URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: www.marketingintelligence.tech
Domain registrar:Namecheap -
Domain registration date:2019-10-25 10:40:05 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-07-13 08:46:02 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 12:53:24 200.69.22.6sg1-ss108.a2hosting.comNot listedAS55293 A2HOSTING- USyes
2025-10-26 00:48:53 172.236.126.142172-236-126-142.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-26 00:48:53 172.236.126.145172-236-126-145.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-26 00:48:53 172.236.126.225172-236-126-225.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-26 00:48:53 172.236.126.234172-236-126-234.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-05-30 07:30:22 172.66.44.167Not listedAS13335 CLOUDFLARENETn/ano
2025-05-30 07:30:22 172.66.47.89Not listedAS13335 CLOUDFLARENETn/ano
2022-10-18 08:58:30 208.91.198.170cp-20.webhostbox.netNot listedAS46606 UNIFIEDLAYER-AS-1- USno
2021-10-26 02:25:56 99.83.154.118a51062ecadbb5a26e.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2021-11-23 11:46:56 63.250.38.9premium90-4.web-hosting.comNot listedAS22612 NAMECHEAP-NET- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-09-08 12:49:04http://www.marketingintelligence.tech/nax/ab.exeOffline32 exe zbetcheckin
2021-07-13 14:40:16http://www.marketingintelligence.tech/MaGnTcNpa...Offline32 exe Loki ext zbetcheckin
2021-07-13 10:43:13https://www.marketingintelligence.tech/qOwCKaSX...Offline32 exe Formbook ext zbetcheckin
2021-07-13 08:46:05https://www.marketingintelligence.tech/BGAmPrA9...Offline32 exe Loki ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-09-08 12:49:04c2332823894be83d6603a49152e3fafc0677cdd274117c3a2c5a292734816c37exe 
2021-07-13 14:40:1651e332fe974c2f66d7fc936c48cfab279e27fc2ccdd66260818dbb0a7a5419c7exeLoki
2021-07-13 10:43:13e92575edf627cec919538f92983c709e468c7c671fc8f7df767624b514e3104aexeFormbook
2021-07-13 08:46:05a3e84da58dbdc9813c1a8bd17a5b07e39f8d1322b8ee7d70bd5fe61b481ac492exeLoki