The scan of git.io on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with git.io?

5 analysed samples communicate with this URL, including Office365, Gootloader.

How was git.io checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

git.io - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned git.io and returned a unknown verdict (score -12). The page resolved to 140.82.114.22 on GitHub, Inc. in US. 2 domains and 1 IP were contacted. 5 malware samples communicate with this URL (Office365, Gootloader). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://git.io/
Domain: git.io · IP: 140.82.114.22 · AS36459 · US
Page title: git.io
HTTP status: 200 · text/html
TLS issuer: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 · valid to Nov 1 23: · subject CN=git.io
Scan tier: fast · observed 2026-08-21 12:55:09 UTC

Malware communicating with this URL (5)

These samples were observed contacting or being served from git.io. Each links to its full analysis.

Office365 - referenced · 32355d18c0964d6a36a4c52477d51217 · first seen 2026-08-21
Office365 - referenced · bd5291d8d8fcefc8d2c6822931c6b4a9 · first seen 2026-08-20
Gootloader - referenced · f1cbe5f24bb5373e39fa3abb363f16cf · first seen 2026-08-19
1854208b56db8b3ed04dd6ac25af9d2487293384d8f4a10753ca6128e6a1fffe - referenced · 1854208b56db8b3ed04dd6ac25af9d24 · first seen 2026-08-16
2a373d6515516c3c5f3aa06d27f47617d15f11f0534ca29f03e2cde1953e1d42 - referenced · 2a373d6515516c3c5f3aa06d27f47617 · first seen 2026-08-12

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

GitHub Pages

Contacted infrastructure

140.82.114.22 - AS36459 GitHub, Inc. (United States)

Observed indicators

git.io
github.com
140.82.114.22
https://git.io/
https://github.com/site/terms
https://github.com/site/privacy
https://github.com/security

Other scans of git.io (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown
20 Aug 2026 - unknown

Questions about git.io

Is git.io safe?: The scan of git.io on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with git.io?: 5 analysed samples communicate with this URL, including Office365, Gootloader.
How was git.io checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of git.io

Scanned on MalwareAnalyzer by Cyble · Open interactive scan