creativecommons.org - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned creativecommons.org and returned a unknown verdict (score -12). The page resolved to 104.20.5.134 on Cloudflare, Inc. in US. The domain was registered 9350 days ago through Gandi SAS. 12 domains and 2 IPs were contacted, over 4 HTTP requests. 423 malware samples communicate with this URL (HUILoader, Genpack). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://creativecommons.org/licenses/by-nd/3.0/ - Domain: creativecommons.org · IP: 104.20.5.134 · AS13335 · US
- Server: cloudflare
- Page title: Deed - Attribution-NoDerivs 3.0 Unported - Creative Commons
- HTTP status: 200 · text/html
- Registrar: Gandi SAS · domain age 9350 days · created 2001-01-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 1 18: · subject CN=creativecommons.org
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-23 06:48:36 UTC
Redirect chain
http://creativecommons.org/licenses/by-nd/3.0/https://creativecommons.org/licenses/by-nd/3.0/
Malware communicating with this URL (423)
These samples were observed contacting or being served from creativecommons.org. Each links to its full analysis.
- 28abe8eafd474b1501a050ff136174d2f70af1293851c99feb52a2f8953a1b11 - referenced ·
28abe8eafd474b1501a050ff136174d2· first seen 2026-08-23 - f82ad4c2e0a792000a318248e2e392569943545cecb2ed8b89e92c10c6c67fc1 - referenced ·
f82ad4c2e0a792000a318248e2e39256· first seen 2026-08-23 - f826174d982c8dbf3715cfc31a19fc2f43a304efb669d6c5435e41f79d17fcb3 - referenced ·
f826174d982c8dbf3715cfc31a19fc2f· first seen 2026-08-23 - HUILoader - referenced ·
bb95e5fd12e6d12741e32ed4842e369b· first seen 2026-08-23 - Genpack - referenced ·
fdde7d6ec77be3320761a543cca1f715· first seen 2026-08-23 - dbb3beb00e49113bf09df27a712a3fb637424462b1dcfab72465992853534d4d - referenced ·
dbb3beb00e49113bf09df27a712a3fb6· first seen 2026-08-23 - f8288619c1daa21ad38f68b01dae070eca6993d76f047dc75f3a3e77d8be7759 - referenced ·
f8288619c1daa21ad38f68b01dae070e· first seen 2026-08-23 - f82d54e9e87f6447098f16642d65bd268034af6cc8eba42e58cd1702813dfa93 - referenced ·
f82d54e9e87f6447098f16642d65bd26· first seen 2026-08-23 - Genpack - referenced ·
c4bfac68ab5016f10b0c85e8c104db89· first seen 2026-08-22 - Genpack - referenced ·
c42019fb07c424acd339a2c85040ec4f· first seen 2026-08-22 - f82476551ddee55fc25aec8260af5b72e9a2d9d64473fcd2dd98a91b1c5281c4 - referenced ·
f82476551ddee55fc25aec8260af5b72· first seen 2026-08-22 - f82c0702ca42c3b4a78b9ed5eeafbe4f3f2ae1c22970ed14d2c2752ce536fac8 - referenced ·
f82c0702ca42c3b4a78b9ed5eeafbe4f· first seen 2026-08-22 - aa9d6c9ac0d7f13bbbc306763ab9ee9087908a3a494826decb966b612e221ee5 - referenced ·
aa9d6c9ac0d7f13bbbc306763ab9ee90· first seen 2026-08-22 - 225d99f9142a18f15dd0fe54fb2f3855e14b2450a3e08b8d462002ee8c502810 - referenced ·
225d99f9142a18f15dd0fe54fb2f3855· first seen 2026-08-22 - 2251e4b83d20deac67cdc8505e5f5f4855536f65acb543e9f6c9cb58d858ed07 - referenced ·
2251e4b83d20deac67cdc8505e5f5f48· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.20.5.134 - AS13335 Cloudflare, Inc. (United States)
- 104.20.6.134 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- creativecommons.org
- search.creativecommons.org
- giving.gofundme.com
- wiki.creativecommons.org
- stage.creativecommons.org
- creative-commons-shop.fourthwall.com
- bsky.app
- mastodon.social
- www.facebook.com
- www.linkedin.com
- mail.creativecommons.org
- fontawesome.com
- 104.20.5.134
- 104.20.6.134
- https://creativecommons.org/licenses/by-nd/3.0/
- https://creativecommons.org/licenses/by-nd/3.0/deed.en
- https://creativecommons.org/licenses/by-nd/3.0/deed.an
- https://creativecommons.org/licenses/by-nd/3.0/deed.az
- https://creativecommons.org/licenses/by-nd/3.0/deed.id
- https://creativecommons.org/licenses/by-nd/3.0/deed.eu
Other scans of creativecommons.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://autotools.info/index.html - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
https://getbootstrap.com/ - 24 Aug 2026 - unknown ·
https://creativecommons.org/publicdomain/zero/1.0/ - 24 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - unknown ·
http://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - unknown ·
https://creativecommons.org/publicdomain/zero/1.0/
Questions about creativecommons.org
- Is creativecommons.org safe?
- The scan of creativecommons.org on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with creativecommons.org?
- 423 analysed samples communicate with this URL, including HUILoader, Genpack.
- How was creativecommons.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of creativecommons.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan