github.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of github.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| autodiscover.github.com | 2026-06-07 05:05:13.417 | |
| gist.github.com | 2026-07-23 04:18:47.799 | |
| github.com | 2026-07-23 06:00:25.006 | |
| www.github.com | 2026-07-23 05:32:54.849 | |
| archiveprogram.github.com | 2026-07-20 22:35:17.111 | |
| blog.github.com | 2026-06-07 05:05:13.417 | |
| cli.github.com | 2026-06-23 16:42:22.434 | |
| desktop.github.com | 2026-07-20 17:28:25.223 | |
| developer.github.com | 2026-07-22 10:49:50.253 | |
| diversity.github.com | 2026-05-26 07:24:35.478 | |
| docs.github.com | 2026-07-22 17:00:39.010 | |
| git-lfs.github.com | 2026-06-15 00:23:13.348 | |
| github.github.com | 2026-06-07 05:05:13.417 | |
| guides.github.com | 2026-06-22 00:29:14.510 | |
| mac.github.com | 2026-07-19 16:49:00.150 | |
| pages.github.com | 2026-07-23 05:00:43.448 | |
| raw.github.com | 2026-07-22 23:15:05.493 | |
| resources.github.com | 2026-07-17 22:54:56.475 | |
| securitylab.github.com | 2026-07-20 22:35:17.111 | |
| skills.github.com | 2026-07-20 22:35:17.111 | |
| spotlights-feed.github.com | 2026-05-26 00:12:34.719 | |
| training.github.com | 2026-07-22 10:49:50.253 | |
| vpn-ca.iad.github.com | 2026-07-20 05:16:16.230 | |
| vscode-auth.github.com | 2026-07-17 03:34:41.603 | |
| windows.github.com | 2026-07-19 16:49:00.150 | |
| stars.github.com | 2026-07-20 22:35:17.111 | |
| api.github.com | 2026-07-23 03:16:45.249 | |
| enterprise.github.com | 2026-07-21 19:21:06.561 | |
| help.github.com | 2026-07-23 04:38:53.059 | |
| smtp.github.com | 2026-06-07 05:05:13.417 | |
| collector.github.com | 2026-07-20 22:35:17.111 | |
| maintainers.github.com | 2026-07-20 22:35:17.111 | |
| support.github.com | 2026-07-23 05:41:54.440 | |
| wiki.github.com | 2026-06-07 05:05:13.417 | |
| education.github.com | 2026-07-21 21:52:37.258 | |
| status.github.com | 2026-07-20 20:57:30.879 | |
| codeload.github.com | 2026-07-22 19:05:54.104 | |
| garage.github.com | 2026-06-21 07:29:42.807 | |
| shop.github.com | 2026-07-22 10:49:50.253 | |
| admin.github.com | 2026-06-07 05:05:13.417 | |
| andrewsville.github.com | 1970-01-01 00:00:00.000 | |
| angular-ui.github.com | 1970-01-01 00:00:00.000 | |
| api.security.github.com | 1970-01-01 00:00:00.000 | |
| assets-cdn.github.com | 1970-01-01 00:00:00.000 | |
| assets0.github.com | 1970-01-01 00:00:00.000 | |
| aui.github.com | 1970-01-01 00:00:00.000 | |
| blackscorp.github.com | 1970-01-01 00:00:00.000 | |
| blueimp.github.com | 1970-01-01 00:00:00.000 | |
| caligatio.github.com | 1970-01-01 00:00:00.000 | |
| cloud.github.com | 1970-01-01 00:00:00.000 | |
| collecttix.github.com | 1970-01-01 00:00:00.000 | |
| communication.github.com | 2026-06-15 23:50:33.036 | |
| community.github.com | 2026-06-07 05:05:13.417 | |
| copilot.github.com | 2026-05-26 19:57:58.828 | |
| documentcloud.github.com | 1970-01-01 00:00:00.000 | |
| eightmedia.github.com | 1970-01-01 00:00:00.000 | |
| es5.github.com | 1970-01-01 00:00:00.000 | |
| examadmin.github.com | 1970-01-01 00:00:00.000 | |
| examregistration-api.github.com | 1970-01-01 00:00:00.000 | |
| examregistration-uat-api.github.com | 1970-01-01 00:00:00.000 | |
| exchange-97216674.adminsrv.github.com | 1970-01-01 00:00:00.000 | |
| fitzgen.github.com | 1970-01-01 00:00:00.000 | |
| fortawesome.github.com | 1970-01-01 00:00:00.000 | |
| geedmo.github.com | 1970-01-01 00:00:00.000 | |
| getsetbro.github.com | 1970-01-01 00:00:00.000 | |
| gionkunz.github.com | 1970-01-01 00:00:00.000 | |
| gregoryloucas.github.com | 1970-01-01 00:00:00.000 | |
| iurevych.github.com | 1970-01-01 00:00:00.000 | |
| jashkenas.github.com | 1970-01-01 00:00:00.000 | |
| jeromeetienne.github.com | 1970-01-01 00:00:00.000 | |
| jessitron.github.com | 1970-01-01 00:00:00.000 | |
| jmblog.github.com | 1970-01-01 00:00:00.000 | |
| jschr.github.com | 1970-01-01 00:00:00.000 | |
| jzaefferer.github.com | 1970-01-01 00:00:00.000 | |
