upx.github.io - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned upx.github.io and returned a unknown verdict (score -6). The page resolved to 185.199.111.153 on GitHub, Inc. in US. 4 domains and 4 IPs were contacted. 76 malware samples communicate with this URL (Mirai, Modified). The request followed 3 redirects before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -6) · Confidence 12%
- Scanned URL:
http://upx.sf.net/ - Domain: upx.github.io · IP: 185.199.111.153 · AS54113 · US
- Server: GitHub.com
- Page title: UPX: the Ultimate Packer for eXecutables - Homepage
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 31 23: · subject CN=*.github.io
- Scan tier: fast · observed 2026-08-22 21:41:23 UTC
Redirect chain
http://upx.sf.net/https://upx.sf.net/https://upx.sourceforge.net/https://upx.github.io/
Malware communicating with this URL (76)
These samples were observed contacting or being served from upx.github.io. Each links to its full analysis.
- Mirai - referenced ·
28708524a0409fa372c828dfc817712c· first seen 2026-08-22 - dc658cbd0da1e0dec652c7eee703c204ec803f66d15d47e127e9a72ffe4a204c - referenced ·
dc658cbd0da1e0dec652c7eee703c204· first seen 2026-08-22 - Mirai - referenced ·
50aea936b06ead9afc1877f47d264024· first seen 2026-08-20 - f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987.bin - referenced ·
f0aa83bbbd2c75e2f71ec16029ee5fcf· first seen 2026-08-19 - Mirai - referenced ·
fe95a35a549a6e1783f30a0727ad1b78· first seen 2026-08-17 - Modified - referenced ·
fd8afd2e0d2d6b33739270e33d0343ef· first seen 2026-08-17 - f47c9c3d3efc98916fb74aa908075ffadf39b219dbdd7fa17d3da24ea77322cb.elf - referenced ·
f47c9c3d3efc98916fb74aa908075ffa· first seen 2026-08-17 - Mirai - referenced ·
e9a42640b2832e6b4fab461e57d07f99· first seen 2026-08-17 - Modified - referenced ·
c91a6e3b85b511485e6d37c5e5b5329f· first seen 2026-08-17 - c29f04f3bf672aa6e91a47b810bab140b7b21b0925fa10b3fc676c5c43057b90.elf - referenced ·
c29f04f3bf672aa6e91a47b810bab140· first seen 2026-08-17 - Mirai - referenced ·
c0362bd243e87ca8fa0a5ec6eb3674ed· first seen 2026-08-17 - bd570ac073065d3b7348817717b5603b3b62118fb419a3c1f279745ce7d6b15d.elf - referenced ·
bd570ac073065d3b7348817717b5603b· first seen 2026-08-17 - Mirai - referenced ·
b5e47503a197416bc1db54daf095acd8· first seen 2026-08-17 - ab901b2408ef39103a2b44eccb0dd49a6fe3ba895a2f00e0fb0cc9e71890739c.elf - referenced ·
ab901b2408ef39103a2b44eccb0dd49a· first seen 2026-08-17 - 976286fb575cf6c6dcfd50695cb538d3d764642ea36122209d11d104d0ca5182.elf - referenced ·
976286fb575cf6c6dcfd50695cb538d3· first seen 2026-08-17
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- GitHub Pages
- Fastly
Contacted infrastructure
- 185.199.111.153 - AS54113 GitHub, Inc. (United States)
- 104.18.20.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.21.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.12.149 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- upx.github.io
- github.com
- www.oberhumer.com
- www.bitwagon.com
- 185.199.111.153
- 104.18.20.237
- 104.18.21.237
- 104.18.12.149
- https://upx.github.io/
- https://upx.github.io/css/modern-normalize-min.css
- https://upx.github.io/css/fonts-min.css
- https://upx.github.io/css/cayman-upx-min.css
- https://github.com/upx/upx
- https://github.com/upx/upx/releases/latest
- https://upx.github.io/upx-COPYING.txt
- https://upx.github.io/upx-license.html
- https://www.oberhumer.com/
- https://www.bitwagon.com/
- https://github.com/upx
Other scans of upx.github.io (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown
Questions about upx.github.io
- Is upx.github.io safe?
- The scan of upx.github.io on 22 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with upx.github.io?
- 76 analysed samples communicate with this URL, including Mirai, Modified.
- How was upx.github.io checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of upx.github.io
Scanned on MalwareAnalyzer by Cyble · Open interactive scan