Welcome to the Auth0 Community!
I’ve checked your tenant log, and it looks like an automated bot attempted or hack attempt. In the qs object, you can see all the parameters that this person or bot used. One of them is “response_type”: “ZhAk” and that’s why the “Unsupported response type: ZhAk” error is triggered. You can read information about this specific parameter here: OAuth 2.0 Authorization Framework. Please check the user’s device for malware.
Additional informations: Censys scanner causing error logs: "Missing required parameter: response_type"
Thanks
Dawid