upx.github.io - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned upx.github.io and returned a unknown verdict (score -6). The page resolved to 185.199.108.153 on GitHub, Inc. in US. 4 domains and 4 IPs were contacted. 64 malware samples communicate with this URL (Mirai, Modified, Prometei). The request followed 3 redirects before landing. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -6) · Confidence 12%
- Scanned URL:
http://upx.sf.net/ - Domain: upx.github.io · IP: 185.199.108.153 · AS54113 · US
- Server: GitHub.com
- Page title: UPX: the Ultimate Packer for eXecutables - Homepage
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 31 23: · subject CN=*.github.io
- Scan tier: fast · observed 2026-08-17 04:13:16 UTC
Redirect chain
http://upx.sf.net/https://upx.sf.net/https://upx.sourceforge.net/https://upx.github.io/
Malware communicating with this URL (64)
These samples were observed contacting or being served from upx.github.io. Each links to its full analysis.
- Mirai - referenced ·
b5e47503a197416bc1db54daf095acd8· first seen 2026-08-17 - ab901b2408ef39103a2b44eccb0dd49a6fe3ba895a2f00e0fb0cc9e71890739c.elf - referenced ·
ab901b2408ef39103a2b44eccb0dd49a· first seen 2026-08-17 - 976286fb575cf6c6dcfd50695cb538d3d764642ea36122209d11d104d0ca5182.elf - referenced ·
976286fb575cf6c6dcfd50695cb538d3· first seen 2026-08-17 - Modified - referenced ·
8f847d78922ffdcfe6e7373d8a0227d9· first seen 2026-08-17 - Modified - referenced ·
85938a1944c69e21ae3034e69ae7e6be· first seen 2026-08-17 - Mirai - referenced ·
7948a099bfa5e5ffb60a1c94a64cbbae· first seen 2026-08-17 - Modified - referenced ·
75902d91593c074f65590e4b0098d732· first seen 2026-08-17 - Modified - referenced ·
7218d0523a4d05c52557f93febc58b45· first seen 2026-08-17 - Modified - referenced ·
6d987d86a194619f432a0e317c0bc449· first seen 2026-08-17 - Prometei - referenced ·
6ad822effb96e4b90677e7f9a2cae747· first seen 2026-08-17 - 631edb65012fe8dff1eb511edc1660fc8cede0bafe531f507cc491654e47fd6f.elf - referenced ·
631edb65012fe8dff1eb511edc1660fc· first seen 2026-08-17 - Modified - referenced ·
61bc9a3758c56d8cb261853b8b9feb68· first seen 2026-08-17 - 5ce18989a7bdc92129e04ccee765ff3b1edcc3f0f7f08dc5f6755958b5a70d87.elf - referenced ·
5ce18989a7bdc92129e04ccee765ff3b· first seen 2026-08-17 - Modified - referenced ·
5be2aed25e538e836c7bc1fcf4c06529· first seen 2026-08-17 - Modified - referenced ·
407f81370bad7fcc8988012886d8a36a· first seen 2026-08-17
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- GitHub Pages
- Fastly
Contacted infrastructure
- 185.199.108.153 - AS54113 GitHub, Inc. (United States)
- 104.18.20.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.21.237 - AS13335 Cloudflare, Inc. (United States)
- 104.18.12.149 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- upx.github.io
- github.com
- www.oberhumer.com
- www.bitwagon.com
- 185.199.108.153
- 104.18.20.237
- 104.18.21.237
- 104.18.12.149
- https://upx.github.io/
- https://upx.github.io/css/modern-normalize-min.css
- https://upx.github.io/css/fonts-min.css
- https://upx.github.io/css/cayman-upx-min.css
- https://github.com/upx/upx
- https://github.com/upx/upx/releases/latest
- https://upx.github.io/upx-COPYING.txt
- https://upx.github.io/upx-license.html
- https://www.oberhumer.com/
- https://www.bitwagon.com/
- https://github.com/upx
Other scans of upx.github.io (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 16 Aug 2026 - unknown
Questions about upx.github.io
- Is upx.github.io safe?
- The scan of upx.github.io on 17 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with upx.github.io?
- 64 analysed samples communicate with this URL, including Mirai, Modified, Prometei.
- How was upx.github.io checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of upx.github.io
Scanned on MalwareAnalyzer by Cyble · Open interactive scan