{"report_id":"67b4d8a8-922b-4cc3-9503-1d9ebe0744da","version":6,"status":"done","tags":[],"date":"2026-05-02T12:30:05Z","url":{"schema":"https","addr":"zsc.com.pk","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"zsc.com.pk/","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"title":"Zulfiqar Security Company - Premier Security Services - Berlin","dom":{"size":45642,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26241)","md5":"6ccab6967f8fefc9b6030cdc9fe5ac82","sha1":"168c665375d473171fac2bc7e4dd994584bd426d","sha256":"57bdac78e13509f46dcde1af8a786d103bc28d31078d48889c835bf18571134b","sha512":"186974ec69ca7b5e99e847dd34d21e826e11c9a445861b893cb2ab3b0422445d1dc12a7a785072a7dfc164fe0dfcae309a363cd64e8f9124175cc81f638bf474","ssdeep":"768:XlMeQua2NQts8o+9EA1xnfn0/NSf/eHWYxbpTh8:VvlAsSxfn0/QfwLdn8","tlshash":"43237539c0740e3d996f6bed6465235c21abc34e8bc777e4c1f802d06be2e9c596b498","dom_hash":"domhash85852083b2f2b9756ad4a6eceec3f612","first_seen":"2026-05-02T12:30:11.509444Z","last_seen":"2026-05-02T12:30:11.509444Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zsc.com.pk","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T12:30:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"images.pexels.com","ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-05-15","domain_rank":246953,"first_seen":"2016-11-15T16:49:09Z","last_seen":"2026-04-30T11:40:57.735175Z","alert_count":0,"request_count":2,"received_data":2926377,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"zsc.com.pk","ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-09T08:34:48.555643Z","last_seen":"2026-05-02T01:41:42.522427Z","alert_count":26,"request_count":13,"received_data":1493986,"sent_data":6478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zsc.com.pk/","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-09T18:49:02.644766Z","times_seen":349462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"26b01cf39de6af198838870115dbbe6b","sha1":"85685bdf3417f52d4b7b4a4b5020dc749ed1dee0","sha256":"e589eedd62ec20ce3b747a8abb0a4536e9751fd3b4c595401c708e11174a28ed","sha512":"206d8b7235576575a1697fd7497253cb35d74e64bc6715fd1250711614a90cb4c566d6d53ee9b91398b598fb572be768753e4f352669cc2bcb657c0f27f50a44","ssdeep":"","tlshash":"83f0a38bd264f10b9e3e3464598401510823d75844d7440f9a05968c5fd77e78f17ced","size":477,"data":"","first_seen":"2026-05-02T12:30:11.5367Z","last_seen":"2026-05-02T12:30:11.5367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/webcard/static/app.bundle.1768398969.js","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c70a7265af4c691fd0d6a591e1cd19b","sha1":"abe42c55452f63a487f7de9f856bfd0457021a1c","sha256":"4a5b8ff59c4d25a7568e55071d786c5809bd7e6a5c348052cd4ec81faa22d9c6","sha512":"6a803a8d0200f47a64a73c30d3b4991ea43231d72ac4665677be2f4d5102d5bcf7c73b9004e45628e124b4d431793cccbac9ab49249a92c319cae046e75cb414","ssdeep":"6144:L88XqX1LFCTpx1Jxn4r+tx8/2BHadpiNgOSq/qJrDj:byOSMyj","tlshash":"c0542a8a7291f42203eb11ba506f0606f23a245930269458f77cd8e6bc74e8f6277f7d","size":306291,"data":"","first_seen":"2026-01-22T08:01:37.916595Z","last_seen":"2026-08-03T10:29:24.451258Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/js/custom.260116220753.js","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"511bfc00d028b177632dc0510042a792","sha1":"2196f4b5efc763ca18f9847d83b1987e3f1e120d","sha256":"978c43dd4cf30a18c05dbb24d4e5e78d6d439e971cd153ad0049d54061ae7a0c","sha512":"447203da2d144f93fbd250d3ccd02a594c74bc6fbd7ba3d658c237814aad5f7a899da203bcd36d580f83d22766602139adf555199558ea80f2127a1bbce86f9b","ssdeep":"192:ptg1h51+4t5pTFimMbJE4veN53g2U2Xlc2Me2HZ7lb2Mj2HylQ2E2AlzdDUx86cg:ptg3DpJilmM0gJElcPe0FlbPj0ylQbdA","tlshash":"893284a4f78c31b692bf31bb884b1098223c6171f90789ddfc5c7a642b4693957c6d6c","size":11404,"data":"","first_seen":"2025-11-25T08:46:56.520832Z","last_seen":"2026-08-03T10:29:24.444097Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zsc.com.pk/","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T12:29:41.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:16 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 40888\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40888,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (25738)","md5":"a2f7b30f9588e54939738a8d1309452b","sha1":"fbe1883059cff2a4a33953344d77c9522f85f43d","sha256":"e69b525afe5aa3e6233643cc1baecf6b4cc252e372a29a6932da13780cb1039c","sha512":"1d7182e0e9296ea9a3a92b645dc6f0904922a328a88efc6b9c54867b86f85b9a8e711a66b70ea9a5f67b12efb33d931f64a439b8a7c137936705ebf9ae04a41f","ssdeep":"768:xQyeQua2NQts8o+9EA1MmfDfRuSfTbpThc:yNlAsSM8DfRNf/nc","tlshash":"52035135c0740e3d996f6bed6466235c25abc34ecbc777e4c1f842c06be2e98496b498","first_seen":"2026-05-02T12:30:11.512328Z","last_seen":"2026-05-02T12:30:11.512328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":49,"dns":1,"connect":21,"send":0,"wait":40,"receive":24,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/35562107/pexels-photo-35562107.png","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/35562107/pexels-photo-35562107.png HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2090167\r\nset-cookie: __cf_bm=Tz7jtc33xaz3iDxSLAxDYJp2VU_hZ43yd_kRcrpwSQk-1777724982.1127973-1.0.1.1-_RaW3kn3UCpRwXk2Q0txZGocjvfwrEwodlvqhtzh5ntUzSI8xj2.2s1SnPYxBAykoBdZSoBmL8pV2JOTwWlKSmYM8YbJyRdzolzpx62wzwtno6NeR5bEr.827XzQjLPC; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Sat, 02 May 2026 12:59:42 GMT\n_cfuvid=DfN13CWcHf86Ukc7vCHnq0fquciVrCzuba26zxMrtUw-1777724982.1127973-1.0.1.1-th24j1urxjAxAfHVWBR8WrTTRea6QJWL6pIOzzF2TwI; HttpOnly; SameSite=None; Secure; Path=/; Domain=pexels.com\r\ncf-ray: 9f5708723c52b1b8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 02 May 2027 12:29:42 GMT\r\nlast-modified: Sun, 26 Apr 2026 00:05:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: d53cc08491bcde8a746fadf0b928de9053550ddc\r\nx-served-by: cache-fra-eddf8230044-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2090167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6720x4480, components 3","md5":"1016621752c672a91b845e7683abb365","sha1":"7c021ec1f3a24f37a4ca71ff481018e8ba5ce6c5","sha256":"8d27b4468c9bed7bab3475368b116ec978cea1c3730ebabe88c0845f169db8db","sha512":"093c675bda837339c65b1867e0be85157ba4e4c36ea2e14955aae0c218bc2306c24b247f01b077fa52c5a331d1bf5e39eba4216b7d676ded2312ffeb58a0bbb6","ssdeep":"24576:I+Tbl4bJXYfsm8jhXikUxGKC18Kc7QJAg8383x:I+lktZyd0Bc7tgo83x","tlshash":"92252373a708dda6d1ac337a0d87824a3d328d91e6de149bc7a444b6781fb707c8e1d9","first_seen":"2026-05-02T12:30:11.514696Z","last_seen":"2026-05-02T12:30:11.514696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":16,"dns":4,"connect":1,"send":0,"wait":83,"receive":137,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/g/static/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /g/static/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/g/fonts.css?family=Open+Sans:400%7CMontserrat:400,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:22 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 18640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-08-09T17:44:10.795292Z","times_seen":44662,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/api.php/form_container/captcha","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"POST /api.php/form_container/captcha HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 20\r\nOrigin: https://zsc.com.pk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"id=1550612152\u0026token="}},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nserver: BitNinja-Waf3, nginx\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 3513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"f71c8383b48024033e9644924d709f79","sha1":"63b31b9654428a3943b232f8ed704db2fd6842d4","sha256":"c673131a90abd3d74e3ab42421dfdac154c363a1901762d87d8eb59b4e03be97","sha512":"e8a4a61824ff89b2e074b164fc1a59354bb5882d3adfc325f223376d1842fa50e8447446bb60a41a2f1802860be3ca92e9f3099026ad1b5a4ed8323aa1bfb087","ssdeep":"96:W/e27bKWHVTZCjSWlpV5YlNMiB92SbpEtFRsKKH/l:we2RHpddlNMiB9jb6bRsKAl","tlshash":"f4917d3d46947db2df14b8006e90633d1caeda9f06e8a81360c5296e363d5a2ed6a031","first_seen":"2026-05-02T12:30:11.518324Z","last_seen":"2026-05-02T12:30:11.518324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/3153207/pexels-photo-3153207.jpeg","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 20:57:05 GMT","end":"Mon, 06 Jul 2026 20:57:04 GMT"},"fingerprint":{"sha1":"7A:33:B2:9D:52:27:0B:AA:9A:32:29:E4:97:F5:70:1E:54:B0:E0:71","sha256":"D4:8C:EE:77:0E:BB:EA:D8:EF:B7:34:DE:E4:0E:4A:27:BD:65:D6:F5:D2:27:C4:6B:D9:87:7C:B0:10:A0:F6:5F"}}},"request":{"raw":"GET /photos/3153207/pexels-photo-3153207.jpeg HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nCookie: _cfuvid=DfN13CWcHf86Ukc7vCHnq0fquciVrCzuba26zxMrtUw-1777724982.1127973-1.0.1.1-th24j1urxjAxAfHVWBR8WrTTRea6QJWL6pIOzzF2TwI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 834100\r\ncf-ray: 9f5708739b7c56b1-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 926615\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 02 May 2027 12:29:42 GMT\r\nlast-modified: Tue, 14 Apr 2026 14:59:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: de6740d2c5eeda0b2b354413e432426876db8312\r\nx-served-by: cache-fra-eddf8230109-FRA\r\nset-cookie: __cf_bm=ZmV_tItUXeowjm2pe92ki0VpsMLOa3gvPRAY07tUdLk-1777724982.3361857-1.0.1.1-ZRObYqg7KUmbavjymbhcNrN6CAzzrB9qoYOSbRRi5FTPfxgIXEFLqT1ukHOF1Kr2k70oKaqOtEnfvzR5FRmJU0Huh7PTFeuvafCmloPlioVvslZn.wBylpRiAbGWi58r; HttpOnly; Secure; Path=/; Domain=pexels.com; Expires=Sat, 02 May 2026 12:59:42 GMT\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 3960x2640, components 3","md5":"087b219986444ef4eae6dc444422b6d6","sha1":"0c4717d3591e36ca8e8f2fedcb38cc00d176abc1","sha256":"a6092b7684f333772508dbf2952cec28edd558ac0dd4bd04d1282e471be0a0cb","sha512":"dce0297798c12ea1b6c69ab426e3a45c5a858ac371ccf76f2d6bc74c19a1e7b820b3a21d50ef10993849c599df851f956f7c88ed45ddbea8700fe0f8bd3a4d44","ssdeep":"24576:Nn0WV+2on++JPiUnUdAXybIxrlOvzeMut:tFQx+5YUdUybCMvzed","tlshash":"900523a89f52db05d25773382c0869b31476dc6ce6796823c637a4f6106eef70eb81e4","first_seen":"2026-04-26T02:10:43.888259Z","last_seen":"2026-05-02T12:30:11.520789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/css/custom.260116220753.css","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /css/custom.260116220753.css HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:25 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 824301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":824301,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a13a3ebc1cb42e8ca6f7fb7ae52ad906","sha1":"0caa0801c9becbb2d70b0954f255cb6bb14a8df1","sha256":"09d284eba5277f617dacc5e680049a5421acbb3ed6eb7b9a4ed2caa565ac5f75","sha512":"4172eaf4df3e74361c480ed7baef14d1435b0088283b092d1a5d4280e529ccf66cbb6f68877ad45f410177ae8a469e5053f56743ed39cc7ad98fba15ff02c389","ssdeep":"3072:5Fybs6dD06wAwU5vbBLC2TSbOCOq+tXRD9CahnmehDoMp3YUXRV3KqXFG/7acpeH:5FyC2TSbOCOq+tX1/6i3KBba","tlshash":"610530a4316a5d7808598b3e318a4bac7f35f860c34ad5cfe0b26e883fd5e5074d9b85","first_seen":"2026-05-02T12:30:11.523459Z","last_seen":"2026-05-02T12:30:11.523459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/images/0/22465097/zsclogo11-Rp4CK1Af-OJny2B6qoPjSw.png","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /images/0/22465097/zsclogo11-Rp4CK1Af-OJny2B6qoPjSw.png HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nserver: BitNinja-Waf3, nginx\r\ncontent-length: 420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"42675cf23b9aafc64f0e59271ecd9362","sha1":"f973922f2884e0a40bc2e3a3afff614466751fa7","sha256":"5065312170fa885cb89ff2d902cb2310e7ea43911f9d87d991318953ff301008","sha512":"1dd78127094466158d8163f463aaea8ea575dc67f3b379eb7b8d3f9624d3396714adb0772809e691d389f0b2353b63cc2588bc26260e5a642d0e8f528e267e73","ssdeep":"","tlshash":"fee0ab5f826e211a5793e3807ed013a1f812a22c399162dc6b4c956b60859bd827ba9c","first_seen":"2025-12-09T07:56:16.791492Z","last_seen":"2026-08-08T23:13:08.272107Z","times_seen":220,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/g/static/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /g/static/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/g/fonts.css?family=Open+Sans:400%7CMontserrat:400,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:21 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 37956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-08-09T18:07:43.549732Z","times_seen":41875,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/g/static/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /g/static/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/g/fonts.css?family=Open+Sans:400%7CMontserrat:400,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:21 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 37956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-08-09T18:07:43.549732Z","times_seen":41875,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/webcard/static/app.bundle.1768398969.js","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /webcard/static/app.bundle.1768398969.js HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: application/javascript\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:23 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 306291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"0c70a7265af4c691fd0d6a591e1cd19b","sha1":"abe42c55452f63a487f7de9f856bfd0457021a1c","sha256":"4a5b8ff59c4d25a7568e55071d786c5809bd7e6a5c348052cd4ec81faa22d9c6","sha512":"6a803a8d0200f47a64a73c30d3b4991ea43231d72ac4665677be2f4d5102d5bcf7c73b9004e45628e124b4d431793cccbac9ab49249a92c319cae046e75cb414","ssdeep":"6144:L88XqX1LFCTpx1Jxn4r+tx8/2BHadpiNgOSq/qJrDj:byOSMyj","tlshash":"c0542a8a7291f42203eb11ba506f0606f23a245930269458f77cd8e6bc74e8f6277f7d","first_seen":"2026-01-22T08:01:37.916595Z","last_seen":"2026-08-03T10:29:24.451258Z","times_seen":46,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/webcard/static/app.min.1768398951.css","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /webcard/static/app.min.1768398951.css HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:17 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 120541\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65356)","md5":"d922ed7c07943303bf61b8b1633c2888","sha1":"8b430c592c963425353577685ede93d9493ab9e9","sha256":"6e62c8e5dcb51448e077fe515aceb1677135740cd62b2c0e4fe02755bd03b17b","sha512":"faeac2a3b14dca2aeb00ccaddf918909506d341b7629f50cea2cef705c663db452b820220e280ce2af3319a89511ad02149b42951c2986c563c271037edd319e","ssdeep":"768:syr+KZK3Iacfx1Uz6J+yQ/SJvacMBMhiRRNFj6PRKWr:syrtayUz6J1jJvacMBMhS/Fj6Pt","tlshash":"70c3bd9091461de46b79c21f9a42fbddffdae72ec2590c84f1e5401cc8d4e8610dabae","first_seen":"2025-09-20T00:47:03.16241Z","last_seen":"2026-08-03T10:29:24.439817Z","times_seen":270,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/g/fonts.css?family=Open+Sans:400%7CMontserrat:400,700\u0026display=swap","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /g/fonts.css?family=Open+Sans:400%7CMontserrat:400,700\u0026display=swap HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:20 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 9207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"fb8e25b8753c3ec1f99c8f421976b572","sha1":"a03e7467507d24944821a2c3974c39a154a0b8c1","sha256":"0f824cdf19cddb52321c26c6ff2d7b09de3e20f8515b6bd70a48537cc91298ee","sha512":"e7f65384d0f55aad0c933319217c94ab160b8e3d4bd72d01a77849e9926f45be4043b60e8807f5fe2af10ad8af9f35a1f1640e30ab77958169e485f148d6db80","ssdeep":"192:qIaUhybsmUIDU87bRmJ1AOrBt1AVqbKbqGIwV4R7tqJ:rN0on5tyqY4E","tlshash":"5a120e40042b6400635b1cda27ce3e31de4ee2a17044d436affe1b5aeedad65637572d","first_seen":"2025-09-21T14:27:09.532538Z","last_seen":"2026-07-17T03:08:48.594473Z","times_seen":13,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/js/custom.260116220753.js","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:41.