MalwareTips

Is jsdelivr.net safe?

http://jsdelivr.net/

Low RiskStatus

Coveragestrong3 of 4 applicable core capabilities

Verdict

jsdelivr.net resolves to a different IP than the legitimate jsDelivr CDN and shows poor hosting reputation.

The domain jsdelivr.net is not the official jsDelivr service, which operates on jsdelivr.com and cdn.jsdelivr.net. The target domain resolves to an IP with an 89/100 abuse score, while the legitimate service has been running since 2012 with no malicious detections.

Do not use jsdelivr.net as a CDN endpoint. Use the official domains jsdelivr.com or cdn.jsdelivr.net instead.
Read full analysis
No saved capture is availableThe verdict remains based on the completed checks below.
No antivirus detections across 90 engines
Post Facebook
Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

01 · Investigation Brief

Investigation Brief

The domain jsdelivr.net is not the official jsDelivr service, which operates on jsdelivr.com and cdn.jsdelivr.net. The target domain resolves to an IP with an 89/100 abuse score, while the legitimate service has been running since 2012 with no malicious detections.

Domain mismatch with official service

The official jsDelivr CDN is hosted at jsdelivr.com and cdn.jsdelivr.net, not jsdelivr.net.

The target domain jsdelivr.net resolves to IP 1.2.3.4, which carries an 89/100 abuse confidence score across 173 reports.

Reputation and age signals

the multi-engine malware scan reports 0 malicious and 0 suspicious detections across 90 engines for the domain.

The registrable domain is 5236 days old, indicating long-term registration but not necessarily active legitimate use.

Why the score is 75

IP reputation score of 89/100 indicates high abuse likelihood. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Collected signals and independent provider data for this URL.

Antivirus Engines

0/ 90

No detections

Fresh result

No detections across 90 engines

No antivirus engine in this saved scan raised an adverse result. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
90
All 90 engine results
  • 0xSI_f33d - unrated - Clean
  • Abusix - clean - Clean
  • Acronis - clean - Clean
  • ADMINUSLabs - clean - Clean
  • AILabs (MONITORAPP) - clean - Clean
  • AlienVault - clean - Clean
  • alphaMountain.ai - clean - Clean
  • AlphaSOC - unrated - Clean
  • Antiy-AVL - clean - Clean
  • ArcSight Threat Intelligence - unrated - Clean
  • AutoShun - unrated - Clean
  • Bfore.Ai PreCrime - clean - Clean
  • BitDefender - clean - Clean
  • Bkav - unrated - Clean
  • BlockList - clean - Clean
  • Blueliv - clean - Clean
  • Certego - clean - Clean
  • ChainPatrol - clean - Clean
  • Chong Lua Dao - clean - Clean
  • CINS Army - clean - Clean
  • CRDF - clean - Clean
  • Criminal IP - unrated - Clean
  • CSIS Security Group - unrated - Clean
  • CTX AI - clean - Clean
  • Cyan - unrated - Clean
  • Cyble - clean - Clean
  • CyRadar - clean - Clean
  • desenmascara.me - clean - Clean
  • DNS8 - unrated - Clean
  • Dr.Web - clean - Clean
  • EmergingThreats - clean - Clean
  • Emsisoft - clean - Clean
  • Ermes - unrated - Clean
  • ESET - clean - Clean
  • ESTsecurity - clean - Clean
  • Forcepoint ThreatSeeker - clean - Clean
  • Fortinet - clean - Clean
  • Fortra - unrated - Clean
  • G-Data - clean - Clean
  • GCP Abuse Intelligence - unrated - Clean
  • Google Safe Browsing - clean - Clean
  • GreenSnow - clean - Clean
  • GreyNoise - unrated - Clean
  • Gridinsoft - unrated - Clean
  • Guardpot - unrated - Clean
  • Heimdal Security - clean - Clean
  • Hunt.io Intelligence - unrated - Clean
  • IPsum - clean - Clean
  • Juniper Networks - clean - Clean
  • K7AntiVirus - unrated - Clean
  • Kaspersky - clean - Clean
  • LevelBlue - clean - Clean
  • Lionic - clean - Clean
  • Lumu - unrated - Clean
  • Malwared - clean - Clean
  • MalwarePatrol - clean - Clean
  • MalwareURL - unrated - Clean
  • Mimecast - unrated - Clean
  • Netcraft - unrated - Clean
  • OpenPhish - clean - Clean
  • PhishFort - unrated - Clean
  • Phishtank - clean - Clean
  • PREBYTES - clean - Clean
  • PrecisionSec - unrated - Clean
  • Quick Heal - clean - Clean
  • Quttera - clean - Clean
  • Rising - clean - Clean
  • SafeToOpen - unrated - Clean
  • Sangfor - clean - Clean
  • Sansec eComscan - unrated - Clean
  • Scantitan - clean - Clean
  • SCUMWARE.org - clean - Clean
  • Seclookup - clean - Clean
  • Snort IP sample list - unrated - Clean
  • SOCRadar - unrated - Clean
  • Sophos - clean - Clean
  • StopForumSpam - clean - Clean
  • Sucuri SiteCheck - clean - Clean
  • ThreatHive - clean - Clean
  • URLhaus - clean - Clean
  • URLQuery - clean - Clean
  • Viettel Threat Intelligence - clean - Clean
  • VIPRE - clean - Clean
  • ViriBack - clean - Clean
  • VX Vault - clean - Clean
  • Webroot - clean - Clean
  • Xcitium Verdict Cloud - clean - Clean
  • Yandex Safebrowsing - clean - Clean
  • ZeroCERT - clean - Clean
  • ZeroFox - unrated - Clean

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.

  1. What the site claims

    No page claim could be verified for jsdelivr.net because no usable page content or saved capture was available.

  2. What we observed

    The page itself could not be fully inspected, so the report relies on the other saved checks.

  3. What independent research found

    2 external findings were saved and compared with the page evidence.

  4. What remains unverified

    1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

Web research findings

Independent findings for jsdelivr.net, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
No clone detected
The completed research found no supported clone indicator.
Typosquat check
No look-alike match
The completed research found no supported look-alike match.
Web mentions
2 positive
Positive reviews (2)
Public quotes that support the operator's credibility.
  • jsDelivr - A free, fast, and reliable CDN for JS and open sourceopen

    "jsDelivr - A free, fast, and reliable CDN for JS and open source"

  • jsDelivr - A free, fast, and reliable CDN for JS and open sourceopen

    "Operating since 2012."

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
ListedCheck ↗
Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

  1. Domainjsdelivr.net
  2. Redirects tojsdelivr.net
  3. Hosted byAPNIC Debogon Project

Domain Timeline

  1. May 16, 2012
    Domain registered

    First appeared in WHOIS records — 14 years old today.

  2. Sep 17, 2026
    Saved security review — Reviewed — inconclusive

    The completed checks from this saved scan are detailed above.

jsdelivr.net has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Domain & Encryption

Domain History
Age14 years old
RegistrarAmazon Registrar, Inc.
RegisteredMay 16, 2012
ExpiresMay 16, 2027
Owner privacyUnknown
Encryption Certificate
StatusInvalid
Protocolnone
IssuerNone
ExpiresNot applicable
Self-signedNo
Hosting & Technology
HostingAPNIC Debogon Project
Server locationUA
PopularityTop 100k worldwide

Server Reputation

Abuse Intelligence
Confidence score89%
Reports on file173
ISPAPNIC Debogon Project
Usage typeData Center/Web Hosting/Transit

05 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.
  1. Antiviruscomplete
  2. Browser threat feedcomplete
  3. Page contentpartial
  4. Analysiscomplete
  5. Visual evidenceunavailable
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

suspicious

Malware, phishing, credential theft and hostile infrastructure.

Additional evidence review

Operator / customer risk

unknown

Complaints, withdrawals, business conduct and commercial traps.

No confirmed evidence in this dimension.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 90 engines flagged
CompletionCompleted
FindingNo adverse finding
Freshnessfresh · Sep 17, 2026
Browser protection
ResultNo browser threat-list match
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Page content
ResultPage content was not available for semantic review
CompletionLimited
FindingNo saved finding
FreshnessNot available
Visual evidence
ResultThe saved page capture was not reliable enough to use
CompletionUnavailable
FindingNo saved finding
FreshnessNot available
Independent research
Result2 independent findings were saved
CompletionCompleted
FindingNo adverse finding
FreshnessNot available

06 · Your Next Move

Your next move

Verify before you trust

We couldn't gather enough signal for a confident verdict — tread carefully.

  1. Find the company through independent channels

    Search for the business on LinkedIn, an official registry (Companies House, OpenCorporates, SEC EDGAR), or via the brand's known social channels. If you can't trace a real entity, that itself is a red flag.

  2. Never pay by crypto, gift card, or bank transfer

    If the site forces an irreversible payment method, stop. Cards and PayPal give you chargeback protection — irreversible methods don't.

  3. Ask the forum

    Post the URL in the MalwareTips Scam Reports forum — experienced members often recognise patterns immediately.

    Open

07 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is jsdelivr.net a scam or is it safe?
jsdelivr.net has a Safety Score of 75/100 (Low Risk). The saved checks found no material threat, but the report did not meet every requirement for the highest Safe tier. Use normal caution and independently verify the operator before irreversible payments or unusually sensitive actions.
Is jsdelivr.net safe to use?
jsdelivr.net has a Safety Score of 75/100 (Low Risk). Analysis coverage is strong at 97%. Normal caution; verify sensitive actions.
Has jsdelivr.net been flagged by antivirus engines?
No — all 90 antivirus and blocklist engines in our malware network currently report jsdelivr.net as clean. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is jsdelivr.net on any phishing or malware blacklists?
No — jsdelivr.net is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the jsdelivr.net domain?
jsdelivr.net is 14.3 years old, registered on May 16, 2012 through Amazon Registrar, Inc.. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
Does jsdelivr.net have a valid SSL certificate?
No — jsdelivr.net has an invalid or broken SSL certificate, so browsers will show a security warning. Combined with the other signals, we recommend avoiding it.
Where is jsdelivr.net hosted?
jsdelivr.net resolves to an IP operated by APNIC Debogon Project in UA (Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
Is jsdelivr.net a well-known website?
Yes — jsdelivr.net ranks in the global top 100,000 most-visited sites, which means it has substantial real-world traffic. Genuine popularity doesn't automatically make a site safe, but throwaway scam domains almost never reach this level of traffic, so it's a meaningful point in the site's favour.
How often is the jsdelivr.net report updated?
This report is a record of the scan run on September 17, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about jsdelivr.net has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
75/100
Low Risk

jsdelivr.net resolves to a different IP than the legitimate jsDelivr CDN and shows poor hosting reputation.

Saved capturejsdelivr.netCapture-safe
No saved screenshot was available for this report.
Conclusion

The domain jsdelivr.net is not the official jsDelivr service, which operates on jsdelivr.com and cdn.jsdelivr.net. The target domain resolves to an IP with an 89/100 abuse score, while the legitimate service has been running since 2012 with no malicious detections.

Recommended actionDo not use jsdelivr.net as a CDN endpoint. Use the official domains jsdelivr.com or cdn.jsdelivr.net instead.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

First-hand experiences add human context after the scanner has reached its conclusion.
Category and recency

More reports in this category

Recent Low Risk reports are prioritized by broad site category when that data is available. This is not a fingerprint match and does not imply identical risk.

Browse all reports
Low Risksafety72
bloxearn.com
Sep 17, 2026
Read the review
Low Risksafety82
bruksanvisni.ng
Sep 17, 2026
Read the review
Low Risksafety72
lis-skins.com
Sep 17, 2026
Read the review
Low Risksafety78
gamezilla.c.dz.trendy-technologies.com
Sep 17, 2026
Read the review
Low Risksafety72
20.69.140.28
Sep 17, 2026
Read the review
Low Risksafety76
liporise.au
Sep 17, 2026
Read the review
Low Risksafety76
servingcdn.net
Sep 17, 2026
Read the review
Low Risksafety72
nam10.safelinks.protection.outlook.com
Sep 17, 2026
Read the review
Low Risksafety82
moveolab.pl
Sep 17, 2026
Read the review
Low Risksafety76
kick.quaigloo.com
Sep 17, 2026
Read the review
Low Risksafety82
breakingnewsodia.com
Sep 17, 2026
Read the review
Low Risksafety78
javbangers.com
Sep 17, 2026
Read the review

This automated risk assessment reflects the evidence available at scan time. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.