{
  "port": 1038,
  "protocol": "both",
  "service": "MTQP (Message Tracking Query Protocol)",
  "oneLiner": "MTQP, the standards-track protocol for asking a mail server what happened to a message — specified, but barely deployed.",
  "whatItIs": "MTQP is defined in RFC 3887 (Standards Track, 2004) and uses TCP 1038. It is a line-oriented text protocol in the style of POP3 and NNTP: a client presents an envelope identifier plus a secret from the SMTP submission, and the server returns the message's tracking history as a MIME body. It was designed to pair with the SMTP message-tracking extension, but almost no mail platform shipped it, so a listener on 1038 in the wild is far more likely to be an unrelated application or a legacy Windows RPC endpoint than a real MTQP server.",
  "exposure": {
    "verdict": "careful",
    "note": "MTQP hands out message routing history to anyone holding the envelope ID and secret, and RFC 3887 expects TLS and authentication; a genuine MTQP server should not sit unprotected on a public IP."
  },
  "checkCommand": "nc -v TARGET 1038",
  "links": [
    {
      "title": "RFC 3887 — Message Tracking Query Protocol",
      "url": "https://www.rfc-editor.org/rfc/rfc3887.html",
      "kind": "spec"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}