C3.js
C3.js is a wappalyzer technology that ScanMalware.com has fingerprinted across 788 public website scans. Each of those scans is a real headless-browser visit, so the data on this page reflects how C3.js is actually deployed on the live web — including on compromised, phishing and malware-hosting sites, not just legitimate ones.
On sites where C3.js appears, the technologies most often detected alongside it are Google Analytics, HSTS and PoweredBy. That co-occurrence pattern is a useful fingerprint of the stack C3.js typically ships with, and a starting point for spotting deployments that look unusual.
Commonly deployed alongside C3.js
Of the 788 public scans where C3.js was detected, these are the technologies most often present on the same site. The share is the percentage of C3.js sites that also ran each one.
| Technology | Category | Share of C3.js sites |
|---|---|---|
| Google Analytics | wappalyzer | 60.47% |
| HSTS | wappalyzer | 57.86% |
| PoweredBy | miscellaneous | 49.38% |
| Open-Graph-Protocol | miscellaneous | 36.53% |
| HTTP/3 | wappalyzer | 32.54% |
| Google Publisher Tag | wappalyzer | 31.05% |
| Google AdSense | wappalyzer | 30.55% |
| Taboola | wappalyzer | 27.56% |
| DoubleClick Campaign Manager (DCM) | wappalyzer | 26.81% |
| Cloudflare | wappalyzer | 19.58% |
| Google Tag Manager | wappalyzer | 19.58% |
| Cloudflare Bot Management | wappalyzer | 17.83% |
| Vercel | wappalyzer | 16.46% |
| Amazon Web Services | wappalyzer | 15.34% |
How ScanMalware detects C3.js
C3.js is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that C3.js is present, but how it is being used. Open the full search interface for C3.js →
Recent public scans featuring C3.js
A rolling sample of recent public scans where C3.js was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| California General Election 2026: Riverside County Results – The Riverside Record https://riversiderecord.org/california-general-election-2026-riverside-county-results/ | 2026-11-04 |
| Current Election Results https://www.livevoterturnout.com/ENR/sandiegocaenr/24/en/Index_24.html | 2026-11-03 |
| FC Shakhtar Donetsk official site https://shakhtar.com/en/ | 2026-11-03 |
| Clips Nation https://www.clipsnation.com/ | 2026-11-03 |
| Coveo Cloud Platform https://societyforhumanresourcemanagementproductionay6r644u.analytics.org.coveo.com | 2026-11-03 |
| QuizzCash - Quizzes, AI trading and crypto earnings https://quizz.cash/ | 2026-10-29 |
| Coveo Cloud Platform https://expressemploymentprofessionalsproductionzssawtsp.analytics.org.coveo.com | 2026-10-29 |
| Weil, Gotshal & Manges: $225K pay and rankings | BigLaw Bear https://www.biglawbear.com/firms/weil | 2026-10-28 |
Frequently asked questions about C3.js
- Does using C3.js mean a website is unsafe?
- No. C3.js is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using C3.js can be perfectly safe or actively malicious.
- How many sites using C3.js has ScanMalware scanned?
- C3.js has been detected in 788 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with C3.js?
- Across scanned sites, C3.js is most often seen alongside Google Analytics, HSTS and PoweredBy. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.