vimeo.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned vimeo.com and returned a unknown verdict (score -12). The page resolved to 162.159.138.60 on Cloudflare, Inc. in US. 1 domain and 1 IP were contacted. 17 malware samples communicate with this URL (Maldoc, Gootloader). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://vimeo.com/api/oembed.json?url= - Domain: vimeo.com · IP: 162.159.138.60 · AS13335 · US
- Server: cloudflare
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 4 13: · subject CN=vimeo.com
- Scan tier: fast · observed 2026-08-19 18:27:06 UTC
Malware communicating with this URL (17)
These samples were observed contacting or being served from vimeo.com. Each links to its full analysis.
- Maldoc - referenced ·
2d1ec17083ea606da07bf3a9ec8b23e2· first seen 2026-08-19 - 904ba9cedd81e5b19dec43b57661f80cd50fc8f8581c17b2454dc5d7ce59932d - referenced ·
904ba9cedd81e5b19dec43b57661f80c· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19 - Gootloader - referenced ·
f1cbe5f24bb5373e39fa3abb363f16cf· first seen 2026-08-19 - 6ee6fc892de79953ab678b447151f27578fed64fb77f618c1dc6dcd611c08b11 - referenced ·
6ee6fc892de79953ab678b447151f275· first seen 2026-08-16 - da4b31ce51bdfcb864659c6c45eeb1a9e76f875191b29e05b32f623fbd5a7f02 - referenced ·
da4b31ce51bdfcb864659c6c45eeb1a9· first seen 2026-08-15 - 488793f27a8677f3a4be096ff4fbeda88239a311ab192b5e0d8fed4a699a99b3 - referenced ·
488793f27a8677f3a4be096ff4fbeda8· first seen 2026-08-15 - 6c6232da36530d3400d0e12f71f9751237409ad6b09fb060214cd732c1438baa - referenced ·
6c6232da36530d3400d0e12f71f97512· first seen 2026-08-14 - 521a940c7302b8ce2b5a55bd7beb3e2583c073b5b101453a4d34c39d88197220 - referenced ·
521a940c7302b8ce2b5a55bd7beb3e25· first seen 2026-08-14 - player.js - referenced ·
718e1ff73387fc5fd0455ca05339e322· first seen 2026-08-14 - 50260b26b7c6eb0c14fc8ef16b2c85c33831674e2009c01687519af5d36b6398 - referenced ·
50260b26b7c6eb0c14fc8ef16b2c85c3· first seen 2026-08-14 - 2c62d2460b0027fc1384d5e1ff0003de9a19fdf6bc32abbfdecc6ef5a0648fac - referenced ·
2c62d2460b0027fc1384d5e1ff0003de· first seen 2026-08-14 - da3c6485fc7c24b48f0f99593fce3b2ca129f683badc82d7b0bcd5977b18e895 - referenced ·
da3c6485fc7c24b48f0f99593fce3b2c· first seen 2026-08-13 - 8127a16b6dfff26879ec13854dff76b3048ffcbe9093a5b61140bec92496c53c - referenced ·
8127a16b6dfff26879ec13854dff76b3· first seen 2026-08-13 - 3775dd3190e5afbef31d80329dc3729411dfc308a10477a803da80c88bac8504 - referenced ·
3775dd3190e5afbef31d80329dc37294· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Fastly
Contacted infrastructure
- 162.159.138.60 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- vimeo.com
- 162.159.138.60
- https://vimeo.com/api/oembed.json?url=
Other scans of vimeo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://vimeo.com/features - 23 Aug 2026 - unknown ·
https://vimeo.com/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - malicious ·
https://chaseregrets.com/ - 23 Aug 2026 - unknown ·
https://abmahnwelle-google-fonts.fabiankoeppe.de/
Questions about vimeo.com
- Is vimeo.com safe?
- The scan of vimeo.com on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with vimeo.com?
- 17 analysed samples communicate with this URL, including Maldoc, Gootloader.
- How was vimeo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of vimeo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan