creativecommons.org - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned creativecommons.org and returned a unknown verdict (score -12). The page resolved to 104.20.6.134 on Cloudflare, Inc. in US. The domain was registered 9350 days ago through Gandi SAS. 11 domains and 2 IPs were contacted, over 4 HTTP requests. 414 malware samples communicate with this URL (Genpack, Container, Autolike). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://creativecommons.org/publicdomain/zero/1.0/ - Domain: creativecommons.org · IP: 104.20.6.134 · AS13335 · US
- Server: cloudflare
- Page title: Deed - CC0 1.0 Universal - Creative Commons
- HTTP status: 200 · text/html
- Registrar: Gandi SAS · domain age 9350 days · created 2001-01-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 1 18: · subject CN=creativecommons.org
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-22 22:12:16 UTC
Redirect chain
http://creativecommons.org/publicdomain/zero/1.0/https://creativecommons.org/publicdomain/zero/1.0/
Malware communicating with this URL (414)
These samples were observed contacting or being served from creativecommons.org. Each links to its full analysis.
- Genpack - referenced ·
c42019fb07c424acd339a2c85040ec4f· first seen 2026-08-22 - f82476551ddee55fc25aec8260af5b72e9a2d9d64473fcd2dd98a91b1c5281c4 - referenced ·
f82476551ddee55fc25aec8260af5b72· first seen 2026-08-22 - f82c0702ca42c3b4a78b9ed5eeafbe4f3f2ae1c22970ed14d2c2752ce536fac8 - referenced ·
f82c0702ca42c3b4a78b9ed5eeafbe4f· first seen 2026-08-22 - aa9d6c9ac0d7f13bbbc306763ab9ee9087908a3a494826decb966b612e221ee5 - referenced ·
aa9d6c9ac0d7f13bbbc306763ab9ee90· first seen 2026-08-22 - 225d99f9142a18f15dd0fe54fb2f3855e14b2450a3e08b8d462002ee8c502810 - referenced ·
225d99f9142a18f15dd0fe54fb2f3855· first seen 2026-08-22 - 2251e4b83d20deac67cdc8505e5f5f4855536f65acb543e9f6c9cb58d858ed07 - referenced ·
2251e4b83d20deac67cdc8505e5f5f48· first seen 2026-08-22 - Container - referenced ·
8050b7efa6acfce72620eab155061465· first seen 2026-08-22 - 2258e21e7b543c73d03d2770aeeef6188e11767859cb6a6ed09f2d9d894dcfbf - referenced ·
2258e21e7b543c73d03d2770aeeef618· first seen 2026-08-22 - Autolike - referenced ·
2250e7f4cbfd97e6705f188b41dc8cdc· first seen 2026-08-22 - 22512d26d7f9ab034eb323ce95af9203d845c7da6236b06bf082e93edb702f8c - referenced ·
22512d26d7f9ab034eb323ce95af9203· first seen 2026-08-22 - f99e5e1c9714c2270a76492ec3da482cf7d146d05374d81c0a3daeca9106ec07 - referenced ·
f99e5e1c9714c2270a76492ec3da482c· first seen 2026-08-22 - d889e8b7caf30f77f95ac8f1a386cd627b5176f0bc6133a9c0d58e7b7779ca16 - referenced ·
d889e8b7caf30f77f95ac8f1a386cd62· first seen 2026-08-22 - f995338391b25e653588570dfd6a945ced9c9eb2cc8f9411e1b7e7d6e0045c37 - referenced ·
f995338391b25e653588570dfd6a945c· first seen 2026-08-22 - d32ab44974332375cb7c7ce81e41b86a4e487f2e4d27fb628ac52dddee928ce5 - referenced ·
d32ab44974332375cb7c7ce81e41b86a· first seen 2026-08-22 - Genpack - referenced ·
ade8f04844a78043b88fe9f44ab990ec· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.20.6.134 - AS13335 Cloudflare, Inc. (United States)
- 104.20.5.134 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- creativecommons.org
- search.creativecommons.org
- giving.gofundme.com
- stage.creativecommons.org
- creative-commons-shop.fourthwall.com
- bsky.app
- mastodon.social
- www.facebook.com
- www.linkedin.com
- mail.creativecommons.org
- fontawesome.com
- 104.20.6.134
- 104.20.5.134
- https://creativecommons.org/publicdomain/zero/1.0/
- https://creativecommons.org/publicdomain/zero/1.0/deed.en
- https://creativecommons.org/publicdomain/zero/1.0/deed.an
- https://creativecommons.org/publicdomain/zero/1.0/deed.az
- https://creativecommons.org/publicdomain/zero/1.0/deed.id
- https://creativecommons.org/publicdomain/zero/1.0/deed.eu
- https://creativecommons.org/publicdomain/zero/1.0/deed.ca
Other scans of creativecommons.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 24 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - unknown ·
http://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown
Questions about creativecommons.org
- Is creativecommons.org safe?
- The scan of creativecommons.org on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with creativecommons.org?
- 414 analysed samples communicate with this URL, including Genpack, Container, Autolike.
- How was creativecommons.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of creativecommons.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan