WEBSITE ANALYSIS REPORT

http://zenithback.com/

09 Apr 2026 · 23:36:51.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:36:25.851 GET 200 document 174.9 KB 1909 ms 3 alerts

23:36:27.360 GET 200 font 16.9 KB 244 ms 3 alerts

23:36:27.362 GET 200 font 17.4 KB 247 ms 3 alerts

23:36:27.363 GET 200 font 17.4 KB 485 ms 3 alerts

23:36:27.365 GET 200 font 17.2 KB 456 ms 3 alerts

23:36:27.366 GET 200 script 6.0 KB 454 ms 3 alerts

23:36:27.368 GET 200 stylesheet 294 B 454 ms 3 alerts

23:36:27.369 GET 200 script 448.7 KB 459 ms 3 alerts

23:36:27.370 GET 200 stylesheet 48.2 KB 462 ms 3 alerts

23:36:27.371 GET 200 script 508.5 KB 461 ms 3 alerts

23:36:27.372 GET 200 stylesheet 214.2 KB 461 ms 3 alerts

23:36:27.373 GET 200 stylesheet 9.0 KB 460 ms 3 alerts

23:36:27.374 GET 200 stylesheet 2.4 KB 460 ms 3 alerts

23:36:27.375 GET 200 stylesheet 1.4 KB 459 ms 3 alerts

23:36:27.375 GET 200 stylesheet 1.0 KB 459 ms 3 alerts

23:36:27.376 GET 200 stylesheet 1.1 KB 459 ms 3 alerts

23:36:27.377 GET 200 script 1.3 KB 1171 ms —

23:36:27.378 GET 200 script 1.2 KB 457 ms 3 alerts

23:36:27.379 GET 200 img 98.6 KB 457 ms 3 alerts

23:36:27.380 GET 200 img 19.6 KB 457 ms 3 alerts

23:36:27.381 GET 200 script 17.2 KB 457 ms 3 alerts

23:36:27.382 GET 200 script 97.8 KB 456 ms 3 alerts

23:36:27.383 GET 200 script 8.5 KB 456 ms 3 alerts

23:36:27.384 GET 200 script 1.8 KB 456 ms 3 alerts

23:36:27.385 GET 200 script 3.9 KB 455 ms 3 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://zenithback.com/js/two-image-hero-banner-cpt.a33ed4af4a44b0516ee5.js

IP / ASN

35.220.216.189

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: https://zenithback.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (3907)
MIME type: application/javascript
First seen (UTC): 08 Nov 2025 · 15:08:42.098 UTC
Last seen (UTC): 09 Apr 2026 · 23:37:10.016 UTC
Times seen: 2

Size: 3.9 KB (3982 bytes)
MD5: 4a88b672a37ac6dabc20a5bdb3b00a67
SHA1: 1be0b6b6b9ed9f99ac6627b96cdb393c2abb448c
SHA256: 0d469de64c62d82ca542dc036e5d57d4ee3b89391d76335febf3d913c1ac8d40

Certificate information

Issuer: Let's Encrypt · R12
Subject: m.zenithback.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 9B:5D:F2:71:F0:56:0A:0F:75:C7:C1:12:4E:65:22:20:91:51:69:83
Valid from: Fri, 20 Mar 2026 13:32:34 GMT
Valid until: Thu, 18 Jun 2026 13:32:33 GMT

Technology fingerprints

HSTS (Security)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/two-image-hero-banner-cpt.a33ed4af4a44b0516ee5.js HTTP/1.1
Host: zenithback.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zenithback.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Thu, 09 Apr 2026 23:36:27 GMT
content-type: application/javascript
last-modified: Tue, 08 Jul 2025 12:30:17 GMT
vary: Accept-Encoding
etag: W/"686d0f59-f8e"
expires: Fri, 10 Apr 2026 11:36:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

23:36:27.386 GET 200 script 1.3 KB 455 ms 3 alerts

23:36:27.387 GET 200 script 2.7 KB 454 ms 3 alerts

23:36:27.388 GET 200 script 1.2 KB 453 ms 3 alerts

23:36:27.389 GET 200 script 318.2 KB 1203 ms 3 alerts

23:36:28.108 GET 200 script 29.2 KB 1518 ms —

23:36:28.112 GET 200 subdocument 53.0 KB 1672 ms —

23:36:28.164 GET 200 font 33.7 KB 401 ms 3 alerts

23:36:28.234 GET 200 lazy-imageset 63.5 KB 850 ms —

23:36:28.235 GET 200 lazy-imageset 91.4 KB 739 ms —

23:36:28.237 GET 200 lazy-imageset 9.4 KB 332 ms —

23:36:28.239 GET 200 lazy-imageset 2.8 KB 352 ms —

23:36:28.241 GET 200 lazy-imageset 3.1 KB 349 ms —

23:36:28.241 GET 200 lazy-imageset 11.5 KB 381 ms —

23:36:28.778 GET 404 script 56.8 KB 245 ms 3 alerts

23:36:28.784 POST 210 xhr 0 B 302 ms —

23:36:28.807 POST 210 xhr 0 B 229 ms —

23:36:29.088 GET 200 script 407.7 KB 374 ms —

23:36:29.104 GET 200 script 54 B 173 ms —

23:36:29.107 GET 200 script 26.0 KB 52 ms —

23:36:29.109 GET 200 script 29.1 KB 80 ms —

23:36:29.178 GET 404 stylesheet 56.8 KB 246 ms 3 alerts

23:36:29.189 OPTIONS 403 fetch 0 B 927 ms —

23:36:29.199 GET 200 img 43 B 268 ms —

23:36:29.247 GET 200 subdocument 20.0 KB 563 ms —

23:36:29.248 GET 200 xhr 4.6 KB 185 ms —

http://zenithback.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://zenithback.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://zenithback.com/

Domain graph

Network requests