vimeo.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned vimeo.com and returned a unknown verdict (score -12). The page resolved to 162.159.128.61 on Cloudflare, Inc. in US. The domain was registered 7920 days ago through MarkMonitor Inc.. 9 domains and 2 IPs were contacted, over 12 HTTP requests. 38 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://bowlingkillers.com/imgdb/files/razomej.pdf - Domain: vimeo.com · IP: 162.159.128.61 · AS13335 · US
- Server: cloudflare
- Page title: VimeUhOh
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 7920 days · created 2004-12-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 4 13: · subject CN=vimeo.com
- HTTP requests captured: 12
- Scan tier: standard · observed 2026-08-22 11:20:52 UTC
Redirect chain
http://bowlingkillers.com/imgdb/files/razomej.pdfhttps://vimeo.com/sebastienpetit/imgdb/files/razomej.pdf
Malware communicating with this URL (38)
These samples were observed contacting or being served from vimeo.com. Each links to its full analysis.
- 0305908f76784b522ba4dc3ed6b1bf3bfcbcecbbcfa6ffba105fbbe3c764e095 - referenced ·
0305908f76784b522ba4dc3ed6b1bf3b· first seen 2026-08-22 - 582e11f2123922332199be9553d4d4945545efcc1337f94b9f004ba997abf4a9 - referenced ·
582e11f2123922332199be9553d4d494· first seen 2026-08-22 - 565f3bb054ccbabfc2d49a1627015c179307e414fa00cfafa60a912b6bcddf0a - referenced ·
565f3bb054ccbabfc2d49a1627015c17· first seen 2026-08-22 - 6048eb85c29c9852a1075997add5a4b00201efd11e0a68ed59f896dfa4ce5dc8 - referenced ·
6048eb85c29c9852a1075997add5a4b0· first seen 2026-08-22 - 157221c4a25018a0ca66a4620b88c37f39e5e3dc8959234cafb4473071391124 - referenced ·
157221c4a25018a0ca66a4620b88c37f· first seen 2026-08-21 - 19343543c9d5fae8d028779ddace6bc56141be0e4e34eb61e313a17ce10febef - referenced ·
19343543c9d5fae8d028779ddace6bc5· first seen 2026-08-21 - 76e096948b55dc13db6e6c3fe82f5e37b981d163c8d8da12ec15f8d0218f256f - referenced ·
76e096948b55dc13db6e6c3fe82f5e37· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - 1d7a15aae919e76d9b87dd101425b0a8f7aa64bfd13755ded32ec2b8b4f67a44 - referenced ·
1d7a15aae919e76d9b87dd101425b0a8· first seen 2026-08-21 - e476e9b003f635fe92e5a6a389bd242e55b6e96a376803d525c9649dabdbbdbc - referenced ·
e476e9b003f635fe92e5a6a389bd242e· first seen 2026-08-21 - 5d2b889a01f761b084546c4ac5fc4c05da23ae6bcb027f68c5719bff4d0f76ee - referenced ·
5d2b889a01f761b084546c4ac5fc4c05· first seen 2026-08-21 - 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - 885985d681260add34a4e1ca8ad79b6533712fa3bc85a2f2c3fd1a0ab96fdc84 - referenced ·
885985d681260add34a4e1ca8ad79b65· first seen 2026-08-20 - 6be73b408ce5f3d42d61d94d2c4e38b27e4569090698ac3c75d2cd092f468217 - referenced ·
6be73b408ce5f3d42d61d94d2c4e38b2· first seen 2026-08-20 - dcceaf023fe8369c61f315deda7d49554a72b1dd7ef8914e6fdbbbb680beae09 - referenced ·
dcceaf023fe8369c61f315deda7d4955· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Fastly
- Google Analytics
Contacted infrastructure
- 162.159.128.61 - AS13335 Cloudflare, Inc. (United States)
- 213.186.33.5 - AS16276 OVH SAS (France)
Observed indicators
- vimeo.com
- player.vimeo.com
- i.vimeocdn.com
- f.vimeocdn.com
- www.googletagmanager.com
- investors.vimeo.com
- developer.vimeo.com
- vimeo.zendesk.com
- transcend-cdn.com
- 162.159.128.61
- 213.186.33.5
- https://vimeo.com/sebastienpetit/imgdb/files/razomej.pdf
- https://player.vimeo.com/
- https://i.vimeocdn.com/
- https://f.vimeocdn.com/
- https://vimeo.com/search/opensearch.xml
- https://f.vimeocdn.com/logo.svg
- https://i.vimeocdn.com/favicon/main-touch_180
- https://f.vimeocdn.com/svg/legacy_view_support/iris_icon_v_64.svg?37c2dca961a0f480d873f2e09e1a28b68374d5a3
- https://f.vimeocdn.com/images_v6/favicon.ico?37c2dca961a0f480d873f2e09e1a28b68374d5a3
Other scans of vimeo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://vimeo.com/features - 23 Aug 2026 - unknown ·
https://vimeo.com/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - malicious ·
https://chaseregrets.com/ - 23 Aug 2026 - unknown ·
https://abmahnwelle-google-fonts.fabiankoeppe.de/
Questions about vimeo.com
- Is vimeo.com safe?
- The scan of vimeo.com on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with vimeo.com?
- 38 analysed samples communicate with this URL.
- How was vimeo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of vimeo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan