URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: hewadexchange.com
Domain registrar:GoDaddy -
Domain registration date:2020-12-21 12:26:47 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-10-20 06:14:08 UTC
Total malware sites :15
Online malware sites :0 (0%)
Offline Malware sites :15 (100%)
A record(s) observed :5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-09-27 20:10:45 92.205.1.5858.1.205.92.host.secureserver.netNot listedAS21499 GODADDY-SXB- FRyes
2025-12-26 11:57:04 13.248.213.45a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-12-26 11:57:04 76.223.67.189a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2021-11-17 13:12:44 192.124.249.40cloudproxy10040.sucuri.netNot listedAS30148 SUCURI-SEC- USno
2021-10-20 06:14:09 160.153.133.149149.133.153.160.host.secureserver.netNot listedAS21499 GODADDY-SXB- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-10-27 17:02:09https://hewadexchange.com/temerarious.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:09http://hewadexchange.com/forenoon.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:06http://hewadexchange.com/multilingual.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:06http://hewadexchange.com/onslaught.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:05http://hewadexchange.com/penalty.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:05http://hewadexchange.com/receivership.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:04http://hewadexchange.com/unsold.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:03http://hewadexchange.com/temerarious.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-27 16:06:03http://hewadexchange.com/walking.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:37http://hewadexchange.com/transequatorial.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:21http://hewadexchange.com/decamp.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:15http://hewadexchange.com/korean.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:15http://hewadexchange.com/shootout.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:09http://hewadexchange.com/wadded.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-10-20 06:14:09http://hewadexchange.com/trapezius.phpOfflinedoc hancitor ext html Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-31 18:42:271b46ce00c2ea2936b939c1eb469e763844693f34f2658df950232c4b8ba9db67html  
2026-07-31 12:25:20ddb68293d98f79f1542e606d16e200ea81fe3ce3d9c7cf6e0edc26db44bd3292html  
2026-07-29 12:09:072ea87310b583ad0b3243f335fb903c3de6a452e596ab93e5e05f736b838b973bhtml  
2025-12-26 14:18:006dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023html