creativecommons.org - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned creativecommons.org and returned a unknown verdict (score -12). The page resolved to 104.20.5.134 on Cloudflare, Inc. in US. The domain was registered 9349 days ago through Gandi SAS. 11 domains and 2 IPs were contacted, over 4 HTTP requests. 391 malware samples communicate with this URL (Genpack, HUILoader, Delf). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://creativecommons.org/publicdomain/zero/1.0/ - Domain: creativecommons.org · IP: 104.20.5.134 · AS13335 · US
- Server: cloudflare
- Page title: Deed - CC0 1.0 Universal - Creative Commons
- HTTP status: 200 · text/html
- Registrar: Gandi SAS · domain age 9349 days · created 2001-01-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 1 18: · subject CN=creativecommons.org
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-22 02:35:33 UTC
Redirect chain
http://creativecommons.org/publicdomain/zero/1.0/https://creativecommons.org/publicdomain/zero/1.0/
Malware communicating with this URL (391)
These samples were observed contacting or being served from creativecommons.org. Each links to its full analysis.
- 5b6e45b78e3ec7042d523d8e2247f28f4e2a1c99d4c014cbc356a003e3bbe349 - referenced ·
5b6e45b78e3ec7042d523d8e2247f28f· first seen 2026-08-22 - Genpack - referenced ·
7dd8fba9a4f6d54091167d7fbf7913b6· first seen 2026-08-21 - 3f7e70ef30d0f961888eaefda415bd82a2889a5af6a807f457a6a3d3ead67422 - referenced ·
3f7e70ef30d0f961888eaefda415bd82· first seen 2026-08-21 - Genpack - referenced ·
962063e4d4b0964a4cd7131461a66852· first seen 2026-08-21 - Genpack - referenced ·
6b3e3fccb1aae7a98063dc6fc34c6902· first seen 2026-08-21 - HUILoader - referenced ·
9a489f831df3ada24dcc53785d56a956· first seen 2026-08-21 - 3f79aeb9f488b72388f0c8b2546f038bf826e5e929741cf111518028fce848e0 - referenced ·
3f79aeb9f488b72388f0c8b2546f038b· first seen 2026-08-21 - 3d81893ea51c83f1883c4b0e4d5dfc44de4c528675677c1909783c4486078f8d - referenced ·
3d81893ea51c83f1883c4b0e4d5dfc44· first seen 2026-08-21 - 3f7899ba69ccc7a23a418c62625e579ea9d406b1d02e28768d5cf8b18bc1d7d6 - referenced ·
3f7899ba69ccc7a23a418c62625e579e· first seen 2026-08-21 - 3f75d710f5a2f6449186b8d631698d841bbf4cfe7156d4bdae81610c71ab7458 - referenced ·
3f75d710f5a2f6449186b8d631698d84· first seen 2026-08-21 - 3f76d907f5b9a6633164f78a65964bc406a76b79e6d4139c0e824c489609c4ac - referenced ·
3f76d907f5b9a6633164f78a65964bc4· first seen 2026-08-21 - Delf - referenced ·
0bedadf9dcb2337d6825d9f393f54a5a· first seen 2026-08-21 - 323863f2ce50bc7dde48def8144408bd53751a207ad1f9f750f977ff76866f51 - referenced ·
323863f2ce50bc7dde48def8144408bd· first seen 2026-08-21 - Genpack - referenced ·
76fb74114303efea1174b70b4aa8e0f2· first seen 2026-08-21 - c613b1ff28931020952aed3376a4cd040c42abfd552cfb87d0fba172bbd7e748 - referenced ·
c613b1ff28931020952aed3376a4cd04· first seen 2026-08-21
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.20.5.134 - AS13335 Cloudflare, Inc. (United States)
- 104.20.6.134 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- creativecommons.org
- search.creativecommons.org
- giving.gofundme.com
- stage.creativecommons.org
- creative-commons-shop.fourthwall.com
- bsky.app
- mastodon.social
- www.facebook.com
- www.linkedin.com
- mail.creativecommons.org
- fontawesome.com
- 104.20.5.134
- 104.20.6.134
- https://creativecommons.org/publicdomain/zero/1.0/
- https://creativecommons.org/publicdomain/zero/1.0/deed.en
- https://creativecommons.org/publicdomain/zero/1.0/deed.an
- https://creativecommons.org/publicdomain/zero/1.0/deed.az
- https://creativecommons.org/publicdomain/zero/1.0/deed.id
- https://creativecommons.org/publicdomain/zero/1.0/deed.eu
- https://creativecommons.org/publicdomain/zero/1.0/deed.ca
Other scans of creativecommons.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://autotools.info/index.html - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
https://getbootstrap.com/ - 24 Aug 2026 - unknown
- 24 Aug 2026 - unknown ·
https://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
http://himeaime.blogspot.com/2015/01/jodha-akbar-episode-312.html - 23 Aug 2026 - unknown ·
http://gmpg.org/xfn/11 - 23 Aug 2026 - unknown ·
https://autotools.info/index.html - 23 Aug 2026 - unknown ·
http://pandancoco.blogspot.com/2015/02/scop-281.html - 23 Aug 2026 - unknown
Questions about creativecommons.org
- Is creativecommons.org safe?
- The scan of creativecommons.org on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with creativecommons.org?
- 391 analysed samples communicate with this URL, including Genpack, HUILoader, Delf.
- How was creativecommons.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of creativecommons.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan