ZoomEye: "Zimbra Web Client" body search returns 537,391 assets, almost none are mail servers

A ZoomEye analysis shows http.body="Zimbra Web Client" returns 537,391 assets while app="Zimbra" returns 210,812, with manuals, forums and job posts producing false matches. For accurate scoping of vulnerable Zimbra Collaboration Suite, the recommended filters are app="Zimbra" && port="443" (84,557) and ssl="Zimbra" && title="Zimbra" (63,239).

• http.body="Zimbra Web Client" returns 537,391 assets vs 210,812 for app="Zimbra"
• title="Zimbra Collaboration Suite" && port="443" returns only 265 assets
• app="Zimbra" && port="443" returns 84,557 assets
• ssl="Zimbra" && title="Zimbra" returns 63,239 assets