URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: sgflp.com
Spamhaus DBL :Spammer domain
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2019-05-23 11:45:09 UTC
Total malware sites :1
A record(s) observed :6

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-21 22:37:26 134.122.194.215SBL657510AS152194 CTGSERVERLIMITED-AS-AP- JPyes
2025-11-22 06:13:55 45.202.210.198Not listedAS152711 STSL-AS-AP- HKno
2025-05-27 13:05:28 45.202.210.216Not listedAS152711 STSL-AS-AP- HKno
2025-05-22 06:52:21 45.202.211.15Not listedAS152711 STSL-AS-AP- HKno
2025-05-15 17:00:15 38.55.121.10Not listedAS932 XNNET- USno
2019-11-09 03:46:54 110.4.45.119pliosaurus.mschosting.comNot listedAS46015 EXABYTES-AS-AP- MYno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-05-23 11:46:33http://sgflp.com/FLP-images/1c.jpgOfflineexe Troldesh ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2019-10-10 05:56:37f45e1d9aa5e32885318b37d11e9fc6b7e3690d5bfbc90c2267bd56eaf8cb0c56exe  
2019-07-30 12:04:4929ac1dc12e475e6d4f9c5b46d942cc249f7c02f80da8e23d435f389972a17d1eexe  
2019-07-26 14:07:2415d10d5e8387d78b35788d5e6a55ded27a24e1fc6f8c2d5ad41926673dc167d4exe  
2019-05-23 12:24:26e5093e304a50d34cdf67ee8e49713c6131d6740e664ea49d9c98682336e3141aexeRansomware.Troldesh