Virus Total is just a way to test something. When you shorten a URL, it just stores the original URL in a database and does a 301 redirect. Most are probably LAMP (i.e. Linux, PHP, MySQL) servers. If a company or individual discontinues the original domain name, you won’t be able to find it. Same is true of any other URL shorteners out there.
Actually, URL shorteners currently don’t make money on their service. And if they did plant malware, they would be discovered by companies like Google…the big name software vendors…,the nerds and geeks of the world.
There are three points here that are key:
I test each link myself, against Mcfee, Avira, bit Defender and Avast engines - the best in the business.
Google Chrome - the browser I mainly use - has phishing & malware alerts built in. In fact, this is what google says at Manage phishing & malware alertsl
I can’t find any online tech forum discussions, discussing Malware embedded in is.gd.
Let’s suppose - for the sake of argument - that some innovative and unknown software company, finds genuine malware in is.gd. It’s the same as those saying “God creates evil”. Until I see the majority of contemporary theologians endorsing this and giving their reasons and proof - I won’t accept it. Same goes for the hypothetical software discovery.
When Google confirms it…
Or a few of the major software anti-virus companies agree…
Or the technical nerds and geeks bring it to public attention, on online technical forums -
…some company or individual saying something - without proof - has no meaning.