116.66.194.131

ipv4in scopepriority NORMAL

First seen 22 Sep 2026, last seen 22 Sep 2026 20:47 UTC (8h ago). 1 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.

Identity

What is known about this address

Reverse DNS: mail.citizenscapital.com.np
Hostname: —
ASN: AS4007 — SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal
Organisation: SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal
Location estimate: Kathmandu, Bagmati Province, NPlow
Geolocation source: ip-api.com
First seen: 22 Sep 2026 07:25 UTC
Last seen: 22 Sep 2026 20:47 UTC

Services

Open services observed on this address

A service appears here only once a banner or handshake has actually been captured. Technology detections carry confidence and evidence; weak evidence is not stated as fact.

Port	Service	Product	Technologies	TLS	State	Banner	Last seen
80 tcp / tcp	http	Apache HTTP Server	Apache HTTP Serverhigh server: Apache	not negotiated	open	no banner captured	22 Sep 2026 8h ago
110 tcp / tcp	pop3	Dovecot	Dovecothigh IMAP banner: +OK Dovecot ready.	TLSv1.2 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	+OK Dovecot ready.	22 Sep 2026 8h ago
143 tcp / tcp	imap	Dovecot	Dovecothigh IMAP banner: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE S…	TLSv1.2 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot ready.	22 Sep 2026 8h ago
443 tcp / tcp	https	Apache HTTP Server	Apache HTTP Serverhigh server: Apache	TLSv1.2 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	no banner captured	22 Sep 2026 8h ago
465 tcp / tcp	smtps	Postfix	Postfixhigh SMTP banner: 220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your s…	TLSv1.3 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!	22 Sep 2026 8h ago
587 tcp / tcp	smtp-submission	Postfix	Postfixhigh SMTP banner: 220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your s…	TLSv1.3 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!	22 Sep 2026 8h ago
993 tcp / tcp	imaps	Dovecot	Dovecothigh IMAP banner: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE A…	TLSv1.2 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.	22 Sep 2026 8h ago
995 tcp / tcp	pop3s	Dovecot	Dovecothigh IMAP banner: +OK Dovecot ready.	TLSv1.2 certificate sha256 cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7 subject CN=.citizenscapital.com.np issuer CN=Verokey Secure Web G2,O=Verokey,C=AU commonName .citizenscapital.com.np notBefore 2026-01-13T00:00:00.000Z notAfter 2027-01-12T23:59:59.000Z keyAlgo RSA sigAlgo SHA256-RSA	open	+OK Dovecot ready.	22 Sep 2026 8h ago

Certificates

Certificates presented

Certificate 1

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 2

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 3

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 4

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 5

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 6

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

Certificate 7

sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
subject: CN=*.citizenscapital.com.np
issuer: CN=Verokey Secure Web G2,O=Verokey,C=AU
commonName: *.citizenscapital.com.np
notBefore: 2026-01-13T00:00:00.000Z
notAfter: 2027-01-12T23:59:59.000Z
keyAlgo: RSA
sigAlgo: SHA256-RSA

History

Observation history

Newest first. 1 observations on record.

Observed at	Source	Collector	Confidence	Changed	State	Content hash
22 Sep 2026 20:47 UTC	fingerprint	fingerprint-1	high	changed	{"services":{"80/tcp":{"state":"open","product":"Apache HTTP Server","version":"","cert_sha256":"","tls_version":"","service_type":"http"},"110/tcp":{"state":"…	2916467c51b486733b4fe845b3643e9d456e3d9…

Change feed

Change events

Detected differences between consecutive observations. 9 on record.

Detected at	Type	Field	Previous	Current	Significance	Confidence
22 Sep 2026 20:47 UTC	NEW SERVICE	service:995/tcp	—	Dovecot / TLSv1.2	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:993/tcp	—	Dovecot / TLSv1.2	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:80/tcp	—	Apache HTTP Server	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:587/tcp	—	Postfix / TLSv1.3	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:465/tcp	—	Postfix / TLSv1.3	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:443/tcp	—	Apache HTTP Server / TLSv1.2	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:143/tcp	—	Dovecot / TLSv1.2	low	unknown
22 Sep 2026 20:47 UTC	NEW SERVICE	service:110/tcp	—	Dovecot / TLSv1.2	low	unknown
22 Sep 2026 20:47 UTC	NEW ASSET	—	—	asset with 8 observed open endpoint(s)	low	unknown

Potential exposure

Version-based vulnerability matches

Matches are produced by comparing a detected product version against a known-issue list. They are potential exposures, not confirmed vulnerabilities, and nothing here has been exploited or verified.

No version-based matches recorded.

A match can only be produced once a product and version have been detected on a service, which requires a completed probe.

State

Current state against the previous state

The stored state document for this asset, compared field by field against its predecessor. Values are shown exactly as stored.

Only one state has been recorded. The current document is shown without a predecessor — no comparison is implied.

reverse_dns: mail.citizenscapital.com.np
services.110/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.110/tcp.product: Dovecot
services.110/tcp.service_type: pop3
services.110/tcp.state: open
services.110/tcp.tls_version: TLSv1.2
services.110/tcp.version
services.143/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.143/tcp.product: Dovecot
services.143/tcp.service_type: imap
services.143/tcp.state: open
services.143/tcp.tls_version: TLSv1.2
services.143/tcp.version
services.443/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.443/tcp.product: Apache HTTP Server
services.443/tcp.service_type: https
services.443/tcp.state: open
services.443/tcp.tls_version: TLSv1.2
services.443/tcp.version
services.465/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.465/tcp.product: Postfix
services.465/tcp.service_type: smtps
services.465/tcp.state: open
services.465/tcp.tls_version: TLSv1.3
services.465/tcp.version
services.587/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.587/tcp.product: Postfix
services.587/tcp.service_type: smtp-submission
services.587/tcp.state: open
services.587/tcp.tls_version: TLSv1.3
services.587/tcp.version
services.80/tcp.cert_sha256
services.80/tcp.product: Apache HTTP Server
services.80/tcp.service_type: http
services.80/tcp.state: open
services.80/tcp.tls_version
services.80/tcp.version
services.993/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.993/tcp.product: Dovecot
services.993/tcp.service_type: imaps
services.993/tcp.state: open
services.993/tcp.tls_version: TLSv1.2
services.993/tcp.version
services.995/tcp.cert_sha256: cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7
services.995/tcp.product: Dovecot
services.995/tcp.service_type: pop3s
services.995/tcp.state: open
services.995/tcp.tls_version: TLSv1.2
services.995/tcp.version

Raw detail document

GET /assets/cd1e72984e757b178b63655c766d0f0a5

Show the fields returned by the API

{
  "id": "cd1e72984e757b178b63655c766d0f0a5",
  "type": "ipv4",
  "value": "116.66.194.131",
  "hostname": null,
  "reverseDns": "mail.citizenscapital.com.np",
  "asn": {
    "number": 4007,
    "name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
  },
  "organization": {
    "id": "c2b1f62bdc5a33a0c2f97cc3d4861dcd6",
    "name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
  },
  "location": {
    "country": "NP",
    "city": "Kathmandu",
    "province": "Bagmati Province",
    "district": "",
    "confidence": "low",
    "source": "ip-api.com"
  },
  "scopeStatus": "in_scope",
  "priority": "NORMAL",
  "firstSeen": "2026-09-22T07:25:53.234Z",
  "lastSeen": "2026-09-22T20:47:31.268Z",
  "observationCount": 1,
  "openServices": 8,
  "serviceCount": 8,
  "technologies": [
    "apache-http-server",
    "dovecot",
    "postfix"
  ],
  "vulnerabilityMatches": [],
  "network": {
    "id": "c0be2bbd289e1e80862945b5dbaf4fd38",
    "prefix": "116.66.192.0/22",
    "ipVersion": 4
  },
  "services": [
    {
      "id": "cce6ad2a76f52955aac7886bba2dcae6a",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 80,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "http",
      "product": "Apache HTTP Server",
      "productVersion": null,
      "tlsVersion": null,
      "banner": null,
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.200Z",
      "lastSeen": "2026-09-22T20:47:31.200Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "apache-http-server",
          "name": "Apache HTTP Server",
          "category": "web-server",
          "vendor": "Apache Software Foundation",
          "version": null,
          "confidence": "high",
          "evidence": "server: Apache",
          "detectedAt": "2026-09-22T20:47:31.203Z"
        }
      ],
      "certificate": null
    },
    {
      "id": "c660ebcb1542e703e3b3eb8c2abbcbcc3",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 110,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "pop3",
      "product": "Dovecot",
      "productVersion": null,
      "tlsVersion": "TLSv1.2",
      "banner": "+OK Dovecot ready.",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.206Z",
      "lastSeen": "2026-09-22T20:47:31.206Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "dovecot",
          "name": "Dovecot",
          "category": "mail-server",
          "vendor": "Dovecot",
          "version": null,
          "confidence": "high",
          "evidence": "IMAP banner: +OK Dovecot ready.",
          "detectedAt": "2026-09-22T20:47:31.208Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "cb01c077c48416c5cbdcd2f11abad8406",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 143,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "imap",
      "product": "Dovecot",
      "productVersion": null,
      "tlsVersion": "TLSv1.2",
      "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot ready.",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.212Z",
      "lastSeen": "2026-09-22T20:47:31.212Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "dovecot",
          "name": "Dovecot",
          "category": "mail-server",
          "vendor": "Dovecot",
          "version": null,
          "confidence": "high",
          "evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot ready.",
          "detectedAt": "2026-09-22T20:47:31.214Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "ced0ad915732c4034902a6b4030782647",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 443,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "https",
      "product": "Apache HTTP Server",
      "productVersion": null,
      "tlsVersion": "TLSv1.2",
      "banner": null,
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.218Z",
      "lastSeen": "2026-09-22T20:47:31.218Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "apache-http-server",
          "name": "Apache HTTP Server",
          "category": "web-server",
          "vendor": "Apache Software Foundation",
          "version": null,
          "confidence": "high",
          "evidence": "server: Apache",
          "detectedAt": "2026-09-22T20:47:31.221Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "c8317e99bf6d574aaf30ce2333b217ea9",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 465,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "smtps",
      "product": "Postfix",
      "productVersion": null,
      "tlsVersion": "TLSv1.3",
      "banner": "220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.224Z",
      "lastSeen": "2026-09-22T20:47:31.224Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "postfix",
          "name": "Postfix",
          "category": "mail-server",
          "vendor": "Wietse Venema",
          "version": null,
          "confidence": "high",
          "evidence": "SMTP banner: 220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!",
          "detectedAt": "2026-09-22T20:47:31.227Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "cbe23ccc4f776a4dde480e4404049042a",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 587,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "smtp-submission",
      "product": "Postfix",
      "productVersion": null,
      "tlsVersion": "TLSv1.3",
      "banner": "220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.230Z",
      "lastSeen": "2026-09-22T20:47:31.230Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "postfix",
          "name": "Postfix",
          "category": "mail-server",
          "vendor": "Wietse Venema",
          "version": null,
          "confidence": "high",
          "evidence": "SMTP banner: 220 mail.citizenscapital.com.np ESMTP Postfix. Send us your mail..not your spam!!",
          "detectedAt": "2026-09-22T20:47:31.233Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "cfc4175a95fb86895a358b82b03e28e02",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 993,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "imaps",
      "product": "Dovecot",
      "productVersion": null,
      "tlsVersion": "TLSv1.2",
      "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.237Z",
      "lastSeen": "2026-09-22T20:47:31.237Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "dovecot",
          "name": "Dovecot",
          "category": "mail-server",
          "vendor": "Dovecot",
          "version": null,
          "confidence": "high",
          "evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
          "detectedAt": "2026-09-22T20:47:31.239Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    },
    {
      "id": "c812375eedf3ab8909826847c7b06fa6e",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "port": 995,
      "protocol": "tcp",
      "transport": "tcp",
      "serviceType": "pop3s",
      "product": "Dovecot",
      "productVersion": null,
      "tlsVersion": "TLSv1.2",
      "banner": "+OK Dovecot ready.",
      "state": "open",
      "firstSeen": "2026-09-22T20:47:31.243Z",
      "lastSeen": "2026-09-22T20:47:31.243Z",
      "observationCount": 0,
      "technologies": [
        {
          "slug": "dovecot",
          "name": "Dovecot",
          "category": "mail-server",
          "vendor": "Dovecot",
          "version": null,
          "confidence": "high",
          "evidence": "IMAP banner: +OK Dovecot ready.",
          "detectedAt": "2026-09-22T20:47:31.245Z"
        }
      ],
      "certificate": {
        "id": "cb1854bb9a0d682196f75f2dfcb61f738",
        "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
        "subject": "CN=*.citizenscapital.com.np",
        "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
        "commonName": "*.citizenscapital.com.np",
        "notBefore": "2026-01-13T00:00:00.000Z",
        "notAfter": "2027-01-12T23:59:59.000Z",
        "sans": [
          "*.citizenscapital.com.np",
          "citizenscapital.com.np"
        ],
        "keyAlgo": "RSA",
        "sigAlgo": "SHA256-RSA"
      }
    }
  ],
  "certificates": [
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    },
    {
      "id": "cb1854bb9a0d682196f75f2dfcb61f738",
      "sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
      "subject": "CN=*.citizenscapital.com.np",
      "issuer": "CN=Verokey Secure Web G2,O=Verokey,C=AU",
      "commonName": "*.citizenscapital.com.np",
      "notBefore": "2026-01-13T00:00:00.000Z",
      "notAfter": "2027-01-12T23:59:59.000Z",
      "sans": [
        "*.citizenscapital.com.np",
        "citizenscapital.com.np"
      ],
      "keyAlgo": "RSA",
      "sigAlgo": "SHA256-RSA"
    }
  ],
  "recentObservations": [
    {
      "id": "cf610a75ea6cc403711ab118bc7bdfe5b",
      "observedAt": "2026-09-22T20:47:31.248Z",
      "source": "fingerprint",
      "collector": "fingerprint-1",
      "confidence": "high",
      "state": {
        "services": {
          "80/tcp": {
            "state": "open",
            "product": "Apache HTTP Server",
            "version": "",
            "cert_sha256": "",
            "tls_version": "",
            "service_type": "http"
          },
          "110/tcp": {
            "state": "open",
            "product": "Dovecot",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.2",
            "service_type": "pop3"
          },
          "143/tcp": {
            "state": "open",
            "product": "Dovecot",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.2",
            "service_type": "imap"
          },
          "443/tcp": {
            "state": "open",
            "product": "Apache HTTP Server",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.2",
            "service_type": "https"
          },
          "465/tcp": {
            "state": "open",
            "product": "Postfix",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.3",
            "service_type": "smtps"
          },
          "587/tcp": {
            "state": "open",
            "product": "Postfix",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.3",
            "service_type": "smtp-submission"
          },
          "993/tcp": {
            "state": "open",
            "product": "Dovecot",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.2",
            "service_type": "imaps"
          },
          "995/tcp": {
            "state": "open",
            "product": "Dovecot",
            "version": "",
            "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
            "tls_version": "TLSv1.2",
            "service_type": "pop3s"
          }
        },
        "reverse_dns": "mail.citizenscapital.com.np",
        "technologies": [
          "apache-http-server",
          "dovecot",
          "postfix"
        ]
      },
      "evidence": {
        "ports": [
          21,
          22,
          23,
          25,
          53,
          80,
          110,
          143,
          443,
          445,
          465,
          587,
          993,
          995,
          1433,
          1521,
          3306,
          3389,
          5432,
          5900,
          6379,
          8080,
          8443,
          8888,
          9200,
          27017
        ],
        "services": 8,
        "reachable": true,
        "reverse_dns": "mail.citizenscapital.com.np",
        "ports_probed": 26,
        "technologies": [
          "apache-http-server",
          "dovecot",
          "postfix"
        ],
        "open_services": 8,
        "probe_duration": 50945
      },
      "contentHash": "2916467c51b486733b4fe845b3643e9d456e3d9d00e7f01994f9234ac4e6205f",
      "changed": true
    }
  ],
  "recentChanges": [
    {
      "id": "c4c0cf0996aebd9379225ce05e49966ad",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:995/tcp",
      "previousValue": null,
      "currentValue": "Dovecot / TLSv1.2",
      "detectedAt": "2026-09-22T20:47:31.266Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "c161e03199d4515a42e3e13613e718106",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:993/tcp",
      "previousValue": null,
      "currentValue": "Dovecot / TLSv1.2",
      "detectedAt": "2026-09-22T20:47:31.265Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "c5e76d1b7c91faee977e2cb37c47aaa0d",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:80/tcp",
      "previousValue": null,
      "currentValue": "Apache HTTP Server",
      "detectedAt": "2026-09-22T20:47:31.262Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "c508dc34c9248ffad52307ce168d10c00",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:587/tcp",
      "previousValue": null,
      "currentValue": "Postfix / TLSv1.3",
      "detectedAt": "2026-09-22T20:47:31.261Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "cdc92b05342461acb672ead73797e8029",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:465/tcp",
      "previousValue": null,
      "currentValue": "Postfix / TLSv1.3",
      "detectedAt": "2026-09-22T20:47:31.259Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "c30de587fb6386990a44ae619d59e2b17",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:443/tcp",
      "previousValue": null,
      "currentValue": "Apache HTTP Server / TLSv1.2",
      "detectedAt": "2026-09-22T20:47:31.257Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "c7c38893c3edb2f8d0023232f5f51abd4",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:143/tcp",
      "previousValue": null,
      "currentValue": "Dovecot / TLSv1.2",
      "detectedAt": "2026-09-22T20:47:31.255Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "cc91a665d562013d88bb19174022e72d8",
      "changeType": "NEW_SERVICE",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": "service:110/tcp",
      "previousValue": null,
      "currentValue": "Dovecot / TLSv1.2",
      "detectedAt": "2026-09-22T20:47:31.253Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "endpoint responded on first observation",
      "serviceId": null
    },
    {
      "id": "cd3f817000f8aa7a2a60d8cef1e08ef0d",
      "changeType": "NEW_ASSET",
      "assetId": "cd1e72984e757b178b63655c766d0f0a5",
      "assetValue": null,
      "field": null,
      "previousValue": null,
      "currentValue": "asset with 8 observed open endpoint(s)",
      "detectedAt": "2026-09-22T20:47:31.251Z",
      "significance": "low",
      "severity": "notice",
      "confidence": null,
      "detail": "asset observed for the first time",
      "serviceId": null
    }
  ],
  "dnsRecords": [],
  "state": {
    "current": {
      "services": {
        "80/tcp": {
          "state": "open",
          "product": "Apache HTTP Server",
          "version": "",
          "cert_sha256": "",
          "tls_version": "",
          "service_type": "http"
        },
        "110/tcp": {
          "state": "open",
          "product": "Dovecot",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.2",
          "service_type": "pop3"
        },
        "143/tcp": {
          "state": "open",
          "product": "Dovecot",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.2",
          "service_type": "imap"
        },
        "443/tcp": {
          "state": "open",
          "product": "Apache HTTP Server",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.2",
          "service_type": "https"
        },
        "465/tcp": {
          "state": "open",
          "product": "Postfix",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.3",
          "service_type": "smtps"
        },
        "587/tcp": {
          "state": "open",
          "product": "Postfix",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.3",
          "service_type": "smtp-submission"
        },
        "993/tcp": {
          "state": "open",
          "product": "Dovecot",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.2",
          "service_type": "imaps"
        },
        "995/tcp": {
          "state": "open",
          "product": "Dovecot",
          "version": "",
          "cert_sha256": "cfa3a39ec9a32e4940c354e6f53d50fb8aef407a2659b3df1b0842f2350daed7",
          "tls_version": "TLSv1.2",
          "service_type": "pop3s"
        }
      },
      "reverse_dns": "mail.citizenscapital.com.np",
      "technologies": [
        "apache-http-server",
        "dovecot",
        "postfix"
      ]
    },
    "previous": null,
    "comparable": false
  }
}