cdn.jsdelivr.net
Classification: Whitelisted
cdn.jsdelivr.net is a whitelisted (trusted) hostname. Reported by 8 threat sources, last seen 2026-08-28.
Current activity
- Offline — no longer resolving. Last online 2026-08-28 23:25:03.
- Malware distribution — This indicator is distributing malware.
Blacklist sightings showing the 100 most recent of 112
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ClearFake | ThreatFox Abuse.ch | 2026-01-05 20:07:52 | 2026-08-28 23:25:03 | malicious-activity | |
| IClickFix | ThreatFox Abuse.ch | 2026-08-25 06:48:08 | 2026-08-25 07:25:04 | malicious-activity | |
| Malware Download | URLhaus Abuse.ch | 2022-04-13 17:15:20 | 2026-08-24 07:44:08 | malicious-activity malware | |
| Vidar | ThreatFox Abuse.ch | 2026-08-21 23:37:02 | 2026-08-22 00:25:04 | malicious-activity | |
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:31:34 | 2026-01-07 00:26:49 | benign | |
| Unknown malware | ThreatFox Abuse.ch | 2025-10-17 20:29:47 | 2025-10-17 20:29:47 | malicious-activity | |
| Safe Site | Cisco Umbrella | 2022-07-14 23:25:20 | 2022-07-16 01:15:33 | benign | |
| Malware | Hybrid-Analysis | 2021-06-01 06:15:28 | 2022-01-25 07:30:11 | ||
| Malicious site | Hybrid-Analysis | 2018-07-19 08:15:47 | 2022-01-23 01:15:57 | ||
| Phishing site | Hybrid-Analysis | 2018-06-06 06:45:05 | 2022-01-22 08:00:08 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2021-08-17 06:30:24 | 2022-01-20 07:45:07 | ||
| Malware site | Hybrid-Analysis | 2018-05-18 20:15:07 | 2022-01-19 11:00:17 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2020-01-28 14:45:04 | 2022-01-14 19:45:13 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2022-01-04 04:15:50 | 2022-01-04 04:15:50 | ||
| Malware.Generic | Hybrid-Analysis | 2019-05-20 19:00:13 | 2021-12-26 15:45:07 | ||
| Artemis | Hybrid-Analysis | 2020-10-01 17:15:49 | 2021-12-21 19:15:18 | ||
| PUP.Optional | Hybrid-Analysis | 2021-12-20 21:30:12 | 2021-12-20 21:30:12 | ||
| Foretype.A | Hybrid-Analysis | 2021-12-11 04:00:06 | 2021-12-11 04:00:06 | ||
| Trojan.Script.Generic | Hybrid-Analysis | 2021-06-04 23:30:23 | 2021-12-03 02:00:18 | ||
| Backdoor.PHP.WebShell | Hybrid-Analysis | 2021-11-28 09:15:06 | 2021-11-28 09:15:06 | ||
| ml.Generic | Hybrid-Analysis | 2021-06-12 17:30:50 | 2021-11-11 10:00:17 | ||
| Application.Agent | Hybrid-Analysis | 2021-11-09 20:00:43 | 2021-11-09 20:00:43 | ||
| Trojan.Disco | Hybrid-Analysis | 2021-10-05 23:30:10 | 2021-11-09 20:00:12 | ||
| Wacatac.B | Hybrid-Analysis | 2021-11-08 22:15:05 | 2021-11-08 22:15:05 | ||
| W32.Adware | Hybrid-Analysis | 2021-11-08 10:45:17 | 2021-11-08 10:45:17 | ||
| Trojan.Uztuby | Hybrid-Analysis | 2021-10-30 10:30:25 | 2021-10-30 10:30:25 | ||
| Win64:Malware | Hybrid-Analysis | 2021-10-26 14:30:24 | 2021-10-28 22:01:28 | ||
| Phishing.BNR | Hybrid-Analysis | 2021-07-13 19:30:07 | 2021-10-20 17:00:39 | ||
| Phish.A | Hybrid-Analysis | 2021-10-18 17:30:11 | 2021-10-18 17:30:11 | ||
| Phishing.Agent | Hybrid-Analysis | 2020-09-29 13:00:08 | 2021-10-14 20:00:20 | ||
| Gen:Variant.Ser.Bulz | Hybrid-Analysis | 2021-10-09 18:30:13 | 2021-10-09 18:30:13 | ||
| Agent.0044 | Hybrid-Analysis | 2021-10-06 11:00:26 | 2021-10-06 11:00:26 | ||
| Adware | Hybrid-Analysis | 2021-10-01 18:00:25 | 2021-10-01 18:00:25 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-09-16 09:17:18 | 2021-09-27 16:30:24 | ||
| Phishing.JS | Hybrid-Analysis | 2021-06-24 14:15:32 | 2021-09-23 15:15:15 | ||
| PUP.Dstudio.dd | Hybrid-Analysis | 2021-09-23 08:00:36 | 2021-09-23 08:00:36 | ||
| Probably Heur.HTMLUnescape | Hybrid-Analysis | 2020-03-30 19:00:13 | 2021-09-20 17:00:37 | ||
| Ransom.Win64.Wacatac.oa | Hybrid-Analysis | 2021-08-09 17:16:16 | 2021-08-09 17:16:16 | ||
| JS:Phishing | Hybrid-Analysis | 2021-07-14 20:45:07 | 2021-08-05 08:45:13 | ||
| Gen:Variant.Application.Bundler.Somoto | Hybrid-Analysis | 2021-07-31 04:30:15 | 2021-07-31 04:30:15 | ||
| Phishing.DOC | Hybrid-Analysis | 2021-07-30 21:45:09 | 2021-07-30 21:45:09 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-11-04 01:30:07 | 2021-07-30 18:30:36 | ||
| Gen:Variant.Application.LoadMoney | Hybrid-Analysis | 2021-07-25 08:00:09 | 2021-07-25 08:00:09 | ||
| Probably Heur.HTMLUnescapeD | Hybrid-Analysis | 2021-07-21 21:15:30 | 2021-07-21 21:15:30 | ||
| Zpevdo.B | Hybrid-Analysis | 2021-07-20 16:46:15 | 2021-07-20 16:46:15 | ||
| Ole2.Macro.Agent | Hybrid-Analysis | 2021-07-15 10:45:13 | 2021-07-15 10:45:13 | ||
| HTML:PhishingMail | Hybrid-Analysis | 2021-07-13 21:15:40 | 2021-07-13 21:15:40 | ||
| Trojan.Reconyc | Hybrid-Analysis | 2021-07-09 18:00:18 | 2021-07-09 18:00:18 | ||
| Trojan.Agent | Hybrid-Analysis | 2021-01-06 13:45:23 | 2021-06-12 02:00:40 | ||
| W32.AIDetect | Hybrid-Analysis | 2021-06-10 01:15:12 | 2021-06-10 01:15:12 | ||
| CoinMiner.Agent | Hybrid-Analysis | 2021-06-09 14:46:06 | 2021-06-09 14:46:06 | ||
| Phishing.gen | Hybrid-Analysis | 2021-06-03 14:45:37 | 2021-06-03 14:45:37 | ||
| Trojan.Script.Phish | Hybrid-Analysis | 2021-04-27 08:15:18 | 2021-06-01 18:45:59 | ||
| Generic.Malware | Hybrid-Analysis | 2018-05-07 11:15:45 | 2021-05-01 16:00:08 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2020-07-08 06:15:06 | 2021-04-30 11:15:48 | ||
| HTML:Instagram | Hybrid-Analysis | 2021-04-21 19:00:25 | 2021-04-21 19:00:25 | ||
| Phish.AI.gen | Hybrid-Analysis | 2021-04-16 08:30:26 | 2021-04-16 08:30:26 | ||
| BackDoor.Meterpreter | Hybrid-Analysis | 2021-04-13 22:00:38 | 2021-04-13 22:00:38 | ||
| Phishing.FI | Hybrid-Analysis | 2021-04-13 13:30:36 | 2021-04-13 13:30:36 | ||
| Onephish.A.gen | Hybrid-Analysis | 2021-04-08 05:45:20 | 2021-04-08 05:45:20 | ||
| PUA.MSIL.DownloadSponsor | Hybrid-Analysis | 2021-03-31 15:45:13 | 2021-03-31 15:45:13 | ||
| Phishing.PDF | Hybrid-Analysis | 2021-03-03 08:00:50 | 2021-03-03 08:00:50 | ||
| Gen:Variant.Application.CoinMiner | Hybrid-Analysis | 2021-02-11 03:45:30 | 2021-02-11 03:45:30 | ||
| Miner.bp | Hybrid-Analysis | 2021-02-06 05:15:20 | 2021-02-06 05:15:20 | ||
| BehavesLike.HTML.Redirector | Hybrid-Analysis | 2021-02-04 11:45:19 | 2021-02-04 11:45:19 | ||
| Adware.Agent | Hybrid-Analysis | 2019-02-10 08:17:03 | 2021-01-22 14:45:33 | ||
| ScrInject.B | Hybrid-Analysis | 2021-01-17 04:45:09 | 2021-01-17 04:45:09 | ||
| HTML.Generic | Hybrid-Analysis | 2020-07-16 13:00:26 | 2020-12-07 11:00:18 | ||
| Phishing.S23 | Hybrid-Analysis | 2020-08-06 16:00:13 | 2020-11-12 15:30:07 | ||
| PhishingMS.ABC | Hybrid-Analysis | 2020-10-23 21:30:04 | 2020-11-09 05:30:12 | ||
| W32.AIDetectVM | Hybrid-Analysis | 2020-02-24 10:45:09 | 2020-11-09 02:45:12 | ||
| HTML:PhishingMS | Hybrid-Analysis | 2020-07-23 16:01:35 | 2020-10-21 16:30:23 | ||
| Trojan.HTML.Generic.4 | Hybrid-Analysis | 2020-10-19 14:45:21 | 2020-10-19 14:45:21 | ||
| Phish.82B7 | Hybrid-Analysis | 2020-10-02 06:15:25 | 2020-10-02 06:15:25 | ||
| Phishing.HTML | Hybrid-Analysis | 2020-10-01 07:15:12 | 2020-10-01 07:15:12 | ||
| Agent.163F | Hybrid-Analysis | 2020-08-31 15:01:53 | 2020-09-01 18:30:21 | ||
| Malware.Phish | Hybrid-Analysis | 2020-08-27 21:15:11 | 2020-08-27 21:15:11 | ||
| Alexa Top 1 Million | Maltiverse Research Team | 2020-07-09 19:28:57 | 2020-07-09 19:28:57 | ||
| Hoax.JS.Phish | Hybrid-Analysis | 2020-05-12 13:45:31 | 2020-06-12 10:15:14 | ||
| Unsafe.AI_Score_100% | Hybrid-Analysis | 2020-05-29 21:30:18 | 2020-05-29 21:30:18 | ||
| CoinMiner | Mr.Looquer | 2020-05-17 03:46:23 | 2020-05-23 09:52:50 | ||
| Hoax.HTML.Phish | Hybrid-Analysis | 2020-04-17 01:16:29 | 2020-04-22 20:00:09 | ||
| Gen:NN.ZexaF.34090 | Hybrid-Analysis | 2020-02-12 15:00:50 | 2020-02-12 15:00:50 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2020-02-03 00:30:22 | 2020-02-03 00:30:22 | ||
| Hoax.DeceptPCClean | Hybrid-Analysis | 2019-01-31 21:00:09 | 2020-01-16 11:48:17 | ||
| malicious.35bb6b | Hybrid-Analysis | 2020-01-15 16:31:30 | 2020-01-15 16:31:30 | ||
| Malicious domain | SANS Internet Storm Center | 2019-12-22 02:43:55 | 2019-12-22 02:43:55 | ||
| malicious.moderate.ml | Hybrid-Analysis | 2019-11-26 02:15:21 | 2019-11-26 02:15:21 | ||
| HEUR:Trojan.BAT | Hybrid-Analysis | 2019-11-24 11:30:07 | 2019-11-24 11:30:07 | ||
| Trojan.QUAF | Hybrid-Analysis | 2019-11-13 13:45:15 | 2019-11-13 13:45:15 | ||
| Application.Clenonta | Hybrid-Analysis | 2019-11-13 13:17:08 | 2019-11-13 13:17:08 | ||
| ML.Attribute | Hybrid-Analysis | 2019-10-28 18:15:31 | 2019-10-28 18:15:31 | ||
| DriverAgent.A potentially unwanted | Hybrid-Analysis | 2019-08-08 06:45:28 | 2019-08-08 06:45:28 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2019-07-29 01:15:09 | 2019-07-29 01:15:09 | ||
| Phishing.A | Hybrid-Analysis | 2019-07-09 21:15:28 | 2019-07-09 21:15:28 | ||
| Program.Unwanted | Hybrid-Analysis | 2019-03-11 00:00:12 | 2019-05-16 17:30:25 | ||
| PUA.NSISmod | Hybrid-Analysis | 2019-05-08 03:45:15 | 2019-05-08 03:45:15 | ||
| malicious.high.ml | Hybrid-Analysis | 2019-04-12 19:15:26 | 2019-04-12 19:15:26 | ||
| AGEN.1031860 | Hybrid-Analysis | 2019-04-11 09:15:23 | 2019-04-11 09:15:23 | ||
| Vdehu.A | Hybrid-Analysis | 2019-04-03 13:00:14 | 2019-04-03 13:00:17 |
Tags
malware_download miner evasive malware downloader opendir clickfix booking cdn-jsdelivr-net c2-monitor-auto fakecaptcha urlquery clearfake win-0x4679 windows powershell dropper jsdelivrIP addresses resolved by this hostname
- 151.101.194.109 (2019-12-22 02:43:55)
- 151.101.130.109 (2019-12-22 02:43:55)
- 151.101.66.109 (2019-12-22 02:43:55)
- 151.101.2.109 (2019-12-22 02:43:55)
- 104.16.89.20 (2017-10-17 19:33:01)
- 104.16.87.20 (2017-10-17 19:33:01)
- 104.16.88.20 (2017-10-17 19:33:01)
- 104.16.86.20 (2017-10-17 19:33:01)
- 104.16.85.20 (2017-10-17 19:33:01)
- 151.101.137.229 (2025-05-28 00:07:54)
- 2a04:4e42:20::485 (2025-05-28 00:07:54)
- 2a04:4e42:600::485 (2025-10-18 00:08:27)
- 151.101.1.229 (2025-10-18 00:08:27)
- 151.101.129.229 (2025-10-18 00:08:27)
- 2a04:4e42:400::485 (2025-10-18 00:08:27)
- 151.101.193.229 (2025-10-18 00:08:27)
- 2a04:4e42:200::485 (2025-10-18 00:08:27)
- 151.101.65.229 (2025-10-18 00:08:27)
- 2a04:4e42::485 (2025-10-18 00:08:27)
- 2a04:4e42:f000::485 (2026-01-07 00:26:47)
- 167.82.49.229 (2026-01-07 00:26:47)
- 104.17.207.5 (2026-07-18 22:45:40)
- 2606:4700::6811:cf05 (2026-07-18 22:45:40)
- 104.17.208.5 (2026-07-18 22:45:40)
- 2606:4700::6811:d005 (2026-07-18 22:45:40)
Whois information
- AS name
- AS54113 Fastly
- Domain
- jsdelivr.net
- TLD
- net
- DNSSEC
- ['unsigned']
- Nameservers
- DNS1.P08.NSONE.NET, GNS1.CLOUDNS.NET, GNS2.CLOUDNS.NET, NS1.GCORELABS.NET, NS2.GCDN.SERVICES, DNS1.P03.NSONE.NET, DNS2.P03.NSONE.NET, DNS3.P03.NSONE.NET, DNS4.P03.NSONE.NET, NS1.R4NS.COM, NS2.R4NS.NET, ns1.r4ns.com, dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net, ns2.r4ns.net, dns1.p08.nsone.net, gns1.cloudns.net, gns2.cloudns.net, ns1.gcorelabs.net, ns2.gcdn.services
- Whois server
- whois.namecheap.com
- Registrant
- Amazon Registrar, Inc.
- Address
- 604 Cameron Street
- City
- Alexandria
- State
- VA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], ec0a581180d92aa17d1640e24b841c18aa6719ebb39317db9c99c4a6d35cb640@jsdelivr.net.whoisproxy.org, ec0a581180d92aa17d1640e24b841c1887cde84906599fed8bd51ad81f8ebbdb@jsdelivr.net.whoisproxy.org, ec0a581180d92aa17d1640e24b841c185d4131515b6c65340b42eba3c54f54ac@jsdelivr.net.whoisproxy.org, ec0a581180d92aa17d1640e24b841c18e0c780379c6430870c80982710fd1a01@jsdelivr.net.whoisproxy.org
- Domain created
- 2012-05-16 21:35:05
- Domain expires
- 2027-05-16 21:35:05
- First indexed
- 2017-10-17 19:33:01
- Last updated
- 2026-08-28 23:25:03