:
74:5D:69:E3:69:77:0E:79:8C:A3:E3:11:0A:66:3A:49:A0:73:1B:F1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.64
CPS: https://cps.usertrust.com
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
Authority Information Access:
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt
OCSP - URI:http://ocsp.usertrust.com
X509v3 Subject Alternative Name:
DNS:mail.frostyserver.com, DNS:www.mail.frostyserver.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Jan 23 19:39:07.233 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D7:4E:D0:CD:DF:0D:6C:1E:FD:4D:5B:
3C:31:F8:3C:46:3A:F8:E1:52:F6:4B:42:4B:D4:05:57:
4B:FB:FA:E7:C9:02:20:73:1F:C9:5B:10:79:31:FE:A7:
F1:03:40:5F:27:22:23:A3:15:C0:0C:87:30:4A:3B:BC:
F3:46:32:52:E0:64:6E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 23 19:39:07.162 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5B:F0:AC:84:11:1C:E4:6F:3E:1B:98:5C:
2D:7E:76:C6:C9:DA:AD:DD:66:A3:BA:37:30:99:55:0E:
43:C3:CA:52:02:21:00:83:C6:87:96:14:4E:99:57:E8:
78:91:38:6F:A5:FC:DB:5C:0C:2D:2D:4D:86:5F:88:5A:
40:2E:8F:63:0C:0C:F2
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
4e:41:4e:a4:a5:8e:00:e2:c6:f2:63:8e:43:9c:08:41:d8:3b:
71:00:8a:41:b5:b1:23:21:6a:05:67:af:ff:19:f9:a7:6b:7a:
cb:ee:c5:99:55:04:ef:68:81:97:80:89:40:f0:32:ac:67:bd:
df:4b:6b:81:71:8b:88:cd:f6:8c:ef:28:c7:44:69:95:04:6a:
bb:6f:a5:76:11:a3:f0:79:c0:60:d0:fd:53:4b:39:e7:2c:6e:
9e:57:7c:9e:5b:75:67:d0:62:45:e3:78:a0:d9:da:01:ab:ba:
72:ee:e5:42:47:5c:d5:0d:93:29:26:df:19:19:fe:c0:fa:cc:
0a:12:ea:1c:4b:5c:53:94:27:a2:e5:73:2e:b8:d7:a3:e1:68:
25:c9:b0:e7:6f:82:16:54:d8:c9:f2:1e:d9:db:2c:40:97:4a:
42:9e:64:2e:2d:83:b0:b6:4f:50:48:c7:8f:37:9b:9b:d6:9e:
dc:b6:08:38:e9:5d:3b:6c:01:26:f7:53:5a:ef:96:9b:4a:08:
ab:e5:08:56:f7:86:ce:55:c9:db:03:55:ca:49:b6:95:9b:92:
38:1a:13:c0:5d:df:a8:f1:c6:da:14:cd:13:0b:95:1e:ab:66:
3a:54:78:3b:8a:8e:40:05:47:19:65:10:77:f7:9f:87:dc:74:
cc:cd:3c:11
1489525118 | 2025-01-28T20:34:42.611788
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 28 Jan 2025 20:34:42 GMT
Connection: close
Content-Length: 315
WinRM NTLM Info:
OS: Windows Server 2012
OS Build: 6.2.9200
Target Name: HFESTMAIL2
NetBIOS Domain Name: HFESTMAIL2
NetBIOS Computer Name: HFESTMAIL2
DNS Domain Name: HFESTMAIL2
FQDN: HFESTMAIL2
1298793639 | 2025-01-31T19:24:36.642267
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 31 Jan 2025 19:24:36 GMT
Connection: close
Content-Length: 334
17001 /
tcp
-401618880 | 2025-01-13T04:28:48.974465
.NET System.Runtime.Remoting.RemotingException: Tcp channel protocol violation: expecting preamble.
at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble()
at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation)
at System.Runtime.Remoting.Channels.Tcp.TcpServerSocketHandler.ReadHeaders()
at System.Runtime.Remoting.Channels.Tcp.TcpServerTransportSink.ServiceRequest(Object state)
at System.Runtime.Remoting.Channels.SocketHandler.ProcessRequestNow()
<empty title>