Risk Level: CRITICAL — Threat Score: 100/100

Assessment: donutclients.st is actively hosting 32 malware URLs across 1 resolved IP address. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include stealer, jar, vm.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 32 — Active: 32 — Resolved IPs: 1 — Abuse Reports: 31

First Seen: 2026-10-07T04:41:06 — Last Online: 2026-10-13T02:40:31

donutclients.st has been associated with 32 malware URLs , of which 32 are currently active . The primary threat types are malware_download, malware.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.