creativecommons.org - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned creativecommons.org and returned a unknown verdict (score -12). The page resolved to 104.20.5.134 on Cloudflare, Inc. in US. 11 domains and 2 IPs were contacted, over 4 HTTP requests. 403 malware samples communicate with this URL (Genpack, Autolike, HUILoader). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://creativecommons.org/publicdomain/zero/1.0/ - Domain: creativecommons.org · IP: 104.20.5.134 · AS13335 · US
- Server: cloudflare
- Page title: Deed - CC0 1.0 Universal - Creative Commons
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 1 18: · subject CN=creativecommons.org
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-22 14:52:05 UTC
Redirect chain
http://creativecommons.org/publicdomain/zero/1.0/https://creativecommons.org/publicdomain/zero/1.0/
Malware communicating with this URL (403)
These samples were observed contacting or being served from creativecommons.org. Each links to its full analysis.
- d889e8b7caf30f77f95ac8f1a386cd627b5176f0bc6133a9c0d58e7b7779ca16 - referenced ·
d889e8b7caf30f77f95ac8f1a386cd62· first seen 2026-08-22 - f995338391b25e653588570dfd6a945ced9c9eb2cc8f9411e1b7e7d6e0045c37 - referenced ·
f995338391b25e653588570dfd6a945c· first seen 2026-08-22 - d32ab44974332375cb7c7ce81e41b86a4e487f2e4d27fb628ac52dddee928ce5 - referenced ·
d32ab44974332375cb7c7ce81e41b86a· first seen 2026-08-22 - Genpack - referenced ·
ade8f04844a78043b88fe9f44ab990ec· first seen 2026-08-22 - d3273f8a055ca2d67a5ce898368e33c9be4ff679b99513127b965ab6b9880d2e - referenced ·
d3273f8a055ca2d67a5ce898368e33c9· first seen 2026-08-22 - d32ce15309765186e5fd3a257b4c1cfbff65b7ff225f980ac26189e9dd5a0a1b - referenced ·
d32ce15309765186e5fd3a257b4c1cfb· first seen 2026-08-22 - d3242974285610810d3644452360034d0028950c373840f3c0c63a9240bc397c - referenced ·
d3242974285610810d3644452360034d· first seen 2026-08-22 - d3285421298a58d3884d35927618706720926578f9d481d6834ed57208ecd1fd - referenced ·
d3285421298a58d3884d359276187067· first seen 2026-08-22 - 855217f6c5df51a140950b996c4012480079e63f4a81b24a6854091806a0cce4 - referenced ·
855217f6c5df51a140950b996c401248· first seen 2026-08-22 - 3f7508ed6be9e89f851b84a55dc2e62f034d79f72e5a846a84628fc37028d792 - referenced ·
3f7508ed6be9e89f851b84a55dc2e62f· first seen 2026-08-22 - Autolike - referenced ·
3f745bb26dae6deed8bb1e7846f2e3d9· first seen 2026-08-22 - HUILoader - referenced ·
7ecf817020c0aba03d78f6ee1243a657· first seen 2026-08-22 - 5b6e45b78e3ec7042d523d8e2247f28f4e2a1c99d4c014cbc356a003e3bbe349 - referenced ·
5b6e45b78e3ec7042d523d8e2247f28f· first seen 2026-08-22 - Genpack - referenced ·
7dd8fba9a4f6d54091167d7fbf7913b6· first seen 2026-08-21 - 3f7e70ef30d0f961888eaefda415bd82a2889a5af6a807f457a6a3d3ead67422 - referenced ·
3f7e70ef30d0f961888eaefda415bd82· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.20.5.134 - AS13335 Cloudflare, Inc. (United States)
- 104.20.6.134 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- creativecommons.org
- search.creativecommons.org
- giving.gofundme.com
- stage.creativecommons.org
- creative-commons-shop.fourthwall.com
- bsky.app
- mastodon.social
- www.facebook.com
- www.linkedin.com
- mail.creativecommons.org
- fontawesome.com
- 104.20.5.134
- 104.20.6.134
- https://creativecommons.org/publicdomain/zero/1.0/
- https://creativecommons.org/publicdomain/zero/1.0/deed.en
- https://creativecommons.org/publicdomain/zero/1.0/deed.an
- https://creativecommons.org/publicdomain/zero/1.0/deed.az
- https://creativecommons.org/publicdomain/zero/1.0/deed.id
- https://creativecommons.org/publicdomain/zero/1.0/deed.eu
- https://creativecommons.org/publicdomain/zero/1.0/deed.ca
Other scans of creativecommons.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
https://getbootstrap.com/ - 24 Aug 2026 - unknown
- 24 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - unknown ·
http://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
https://gmpg.org/xfn/11
Questions about creativecommons.org
- Is creativecommons.org safe?
- The scan of creativecommons.org on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with creativecommons.org?
- 403 analysed samples communicate with this URL, including Genpack, Autolike, HUILoader.
- How was creativecommons.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of creativecommons.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan