www.www.demo.media.chat.home.mobile.facebook.mrqz.kz - malicious URL scan, 22 Aug 2026

Q: Is www.www.demo.media.chat.home.mobile.facebook.mrqz.kz safe?

No. MalwareAnalyzer scanned www.www.demo.media.chat.home.mobile.facebook.mrqz.kz on 22 Aug 2026 and returned a malicious verdict with a score of 85 out of 100. Treat it as hostile until it is re-checked.

Q: How was www.www.demo.media.chat.home.mobile.facebook.mrqz.kz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

MalwareAnalyzer by Cyble scanned www.www.demo.media.chat.home.mobile.facebook.mrqz.kz and returned a malicious verdict (score 85). The page resolved to 46.4.70.151 on Hetzner Online GmbH in DE. 16 domains and 5 IPs were contacted, over 18 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 85) · Confidence 94%
Scanned URL: https://www.www.demo.media.chat.home.mobile.facebook.mrqz.kz/
Domain: www.www.demo.media.chat.home.mobile.facebook.mrqz.kz · IP: 46.4.70.151 · AS24940 · DE
Server: openresty
HTTP status: 200 · text/html
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 19 23: · subject CN=www.www.demo.media.chat.home.mobile.facebook.mrqz.kz
HTTP requests captured: 18 · cookies set: 1
Scan tier: standard · observed 2026-08-22 01:55:39 UTC

Antivirus & YARA (1 of 48 engines)

YARA: delivr.to detections [yara]: DLV_Maldoc_VBA_AutoExec (page content)

Why this verdict

Antivirus/YARA detection in page content: DLV_Maldoc_VBA_AutoExec
Runtime data beacon to o4511155418234880.ingest.de.sentry.io
Certificate issued < 48h ago

Detected technologies

Amazon CloudFront

Contacted infrastructure

46.4.70.151 - AS24940 Hetzner Online GmbH (Germany)
3.33.249.164 - AS16509 Amazon Technologies Inc. (United States)

Observed indicators

www.www.demo.media.chat.home.mobile.facebook.mrqz.kz
api.marquiz.ru
api.marquiz.io
api.us.marquiz.io
static.marquiz.ru
static.marquiz.io
cdn.media.marquiz.ru
cdn.media.marquiz.io
images.unsplash.com
fonts.googleapis.com
fonts.gstatic.com
cdn.mrqz.to
o4511155418234880.ingest.de.sentry.io
quiz.provider.eu.marquiz.io
quiz.provider.us.marquiz.io
quiz.provider.marquiz.ru
46.4.70.151
3.175.115.110
34.160.81.0
3.33.249.164

Questions about www.www.demo.media.chat.home.mobile.facebook.mrqz.kz

Is www.www.demo.media.chat.home.mobile.facebook.mrqz.kz safe?: No. MalwareAnalyzer scanned www.www.demo.media.chat.home.mobile.facebook.mrqz.kz on 22 Aug 2026 and returned a malicious verdict with a score of 85 out of 100. Treat it as hostile until it is re-checked.
How was www.www.demo.media.chat.home.mobile.facebook.mrqz.kz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.www.demo.media.chat.home.mobile.facebook.mrqz.kz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan