URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | algi-english.4lima.at |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-08-26 15:10:07 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 4 (100%) |
| Offline Malware sites : | 0 (0%) |
| Newest active malware site : | 2026-08-26 15:11:12 UTC |
| Oldest active malware site : | 2026-08-26 15:10:10 UTC (Age: 9 hours, 42 minutes) |
| A record(s) observed : | 3 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-08-26 15:10:09 | 91.216.248.21 | frontend.lima-city.de | Not listed | AS47447 TTM |  DE | yes |
| 2026-08-26 15:10:09 | 91.216.248.20 | frontend.lima-city.de | Not listed | AS47447 TTM | DE | yes |
| 2026-08-26 15:10:10 | 91.216.248.22 | frontend.lima-city.de | Not listed | AS47447 TTM | DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-08-26 15:11:12 | https://algi-english.4lima.at/wp-includes/rest-... | Online | ascii opendir powershell ps1 |  abuse_ch |
| 2026-08-26 15:11:09 | https://algi-english.4lima.at/wp-includes/rest-... | Online | ascii opendir powershell ps1 | abuse_ch |
| 2026-08-26 15:11:08 | https://algi-english.4lima.at/wp-includes/rest-... | Online | ascii opendir powershell ps1 | abuse_ch |
| 2026-08-26 15:10:10 | https://algi-english.4lima.at/wp-includes/rest-... | Online | ascii opendir powershell ps1 VIPKeylogger | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-08-26 15:11:11 | c670939b8151c4b8f4feb92248ec391c79d911092463c6773215e88f1c92c350 | ps1 | ||
| 2026-08-26 15:11:09 | f654ae1078af4d8fbeb494be9fc9c0ed32039e08e09088c29dbecb81972b13f6 | ps1 | ||
| 2026-08-26 15:11:08 | d2ceb5d5ca0d3e62dbeba77e7471714a51db084ce735e4c8099b84244179a8f6 | ps1 | ||
| 2026-08-26 15:10:09 | e18fc6d562bab0a966442c189bdeb8bb53c58f24a97381fda62be28c58edea20 | ps1 |