upx.github.io - URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned upx.github.io and returned a unknown verdict (score -6). The page resolved to 185.199.111.153 on GitHub, Inc. in US. 4 domains and 4 IPs were contacted. 38 malware samples communicate with this URL (Mirai, Modified). The request followed 3 redirects before landing. This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -6) · Confidence 12%
- Scanned URL:
http://upx.sf.net/ - Domain: upx.github.io · IP: 185.199.111.153 · AS54113 · US
- Server: GitHub.com
- Page title: UPX: the Ultimate Packer for eXecutables - Homepage
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 31 23: · subject CN=*.github.io
- Scan tier: fast · observed 2026-08-16 12:52:58 UTC
Redirect chain
http://upx.sf.net/https://upx.sf.net/https://upx.sourceforge.net/https://upx.github.io/
Malware communicating with this URL (38)
These samples were observed contacting or being served from upx.github.io. Each links to its full analysis.
- Mirai - referenced ·
f28ff115079db6cd81b52775a337d2f6· first seen 2026-08-16 - Modified - referenced ·
dfe07ea6c2e5e6eeb28d8acec21353ef· first seen 2026-08-16 - d9511387127b4395e716c2bbb6e4baf8b5ed27ea4f557afd1f69174854ba147e.elf - referenced ·
d9511387127b4395e716c2bbb6e4baf8· first seen 2026-08-16 - d217b37e7b50db1d4a30e5ad4e14736184b61de39039684b20233d4e42c56542.elf - referenced ·
d217b37e7b50db1d4a30e5ad4e147361· first seen 2026-08-15 - Modified - referenced ·
c78d7b944e98b1e4dedc82127d374fb0· first seen 2026-08-15 - Mirai - referenced ·
c1abcf5afb316cd4e384e8f7db4f0823· first seen 2026-08-15 - ba059b885edb94a1863a5e3989c6ab4dfa2afbeac9da0ed26208305223244591.elf - referenced ·
ba059b885edb94a1863a5e3989c6ab4d· first seen 2026-08-15 - Modified - referenced ·
b419f6e0ab5e13bbab3bbba935a46020· first seen 2026-08-15 - ae06dac1811e2ca5ad7b3e544311a494637e60133decbb04f35d6490e8f0706f.elf - referenced ·
ae06dac1811e2ca5ad7b3e544311a494· first seen 2026-08-15 - Mirai - referenced ·
a80eedfadf36a2c5423abdb5aa4033c6· first seen 2026-08-15 - Modified - referenced ·
896f63d1435cd22055e0e9c1d240fb51· first seen 2026-08-15 - Modified - referenced ·
a5d86ea0f56092f8c135f45e1823a0a3· first seen 2026-08-15 - Mirai - referenced ·
93b391240a65a4eb7527641145717e07· first seen 2026-08-14 - Modified - referenced ·
92cbd7a1283aeb05c1e5bf3ecb1d6902· first seen 2026-08-14 - Modified - referenced ·
918e199ab86aaa150ec2293524ae865b· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- GitHub Pages
- Fastly
Contacted infrastructure
- 185.199.111.153 - AS54113 GitHub, Inc. (United States)
- 104.18.21.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.20.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.12.149 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- upx.github.io
- github.com
- www.oberhumer.com
- www.bitwagon.com
- 185.199.111.153
- 104.18.21.237
- 104.18.20.237
- 104.18.12.149
- https://upx.github.io/
- https://upx.github.io/css/modern-normalize-min.css
- https://upx.github.io/css/fonts-min.css
- https://upx.github.io/css/cayman-upx-min.css
- https://github.com/upx/upx
- https://github.com/upx/upx/releases/latest
- https://upx.github.io/upx-COPYING.txt
- https://upx.github.io/upx-license.html
- https://www.oberhumer.com/
- https://www.bitwagon.com/
- https://github.com/upx
Other scans of upx.github.io (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown
Questions about upx.github.io
- Is upx.github.io safe?
- The scan of upx.github.io on 16 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with upx.github.io?
- 38 analysed samples communicate with this URL, including Mirai, Modified.
- How was upx.github.io checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of upx.github.io
Scanned on MalwareAnalyzer by Cyble · Open interactive scan