-1376428185 | 2024-06-09T11:41:31.034036
25 /
tcp
220 mail.bystrabank.ru ESMTP Postfix
250-mail.bystrabank.ru
250-PIPELINING
250-SIZE 20000000
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:ac:b2:7e:78:85:26:a1:f4:9f:7e:8d:f4:cd:79:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 3 05:08:25 2024 GMT
Not After : Aug 1 05:08:24 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:db:d1:5d:c6:b1:ff:f9:61:96:33:42:72:84:4f:
6d:9f:45:ce:5c:1a:0f:e3:9d:33:6d:ce:2d:5b:ec:
81:c1:a2:2a:31:2a:dd:d4:e7:94:9c:8d:d9:a9:24:
d1:9c:5f:bf:01:4c:1c:e2:ef:6f:71:55:a7:36:0b:
01:26:d1:69:13
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
80:F4:7F:0E:8C:5F:68:A0:3F:24:DA:8B:52:7E:92:00:00:44:09:2E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:portal.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 3 06:08:26.034 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B7:6D:17:8A:AD:2F:27:BA:F1:3C:E1:
35:6B:27:5E:74:79:37:33:72:EB:3D:31:B4:3F:CE:7F:
19:B7:B6:6E:EE:02:20:3B:A2:FD:20:F6:C6:25:75:A7:
61:B6:76:BC:60:3C:0E:57:66:67:DE:21:92:8E:8D:CF:
37:2C:B7:19:56:FB:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : May 3 06:08:26.056 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A0:2C:1E:2C:71:4A:AD:43:B5:C8:7C:
1B:61:07:BB:04:4D:56:CE:6A:2F:46:0B:67:A1:9D:52:
2A:CB:DC:5E:25:02:21:00:C6:76:4C:A0:7E:74:D9:06:
CE:98:26:B4:79:D8:92:D4:C6:29:A9:E7:EC:21:89:51:
A8:48:9D:49:90:5A:62:0C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3b:57:8d:32:54:40:cb:69:59:2b:4b:ce:07:5c:ae:8a:c5:31:
14:80:d8:a1:a8:6c:e9:52:08:a0:60:42:cb:74:5a:32:bc:c6:
81:39:c7:a3:6e:30:da:9e:31:d4:9c:80:7c:20:fc:21:9c:e5:
1c:d6:c6:aa:1c:de:16:f8:05:52:fc:19:c6:16:e4:f6:01:b6:
71:ec:73:fd:0b:55:92:08:da:99:da:0d:b4:68:57:c0:9e:c0:
97:61:b9:82:48:32:ef:3f:3d:fb:0f:97:52:9c:47:2e:06:ad:
7b:5b:82:b9:e8:6c:c0:bf:44:d2:c2:cd:b8:f2:3b:fa:04:36:
a9:a4:c2:5b:8e:6e:f7:c8:08:37:72:8f:b0:be:33:45:42:8c:
15:66:e4:b0:f2:51:c5:e6:f0:f7:14:8a:e5:af:ca:c9:1d:0e:
79:6b:ef:52:6b:d8:1e:51:26:4e:cc:34:39:05:14:1f:5f:7d:
2f:07:d8:be:5a:dd:50:45:25:f2:ed:60:36:68:80:68:f6:d8:
0a:37:b9:5a:5f:77:95:31:1d:4d:92:39:6c:0a:ce:ea:42:26:
48:3f:15:f8:47:ad:31:21:3e:54:49:03:9b:da:1a:6e:50:5a:
e6:16:9a:6d:1c:a8:cf:a7:d7:38:48:a1:c1:21:59:5f:10:b2:
5f:4b:7d:c2
1957077569 | 2024-06-09T10:38:04.636497
143 /
tcp
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot (Debian) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0e:9b:ab:05:5f:65:17:25:de:81:29:8d:e3:54:bc:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Jan 1 16:41:58 2024 GMT
Not After : Mar 31 16:41:57 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f0:4e:72:7e:85:f5:70:18:af:7b:47:0d:e2:57:
52:6a:27:50:7b:af:0a:7e:17:c6:3f:ad:b6:c2:14:
f3:cc:9d:7a:3c:c9:7c:e8:4c:99:1b:1c:35:11:80:
20:09:03:a5:6e:17:72:37:39:db:39:e6:f9:57:1f:
af:8c:a1:eb:61
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
A7:D7:14:A3:34:BA:B3:F9:1A:90:F7:F1:45:2B:9E:F8:6D:96:C9:B0
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Jan 1 17:41:58.595 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:7F:71:BB:7B:08:50:9C:2E:FE:3E:F8:0D:
07:4A:A4:99:37:EF:DC:19:6F:83:ED:B1:AC:21:1A:2E:
C6:FA:F4:98:02:20:64:24:41:C0:62:C0:5C:4A:15:92:
6B:80:D9:33:66:A7:29:43:D4:F5:7F:F1:90:1A:CB:0C:
52:B9:8A:0D:0A:D5
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Jan 1 17:41:58.597 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:E3:D1:30:96:66:43:14:6C:3B:78:74:
4D:9A:B6:78:F7:9B:C9:B0:87:98:F4:9A:11:01:C8:E1:
B1:C3:8D:B1:45:02:20:44:0D:E3:2C:AA:6B:5D:7A:EC:
0E:DD:4E:F1:85:37:64:C4:0D:48:4E:9D:23:FC:A4:2A:
5F:A6:3A:41:B9:CF:46
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
21:b1:fb:93:cf:74:52:00:0d:12:11:86:20:09:d1:5f:fb:91:
ad:f6:1b:71:16:09:56:da:69:b9:bd:78:1c:04:d7:65:0e:74:
bf:c1:eb:ee:4e:22:84:3a:7e:83:e1:b2:c8:65:4a:e3:89:ec:
c8:49:5b:a4:94:6b:c2:d6:04:10:63:a7:8c:95:e2:3f:fd:61:
9f:d5:84:1c:8a:5d:04:63:b5:72:2f:4c:ce:e9:68:2c:c0:8e:
6a:81:97:b8:83:1b:b5:0a:4e:9c:e1:98:a5:dc:f7:5c:2a:ff:
6a:eb:0c:90:e8:d0:07:27:35:8f:6b:9c:18:f7:cc:26:d2:61:
1a:59:9e:6a:e0:d0:98:8a:46:6a:69:db:94:cc:b8:e2:5d:f8:
c1:f1:0d:7c:4f:09:a5:46:1f:77:94:57:c9:66:94:72:63:01:
4a:4c:71:d0:59:70:29:3a:87:54:ea:70:f9:bc:26:c7:d5:4a:
e3:78:ad:1e:ad:96:f9:17:0a:89:63:9a:25:5c:98:8c:83:e5:
60:42:ce:bf:0f:6f:b0:14:3a:95:e8:f1:85:80:a3:b7:4b:30:
9e:b1:a0:02:35:26:a1:11:52:b9:cd:22:ad:b6:6e:5d:6c:64:
2d:46:41:cc:a9:d3:79:36:cb:52:cc:4b:39:f4:c6:a4:58:57:
67:01:ef:7d
731197476 | 2024-06-09T14:03:54.737721
443 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Date: Sun, 09 Jun 2024 14:03:54 GMT
Content-Length: 19
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:ac:b2:7e:78:85:26:a1:f4:9f:7e:8d:f4:cd:79:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 3 05:08:25 2024 GMT
Not After : Aug 1 05:08:24 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:db:d1:5d:c6:b1:ff:f9:61:96:33:42:72:84:4f:
6d:9f:45:ce:5c:1a:0f:e3:9d:33:6d:ce:2d:5b:ec:
81:c1:a2:2a:31:2a:dd:d4:e7:94:9c:8d:d9:a9:24:
d1:9c:5f:bf:01:4c:1c:e2:ef:6f:71:55:a7:36:0b:
01:26:d1:69:13
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
80:F4:7F:0E:8C:5F:68:A0:3F:24:DA:8B:52:7E:92:00:00:44:09:2E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:portal.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 3 06:08:26.034 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B7:6D:17:8A:AD:2F:27:BA:F1:3C:E1:
35:6B:27:5E:74:79:37:33:72:EB:3D:31:B4:3F:CE:7F:
19:B7:B6:6E:EE:02:20:3B:A2:FD:20:F6:C6:25:75:A7:
61:B6:76:BC:60:3C:0E:57:66:67:DE:21:92:8E:8D:CF:
37:2C:B7:19:56:FB:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : May 3 06:08:26.056 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A0:2C:1E:2C:71:4A:AD:43:B5:C8:7C:
1B:61:07:BB:04:4D:56:CE:6A:2F:46:0B:67:A1:9D:52:
2A:CB:DC:5E:25:02:21:00:C6:76:4C:A0:7E:74:D9:06:
CE:98:26:B4:79:D8:92:D4:C6:29:A9:E7:EC:21:89:51:
A8:48:9D:49:90:5A:62:0C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3b:57:8d:32:54:40:cb:69:59:2b:4b:ce:07:5c:ae:8a:c5:31:
14:80:d8:a1:a8:6c:e9:52:08:a0:60:42:cb:74:5a:32:bc:c6:
81:39:c7:a3:6e:30:da:9e:31:d4:9c:80:7c:20:fc:21:9c:e5:
1c:d6:c6:aa:1c:de:16:f8:05:52:fc:19:c6:16:e4:f6:01:b6:
71:ec:73:fd:0b:55:92:08:da:99:da:0d:b4:68:57:c0:9e:c0:
97:61:b9:82:48:32:ef:3f:3d:fb:0f:97:52:9c:47:2e:06:ad:
7b:5b:82:b9:e8:6c:c0:bf:44:d2:c2:cd:b8:f2:3b:fa:04:36:
a9:a4:c2:5b:8e:6e:f7:c8:08:37:72:8f:b0:be:33:45:42:8c:
15:66:e4:b0:f2:51:c5:e6:f0:f7:14:8a:e5:af:ca:c9:1d:0e:
79:6b:ef:52:6b:d8:1e:51:26:4e:cc:34:39:05:14:1f:5f:7d:
2f:07:d8:be:5a:dd:50:45:25:f2:ed:60:36:68:80:68:f6:d8:
0a:37:b9:5a:5f:77:95:31:1d:4d:92:39:6c:0a:ce:ea:42:26:
48:3f:15:f8:47:ad:31:21:3e:54:49:03:9b:da:1a:6e:50:5a:
e6:16:9a:6d:1c:a8:cf:a7:d7:38:48:a1:c1:21:59:5f:10:b2:
5f:4b:7d:c2
104537533 | 2024-06-09T19:33:43.102597
465 /
tcp
220 mail.bystrabank.ru ESMTP Postfix
250-mail.bystrabank.ru
250-PIPELINING
250-SIZE 20000000
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:ac:b2:7e:78:85:26:a1:f4:9f:7e:8d:f4:cd:79:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 3 05:08:25 2024 GMT
Not After : Aug 1 05:08:24 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:db:d1:5d:c6:b1:ff:f9:61:96:33:42:72:84:4f:
6d:9f:45:ce:5c:1a:0f:e3:9d:33:6d:ce:2d:5b:ec:
81:c1:a2:2a:31:2a:dd:d4:e7:94:9c:8d:d9:a9:24:
d1:9c:5f:bf:01:4c:1c:e2:ef:6f:71:55:a7:36:0b:
01:26:d1:69:13
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
80:F4:7F:0E:8C:5F:68:A0:3F:24:DA:8B:52:7E:92:00:00:44:09:2E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:portal.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 3 06:08:26.034 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B7:6D:17:8A:AD:2F:27:BA:F1:3C:E1:
35:6B:27:5E:74:79:37:33:72:EB:3D:31:B4:3F:CE:7F:
19:B7:B6:6E:EE:02:20:3B:A2:FD:20:F6:C6:25:75:A7:
61:B6:76:BC:60:3C:0E:57:66:67:DE:21:92:8E:8D:CF:
37:2C:B7:19:56:FB:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : May 3 06:08:26.056 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A0:2C:1E:2C:71:4A:AD:43:B5:C8:7C:
1B:61:07:BB:04:4D:56:CE:6A:2F:46:0B:67:A1:9D:52:
2A:CB:DC:5E:25:02:21:00:C6:76:4C:A0:7E:74:D9:06:
CE:98:26:B4:79:D8:92:D4:C6:29:A9:E7:EC:21:89:51:
A8:48:9D:49:90:5A:62:0C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3b:57:8d:32:54:40:cb:69:59:2b:4b:ce:07:5c:ae:8a:c5:31:
14:80:d8:a1:a8:6c:e9:52:08:a0:60:42:cb:74:5a:32:bc:c6:
81:39:c7:a3:6e:30:da:9e:31:d4:9c:80:7c:20:fc:21:9c:e5:
1c:d6:c6:aa:1c:de:16:f8:05:52:fc:19:c6:16:e4:f6:01:b6:
71:ec:73:fd:0b:55:92:08:da:99:da:0d:b4:68:57:c0:9e:c0:
97:61:b9:82:48:32:ef:3f:3d:fb:0f:97:52:9c:47:2e:06:ad:
7b:5b:82:b9:e8:6c:c0:bf:44:d2:c2:cd:b8:f2:3b:fa:04:36:
a9:a4:c2:5b:8e:6e:f7:c8:08:37:72:8f:b0:be:33:45:42:8c:
15:66:e4:b0:f2:51:c5:e6:f0:f7:14:8a:e5:af:ca:c9:1d:0e:
79:6b:ef:52:6b:d8:1e:51:26:4e:cc:34:39:05:14:1f:5f:7d:
2f:07:d8:be:5a:dd:50:45:25:f2:ed:60:36:68:80:68:f6:d8:
0a:37:b9:5a:5f:77:95:31:1d:4d:92:39:6c:0a:ce:ea:42:26:
48:3f:15:f8:47:ad:31:21:3e:54:49:03:9b:da:1a:6e:50:5a:
e6:16:9a:6d:1c:a8:cf:a7:d7:38:48:a1:c1:21:59:5f:10:b2:
5f:4b:7d:c2
-1746711216 | 2024-06-09T19:00:56.230403
587 /
tcp
220 mail.bystrabank.ru ESMTP Postfix
250-mail.bystrabank.ru
250-PIPELINING
250-SIZE 20000000
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:ac:b2:7e:78:85:26:a1:f4:9f:7e:8d:f4:cd:79:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 3 05:08:25 2024 GMT
Not After : Aug 1 05:08:24 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:db:d1:5d:c6:b1:ff:f9:61:96:33:42:72:84:4f:
6d:9f:45:ce:5c:1a:0f:e3:9d:33:6d:ce:2d:5b:ec:
81:c1:a2:2a:31:2a:dd:d4:e7:94:9c:8d:d9:a9:24:
d1:9c:5f:bf:01:4c:1c:e2:ef:6f:71:55:a7:36:0b:
01:26:d1:69:13
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
80:F4:7F:0E:8C:5F:68:A0:3F:24:DA:8B:52:7E:92:00:00:44:09:2E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:portal.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 3 06:08:26.034 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B7:6D:17:8A:AD:2F:27:BA:F1:3C:E1:
35:6B:27:5E:74:79:37:33:72:EB:3D:31:B4:3F:CE:7F:
19:B7:B6:6E:EE:02:20:3B:A2:FD:20:F6:C6:25:75:A7:
61:B6:76:BC:60:3C:0E:57:66:67:DE:21:92:8E:8D:CF:
37:2C:B7:19:56:FB:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : May 3 06:08:26.056 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A0:2C:1E:2C:71:4A:AD:43:B5:C8:7C:
1B:61:07:BB:04:4D:56:CE:6A:2F:46:0B:67:A1:9D:52:
2A:CB:DC:5E:25:02:21:00:C6:76:4C:A0:7E:74:D9:06:
CE:98:26:B4:79:D8:92:D4:C6:29:A9:E7:EC:21:89:51:
A8:48:9D:49:90:5A:62:0C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3b:57:8d:32:54:40:cb:69:59:2b:4b:ce:07:5c:ae:8a:c5:31:
14:80:d8:a1:a8:6c:e9:52:08:a0:60:42:cb:74:5a:32:bc:c6:
81:39:c7:a3:6e:30:da:9e:31:d4:9c:80:7c:20:fc:21:9c:e5:
1c:d6:c6:aa:1c:de:16:f8:05:52:fc:19:c6:16:e4:f6:01:b6:
71:ec:73:fd:0b:55:92:08:da:99:da:0d:b4:68:57:c0:9e:c0:
97:61:b9:82:48:32:ef:3f:3d:fb:0f:97:52:9c:47:2e:06:ad:
7b:5b:82:b9:e8:6c:c0:bf:44:d2:c2:cd:b8:f2:3b:fa:04:36:
a9:a4:c2:5b:8e:6e:f7:c8:08:37:72:8f:b0:be:33:45:42:8c:
15:66:e4:b0:f2:51:c5:e6:f0:f7:14:8a:e5:af:ca:c9:1d:0e:
79:6b:ef:52:6b:d8:1e:51:26:4e:cc:34:39:05:14:1f:5f:7d:
2f:07:d8:be:5a:dd:50:45:25:f2:ed:60:36:68:80:68:f6:d8:
0a:37:b9:5a:5f:77:95:31:1d:4d:92:39:6c:0a:ce:ea:42:26:
48:3f:15:f8:47:ad:31:21:3e:54:49:03:9b:da:1a:6e:50:5a:
e6:16:9a:6d:1c:a8:cf:a7:d7:38:48:a1:c1:21:59:5f:10:b2:
5f:4b:7d:c2
1664207957 | 2024-06-09T19:57:03.198258
993 /
tcp
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0e:9b:ab:05:5f:65:17:25:de:81:29:8d:e3:54:bc:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Jan 1 16:41:58 2024 GMT
Not After : Mar 31 16:41:57 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f0:4e:72:7e:85:f5:70:18:af:7b:47:0d:e2:57:
52:6a:27:50:7b:af:0a:7e:17:c6:3f:ad:b6:c2:14:
f3:cc:9d:7a:3c:c9:7c:e8:4c:99:1b:1c:35:11:80:
20:09:03:a5:6e:17:72:37:39:db:39:e6:f9:57:1f:
af:8c:a1:eb:61
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
A7:D7:14:A3:34:BA:B3:F9:1A:90:F7:F1:45:2B:9E:F8:6D:96:C9:B0
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Jan 1 17:41:58.595 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:7F:71:BB:7B:08:50:9C:2E:FE:3E:F8:0D:
07:4A:A4:99:37:EF:DC:19:6F:83:ED:B1:AC:21:1A:2E:
C6:FA:F4:98:02:20:64:24:41:C0:62:C0:5C:4A:15:92:
6B:80:D9:33:66:A7:29:43:D4:F5:7F:F1:90:1A:CB:0C:
52:B9:8A:0D:0A:D5
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Jan 1 17:41:58.597 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:E3:D1:30:96:66:43:14:6C:3B:78:74:
4D:9A:B6:78:F7:9B:C9:B0:87:98:F4:9A:11:01:C8:E1:
B1:C3:8D:B1:45:02:20:44:0D:E3:2C:AA:6B:5D:7A:EC:
0E:DD:4E:F1:85:37:64:C4:0D:48:4E:9D:23:FC:A4:2A:
5F:A6:3A:41:B9:CF:46
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
21:b1:fb:93:cf:74:52:00:0d:12:11:86:20:09:d1:5f:fb:91:
ad:f6:1b:71:16:09:56:da:69:b9:bd:78:1c:04:d7:65:0e:74:
bf:c1:eb:ee:4e:22:84:3a:7e:83:e1:b2:c8:65:4a:e3:89:ec:
c8:49:5b:a4:94:6b:c2:d6:04:10:63:a7:8c:95:e2:3f:fd:61:
9f:d5:84:1c:8a:5d:04:63:b5:72:2f:4c:ce:e9:68:2c:c0:8e:
6a:81:97:b8:83:1b:b5:0a:4e:9c:e1:98:a5:dc:f7:5c:2a:ff:
6a:eb:0c:90:e8:d0:07:27:35:8f:6b:9c:18:f7:cc:26:d2:61:
1a:59:9e:6a:e0:d0:98:8a:46:6a:69:db:94:cc:b8:e2:5d:f8:
c1:f1:0d:7c:4f:09:a5:46:1f:77:94:57:c9:66:94:72:63:01:
4a:4c:71:d0:59:70:29:3a:87:54:ea:70:f9:bc:26:c7:d5:4a:
e3:78:ad:1e:ad:96:f9:17:0a:89:63:9a:25:5c:98:8c:83:e5:
60:42:ce:bf:0f:6f:b0:14:3a:95:e8:f1:85:80:a3:b7:4b:30:
9e:b1:a0:02:35:26:a1:11:52:b9:cd:22:ad:b6:6e:5d:6c:64:
2d:46:41:cc:a9:d3:79:36:cb:52:cc:4b:39:f4:c6:a4:58:57:
67:01:ef:7d
-22905 | 2024-06-09T12:14:10.411369
8443 /
tcp
HTTP/1.1 200 OK
Content-Security-Policy: frame-ancestors 'none';
Set-Cookie: _gorilla_csrf=MTcxNzkzNTI1MHxJamQ2Y0djck5IbHBkMmhITUZWU09VRnBNekpaTXpnNWVrWTBXbVpLV1hSR1lXaFlVV04xVUhKdFdYTTlJZ289fG0cuoNToD040ExY4TvOb0SHE2kvYmpe0U9x_P-oz6Zt; Expires=Mon, 10 Jun 2024 00:14:10 GMT; Max-Age=43200; HttpOnly; Secure; SameSite
Set-Cookie: gophish=MTcxNzkzNTI1MHxjeW42RzNiSklsSE9Mc3pFMl9uUEk4VlRnN1F0UUZIenlJOU1ISGRwUG5OZVN5UkR8nTUloT64_bRVyvwp0zO8j-xnxrN6GLtyP-HQSmaHVUw=; Path=/; Expires=Fri, 14 Jun 2024 12:14:10 GMT; Max-Age=432000; HttpOnly; Secure
Vary: Accept-Encoding
Vary: Cookie
X-Frame-Options: DENY
Date: Sun, 09 Jun 2024 12:14:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:ac:b2:7e:78:85:26:a1:f4:9f:7e:8d:f4:cd:79:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 3 05:08:25 2024 GMT
Not After : Aug 1 05:08:24 2024 GMT
Subject: CN=bystrabank.ru
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:db:d1:5d:c6:b1:ff:f9:61:96:33:42:72:84:4f:
6d:9f:45:ce:5c:1a:0f:e3:9d:33:6d:ce:2d:5b:ec:
81:c1:a2:2a:31:2a:dd:d4:e7:94:9c:8d:d9:a9:24:
d1:9c:5f:bf:01:4c:1c:e2:ef:6f:71:55:a7:36:0b:
01:26:d1:69:13
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
80:F4:7F:0E:8C:5F:68:A0:3F:24:DA:8B:52:7E:92:00:00:44:09:2E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:bystrabank.ru, DNS:gophish.bystrabank.ru, DNS:mail.bystrabank.ru, DNS:portal.bystrabank.ru, DNS:postfixadmin.bystrabank.ru
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 3 06:08:26.034 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B7:6D:17:8A:AD:2F:27:BA:F1:3C:E1:
35:6B:27:5E:74:79:37:33:72:EB:3D:31:B4:3F:CE:7F:
19:B7:B6:6E:EE:02:20:3B:A2:FD:20:F6:C6:25:75:A7:
61:B6:76:BC:60:3C:0E:57:66:67:DE:21:92:8E:8D:CF:
37:2C:B7:19:56:FB:FF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : May 3 06:08:26.056 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A0:2C:1E:2C:71:4A:AD:43:B5:C8:7C:
1B:61:07:BB:04:4D:56:CE:6A:2F:46:0B:67:A1:9D:52:
2A:CB:DC:5E:25:02:21:00:C6:76:4C:A0:7E:74:D9:06:
CE:98:26:B4:79:D8:92:D4:C6:29:A9:E7:EC:21:89:51:
A8:48:9D:49:90:5A:62:0C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
3b:57:8d:32:54:40:cb:69:59:2b:4b:ce:07:5c:ae:8a:c5:31:
14:80:d8:a1:a8:6c:e9:52:08:a0:60:42:cb:74:5a:32:bc:c6:
81:39:c7:a3:6e:30:da:9e:31:d4:9c:80:7c:20:fc:21:9c:e5:
1c:d6:c6:aa:1c:de:16:f8:05:52:fc:19:c6:16:e4:f6:01:b6:
71:ec:73:fd:0b:55:92:08:da:99:da:0d:b4:68:57:c0:9e:c0:
97:61:b9:82:48:32:ef:3f:3d:fb:0f:97:52:9c:47:2e:06:ad:
7b:5b:82:b9:e8:6c:c0:bf:44:d2:c2:cd:b8:f2:3b:fa:04:36:
a9:a4:c2:5b:8e:6e:f7:c8:08:37:72:8f:b0:be:33:45:42:8c:
15:66:e4:b0:f2:51:c5:e6:f0:f7:14:8a:e5:af:ca:c9:1d:0e:
79:6b:ef:52:6b:d8:1e:51:26:4e:cc:34:39:05:14:1f:5f:7d:
2f:07:d8:be:5a:dd:50:45:25:f2:ed:60:36:68:80:68:f6:d8:
0a:37:b9:5a:5f:77:95:31:1d:4d:92:39:6c:0a:ce:ea:42:26:
48:3f:15:f8:47:ad:31:21:3e:54:49:03:9b:da:1a:6e:50:5a:
e6:16:9a:6d:1c:a8:cf:a7:d7:38:48:a1:c1:21:59:5f:10:b2:
5f:4b:7d:c2
