creativecommons.org - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned creativecommons.org and returned a unknown verdict (score -12). The page resolved to 104.20.5.134 on Cloudflare, Inc. in US. The domain was registered 9351 days ago through Gandi SAS. 11 domains and 2 IPs were contacted, over 4 HTTP requests. 429 malware samples communicate with this URL (Genpack, HUILoader). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://creativecommons.org/publicdomain/zero/1.0/ - Domain: creativecommons.org · IP: 104.20.5.134 · AS13335 · US
- Server: cloudflare
- Page title: Deed - CC0 1.0 Universal - Creative Commons
- HTTP status: 200 · text/html
- Registrar: Gandi SAS · domain age 9351 days · created 2001-01-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 1 18: · subject CN=creativecommons.org
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-23 18:27:28 UTC
Redirect chain
http://creativecommons.org/publicdomain/zero/1.0/https://creativecommons.org/publicdomain/zero/1.0/
Malware communicating with this URL (429)
These samples were observed contacting or being served from creativecommons.org. Each links to its full analysis.
- Genpack - referenced ·
52e4edf8cb499f753f815956d97e7aa7· first seen 2026-08-23 - 5bc6601ea04292c5bc86692f54bd73174586c6b28f73fe648221c298c7455748 - referenced ·
5bc6601ea04292c5bc86692f54bd7317· first seen 2026-08-23 - 5bc22f7aa55edab78b3f801b3db69eccbd5d1ca95133c185af1bd04d0e8610ac - referenced ·
5bc22f7aa55edab78b3f801b3db69ecc· first seen 2026-08-23 - c8c756563dc905e00b0b7714459cb05d3ed8233bab1c31a308e656290ac705fd - referenced ·
c8c756563dc905e00b0b7714459cb05d· first seen 2026-08-23 - 5bc72043084f7baf95528ae4fa891e25ca673d8cd5203042d7ac8202bd6c26c6 - referenced ·
5bc72043084f7baf95528ae4fa891e25· first seen 2026-08-23 - 5bc746a1d8bb04b6e410c392d7078b9091b1bbbec2e966e9387f8f520eb3b804 - referenced ·
5bc746a1d8bb04b6e410c392d7078b90· first seen 2026-08-23 - 28abe8eafd474b1501a050ff136174d2f70af1293851c99feb52a2f8953a1b11 - referenced ·
28abe8eafd474b1501a050ff136174d2· first seen 2026-08-23 - f82ad4c2e0a792000a318248e2e392569943545cecb2ed8b89e92c10c6c67fc1 - referenced ·
f82ad4c2e0a792000a318248e2e39256· first seen 2026-08-23 - f826174d982c8dbf3715cfc31a19fc2f43a304efb669d6c5435e41f79d17fcb3 - referenced ·
f826174d982c8dbf3715cfc31a19fc2f· first seen 2026-08-23 - HUILoader - referenced ·
bb95e5fd12e6d12741e32ed4842e369b· first seen 2026-08-23 - Genpack - referenced ·
fdde7d6ec77be3320761a543cca1f715· first seen 2026-08-23 - dbb3beb00e49113bf09df27a712a3fb637424462b1dcfab72465992853534d4d - referenced ·
dbb3beb00e49113bf09df27a712a3fb6· first seen 2026-08-23 - f8288619c1daa21ad38f68b01dae070eca6993d76f047dc75f3a3e77d8be7759 - referenced ·
f8288619c1daa21ad38f68b01dae070e· first seen 2026-08-23 - f82d54e9e87f6447098f16642d65bd268034af6cc8eba42e58cd1702813dfa93 - referenced ·
f82d54e9e87f6447098f16642d65bd26· first seen 2026-08-23 - Genpack - referenced ·
c4bfac68ab5016f10b0c85e8c104db89· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.20.5.134 - AS13335 Cloudflare, Inc. (United States)
- 104.20.6.134 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- creativecommons.org
- search.creativecommons.org
- giving.gofundme.com
- stage.creativecommons.org
- creative-commons-shop.fourthwall.com
- bsky.app
- mastodon.social
- www.facebook.com
- www.linkedin.com
- mail.creativecommons.org
- fontawesome.com
- 104.20.5.134
- 104.20.6.134
- https://creativecommons.org/publicdomain/zero/1.0/
- https://creativecommons.org/publicdomain/zero/1.0/deed.en
- https://creativecommons.org/publicdomain/zero/1.0/deed.an
- https://creativecommons.org/publicdomain/zero/1.0/deed.az
- https://creativecommons.org/publicdomain/zero/1.0/deed.id
- https://creativecommons.org/publicdomain/zero/1.0/deed.eu
- https://creativecommons.org/publicdomain/zero/1.0/deed.ca
Other scans of creativecommons.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://autotools.info/index.html - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
https://getbootstrap.com/ - 24 Aug 2026 - unknown
- 24 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - unknown ·
http://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - unknown ·
https://gmpg.org/xfn/11
Questions about creativecommons.org
- Is creativecommons.org safe?
- The scan of creativecommons.org on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with creativecommons.org?
- 429 analysed samples communicate with this URL, including Genpack, HUILoader.
- How was creativecommons.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of creativecommons.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan