player.vimeo.com - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned player.vimeo.com and returned a unknown verdict (score -12). The page resolved to 162.159.138.60 on Cloudflare, Inc. in US. The domain was registered 7918 days ago through MarkMonitor Inc.. 1 domain and 2 IPs were contacted. 27 malware samples communicate with this URL (Maldoc, Gootloader). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://player.vimeo.com/video/ - Domain: player.vimeo.com · IP: 162.159.138.60 · AS13335 · US
- Server: cloudflare
- Page title: Sorry
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 7918 days · created 2004-12-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 4 13: · subject CN=vimeo.com
- Scan tier: fast · observed 2026-08-20 22:13:26 UTC
Redirect chain
http://player.vimeo.com/video/https://player.vimeo.com/video/
Malware communicating with this URL (27)
These samples were observed contacting or being served from player.vimeo.com. Each links to its full analysis.
- 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - 885985d681260add34a4e1ca8ad79b6533712fa3bc85a2f2c3fd1a0ab96fdc84 - referenced ·
885985d681260add34a4e1ca8ad79b65· first seen 2026-08-20 - 6be73b408ce5f3d42d61d94d2c4e38b27e4569090698ac3c75d2cd092f468217 - referenced ·
6be73b408ce5f3d42d61d94d2c4e38b2· first seen 2026-08-20 - f5c1380a5ebbe9ebc15216e4d3d5a90d14baad352dc1dd32052861a2e31142e2 - referenced ·
f5c1380a5ebbe9ebc15216e4d3d5a90d· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - 9e7c8c62296c274c775605d33820c5a8f3058467f8e9124958275bdab8d4de9c - referenced ·
9e7c8c62296c274c775605d33820c5a8· first seen 2026-08-20 - debd305c4eda2783cd9ad468373635b6754b22c379cfcbebb99a96908fb601fb - referenced ·
debd305c4eda2783cd9ad468373635b6· first seen 2026-08-20 - 983801b612f719bd839b1085b0d45e4dd333e8757b5192bbdfa4d921b0406d93 - referenced ·
983801b612f719bd839b1085b0d45e4d· first seen 2026-08-19 - 43bb3e10b43659a0d45331d299e564b02e6ba9d97c6b60811a1052504562bfe6 - referenced ·
43bb3e10b43659a0d45331d299e564b0· first seen 2026-08-19 - Maldoc - referenced ·
2d1ec17083ea606da07bf3a9ec8b23e2· first seen 2026-08-19 - 904ba9cedd81e5b19dec43b57661f80cd50fc8f8581c17b2454dc5d7ce59932d - referenced ·
904ba9cedd81e5b19dec43b57661f80c· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19 - Gootloader - referenced ·
f1cbe5f24bb5373e39fa3abb363f16cf· first seen 2026-08-19 - 26bdfef1eb14e1cf9759db00a65a1844542d3d2387e89eb52d7898fb5d72744b - referenced ·
26bdfef1eb14e1cf9759db00a65a1844· first seen 2026-08-16 - 6ee6fc892de79953ab678b447151f27578fed64fb77f618c1dc6dcd611c08b11 - referenced ·
6ee6fc892de79953ab678b447151f275· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Fastly
Contacted infrastructure
- 162.159.138.60 - AS13335 Cloudflare, Inc. (United States)
- 162.159.128.61 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- player.vimeo.com
- 162.159.138.60
- 162.159.128.61
- https://player.vimeo.com/video/
Other scans of player.vimeo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - suspicious ·
https://case.edu/ - 23 Aug 2026 - unknown ·
http://ventensis.lt/public/ckfinder/userfiles/files/53821040745.pdf - 23 Aug 2026 - suspicious ·
https://case.edu/ - 23 Aug 2026 - unknown ·
https://vimeo.com/features - 23 Aug 2026 - unknown ·
https://vimeo.com/ - 23 Aug 2026 - unknown ·
https://danielfelber.ch/userfiles/file/wimifovodozazoliv.pdf - 23 Aug 2026 - unknown ·
https://danielfelber.ch/userfiles/file/wimifovodozazoliv.pdf - 23 Aug 2026 - malicious ·
https://chaseregrets.com/ - 23 Aug 2026 - suspicious ·
https://case.edu/ - 23 Aug 2026 - unknown ·
https://vimeo.com/features
Questions about player.vimeo.com
- Is player.vimeo.com safe?
- The scan of player.vimeo.com on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with player.vimeo.com?
- 27 analysed samples communicate with this URL, including Maldoc, Gootloader.
- How was player.vimeo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of player.vimeo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan