URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: cat.xiaojiji.nl
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2024-10-27 10:27:04 UTC
Total malware sites :4
Online malware sites :1 (25%)
Offline Malware sites :3 (75%)
Newest active malware site :2024-10-27 10:27:05 UTC
Oldest active malware site :2024-10-27 10:27:05 UTC (Age: 1 year, 7 month, 7 days, 4 hours, 51 minutes)
A record(s) observed :6

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-07 22:33:42 154.81.35.116Not listedAS140869 TGL-AS-AP- SCyes
2026-01-13 20:55:14 156.225.88.160Not listedAS140869 TGL-AS-AP- HKno
2024-10-27 10:27:05 142.171.224.194Not listedAS35916 MULTA-ASN1- USno
2025-03-28 09:56:40 206.233.249.111Not listedAS174 COGENT-174- HKno
2024-12-05 09:46:42 162.250.189.215mailca2.myhostingservice.netNot listedAS26832 RICAWEBSERVICES- CAno
2024-11-29 09:39:17 154.39.138.52Not listedAS174 COGENT-174- PHno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-08-16 12:43:08http://cat.xiaojiji.nl/net/net.xslOffline abuse_ch
2024-10-27 10:27:11http://cat.xiaojiji.nl/networks.ps1Offlinekinsing ext Threatactors abus3reports
2024-10-27 10:27:05http://cat.xiaojiji.nl/netstat.xslOfflinekinsing ext Threatactors abus3reports
2024-10-27 10:27:05http://cat.xiaojiji.nl/netstat.ps1Onlinekinsing ext Threatactors abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-04-27 17:41:263795b41acec5b2dff194891266e6765e8ad19c539080eda3f846caeffde25a7btxt  
2025-03-14 14:02:341e40db6e0afc55727aa806e38883ef1c94527e9e25a1174a74ffc48083b52c8atxt  
2024-10-27 10:27:11590218400886d51989625ecd9e1085a98cc41cee42748f2858faabbc006228e6txt