Our automated security review found no threat indicators on js.org. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is js.org safe to use?

js.org passed our automated security checks with a trust score of 97/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does js.org have a valid SSL certificate?

Yes. js.org presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE1, expiring in 84 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the js.org domain?

js.org is 30.0 years old, registered on 6/26/1996 through NameCheap, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has js.org been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report js.org as clean.

Is js.org on any phishing or malware blacklists?

No. js.org is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is js.org hosted?

js.org resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

Is js.org a well-known website?

Yes. js.org sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is js.org legit or a scam?

Our verdict:Safe· 97/100

SafeSuspiciousDangerous

A highly reputable developer service providing free subdomains for JavaScript projects with a 30-year domain history and zero security flags.

Why we trust it

Exceptional domain age of 30 years indicates long-term stability.Perfect 0/92 clean result from our antivirus network.Transparent ownership and contact details provided in the site imprint.

js.orgScanned 1d ago

Post Facebook

Trust score

SAFE

Score breakdown

Heuristics 100·MT 95

See the live page ↓

Positive signals (5)

Antivirus clearNot on major blacklistsDomain is 30 years oldEncrypted connectionClean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

30 years old

Registered Jun 26, 1996

Intelligence

Safe

Low likelihood · 98% confidence

Website Preview

LIVE RENDER

js.org

1Clean, professional layout with consistent branding for the js.org service

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Low visual risk

Visual red flags detected in the screenshot

The page is a legitimate instructional site for the js.org subdomain service, showing no visual indicators of scamming or phishing.

Visual risk5/100

What our vision model saw

5 signals

Clean, professional layout with consistent branding for the js.org service

Clear instructional content regarding GitHub Pages integration

No deceptive urgency tactics or fake trust badges present

Legitimate advertisement for developer tools at the bottom of the page

Functional navigation elements for a multi-step tutorial process

Intelligence

Advanced threat intelligence

Analysis

Low scam likelihoodengineMT · Guardiantrust95/100

MT AgentLive web researchVisual inspection

Confidence

The domain was registered in 1996 and has a massive 30-year history, which is a primary indicator of legitimacy. Our antivirus network shows a perfect 0/92 clean record across all major engines. The site operates as a community-driven project by Stefan Keim in Germany, facilitating free subdomains for GitHub-hosted JavaScript libraries. Technical analysis confirms valid SSL, a clean hosting IP reputation, and a high global traffic ranking. There are no signs of deceptive behavior, phishing, or malicious intent. The service is transparently managed via a public GitHub repository where users submit pull requests for their subdomains.

Full dossier

Analysis complete

Page Content

The website serves as a clear, instructional portal for the js.org subdomain service. It outlines a four-step process for developers to link their GitHub Pages projects to a professional-looking URL. The content is technical and focused, providing links to official documentation and a public GitHub repository for transparency. We found no deceptive urgency, fake testimonials, or hidden tracking scripts. The presence of a clear privacy policy and imprint (Impressum) identifying the German operator adds significant accountability.

Infrastructure

The site is hosted on a stable IP address with a perfect reputation score and zero abuse reports. It utilizes a valid Let's Encrypt SSL certificate to ensure encrypted communication. The infrastructure is optimized for performance and security, loading minimal external resources such as Carbon Ads and Twitter integration. There are no suspicious redirect chains or cross-domain hops that would suggest a traffic-hijacking scheme.

Domain History

Registered on June 26, 1996, this domain is older than most modern web services. Such longevity is extremely rare for scam operations, which typically rely on 'burnable' domains registered within the last year. The domain is currently registered through NameCheap and is set to remain active until at least 2032. This long-term commitment and historical consistency are hallmarks of a foundational internet resource.

Web Reputation

Our research confirms that js.org is a staple of the JavaScript ecosystem. It is used by thousands of legitimate open-source projects, including well-known tools like Storybook. Independent review aggregators and developer forums like Reddit consistently refer to it as a safe and valuable free service. There are no recorded complaints of malware distribution or data harvesting associated with the primary domain.

What this means for you

You can use this site with complete confidence. It is a well-known, safe resource for the developer community. If you are a JavaScript developer, following their instructions to set up a subdomain is a standard and secure practice. There is no risk of financial loss or credential theft when interacting with the official js.org instructions.

Risk Factors

No significant risk factors identified during technical or manual analysis.

Positive Signals

Exceptional domain age of 30 years indicates long-term stability.
Perfect 0/92 clean result from our antivirus network.
Transparent ownership and contact details provided in the site imprint.
Widely used and trusted by the global JavaScript developer community.
Clean hosting IP with no history of abuse or malicious activity.

AI Recommendation

This site is safe to use. You can follow its instructions to set up a subdomain for your JavaScript project without security concerns.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for js.org, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Germany

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

15 positive

Key findings

7 headline facts from open-web research

Domain js.org registered June 26, 1996; expires June 25, 2032; status clientTransferProhibited; registrar NameCheap, Inc.
Operated by Stefan Keim (Germany) as free service providing subdomains (e.g., foo.js.org) for GitHub Pages JavaScript projects.
GitHub organization: github.com/js-org; main site js.org/index.html describes service and links to GitHub repo for PR-based subdomain requests.
Privacy policy lists owner contact details and data processing via GitHub Pages, Namecheap, Cloudflare, Carbon Ads.
Terms prohibit phishing, scam, malware, piracy, etc.; violations lead to immediate subdomain deletion; service is voluntary/free with no ownership rights.
No scam reports, complaints, or negative reviews found on major sites; Reddit discussions treat it as legitimate free subdomain provider.
Subdomains like *.js.org commonly used by open-source JS projects (e.g., storybook.js.org references, various library sites).

Business registration

Status: active · Germany

Owned by Stefan Keim, Dorfstraße 1A, 86947 Schwabhausen/Weil, Germany; contact admin@js.org, +49-1764-2080100. Domain registered 1996-06-26 via NameCheap, expires 2032-06-25.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research confirms that js.org is operated by Stefan Keim in Germany as a free service for the JavaScript community. The domain has been active since 1996 and the subdomain service has been a standard tool for GitHub users since 2015. Discussions on platforms like Reddit and GitHub show a high level of trust, with no evidence of phishing or malicious behavior. The service is governed by clear terms that prohibit abuse, and subdomains are manually reviewed via pull requests.

Domain Timeline

Jun 26, 1996
Domain registered
First appeared in WHOIS records — 30 years old today.
Jul 7, 2026
Latest security review — Reviewed as safe
This scan re-ran every check and found no active threat signals.

js.org has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Threat Detection

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Technical Details

domain · encryption · redirects · server reputation · referenced

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles1

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age30 years old

RegistrarNameCheap, Inc.

RegisteredJun 26, 1996

ExpiresJun 25, 2032

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · YE1

ExpiresSep 29, 2026 (84d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

PopularityTop 100k worldwide

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://js.org/
2200https://js.org/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

twitter.com cdn.carbonads.com

What to do

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on js.org and not a lookalike like j-s.org.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Final Verdict

Trust / 100

Final Verdict·js.org

SAFE

This is a legitimate, long-standing service that provides free subdomains for JavaScript developers hosting projects on GitHub Pages. It has been operational for nearly three decades and is widely trusted by the open-source community.

This site is safe to use. You can follow its instructions to set up a subdomain for your JavaScript project without security concerns.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on js.org. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
js.org passed our automated security checks with a trust score of 97/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. js.org presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE1, expiring in 84 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
js.org is 30.0 years old, registered on 6/26/1996 through NameCheap, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 92 antivirus engines in our malware network report js.org as clean.
No. js.org is not currently listed on the major browser blocklist feeds that modern browsers use.
js.org resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
Yes. js.org sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Recently scanned

Other Safe reports

akademiaprzetrwaniawildjoy.pl

groupleavingcards.com

3h ago

Read the review

Safetrust86

studium-krishnamurti.se

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.