WEBSITE ANALYSIS REPORT

https://zentexa.com/acrobat/dc

10 Sep 2026 · 08:42:46.000 UTCpublic

Report tags: adobe phishing suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

8 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:42:14.518 GET 301 document 0 B 705 ms 4 alerts

08:42:15.231 GET 200 document 1.15 MB 1032 ms 6 alerts

08:42:16.108 GET 404 script 0 B 0 ms 4 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://zentexa.com/acrobat/dc/m/js/utils.js

IP / ASN

68.66.226.89

AS55293 · A2HOSTING

Requested by: https://zentexa.com/acrobat/dc/

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 16:44:04.869 UTC
Times seen: 19285755

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: www.zentexa.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 35:B0:6C:1C:F2:8B:0F:6E:49:B3:3E:6B:69:7C:52:2E:7E:57:16:9C
Valid from: Sun, 02 Aug 2026 17:03:17 GMT
Valid until: Sat, 31 Oct 2026 17:03:16 GMT

Technology fingerprints

LiteSpeed (Web servers)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Adobe	medium	Phishing
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /acrobat/dc/m/js/utils.js HTTP/1.1
Host: zentexa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://zentexa.com/acrobat/dc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 404 
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Thu, 10 Sep 2026 08:42:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000

08:42:16.291 GET 404 script 0 B 0 ms 4 alerts

08:42:16.297 GET 200 img 14.8 KB 79 ms 1 alerts

08:42:16.299 GET 301 img 0 B 45 ms —

08:42:16.300 GET 301 img 0 B 38 ms —

08:42:16.301 GET 301 img 0 B 39 ms —

08:42:16.302 GET 301 img 0 B 38 ms —

08:42:16.485 GET 200 img 2.1 KB 72 ms 1 alerts

08:42:16.486 GET 200 img 639 B 72 ms 1 alerts

08:42:16.488 GET 200 img 174 B 69 ms 1 alerts

08:42:16.489 GET 200 img 769 B 68 ms 1 alerts

08:42:16.676 GET 404 img 796 B 168 ms 4 alerts

https://zentexa.com/acrobat/dc

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://zentexa.com/acrobat/dc

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://zentexa.com/acrobat/dc

Domain graph

Network requests