162.241.217.243302 Found 0 B URL User Request GET HTTP/2 IP 162.241.217.243:443
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET / HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: signin
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 13:55:35 GMT
server: Apache
X-Firefox-Spdy: h2
162.241.217.243301 Moved Permanently 239 B URL User Request GET HTTP/2 IP 162.241.217.243:443
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 37da38e1ffff23025eb9ebd0d047e5ac
d61bbfdd4392a477c2cebaecad64751f84a0ab98
76b0c2636b18e771c6ff5a10357991857ce3320f683fbddc19d2feea1620a394
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /signin HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
location: https://pp.tzanoinc.com/signin/
content-length: 239
content-type: text/html; charset=iso-8859-1
date: Tue, 05 Dec 2023 13:55:35 GMT
server: Apache
X-Firefox-Spdy: h2
162.241.217.243200 OK 5.0 kB URL User Request GET HTTP/2 IP 162.241.217.243:443
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (766), with CRLF line terminators
Hash 600f8ec5338756b6ca04850096c1d995
6fdb17e6333a6c5401cd555f0921fc588e29ee7f
0674cc0f84608520b0b529c54295133d4f8ff0c694ad6a5124d15c9559f66583
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /signin/ HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: none
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5049
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 13:55:35 GMT
server: Apache
X-Firefox-Spdy: h2
pp.tzanoinc.com/ck_squad_assets/spinner.gif
162.241.217.243200 OK 7.7 kB URL GET HTTP/2 pp.tzanoinc.com/ck_squad_assets/spinner.gif
IP 162.241.217.243:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type GIF image data, version 89a, 48 x 48\012- data
Hash d77c7be43fa0d7a974d949c827b93e5f
24ec2252aebce0906f18859a01bbe03735398b38
d1ae7277d8ad6c4ecfb1f2269db1cfd85a04c8e2b97a3c2bf4c65fa622fe9e08
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /ck_squad_assets/spinner.gif HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/signin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 May 2018 04:34:50 GMT
accept-ranges: bytes
content-length: 7732
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Tue, 05 Dec 2023 13:55:37 GMT
server: Apache
X-Firefox-Spdy: h2
pp.tzanoinc.com/ck_squad_assets/jquery-blockUI.js
162.241.217.243200 OK 7.8 kB URL GET HTTP/2 pp.tzanoinc.com/ck_squad_assets/jquery-blockUI.js
IP 162.241.217.243:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type ASCII text, with CRLF line terminators
Hash 0ec0e79048c36fb32633b745efaaf508
63c2f5d7770e51a1776a45f9d9fae8a57b76d45a
01d85b8d77a922bd7227d3a0595b13b6c387e0b66589403b406e5120e728a46a
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /ck_squad_assets/jquery-blockUI.js HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/signin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 May 2018 05:20:18 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 7757
content-type: application/javascript
date: Tue, 05 Dec 2023 13:55:37 GMT
server: Apache
X-Firefox-Spdy: h2
ibx.key.com/ibxolb/login/images/key-logo.svg
23.52.18.181200 OK 6.1 kB URL GET HTTP/2 ibx.key.com/ibxolb/login/images/key-logo.svg
IP 23.52.18.181:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerDigiCert Inc
Subjectonline.key.com
FingerprintE0:B3:EF:F0:3E:62:AF:68:19:8D:6A:95:5B:1F:C4:54:67:32:E1:3D
ValidityFri, 20 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5966)
Hash b4284724f45b84236572906bb9309724
a919c3dec8149ae38b71d233f4b7d9391ac91691
4712701bf2f3b3b93bdfc9aa8c2c3e8dbdf6f3c4cbce9fc9a766c7cb5b281e5b
GET /ibxolb/login/images/key-logo.svg HTTP/1.1
Host: ibx.key.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "6543bbb9-17b8"
last-modified: Thu, 02 Nov 2023 15:09:45 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors *.key.com
strict-transport-security: max-age=16070400; includeSubDomains
