The scan of rorolaw.com on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with rorolaw.com?

4 analysed samples communicate with this URL, including Phishing.

How was rorolaw.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

rorolaw.com - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned rorolaw.com and returned a unknown verdict (score 6). The page resolved to 104.248.58.41 on DigitalOcean, LLC in US. The domain was registered 5630 days ago through Register.com - Network Solutions, LLC. 1 domain and 1 IP were contacted, over 6 HTTP requests. 4 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/jidotusafigogazusures.pdf
Domain: rorolaw.com · IP: 104.248.58.41 · AS14061 · US
Server: nginx/1.20.2
Page title: Rourke & Rosenberg LLC
HTTP status: 404 · text/html; charset=UTF-8
Registrar: Register.com - Network Solutions, LLC · domain age 5630 days · created 2011-03-21
HTTP requests captured: 6
Scan tier: fast · observed 2026-08-19 22:56:16 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from rorolaw.com. Each links to its full analysis.

Phishing - referenced · 0ed0a02a2eaa1133ea8cd22c31528107 · first seen 2026-08-19
Phishing - referenced · 47203685fc7cafd4b7c57cbb1788f771 · first seen 2026-08-19
Phishing - referenced · 607d79314437bd44f16e85332d2eefd8 · first seen 2026-08-16
Phishing - referenced · 2f38f113fa3b163870414024dda46e5c · first seen 2026-08-16

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx
Bootstrap

Contacted infrastructure

104.248.58.41 - AS14061 DigitalOcean, LLC (United States)

Observed indicators

rorolaw.com
104.248.58.41
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/jidotusafigogazusures.pdf
http://rorolaw.com/templates/common/css/bootstrap.min.css
http://rorolaw.com/templates/common/css/offcanvas.css
http://rorolaw.com/templates/3.1/css/common.css
http://rorolaw.com/templates/3.1/css/theme.css
http://rorolaw.com/templates/3.1/images/columns.jpg
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/Welcome
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/Attorney-Profiles
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/FAQ
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/disclaimer
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/site_map
http://rorolaw.com/templates/3.1/images/malet.jpg
http://rorolaw.com/templates/common/js/timer.js
http://rorolaw.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/Cynthia%20B.%20Rosenberg
http://rorolaw.com/templates/common/images/social/facebook.jpg
http://rorolaw.com/templates/common/images/social/avvo-big.jpg
http://rorolaw.com/templates/common/js/jquery.js
http://rorolaw.com/templates/common/js/modernizr.js

Questions about rorolaw.com

Is rorolaw.com safe?: The scan of rorolaw.com on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with rorolaw.com?: 4 analysed samples communicate with this URL, including Phishing.
How was rorolaw.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of rorolaw.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan