Risk Level: CRITICAL — Threat Score: 100/100

Assessment: github.com is a high-volume malware distribution domain with 2311 currently active malicious URLs. The scale of activity indicates a dedicated threat infrastructure rather than a compromised legitimate site. Immediate network-level blocking is strongly recommended. Malware families associated with this domain include Cryptojacker, gaming-lure, connectwise.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 4030 — Active: 2311 — Resolved IPs: 4 — Abuse Reports: 2556

First Seen: 2025-09-18T01:42:05 — Last Online: 2026-10-12T02:54:03

github.com has been associated with 4030 malware URLs , of which 2311 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. With over 4030 tracked malware URLs, this domain is a significant malware distribution point and should be blocked at the DNS or firewall level.

Associated malware families include: CheatSheet, exe, github.