[bpeebles]

The read-only post from January said

> Today, git.io is increasingly being used for malicious purposes.

So my guess is they observed an increase use of some number of existing git.io URLs (perhaps where the destination URL was squatted on) being actively used for "malicious" things.

[zinekeller]

> perhaps where the destination URL was squatted on

... how? Git.io only redirects to GitHub, isn't it?

[oefrha]

I’m under the impression that gist.githubusercontent.com is a popular malware host and C&C especially before they disabled anonymous gists.