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /js/custom.260116220753.js HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: application/javascript\r\ndate: Sat, 02 May 2026 12:29:41 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:23 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 11404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11404,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"511bfc00d028b177632dc0510042a792","sha1":"2196f4b5efc763ca18f9847d83b1987e3f1e120d","sha256":"978c43dd4cf30a18c05dbb24d4e5e78d6d439e971cd153ad0049d54061ae7a0c","sha512":"447203da2d144f93fbd250d3ccd02a594c74bc6fbd7ba3d658c237814aad5f7a899da203bcd36d580f83d22766602139adf555199558ea80f2127a1bbce86f9b","ssdeep":"192:ptg1h51+4t5pTFimMbJE4veN53g2U2Xlc2Me2HZ7lb2Mj2HylQ2E2AlzdDUx86cg:ptg3DpJilmM0gJElcPe0FlbPj0ylQbdA","tlshash":"893284a4f78c31b692bf31bb884b1098223c6171f90789ddfc5c7a642b4693957c6d6c","first_seen":"2025-11-25T08:46:56.520832Z","last_seen":"2026-08-03T10:29:24.444097Z","times_seen":81,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/images/0/22465097/zsclogo11-Rp4CK1Af-OJny2B6qoPjSw.png","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /images/0/22465097/zsclogo11-Rp4CK1Af-OJny2B6qoPjSw.png HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nserver: BitNinja-Waf3, nginx\r\ncontent-length: 420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"42675cf23b9aafc64f0e59271ecd9362","sha1":"f973922f2884e0a40bc2e3a3afff614466751fa7","sha256":"5065312170fa885cb89ff2d902cb2310e7ea43911f9d87d991318953ff301008","sha512":"1dd78127094466158d8163f463aaea8ea575dc67f3b379eb7b8d3f9624d3396714adb0772809e691d389f0b2353b63cc2588bc26260e5a642d0e8f528e267e73","ssdeep":"","tlshash":"fee0ab5f826e211a5793e3807ed013a1f812a22c399162dc6b4c956b60859bd827ba9c","first_seen":"2025-12-09T07:56:16.791492Z","last_seen":"2026-08-08T23:13:08.272107Z","times_seen":220,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zsc.com.pk/webcard/static/fonts/fontawesome-webfont.20fd1704.woff2","fqdn":"zsc.com.pk","domain":"zsc.com.pk","tld":"com.pk"},"ip":{"addr":"161.97.124.97","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zsc.com.pk/","date":"2026-05-02T12:29:42.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zsc.com.pk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 11:51:37 GMT","end":"Sat, 04 Jul 2026 11:51:36 GMT"},"fingerprint":{"sha1":"E1:D1:BD:50:78:5D:7E:4D:83:27:B6:CB:3E:E4:95:11:5D:32:30:97","sha256":"00:4D:C2:13:5A:82:A1:2E:85:B3:98:23:D3:8C:62:E2:05:9F:75:EA:E4:E9:35:91:3C:9E:01:5D:4F:92:F4:4F"}}},"request":{"raw":"GET /webcard/static/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1\r\nHost: zsc.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zsc.com.pk/webcard/static/app.min.1768398951.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":60413\"; ma=2592000,h3=\":60418\"; ma=2592000,h3=\":60414\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Sat, 02 May 2026 12:29:42 GMT\r\nlast-modified: Fri, 16 Jan 2026 21:13:18 GMT\r\nserver: BitNinja-Waf3, nginx\r\nx-content-type-options: nosniff\r\ncontent-length: 77160\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-09T18:50:27.892534Z","times_seen":529295,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-02","alert":"Phishing Block","trigger":"zsc.com.pk","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"zsc.com.pk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
