Is discord.donutbooru.com safe?

No. MalwareAnalyzer scanned discord.donutbooru.com on 22 Aug 2026 and returned a suspicious verdict with a score of 28 out of 100. Treat it as hostile until it is re-checked.

How was discord.donutbooru.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

discord.donutbooru.com - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned discord.donutbooru.com and returned a suspicious verdict (score 28). The page resolved to 94.130.151.193 on Hetzner Online GmbH in DE. The domain was registered 249 days ago through NameCheap, Inc.. 1 domain and 1 IP were contacted, over 3 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 28) · Confidence 34%
Scanned URL: https://discord.donutbooru.com/
Domain: discord.donutbooru.com · IP: 94.130.151.193 · AS24940 · DE
Server: nginx/1.18.0 (Ubuntu)
Page title: Discord Relay
HTTP status: 200 · text/html; charset=UTF-8
Registrar: NameCheap, Inc. · domain age 249 days · created 2025-12-16
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 7 21: · subject CN=discord.donutbooru.com
HTTP requests captured: 3
Scan tier: standard · observed 2026-08-22 20:33:16 UTC

Antivirus & YARA (1 of 48 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: DLV_HTML_Smuggling
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx
Express

Contacted infrastructure

94.130.151.193 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

discord.donutbooru.com
94.130.151.193
https://discord.donutbooru.com/
https://discord.donutbooru.com/assets/index-lJDWLKwV.js
https://discord.donutbooru.com/assets/index-BCRlU8L5.css

Questions about discord.donutbooru.com

Is discord.donutbooru.com safe?: No. MalwareAnalyzer scanned discord.donutbooru.com on 22 Aug 2026 and returned a suspicious verdict with a score of 28 out of 100. Treat it as hostile until it is re-checked.
How was discord.donutbooru.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of discord.donutbooru.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan