Is template.com safe?

The scan of template.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with template.com?

13 analysed samples communicate with this URL.

How was template.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

template.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned template.com and returned a unknown verdict (score 6). The page resolved to 104.26.14.87 on Cloudflare, Inc. in US. The domain was registered 12363 days ago through NameCheap, Inc.. 2 domains and 1 IP were contacted. 13 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://template.com/wp/xmlrpc.php
Domain: template.com · IP: 104.26.14.87 · AS13335 · US
Server: cloudflare
HTTP status: 200 · text/html
Registrar: NameCheap, Inc. · domain age 12363 days · created 1992-10-14
Scan tier: fast · observed 2026-08-21 03:22:16 UTC

Malware communicating with this URL (13)

These samples were observed contacting or being served from template.com. Each links to its full analysis.

df0e5e83296ac5db4b7224b55b03ae67d6f6970a4126a153967e7af0ee4e75c5 - referenced · df0e5e83296ac5db4b7224b55b03ae67 · first seen 2026-08-21
df0d4730e86bc7712bfdef237ba464367400c5706fae2961f90bec793c5713d2 - referenced · df0d4730e86bc7712bfdef237ba46436 · first seen 2026-08-21
990f8b08e4065c66728b6c5d5ee0a615515f75b538fbaed37d3bfd4ca6a9415d - referenced · 990f8b08e4065c66728b6c5d5ee0a615 · first seen 2026-08-20
99092c55bf6f34ede9b3d45f26cb7d2320704015d4418c3d52d99f026e664b5d - referenced · 99092c55bf6f34ede9b3d45f26cb7d23 · first seen 2026-08-20
9908891aa1cecbde7b0504927f1015d7f9375000173e6996c6e72ef8ab3c14a3 - referenced · 9908891aa1cecbde7b0504927f1015d7 · first seen 2026-08-20
99077cc33cbd824fd83e55fed4a3ebe7bd54a23c0f0413fe79cbfd2e4ee724a4 - referenced · 99077cc33cbd824fd83e55fed4a3ebe7 · first seen 2026-08-20
f553c4f027010ec6da795f38a95116414015cff327bd5cd9ea467d1aa308f77c - referenced · f553c4f027010ec6da795f38a9511641 · first seen 2026-08-15
f5563c2e7fa90056b59e1170bccc1c887965990c234c53dd5b4f0dac97fae20c - referenced · f5563c2e7fa90056b59e1170bccc1c88 · first seen 2026-08-15
502664fbe9e1aefb27858e4faffe86841ff0c572566955294e02be5ed8272f9d - referenced · 502664fbe9e1aefb27858e4faffe8684 · first seen 2026-08-14
502b5674512845472a277f8f1669dc09090584b9b8184dcc72002de62d3f6332 - referenced · 502b5674512845472a277f8f1669dc09 · first seen 2026-08-14
80eb6205b875c061990958fa4c8281ba093393647869759f979a4aa04271d5de - referenced · 80eb6205b875c061990958fa4c8281ba · first seen 2026-08-13
80e524caff19a6a380bfb5dedd242d9fd9d2fb3db805ef107c9773b938209777 - referenced · 80e524caff19a6a380bfb5dedd242d9f · first seen 2026-08-13
e29724f2019a6cb893f9cad5697938c70860e791a6d45123786aece761a9bbb4 - referenced · e29724f2019a6cb893f9cad5697938c7 · first seen 2026-08-12

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Cloudflare

Contacted infrastructure

104.26.14.87 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

template.com
l.cdn-fileserver.com
104.26.14.87
http://template.com/wp/xmlrpc.php
http://template.com/wp/1
https://l.cdn-fileserver.com/bping.php?cid=8CUHL418T&vi=1787282536876073694&ugd=0&sc=NSW&vgd_oreqf=one&vgd_oresf=one&vgd_asn=16509&r=1787282536583&vgd_setup=c21&vgd_wlstp=0&wsip=170762531&requrl=https%3A%2F%2Ftemplate.com%2Fwp%2Fxmlrpc.php&ssld=%7B%22QQNN%22%3A%22KP%22%2C%22QQN75%22%3A%22Q5OzJ5%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22Ibp%22%2C%22QQl8E%22%3A%22%22%7D&vgd_bid=452164&crid=126431565&lf=6&cc=AU&wshp=0&hvsid=00001787282536582000521021448620&vgd_rpth=%2Fola&gdpr=0&mspa=0&vgd_tsce=L1328&vgd_cage=41&vgd_cdv=O3435&vgd_l2type=dmola&lper=100&prid=8PR11258V&vgd_len=590&vgd_end=1

Other scans of template.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown
23 Aug 2026 - unknown · http://template.com/wp/?feed=atom
23 Aug 2026 - unknown · http://template.com/wp/?feed=rss2
22 Aug 2026 - unknown
22 Aug 2026 - unknown · http://template.com/wp/?feed=atom
22 Aug 2026 - unknown · http://template.com/wp/?feed=rss
22 Aug 2026 - unknown · http://template.com/wp/?feed=rss2
22 Aug 2026 - unknown · http://template.com/wp/wp-includes/wlwmanifest.xml
22 Aug 2026 - unknown · http://template.com/wp/xmlrpc.php?rsd
21 Aug 2026 - unknown · http://template.com/wp/

Questions about template.com

Is template.com safe?: The scan of template.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with template.com?: 13 analysed samples communicate with this URL.
How was template.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of template.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan