Risk Level: CRITICAL — Threat Score: 100/100

Assessment: raw.githubusercontent.com is a high-volume malware distribution domain with 5569 currently active malicious URLs. The scale of activity indicates a dedicated threat infrastructure rather than a compromised legitimate site. Immediate network-level blocking is strongly recommended. Malware families associated with this domain include config, stealer, DarkVisionRAT.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 6772 — Active: 5569 — Resolved IPs: 4 — Abuse Reports: 21185

First Seen: 2025-09-17T20:06:07 — Last Online: 2026-07-27T01:56:25

raw.githubusercontent.com has been associated with 6772 malware URLs , of which 5569 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. With over 6772 tracked malware URLs, this domain is a significant malware distribution point and should be blocked at the DNS or firewall level.

Associated malware families include: None.