🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://hewadexchange.com/receivership.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:1720491
URL: http://hewadexchange.com/receivership.php
URL Status:Offline
Host: hewadexchange.com
Date added:2021-10-27 16:06:05 UTC
Last online:2026-08-10 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2026-08-10 09:51:18 UTC to abuse{at}hosteurope[dot]de)
Takedown time:5 years, 0 months, 15 days, 4 hours, 2 minutes Bad (down since 2026-10-16 20:09:07 UTC)
Tags:doc hancitor link html

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-16receivership.phphtml d1ebd84b4a652bcb2e2056f5e19b7217d498863d89d87756f9a57c18b50930ebn/a 
2026-10-15receivership.phphtml 68fb3466d08fa9d6b421deb4b55094bf8f6642ac0bd9b9d0a3197de1fb74ef11n/a 
2026-10-01receivership.phphtml 288e63b3fb5ca6dcbbcbef471596fc214440c24c4bc93a230f2c1a5aa96cf481n/a 
2026-08-18receivership.phphtml 6b480e236e93de64e202baa6c8c0b9faf9b384870545821a31c3386e7912492bn/a 
2026-08-10receivership.phphtml c7d22dec97a794be224a21b9694eed07d02a6f398790c52ec7c7039e7be8067en/a