whois.handle: DISNEY-KMTC5
whois.name: Disney Worldwide Services, Inc.
whois.cidrs: 139.104.36.0/23
whois.created: 2023-08-28T00:00:00.000000
whois.updated: 2023-08-28T00:00:00.000000
whois.allocation_type: REASSIGNMENT
whois.handle: DWS
whois.name: Disney Worldwide Services, Inc.
whois.street: 500 South Buena Vista Street
whois.city: Burbank
whois.state: CA
whois.postal_code: 91521
whois.country: US
whois.handle: DIS32-ARIN
whois.name: DTSS Information Security
whois.email: InfoSec.FIRE@disney.com
whois.handle: JM1073-ARIN
whois.name: Jeffrey Mansukhani
whois.email: jeff.mansukhani@disney.com
whois.handle: ARINT65-ARIN
whois.name: arin-tech
whois.email: EnterpriseTech.DL-ARIN.Contacts@disney.com
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T23:47:22.008315
services.banner: HTTP/1.0 302 Moved Temporarily
  Location: https://139.104.36.7/
  Server: BigIP
  Connection: Keep-Alive
  Content-Length: 0
  
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: F5
services.product: BIG-IP LTM
services.cpe: cpe:2.3:a:f5:big\-ip_local_traffic_manager:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.product: Linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: network.device
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T23:47:22.008315
services.uri: http://139.104.36.7/
services.protocol: HTTP/1.0
services.status_reason: Moved Temporarily
services.key: Location
services.headers: https://139.104.36.7/
services.key: Server
services.headers: BigIP
services.key: Connection
services.headers: Keep-Alive
services.key: Content-Length
services.headers: 0
services.supported_versions: HTTP/1.0 HTTP/2
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T11:25:30.269218
services.banner: HTTP/1.1 302 Found
  Content-Type: text/html; charset=utf-8
  Location: https://login.windows.net/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f139.104.36.7%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&client-request-id=83eabfcf-db28-4d0d-af4c-bcbd5658d09b&protectedtoken=false&nonce=638892123311243032.MzBjYjlhNmItMDM3Mi00MjI2LThmZjAtM2Q1NjFiODM4YmM3LmM4M2Q4NzkwLWY5NDMtNGQzMC04MjE0LTkzOTY4MTE2ZTNmNA&state=DY2xCsIwFABTxd-xyXtR2rGaKoW8VwoBSTe3NjW4RAr5ejPcDbdcJYQ4Fg6FShaJ3xWbpgUFiEqBRolwpnwLPnwWjkMiQ0irlBQGsG6Jc-gSwaQ4PNbRkPaR0EbSpWnO225f_sKGEj-nTHepKfTSui2PzmtyPcyOI3dVOZ_q7_6u_w
  Server: Microsoft-IIS/10.0
  request-id: 0f49488d-4949-4275-afd1-ed560111161a
  P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
  Set-Cookie: OIDC=1; expires=Tue, 27-Jan-2026 11:25:31 GMT; path=/; secure; HttpOnly
  Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.token.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.id_token.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.code.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OpenIdConnect.nonce.v1.JS16O6GfmhI2Xp5bNQjtOokSOsp9Ma5cTII2RUoAZ9o=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; path=/; secure; HttpOnly
  Set-Cookie: HostSwitchPrg=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: OptInPrg=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
  X-OWA-Version: 15.2.1748.10
  X-Powered-By: ASP.NET
  X-FEServer: CMNCKEX1911
  Date:  <REDACTED>
  Content-Length: 803
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 6542d176bed50f193c0ce297ae44ecd8a0a86bec2ede682769344059b4e78530
services.subject_dn: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
services.issuer_dn: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46
services.ja4s: t120200_c030_fee41c0d62a8
services.version: TLSv1_2
services.ja4s: t120200_c030_fee41c0d62a8
services.names: autodiscover.disney.com outlook.disney.com outlookhybrid.disney.com outlookmrskm.disney.com outlookmrsn7.disney.com
services.issuer_dn: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
services.common_name: Sectigo Public Server Authentication CA OV R36
services.country: GB
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=The Walt Disney Company, CN=outlook.disney.com
services.common_name: outlook.disney.com
services.country: US
services.province: California
services.organization: The Walt Disney Company
services.scan_time: 2025-07-16T19:32:23.270413
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: F5
services.product: BIG-IP Access Policy Manager
services.cpe: cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Microsoft
services.product: IIS
services.version: 10.0
services.cpe: cpe:2.3:a:microsoft:internet_information_services:10.0:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Microsoft
services.product: ASP.NET
services.cpe: cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Microsoft
services.path: /owa/
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T11:25:30.269218
services.uri: https://139.104.36.7/owa/
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://login.windows.net/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f139.104.36.7%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&client-request-id=83eabfcf-db28-4d0d-af4c-bcbd5658d09b&protectedtoken=false&nonce=638892123311243032.MzBjYjlhNmItMDM3Mi00MjI2LThmZjAtM2Q1NjFiODM4YmM3LmM4M2Q4NzkwLWY5NDMtNGQzMC04MjE0LTkzOTY4MTE2ZTNmNA&state=DY2xCsIwFABTxd-xyXtR2rGaKoW8VwoBSTe3NjW4RAr5ejPcDbdcJYQ4Fg6FShaJ3xWbpgUFiEqBRolwpnwLPnwWjkMiQ0irlBQGsG6Jc-gSwaQ4PNbRkPaR0EbSpWnO225f_sKGEj-nTHepKfTSui2PzmtyPcyOI3dVOZ_q7_6u_w
services.key: Server
services.headers: Microsoft-IIS/10.0
services.key: request-id
services.headers: 0f49488d-4949-4275-afd1-ed560111161a
services.key: X-FEServer
services.headers: CMNCKEX1911
services.key: P3P
services.headers: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
services.key: Content-Type
services.headers: text/html; charset=utf-8
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: OIDC=1; expires=Tue, 27-Jan-2026 11:25:31 GMT; path=/; secure; HttpOnly OpenIdConnect.token.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.token.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.id_token.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.code.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.idp_nonce.v1=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.id_token.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.code.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.idp_nonce.v1=; domain=139.104.36.7; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OpenIdConnect.nonce.v1.JS16O6GfmhI2Xp5bNQjtOokSOsp9Ma5cTII2RUoAZ9o=AQAAAHAAAADOq6ZrjmMFYIj/hAvWybTmNX6CpoK0nMCA4ZNOABe1p8oDNrJNYbw+BWV42DOxMoY3/12t9yjq2xwPW/7gSFZ+JDQ6kiIYGx8NGdCKOmqUXRPAzWurezfJPr5aQR8jC3ngeMdrVz8cuiCqmRknfwnVAAEAAH3vniUF3akuEMjFVJbLE4rG6hM/EiN9hzbUIH3eAq6BZhgMx+lYVWKAY2vkqrj55EvwWHZPWhuKrkSpMxxfnYE3MAUJMNGR252qtwDTS7Zcow6ytn4xdPr5lVWU5B+Ji6lapWgdV4F2QcHDrolVhYnAWhsqDuuOp4JK2eXJ0fn7TDe5AbUV2hguEM2MXjgMBziXukpXM6G/iMeqNPqGl1no6NKQDTj8BtIl124BrGj08Qu3hdcTUHMwOPePzIIRAfU6/degIInwdPArHjg9MNq3FtTpb04H5c8eFYgAjHWKi1sO3TSUaiJ5pUtxbGZyI7mFfP4Ws6P9P9hvaxfnYTAAAQAACkFHIMDNghcD1LEtyr3G8UTvYbeSqzZcXC84eN2iVPDoSbFnQl+p1RTudm8zOg0rwjFknlxRtLS/wSTSC8X4E3cqu0pqcPSzN4wKxZyGBobBZJsKDt60d0f6gDoXmMFrL3+7ua5gSganO0i/1ZL8RVGsT2yX9yEbCQNZsA13PmChqSTN3d2NndGml5BxhNt0AJU2Q1kfp6Scv4q0keFpLu++RrDrSqXaE6WjYx/ZxwgTAWeXkwyyLs3+UeGUByXXIDXpposj7UTBSLed+s4rH/tGJkV+uViOv3GFhzpRUpaZvmfF1OcQMf+VhY/xkUBRqTtGB8uYsgfci/I228LdsQABAAAD09/e3/gBAhc9/gx1OHHrq2GOKB+b7lGNA6gv0pUCQVnbvSIvWdwOxxxuOGxlavasL24xn1MuvaW/LbVg77MeTP6BjJ65402UH7XvUkK8DA3vSPA9XIZQv9D5BTQLbNz3dPGbCCJaNPGPMZLT3RkewaqWAovq/xLakHYnNBQ9eU6205wfAspCoKT+RgGDfgth0dft+h7APb4zOOASXNyk2jegYRlV/5iWjO9jq4t9uazhGHndRbZ9RPDATswfcFIBbObTdBwuoegDpGFJRMOO/g3MTSBLl2DUJtd+GoJ0U3FO9a9HumlZ+f+hwM+mbJcFfngJWn8JATlU9HDF0UIP; path=/; secure; HttpOnly HostSwitchPrg=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure OptInPrg=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure SuiteServiceProxyKey=; expires=Thu, 27-Jul-1995 11:25:31 GMT; path=/; secure
services.key: X-Powered-By
services.headers: ASP.NET
services.key: X-OWA-Version
services.headers: 15.2.1748.10
services.key: Content-Length
services.headers: 803
services.html_tags: <title>Object moved</title>
services.body: <html><head><title>Object moved</title></head><body>
  <h2>Object moved to <a href="https://login.windows.net/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&amp;redirect_uri=https%3a%2f%2f139.104.36.7%2fowa%2f&amp;resource=00000002-0000-0ff1-ce00-000000000000&amp;response_mode=form_post&amp;response_type=code+id_token&amp;scope=openid&amp;msafed=0&amp;client-request-id=83eabfcf-db28-4d0d-af4c-bcbd5658d09b&amp;protectedtoken=false&amp;nonce=638892123311243032.MzBjYjlhNmItMDM3Mi00MjI2LThmZjAtM2Q1NjFiODM4YmM3LmM4M2Q4NzkwLWY5NDMtNGQzMC04MjE0LTkzOTY4MTE2ZTNmNA&amp;state=DY2xCsIwFABTxd-xyXtR2rGaKoW8VwoBSTe3NjW4RAr5ejPcDbdcJYQ4Fg6FShaJ3xWbpgUFiEqBRolwpnwLPnwWjkMiQ0irlBQGsG6Jc-gSwaQ4PNbRkPaR0EbSpWnO225f_sKGEj-nTHepKfTSui2PzmtyPcyOI3dVOZ_q7_6u_w">here</a>.</h2>
  </body></html>
  
services.body_hash_sha1: sha1:e6b4d49c13a307d6757a3c0241d253ffe76de910
services.supported_versions: HTTP/1.1 HTTP/2
[binary data, 10 values, 254 bytes]