Zylyf – Creative Brutalist Agency & Portfolio Word · Sep 07, 2026, 07:26 AM UTC
Cleanzip70 entriescrc-verifiedphpjavascriptcss
ZIP
5.16 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Zylyf
Version
1.0.0
Version check
Match
package and product page both state 1.0.0
Author
Elite Author
Author URI
https://max-themes.net
Project URI
https://max-themes.net/zylyf
Description
Zylyf is a premium creative interactive showcase WordPress theme built with advanced WebGL liquid animations, custom metaball shaders, and customizable typography styles designed specifically for modern portfolios, fashion-forward agencies, and avant-garde studios.
Zylyf – Creative Brutalist Agency & Portfolio Word
File type
ZIP archive
File size
5.16 MB (5,408,178 bytes)
Uncompressed size
8.87 MB
Oldest file
2026-08-22 09:15
Newest file
2026-08-22 09:15
Archive contents
Contained entries
70
Files
58
Directories
12
Distinct types
12
Analysis history
Last analysis
Sep 07, 2026, 07:26 AM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#189734
Archive contents
70 entries · 12 types
Directories17.1%12
PHP48.6%34
JavaScript14.3%10
CSS8.6%6
JSON1.4%1
Text1.4%1
XML1.4%1
PNG1.4%1
DAT1.4%1
MP41.4%1
No Ext1.4%1
WIE1.4%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP4 · video
…
4.03 MB
JS · js
8dead7800af344a0…
1.45 MB
CSS · css
a2efa4af637858c6…
1.03 MB
JS · js/vendor
bdb64e2bd14f2ec4…
615.8 KB
XML · demo-data
f0f79f89ecac3d3f…
557.0 KB
JS · js
2f3232fdd9193829…
519.8 KB
PNG · package root
4aa69ab66649b192…
331.3 KB
PHP · tgm
a93484d3ed594a55…
123.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.