Is github.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 19+ years ago; popular website — ranked #33 worldwide; no impersonation patterns detected. Minor issues: large response served uncompressed.
Positive highlights
- Domain registered 19+ years agoLong-established domains are far less likely to be disposable scams.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O=Let's Encrypt, CN=YR2, valid for 86 remaining days.
- Popular website — ranked #33 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 200Final URL: https://github.com/. Response time 140ms.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (140ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
Negative highlights
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via MarkMonitor Inc..
Note: 6 technologies detected. Vue, Svelte, Tailwind CSS, Google Analytics, Cloudflare, GitHub Pages
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about github.com
- Website
- github.com
- Popularity
- #33 worldwide (Tranco top 1M)
- Domain created
- Oct 9, 2007 (19.1 years old)
- Domain expires
- Oct 9, 2028
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 140.82.114.4
- Hosting / CDN
- Cloudflare
- SSL certificate
- Let's Encrypt · valid until Feb 8, 2027
- Email security
- SPF ✓ · DMARC ✓ (quarantine)
- Threat blocklists
- Not listed (clean)
- Technology
- Vue, Svelte, Tailwind CSS, Google Analytics, Cloudflare, GitHub Pages
Summary
99/100 — trusted. Long-established domain (19.1 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- October 9, 2007 (19.1 years ago)
- Last Updated
- September 7, 2026
- Registry Expiry Date
- October 9, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
cache-control: max-age=0, private, must-revalidate cf-cache-status: DYNAMIC cf-ray: a59db0157d84abe5-YYZ connection: close content-language: en-US content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net productionresultssa30.blob.core.windows.net productionresultssa31.blob.core.windows.net productionresultssa32.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com wss://production-copilot-host-centralus.webpubsub.azure.com wss://production-copilot-host-centralus-02.webpubsub.azure.com wss://production-copilot-host-westus.webpubsub.azure.com wss://production-copilot-host-westus3.webpubsub.azure.com wss://production-copilot-host-eastasia.webpubsub.azure.com wss://production-copilot-host-austriaeast.webpubsub.azure.com api.github.com/cmc_internal/api/ edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com repository-images.githubusercontent.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com *.googleusercontent.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com 'sha256-6AKuI+cDd1MoUL1u4eqrA9PXmnPAkOB4h7421hPUUm0='; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-type: text/html; charset=utf-8 date: Fri, 13 Nov 2026 12:12:59 GMT etag: W/"4c725325788874c026b5d4e950d4cceb" referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin server: cloudflare set-cookie: logged_in=no; expires=Sat, 13 Nov 2027 12:12:59 GMT; domain=.github.com; path=/; HttpOnly; secure; SameSite=Lax strict-transport-security: max-age=31536000; includeSubdomains; preload transfer-encoding: chunked vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, X-GitHub-Client-Version, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With x-content-type-options: nosniff x-frame-options: deny x-github-edge-region: iad x-github-request-id: 3342:5EB04:18B590:229058:6AF6FECB x-xss-protection: 0
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 140.82.114.4
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- github-com.mail.protection.outlook.com (Priority: 0)
- Authoritative Nameservers (NS)
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net
- TXT Records Found
- 24 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- github.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net
- Registration Lifecycle
- Registered: 2007 → Expires: 2028
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.2" "27.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1
- DKIM Selectors Detected
- google, selector1, s1, s2
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- github
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHub
- Meta Description
- Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 140 ms
- Payload Body Size
- 513.6 KB
- Compression Status
- Uncompressed
- Cache Directives
- max-age=0, private, must-revalidate
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
99/100 — trusted. Long-established domain (19.1 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 19+ years ago; popular website — ranked #33 worldwide; no impersonation patterns detected. Minor issues: large response served uncompressed.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 8,210 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 140.82.114.4
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://github.com/
- Redirect Hop Count
- 0 hops
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=US, O=Let's Encrypt, CN=YR2
- Subject Common Name (CN)
- communication.github.com
- Validity Period
- 86 days remaining (Expires: 2027-02-08T09:42:22Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 62 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Contact Emails
- you@domain.com
- Published Phone Numbers
- 308126995, 4625459279202, 3820948740, 793597321, 668806313, 1477376905
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://github.com/sitemap_marketing.xml
- Disallow Rules Count
- 855 rules
View Raw robots.txt
# If you would like to crawl GitHub contact us via https://support.github.com?tags=dotcom-robots # We also provide an extensive API: https://docs.github.com Sitemap: https://github.com/sitemap_marketing.xml User-agent: GPTBot User-agent: OAI-SearchBot User-agent: ChatGPT-User User-agent: ClaudeBot User-agent: Claude-SearchBot User-agent: Claude-User User-agent: PerplexityBot User-agent: Perplexity-User Crawl-delay: 1 Allow: /*?tab=achievements&achievement=* Allow: /marketplace/*?tab=readme$ Allow: /marketplace/*?tab=transparency$ Allow: /enterprise/contact?* Allow: /enterprise/contact/data-residency?* Allow: /features/codespaces?* Allow: /features/copilot/plans?* Allow: /security/advanced-security/demo?* Allow: /security/contact-sales?* Allow: /security/plans?* Allow: /topics/*?q=* Allow: /topics/*?*&q=* Allow: /orgs/*/repositories?q=* Allow: /orgs/*/repositories?*&q=* Disallow: /account-login Disallow: /copilot/ Disallow: /copilot/c/ Disallow: /ekansa/Open-Context-Data Disallow: /ekansa/opencontext-* Disallow: /Explodingstuff/ Disallow: /gist/ Disallow: /search/advanced Disallow: /search$ Disallow: /*/*/pulse_committer_data.json$ Disallow: /*/*/pulse_committer_data.json?* Disallow: /*/archive/ Disallow: /*/blame/ Disallow: /*/cache/ Disallow: /*/raw/ Disallow: /*/tree/ Disallow: */tarball/ Disallow: */zipball/ Disallow: /.git/ Disallow: */.git/ Disallow: /*.git$ Disallow: /*.atom$ Disallow: /*report-abuse?report=* Disallow: /*/*/commits/ Disallow: /marketplace/*/*?tab=readme$ Disallow: /marketplace/*/*?tab=transparency$ Disallow: /marketplace/*?*?tab=readme$ Disallow: /marketplace/*?*?tab=transparency$ Disallow: /marketplace/actions?tab=readme$ Disallow: /marketplace/actions?tab=transparency$ Disallow: /marketplace/free-trials?tab=readme$ Disallow: /marketplace/free-trials?tab=transparency$ Disallow: /marketplace/manage?tab=readme$ Disallow: /marketplace/manage?tab=transparency$ Disallow: /marketplace/models?tab=readme$ Disallow: /marketplace/models?tab=transparency$ Disallow: /marketplace/new?tab=readme$ Disallow: /marketplace/new?tab=transparency$ Disallow: /marketplace/publishers?tab=readme$ Disallow: /marketplace/publishers?tab=transparency$ Disallow: /marketplace/recently-added?tab=readme$ Disallow: /marketplace/recently-added?tab=transparency$ Disallow: /topics/*/*?q=* Disallow: /topics/*/*?*&q=* Disallow: /topics/*?*?q=* Disallow: /topics/*?*?*&q=* Disallow: /orgs/*/*/repositories?q=* Disallow: /orgs/*/*/repositories?*&q=* Disallow: /orgs/*?*/repositories?q=* Disallow: /orgs/*?*/repositories?*&q=* Disallow: /topics/*?source=*&q=* Disallow: /topics/*?*&source=*&q=* Disallow: /topics/*?q=*&source=* Disallow: /topics/*?*&q=*&source=* Disallow: /topics/*?ref_cta=*&q=* Disallow: /topics/*?*&ref_cta=*&q=* Disallow: /topics/*?q=*&ref_cta=* Disallow: /topics/*?*&q=*&ref_cta=* Disallow: /topics/*?plan=*&q=* Disallow: /topics/*?*&plan=*&q=* Disallow: /topics/*?q=*&plan=* Disallow: /topics/*?*&q=*&plan=* Disallow: /topics/*?return_to=*&q=* Disallow: /topics/*?*&return_to=*&q=* Disallow: /topics/*?q=*&return_to=* Disallow: /topics/*?*&q=*&return_to=* Disallow: /topics/*?ref_loc=*&q=* Disallow: /topics/*?*&ref_loc=*&q=* Disallow: /topics/*?q=*&ref_loc=* Disallow: /topics/*?*&q=*&ref_loc=* Disallow: /topics/*?setup_organization=*&q=* Disallow: /topics/*?*&setup_organization=*&q=* Disallow: /topics/*?q=*&setup_organization=* Disallow: /topics/*?*&q=*&setup_organization=* Disallow: /topics/*?source_repo=*&q=* Disallow: /topics/*?*&source_repo=*&q=* Disallow: /topics/*?q=*&source_repo=* Disallow: /topics/*?*&q=*&source_repo=* Disallow: /topics/*?ref_page=*&q=* Disallow: /topics/*?*&ref_page=*&q=* Disallow: /topics/*?q=*&ref_page=* Disallow: /topics/*?*&q=*&ref_page=* Disallow: /topics/*?referrer=*&q=* Disallow: /topics/*?*&referrer=*&q=* Disallow: /topics/*?q=*&referrer=* Disallow: /topics/*?*&q=*&referrer=* Disallow: /topics/*?report=*&q=* Disallow: /topics/*?*&report=*&q=* Disallow: /topics/*?q=*&report=* Disallow: /topics/*?*&q=*&r
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of github.com
No reviews yet. Be the first to share your experience.