server-timing: dtSInfo;desc="0", dtRpid;desc="-1211562055"
content-length: 6072
cache-control: max-age=300
expires: Tue, 05 Dec 2023 14:00:37 GMT
date: Tue, 05 Dec 2023 13:55:37 GMT
X-Firefox-Spdy: h2
ibx.key.com/ibxolb/login/client/favicon.ico
23.52.18.181200 OK 14 kB URL GET HTTP/2 ibx.key.com/ibxolb/login/client/favicon.ico
IP 23.52.18.181:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerDigiCert Inc
Subjectonline.key.com
FingerprintE0:B3:EF:F0:3E:62:AF:68:19:8D:6A:95:5B:1F:C4:54:67:32:E1:3D
ValidityFri, 20 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, -128x-128, 16 colors\012- data
Hash ab9ef0802c04eaed3a46a84c2f3c0997
d79517e1584b4557bd8e3712b5a0bb3970f55742
c5d356d244ba9961864f3ecf4d3f52949d0be961926d6a36066a49312aa556ab
GET /ibxolb/login/client/favicon.ico HTTP/1.1
Host: ibx.key.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/x-icon
etag: "6543bbb9-387e"
last-modified: Thu, 02 Nov 2023 15:09:45 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 0
content-security-policy: frame-ancestors *.key.com
strict-transport-security: max-age=16070400; includeSubDomains
server-timing: dtSInfo;desc="0", dtRpid;desc="2126994247"
content-length: 14462
cache-control: max-age=300
expires: Tue, 05 Dec 2023 14:00:37 GMT
date: Tue, 05 Dec 2023 13:55:37 GMT
X-Firefox-Spdy: h2
pp.tzanoinc.com/ck_squad_assets/webstatic/icon/pp64.png
162.241.217.243200 OK 4.5 kB URL GET HTTP/2 pp.tzanoinc.com/ck_squad_assets/webstatic/icon/pp64.png
IP 162.241.217.243:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced\012- data
Hash 5ff4fb77dc2ba5364283b18256b34e1a
37f8e1586e4a091d7a0a266842fd3a3d4e15c5aa
965b855f8212fb12dac35c751da64ae8c1a10ab93ac274c0f40c1d28d159ebce
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /ck_squad_assets/webstatic/icon/pp64.png HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/signin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 May 2014 05:54:50 GMT
accept-ranges: bytes
content-length: 4518
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Tue, 05 Dec 2023 13:55:37 GMT
server: Apache
X-Firefox-Spdy: h2
pp.tzanoinc.com/ck_squad_assets/jquery-1.9.1.js
162.241.217.243200 OK 340 kB URL GET HTTP/2 pp.tzanoinc.com/ck_squad_assets/jquery-1.9.1.js
IP 162.241.217.243:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
Size 340 kB (339451 bytes)
Hash d9525442de9d0e9dde2991da2efc97a0
abb07fe1811ef35d81f5f0c90ad861b50a616855
4b74cd6558766066b7a808b146879429f9e1be687a9d413f1d8059df3adbf2b0
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /ck_squad_assets/jquery-1.9.1.js HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/signin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 09 Apr 2018 18:41:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Tue, 05 Dec 2023 13:55:37 GMT
server: Apache
X-Firefox-Spdy: h2
pp.tzanoinc.com/ck_squad_assets/web/res/dc4/38f805dc755e79c5e1c20794a80fd/css/siegok.css
162.241.217.243200 OK 89 kB URL GET HTTP/2 pp.tzanoinc.com/ck_squad_assets/web/res/dc4/38f805dc755e79c5e1c20794a80fd/css/siegok.css
IP 162.241.217.243:443
Requested by https://pp.tzanoinc.com/signin/
Certificate IssuerLet's Encrypt
Subjectwww.et.tzanoinc.com
Fingerprint8A:24:7F:61:2E:F0:A7:A3:AF:B4:62:2D:3E:3A:72:02:8E:73:C4:E0
ValiditySat, 02 Dec 2023 05:41:41 GMT - Fri, 01 Mar 2024 05:41:40 GMT
File type ASCII text, with very long lines (530)
Hash 2e7da8db7df48fbeef4c43a54ae2c13d
ab0be1ca059546b0874c87f405256b1610ff182c
20982c2fe4bcf9021e2d58b9b8fdc1d7167766d707d5cf76fcafe2e09eaaf776
Analyzer Verdict Alert urlquery phishing Phishing - PayPal
GET /ck_squad_assets/web/res/dc4/38f805dc755e79c5e1c20794a80fd/css/siegok.css HTTP/1.1
Host: pp.tzanoinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pp.tzanoinc.com/signin/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 29 Sep 2023 00:59:43 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Tue, 05 Dec 2023 13:55:37 GMT
server: Apache
X-Firefox-Spdy: h2