vimeo.com - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned vimeo.com and returned a unknown verdict (score -12). The page resolved to 162.159.128.61 on Cloudflare, Inc. in US. The domain was registered 7918 days ago through MarkMonitor Inc.. 9 domains and 2 IPs were contacted, over 12 HTTP requests. 27 malware samples communicate with this URL (Maldoc, Gootloader). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://vimeo.com/api/v2/video/ - Domain: vimeo.com · IP: 162.159.128.61 · AS13335 · US
- Server: cloudflare
- Page title: VimeUhOh
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: MarkMonitor Inc. · domain age 7918 days · created 2004-12-15
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 4 13: · subject CN=vimeo.com
- HTTP requests captured: 12
- Scan tier: fast · observed 2026-08-20 22:13:25 UTC
Redirect chain
http://vimeo.com/api/v2/video/https://vimeo.com/api/v2/video/
Malware communicating with this URL (27)
These samples were observed contacting or being served from vimeo.com. Each links to its full analysis.
- 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - 885985d681260add34a4e1ca8ad79b6533712fa3bc85a2f2c3fd1a0ab96fdc84 - referenced ·
885985d681260add34a4e1ca8ad79b65· first seen 2026-08-20 - 6be73b408ce5f3d42d61d94d2c4e38b27e4569090698ac3c75d2cd092f468217 - referenced ·
6be73b408ce5f3d42d61d94d2c4e38b2· first seen 2026-08-20 - dcceaf023fe8369c61f315deda7d49554a72b1dd7ef8914e6fdbbbb680beae09 - referenced ·
dcceaf023fe8369c61f315deda7d4955· first seen 2026-08-20 - f5c1380a5ebbe9ebc15216e4d3d5a90d14baad352dc1dd32052861a2e31142e2 - referenced ·
f5c1380a5ebbe9ebc15216e4d3d5a90d· first seen 2026-08-20 - 9e7c8c62296c274c775605d33820c5a8f3058467f8e9124958275bdab8d4de9c - referenced ·
9e7c8c62296c274c775605d33820c5a8· first seen 2026-08-20 - ac9ab6158e3c2589e404a17b95274f5b85108ab9c6bc710d3c7b579c456db9d5 - referenced ·
ac9ab6158e3c2589e404a17b95274f5b· first seen 2026-08-20 - debd305c4eda2783cd9ad468373635b6754b22c379cfcbebb99a96908fb601fb - referenced ·
debd305c4eda2783cd9ad468373635b6· first seen 2026-08-20 - 983801b612f719bd839b1085b0d45e4dd333e8757b5192bbdfa4d921b0406d93 - referenced ·
983801b612f719bd839b1085b0d45e4d· first seen 2026-08-19 - 43bb3e10b43659a0d45331d299e564b02e6ba9d97c6b60811a1052504562bfe6 - referenced ·
43bb3e10b43659a0d45331d299e564b0· first seen 2026-08-19 - Maldoc - referenced ·
2d1ec17083ea606da07bf3a9ec8b23e2· first seen 2026-08-19 - 904ba9cedd81e5b19dec43b57661f80cd50fc8f8581c17b2454dc5d7ce59932d - referenced ·
904ba9cedd81e5b19dec43b57661f80c· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19 - Gootloader - referenced ·
f1cbe5f24bb5373e39fa3abb363f16cf· first seen 2026-08-19 - 6ee6fc892de79953ab678b447151f27578fed64fb77f618c1dc6dcd611c08b11 - referenced ·
6ee6fc892de79953ab678b447151f275· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Fastly
- Google Analytics
Contacted infrastructure
- 162.159.128.61 - AS13335 Cloudflare, Inc. (United States)
- 162.159.138.60 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- vimeo.com
- player.vimeo.com
- i.vimeocdn.com
- f.vimeocdn.com
- www.googletagmanager.com
- investors.vimeo.com
- developer.vimeo.com
- vimeo.zendesk.com
- transcend-cdn.com
- 162.159.128.61
- 162.159.138.60
- https://vimeo.com/api/v2/video/
- https://player.vimeo.com/
- https://i.vimeocdn.com/
- https://f.vimeocdn.com/
- https://vimeo.com/search/opensearch.xml
- https://f.vimeocdn.com/logo.svg
- https://i.vimeocdn.com/favicon/main-touch_180
- https://f.vimeocdn.com/svg/legacy_view_support/iris_icon_v_64.svg?14b491fecf295ca5dfc4a40e7501c9aa20077b58
- https://f.vimeocdn.com/images_v6/favicon.ico?14b491fecf295ca5dfc4a40e7501c9aa20077b58
Other scans of vimeo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - suspicious ·
https://dimsemenov.com/plugins/magnific-popup/ - 23 Aug 2026 - unknown ·
https://vimeo.com/features - 23 Aug 2026 - unknown ·
https://vimeo.com/ - 23 Aug 2026 - unknown ·
https://semalt.com/?s= - 23 Aug 2026 - unknown ·
https://semalt.com/ - 23 Aug 2026 - malicious ·
https://chaseregrets.com/ - 23 Aug 2026 - unknown ·
https://abmahnwelle-google-fonts.fabiankoeppe.de/
Questions about vimeo.com
- Is vimeo.com safe?
- The scan of vimeo.com on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with vimeo.com?
- 27 analysed samples communicate with this URL, including Maldoc, Gootloader.
- How was vimeo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of vimeo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan