urlquery.net
Investigate/Report/06d7f63c-2441-4e50-9173-979bd7f25d64
WEBSITE ANALYSIS REPORT

http://www.zoomex.com/

public
Report tags
suspicious
Submit tags
Request review
Suspicious activity

3 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

189 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1importedModule3.3 KB
2importedModule261 B
3scriptElement87 B
4scriptElement1.6 KB
5scriptElement9.1 KB
6scriptElement14.7 KB
7importedModule445 B
8importedModule4.7 KB
9importedModule18.2 KB
10scriptElement340 B
11scriptElement316.0 KB
12scriptElement8.9 KB
13scriptElement347 B
14importedModule3.0 KB
15scriptElement917 B
16scriptElement19.3 KB
17scriptElement239.0 KB
18scriptElement385 B
19scriptElement11.6 KB
20scriptElement259.1 KB
21importedModule3.8 KB
22importedModule23.5 KB
23importedModule849 B
24importedModule3.1 KB
25scriptElement11.9 KB
26importedModule31.3 KB
27importedModule1.3 KB
28importedModule776 B
29scriptElement3.5 KB
30importedModule19.1 KB
31scriptElement20.1 KB
32scriptElement599 B
33scriptElement1014 B
34scriptElement209 B
35scriptElement32.2 KB
36importedModule3.7 KB
37importedModule1.1 KB
38importedModule522 B
39importedModule4.4 KB
40scriptElement560 B
41scriptElement56.5 KB
42scriptElement149 B
43importedModule3.3 KB
44scriptElement859 B
45importedModule305.3 KB
46scriptElement58.0 KB
47importedModule1.3 KB
48importedModule4.0 KB
49importedModule14.6 KB
50scriptElement118.8 KB
51scriptElement9.4 KB
52scriptElement4.2 KB
53scriptElement5.3 KB
54scriptElement164.5 KB
55scriptElement1.24 MB
56importedModule416 B
57importedModule183 B
58scriptElement4.8 KB
59scriptElement2.9 KB
60scriptElement441.1 KB
61importedModule27.0 KB
62scriptElement16.4 KB
63scriptElement30.4 KB
64importedModule10.9 KB
65importedModule585 B
66importedModule1.9 KB
67scriptElement612 B
68scriptElement138 B
69scriptElement721 B
70scriptElement15.8 KB
71importedModule375 B
72scriptElement5.0 KB
73scriptElement39.8 KB
74importedModule64 B
75scriptElement2.8 KB
76scriptElement2.5 KB
77scriptElement388.6 KB
78scriptElement32.8 KB
79scriptElement125.5 KB
80scriptElement341 B
81importedModule2.4 KB
82importedModule209 B
83importedModule7.0 KB
84importedModule73 B
85Not recorded946 B
86eventHandler231 B
87scriptElement62.5 KB
88importedModule185 B
89importedModule23.0 KB
90importedModule10.5 KB
91scriptElement6.0 KB
92importedModule522 B
93scriptElement123.9 KB
94scriptElement326 B
95scriptElement17.3 KB
96scriptElement4.6 KB
97scriptElement7.3 KB
98importedModule536 B
99importedModule7.1 KB
100scriptElement398 B
101scriptElement8.2 KB
102importedModule31.4 KB
103importedModule66.2 KB
104scriptElement1.9 KB
105scriptElement439.4 KB
106scriptElement18.0 KB
107importedModule64.3 KB
108importedModule3.9 KB
109importedModule5.8 KB
110importedModule776 B
111scriptElement254 B
112scriptElement833 B
113scriptElement4.5 KB
114scriptElement25.6 KB
115scriptElement1.1 KB
116scriptElement361.5 KB
117scriptElement41.9 KB
118scriptElement11.9 KB
119importedModule28.1 KB
120importedModule67.8 KB
121scriptElement442.0 KB
122importedModule1.0 KB
123importedModule2.5 KB
124importedModule1.5 KB
125scriptElement2.2 KB
126scriptElement458 B
127scriptElement435.7 KB
128importedModule91.8 KB
129scriptElement2.9 KB
130scriptElement447 B
131scriptElement981 B
132scriptElement9.5 KB
133scriptElement592.1 KB
134scriptElement184.6 KB
135scriptElement125.5 KB
136importedModule1.1 KB
137importedModule24.5 KB
138scriptElement1.30 MB

Script #138

Recorded metadata

URL

https
https://smart1.bycsi.com/zoomex/assets/script/megadata/enp_tracker_self_hosted.min.js?v=2

IP / ASN

Norway 23.33.119.81

AS20940 · Akamai International B.V.

Resource information

Introduced by
scriptElement
Inline
false
First seen (UTC)
11 Mar 2023 · 15:23:21.000 UTC
Last seen (UTC)
08 Oct 2026 · 07:23:25.554 UTC
Times seen
35
Size
1.30 MB (1363655 bytes)
MD5
fd2c330be5dcfa9265953b19806436b8
SHA1
f6b804e001725c8d11ecd8c254255c62313c7ac5
SHA256
d85f769c0b1d4d46d86ef4dd881c7cebf1de1ade0454b33e0b0f2f424b214a74

Detections

Detections attached to this script.
DetectionSeverityVerdict
YARAhub by abuse.ch Detects file containing Telegram Bot APImediummalware

Source

Loading captured source…

139scriptElement20.9 KB
140scriptElement82.4 KB
141scriptElement10.3 KB
142importedModule811 B
143scriptElement8.0 KB
144scriptElement1 B
145scriptElement8.9 KB
146scriptElement42.2 KB
147importedModule513 B
148importedModule2.4 KB
149importedModule2.1 KB
150importedModule13.3 KB
151importedModule709 B
152importedModule612 B
153importedModule1.5 KB
154importedModule5.4 KB
155scriptElement410 B
156scriptElement89 B
157scriptElement41.7 KB
158scriptElement4.1 KB
159scriptElement747 B
160importedModule1.0 KB
161scriptElement340 B
162importedModule323 B
163scriptElement1.3 KB
164importedModule4.4 KB
165importedModule577 B
166importedModule91.5 KB
167scriptElement3.1 KB
168importedModule106 B
169scriptElement174 B
170importedModule1.8 KB
171importedModule1.5 KB
172scriptElement1.8 KB
173scriptElement13.8 KB
174scriptElement184.6 KB
175scriptElement454 B
176importedModule91 B
177scriptElement9.1 KB
178scriptElement40.6 KB
179scriptElement10.4 KB
180scriptElement840 B
181scriptElement1.5 KB
182scriptElement361.5 KB
183importedModule1.2 KB
184importedModule80 B
185importedModule933 B
186Not recorded156.2 KB
187scriptElement388.6 KB
188scriptElement16.7 KB
189importedModule36 B

Console observations

Browser messages in recorded order

19 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1INFO
[@fe/monitor版本]: 1.0.35
https://s1.bycsi.com/common-static/infra-static/monitor/monitor.latest.js?id=336&v=1 Line 6 · Column 21031
2INFO
[region-frame] createElement: appended mount nodemap[actor:server1.conn0.watcher17.process7//obj169 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[id:map[configurable:true enumerable:true value:region-frame writable:true]] ownPropertiesLength:1] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 3432
3INFO
[region-frame] createComponent startmap[actor:server1.conn0.watcher17.process7//obj170 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:Header writable:true] elementId:map[configurable:true enumerable:true value:__region_frame_header__ writable:true]] ownPropertiesLength:2] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 17715
4INFO
[region-frame] createComponent startmap[actor:server1.conn0.watcher17.process7//obj171 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:Footer writable:true] elementId:map[configurable:true enumerable:true value:__region_frame_footer__ writable:true]] ownPropertiesLength:2] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 17715
5INFO
[demo-header-menu] {"phase":"header-state","at":1787425348212,"from":"onBeforeMount","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":false,"isLoadedMenuFail":false,"normalMenuCount":0,"cardMenuCount":0,"normalMenuTitles":[]}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
6INFO
[demo-header-menu] {"phase":"menu-refresh-scheduled","at":1787425348362,"from":"onMounted","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":false,"isLoadedMenuFail":false,"normalMenuCount":0,"cardMenuCount":0,"normalMenuTitles":[]}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
7INFO
[demo-header-menu] {"phase":"menu-fetch-start","at":1787425348363,"from":"onMounted","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":false,"isLoadedMenuFail":false,"normalMenuCount":0,"cardMenuCount":0,"normalMenuTitles":[]}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
8INFO
[region-frame] createComponent donemap[actor:server1.conn0.watcher17.process7//obj220 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:Header writable:true] elementId:map[configurable:true enumerable:true value:__region_frame_header__ writable:true] hasState:map[configurable:true enumerable:true value:true writable:true] mountChildCount:map[configurable:true enumerable:true value:1 writable:true]] ownPropertiesLength:4] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 18398
9INFO
[region-frame] createComponent donemap[actor:server1.conn0.watcher17.process7//obj221 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:Footer writable:true] elementId:map[configurable:true enumerable:true value:__region_frame_footer__ writable:true] hasState:map[configurable:true enumerable:true value:true writable:true] mountChildCount:map[configurable:true enumerable:true value:1 writable:true]] ownPropertiesLength:4] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 18398
10INFO
[region-frame] createComponent startmap[actor:server1.conn0.watcher17.process7//obj222 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:CsRobot writable:true] elementId:map[configurable:true enumerable:true value:CsRobot writable:true]] ownPropertiesLength:2] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 17715
11INFO
[region-frame] createElement: appended mount nodemap[actor:server1.conn0.watcher17.process7//obj223 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[id:map[configurable:true enumerable:true value:CsRobot writable:true]] ownPropertiesLength:1] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 3432
12INFO
[region-frame] createComponent donemap[actor:server1.conn0.watcher17.process7//obj229 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[componentName:map[configurable:true enumerable:true value:CsRobot writable:true] elementId:map[configurable:true enumerable:true value:CsRobot writable:true] hasState:map[configurable:true enumerable:true value:false writable:true] mountChildCount:map[configurable:true enumerable:true value:0 writable:true]] ownPropertiesLength:4] sealed:false type:object]
https://www.zoomex.com/region-frame/index.19791738b6353853.js Line 1 · Column 18398
13INFO
[demo-header-menu] {"phase":"menu-filter-applied","at":1787425350645,"from":"applyMenuFilter","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":true,"isLoadedMenuFail":false,"normalMenuCount":0,"cardMenuCount":0,"normalMenuTitles":[],"isAlphaGrayUser":false}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
14INFO
[demo-header-menu] {"phase":"menu-filter-applied","at":1787425350882,"from":"applyMenuFilter","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":true,"isLoadedMenuFail":false,"normalMenuCount":8,"cardMenuCount":1,"normalMenuTitles":["Buy Crypto","Markets","Spot","Futures","TradFi","Earn","Prediction Market","Events"],"isAlphaGrayUser":false}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
15INFO
[demo-header-menu] {"phase":"menu-fetch-success","at":1787425350882,"from":"onMounted","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":true,"isLoadedMenuFail":false,"normalMenuCount":8,"cardMenuCount":1,"normalMenuTitles":["Buy Crypto","Markets","Spot","Futures","TradFi","Earn","Prediction Market","Events"],"apiMenuCount":9}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
16INFO
[demo-header-menu] {"phase":"menu-render-ready","at":1787425350883,"from":"onMounted","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":true,"isLoadedMenuFail":false,"normalMenuCount":8,"cardMenuCount":1,"normalMenuTitles":["Buy Crypto","Markets","Spot","Futures","TradFi","Earn","Prediction Market","Events"],"useFallbackMenu":false}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
17INFO
[demo-header-menu] {"phase":"menu-fetch-finally","at":1787425350883,"from":"onMounted","demoTradingActive":false,"menuVisible":true,"mainMenuInDom":false,"persistedEnv":null,"persistedUid":null,"persistedMasterUid":null,"demoSessionValid":false,"persistedTokenPrefix":"","configIsDemo":false,"propsIsDemo":false,"userId":null,"isSubmember":null,"isLogin":false,"isFetchProfile":true,"isLoadedMenuFail":false,"normalMenuCount":8,"cardMenuCount":1,"normalMenuTitles":["Buy Crypto","Markets","Spot","Futures","TradFi","Earn","Prediction Market","Events"]}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
18INFO
[demo-header-menu] {"phase":"menu-component-mounted","at":1787425350953,"useFallbackMenu":false,"isDemoTrading":false,"isLoadedMenuFail":false,"fallbackCount":8,"cmsCount":8}
https://www.zoomex.com/region-frame/useFonts.951cae5c149c0216.js Line 1 · Column 4653
19WARN
Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.
sandbox eval code Line 1 · Column 9
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot