jsDelivr
jsDelivr is a large free, open-source CDN that serves JavaScript and CSS packages — including directly from npm and GitHub — to millions of sites. It is detected from cdn.jsdelivr.net asset URLs.
As with any public package CDN, every dependent site trusts the served file. Verifying loaded assets against known-good fingerprints is what separates a normal dependency from a supply-chain compromise.
Commonly deployed alongside jsDelivr
Of the 17,731 public scans where jsDelivr was detected, these are the technologies most often present on the same site. The share is the percentage of jsDelivr sites that also ran each one.
| Technology | Category | Share of jsDelivr sites |
|---|---|---|
| jQuery | wappalyzer | 52.93% |
| Google Analytics | wappalyzer | 49.67% |
| Cloudflare | wappalyzer | 43.14% |
| Open-Graph-Protocol | miscellaneous | 43% |
| JQuery | miscellaneous | 35.62% |
| HSTS | wappalyzer | 33.38% |
| HTTP/3 | wappalyzer | 30.43% |
| Google Tag Manager | wappalyzer | 26.04% |
| Cloudflare Bot Management | wappalyzer | 25.66% |
| X-UA-Compatible | miscellaneous | 24.88% |
| cdnjs | wappalyzer | 23.08% |
| MetaGenerator | miscellaneous | 22.26% |
| PHP | wappalyzer | 21.56% |
| Google-Analytics | miscellaneous | 21.53% |
How ScanMalware detects jsDelivr
jsDelivr is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that jsDelivr is present, but how it is being used. Open the full search interface for jsDelivr →
Recent public scans featuring jsDelivr
A rolling sample of recent public scans where jsDelivr was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| M-Alpha Trades - Modern Investment Platform https://m-alphatrades.com/ | 2026-09-17 |
| Home - PressComm Tech » PressComm Tech https://presscommtech.com | 2026-09-17 |
| 最愛 — Funbear88 https://funbear88-dev.pages.dev/favs | 2026-09-17 |
| CONTACTO | AGÜERO ARQUITECTOS https://aguero-architects.pages.dev/contacto | 2026-09-17 |
| Gaviti Consulting S.A.S https://gaviticonsulting.com | 2026-09-17 |
| Your Church Growth Resource Library | Ebooks & Webinars https://grow.pushpay.com | 2026-09-17 |
| CDS-Coriolis marine in situ observations https://www.coriolis.eu.org | 2026-09-17 |
| Google https://dev.api.as.152-53-37-155.plesk.page/ | 2026-09-17 |
Frequently asked questions about jsDelivr
- Does using jsDelivr mean a website is unsafe?
- No. jsDelivr is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using jsDelivr can be perfectly safe or actively malicious.
- How many sites using jsDelivr has ScanMalware scanned?
- jsDelivr has been detected in 17,731 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with jsDelivr?
- Across scanned sites, jsDelivr is most often seen alongside jQuery, Google Analytics and Cloudflare. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.