Risk Level: CRITICAL — Threat Score: 100/100

Assessment: raw.githubusercontent.com is a high-volume malware distribution domain with 18351 currently active malicious URLs. The scale of activity indicates a dedicated threat infrastructure rather than a compromised legitimate site. Immediate network-level blocking is strongly recommended. Malware families associated with this domain include pw-2201, Spambot.Kelihos, rev-base64-loader.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 19800 — Active: 18351 — Resolved IPs: 4 — Abuse Reports: 73014

First Seen: 2025-09-17T20:06:07 — Last Online: 2026-10-12T02:55:24

raw.githubusercontent.com has been associated with 19800 malware URLs , of which 18351 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. With over 19800 tracked malware URLs, this domain is a significant malware distribution point and should be blocked at the DNS or firewall level.

Associated malware families include: remcos.