URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: roraffle.net
Domain registrar:Tucows -
Domain registration date:2025-07-23 19:12:10 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2025-09-06 22:13:05 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)
A record(s) observed :14

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-13 17:35:09 34.76.205.124124.205.76.34.bc.googleusercontent.comSBL656841AS396982 GOOGLE-CLOUD-PLATFORM- BEno
2025-09-17 18:03:35 188.114.96.3SBL690066AS13335 CLOUDFLARENETn/ano
2025-09-17 18:03:35 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ano
2025-09-17 18:09:27 104.21.29.209Not listedAS13335 CLOUDFLARENETn/ano
2025-09-17 18:09:27 172.67.149.206Not listedAS13335 CLOUDFLARENETn/ano
2025-11-05 01:54:19 188.114.96.12SBL687667AS13335 CLOUDFLARENETn/ano
2025-11-05 01:54:19 188.114.97.12SBL687666AS13335 CLOUDFLARENETn/ano
2025-09-06 22:13:11 104.21.112.1Not listedAS13335 CLOUDFLARENETn/ano
2025-09-06 22:13:11 104.21.16.1Not listedAS13335 CLOUDFLARENETn/ano
2025-09-06 22:13:11 104.21.32.1Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-09-07 03:01:31https://roraffle.net/bins/morte.arm6Offline32-bit elf mirai ext threatquery
2025-09-06 22:28:06http://roraffle.net/bins/morte.m68kOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:36http://roraffle.net/bins/morte.ppcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:35http://roraffle.net/bins/morte.arcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:33http://roraffle.net/bins/morte.x86_64Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:30http://roraffle.net/bins/morte.arm7Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:25http://roraffle.net/bins/morte.mipsOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:24http://roraffle.net/bins/morte.i686Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:24http://roraffle.net/bins/morte.sh4Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:23http://roraffle.net/bins/morte.spcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:22http://roraffle.net/bins/morte.arm5Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:22http://roraffle.net/bins/morte.mpslOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:22http://roraffle.net/bins/morte.x86Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:16http://roraffle.net/bins/morte.armOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:11http://roraffle.net/bins/morte.arm6Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:11http://roraffle.net/1.shOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-06 22:13:11http://roraffle.net/bins/debugOfflinebotnetdomain mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-09-07 03:01:31b5ff3d5b1158f4cb6bffa6e8a1a4c25af0ee8655c31b0b8084c50e2f913daa5celfMirai
2025-09-06 22:28:066ceddf85002197439346890d29eda288c11ab7e11c27deb86a953bd96dd03096elfMirai
2025-09-06 22:13:368ba34509d086573760aa8f7677c3d828c0cf477bd4342a9f743c7ba9b81051f5elfMirai
2025-09-06 22:13:35570791184ff5faa904839758cc51c3419e3802e8abe9d347e5928915e17d7ffeelfMirai
2025-09-06 22:13:31f904c5dbb0f0346f55ca3667fbe2f97aaac07b320ae16e4fcf718c34f23de2cdelfMirai
2025-09-06 22:13:2954f3f6d1330b4c9667d1113ee3329c2a023cab9a71de20ba55dbed869a38a6b2elfMirai
2025-09-06 22:13:24898f7f84f9ad51ae37a565893e4f72b6ebce2691d529f8744d7d3fb32ed4c4caelfMirai
2025-09-06 22:13:2363021604b19c822d162cb1ff2e65a49e51c792fecfb2975f068ab5acb805a04felfMirai
2025-09-06 22:13:23e98333b12e1353d142e9b467839d4f21a7640294f4b7cd9bd9a6029d93b806b3elfMirai
2025-09-06 22:13:229d717775b3a0461cc62c5a8fbfd6027e62fb8f8ff47e5d1dc28a12db816cdcf3elfMirai
2025-09-06 22:13:21c8ae7fee6b607a59a8a76bdf0026a987c118b01d7843cc01c3e4cd7182e67fd5elfMirai
2025-09-06 22:13:21c7121493e6e7e2c519dfaf688d1be09d07d06d46ac3984cc513d52d190169c9aelfMirai
2025-09-06 22:13:21224bb391451b00c3c44269f7d9d94caa59623c65e08e24de22420f4f21686440elfMirai
2025-09-06 22:13:15abb79091e35cd813de2d50e02ec355d6fc309d704ab8bc6d4354bbda531ca615elfMirai
2025-09-06 22:13:11b5ff3d5b1158f4cb6bffa6e8a1a4c25af0ee8655c31b0b8084c50e2f913daa5celfMirai
2025-09-06 22:13:11bff314fbbc14981c43feaa5ddf2e48c926cf7902aa030de80a29ccbcd3556ce9shMirai
2025-09-06 22:13:1178e298ff1f2564c9b55330ddf19507dae4b8ebe9e06e062fa3774f30d7286b81elfMirai