| kaljurand.github.com | 1970-01-01 00:00:00.000 | |
| kanaka.github.com | 1970-01-01 00:00:00.000 | |
| kflorence.github.com | 1970-01-01 00:00:00.000 | |
| learn.github.com | 1970-01-01 00:00:00.000 | |
| lloyd.github.com | 1970-01-01 00:00:00.000 | |
| m.communication.github.com | 1970-01-01 00:00:00.000 | |
| malsup.github.com | 1970-01-01 00:00:00.000 | |
| memowe.github.com | 1970-01-01 00:00:00.000 | |
| mleibman.github.com | 1970-01-01 00:00:00.000 | |
| mmorearty.github.com | 1970-01-01 00:00:00.000 | |
| model-launchkit.github.com | 1970-01-01 00:00:00.000 | |
| mottie.github.com | 1970-01-01 00:00:00.000 | |
| necolas.github.com | 1970-01-01 00:00:00.000 | |
| ns1.github.com | 2026-06-07 05:05:13.417 | |
| ns2.github.com | 2026-06-07 05:05:13.417 | |
| octodex.github.com | 1970-01-01 00:00:00.000 | |
| pico88.github.com | 1970-01-01 00:00:00.000 | |
| pivotal.github.com | 1970-01-01 00:00:00.000 | |
| pvdspek.github.com | 1970-01-01 00:00:00.000 | |
| registry.github.com | 1970-01-01 00:00:00.000 | |
| res.communication.github.com | 1970-01-01 00:00:00.000 | |
| resume.github.com | 1970-01-01 00:00:00.000 | |
| richhollis.github.com | 1970-01-01 00:00:00.000 | |
| rtomayko.github.com | 1970-01-01 00:00:00.000 | |
| services.github.com | 2026-06-07 05:05:13.417 | |
| ssh.github.com | 2026-06-07 05:05:13.417 | |
| stedolan.github.com | 1970-01-01 00:00:00.000 | |
| storage.github.com | 2026-06-07 05:05:13.417 | |
| support.enterprise.github.com | 1970-01-01 00:00:00.000 | |
| t.communication.github.com | 1970-01-01 00:00:00.000 | |
| test.github.com | 2026-06-07 05:05:13.417 | |
| tflink.github.com | 1970-01-01 00:00:00.000 | |
| thisisdallas.github.com | 1970-01-01 00:00:00.000 | |
| twitter.github.com | 1970-01-01 00:00:00.000 | |
| uploads.github.com | 2026-07-19 10:17:36.662 | |
| visionmedia.github.com | 1970-01-01 00:00:00.000 | |
| ws.support.github.com | 1970-01-01 00:00:00.000 | |
| www.communication.github.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 194.164.235.7 | AS57043 | AS8075 | 95% | cert 17f8fd2e… served by 194.164.235.7 (AS57043) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 171.22.31.21 | AS215439 | AS8075 | 95% | cert 17f8fd2e… served by 171.22.31.21 (AS215439) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 46.151.29.196 | AS216071 | AS8075 | 95% | cert 17f8fd2e… served by 46.151.29.196 (AS216071) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 31.58.87.210 | AS56971 | AS8075 | 95% | cert 17f8fd2e… served by 31.58.87.210 (AS56971) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 138.124.5.107 | AS41745 | AS8075 | 95% | cert 17f8fd2e… served by 138.124.5.107 (AS41745) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 195.63.160.198 | AS216071 | AS8075 | 95% | cert 17f8fd2e… served by 195.63.160.198 (AS216071) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 179.43.157.32 | AS43440 | AS8075 | 95% | cert 17f8fd2e… served by 179.43.157.32 (AS43440) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 194.87.186.113 | AS48207 | AS8075 | 95% | cert 17f8fd2e… served by 194.87.186.113 (AS48207) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 89.169.5.204 | AS212706 | AS8075 | 95% | cert 17f8fd2e… served by 89.169.5.204 (AS212706) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 5.188.26.216 | AS200487 | AS8075 | 95% | cert 17f8fd2e… served by 5.188.26.216 (AS200487) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 144.31.198.34 | AS213877 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.198.34 (AS213877) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 178.17.48.25 | AS213887 | AS8075 | 95% | cert 17f8fd2e… served by 178.17.48.25 (AS213887) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 195.133.64.141 | AS210546 | AS8075 | 95% | cert 17f8fd2e… served by 195.133.64.141 (AS210546) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 93.183.124.67 | AS216071 | AS8075 | 95% | cert 17f8fd2e… served by 93.183.124.67 (AS216071) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 144.31.232.138 | AS213520 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.232.138 (AS213520) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 193.36.95.154 | AS51898 | AS8075 | 95% | cert 17f8fd2e… served by 193.36.95.154 (AS51898) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 193.187.92.64 | AS50867 | AS8075 | 95% | cert 17f8fd2e… served by 193.187.92.64 (AS50867) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 94.159.98.60 | AS215730 | AS8075 | 95% | cert 17f8fd2e… served by 94.159.98.60 (AS215730) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 77.110.117.80 | AS216127 | AS8075 | 95% | cert 17f8fd2e… served by 77.110.117.80 (AS216127) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 151.242.191.66 | AS209260 | AS8075 | 95% | cert b42b6ae8… served by 151.242.191.66 (AS209260) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 2.27.54.163 | AS215590 | AS8075 | 95% | cert 17f8fd2e… served by 2.27.54.163 (AS215590) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 91.199.160.81 | AS62212 | AS8075 | 95% | cert 17f8fd2e… served by 91.199.160.81 (AS62212) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 45.11.229.60 | AS58087 | AS8075 | 95% | cert 17f8fd2e… served by 45.11.229.60 (AS58087) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 64.188.115.115 | AS206134 | AS8075 | 95% | cert 17f8fd2e… served by 64.188.115.115 (AS206134) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 31.58.46.156 | AS202051 | AS8075 | 95% | cert 17f8fd2e… served by 31.58.46.156 (AS202051) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 140.82.121.3 | 2026-05-25 21:30:03.372 | 2026-07-23 05:32:54.849 |
| A | 140.82.121.4 | 2026-05-25 21:32:03.363 | 2026-07-23 06:00:25.006 |
| TXT | jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | docusign=087098e3-3d46-47b7-9b4e-8a23028154cd | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| MX | 0 github-com.mail.protection.outlook.com | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | dns4.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | ns-520.awsdns-01.net | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | ns-1283.awsdns-32.org | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | MS=ms44452932 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | 00Dd0000000hHE0=1TBKg000000TN2r | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | TAILSCALE-xOzoDvFUzZr5YYVCQFuD | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | ns-421.awsdns-52.com | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | loom-site-verification=f3787154f1154b7880e720a511ea664d | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | dns3.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | dns1.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | ns-1707.awsdns-21.co.uk | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | MS=ms58704441 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| TXT | apple-domain-verification=RyQhdzTl6Z6x8ZP4 | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| NS | dns2.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-23 06:00:25.006 |
| CAA | 0 issue "globalsign.com" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issue "digicert.com" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issuewild "sectigo.com" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| SRV | _sipfederationtls._tcp 10 1 5061 sipfed.online.lync.com | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issue "sectigo.com" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| CAA | 0 issuewild "digicert.com" | 2026-05-25 23:59:40.866 | 2026-07-23 06:00:25.006 |
| A | 140.82.114.3 | 2026-05-26 00:24:59.887 | 2026-06-22 05:50:51.900 |
| A | 140.82.112.3 | 2026-05-26 05:26:40.228 | 2026-07-17 07:27:25.407 |
| A | 140.82.113.4 | 2026-05-26 14:15:34.038 | 2026-06-21 10:39:47.045 |
| A | 140.82.112.4 | 2026-05-27 14:33:35.773 | 2026-06-23 19:33:17.514 |
| A | 140.82.113.3 | 2026-05-27 23:31:40.775 | 2026-07-15 22:12:37.107 |
| A | 140.82.114.4 | 2026-05-31 06:37:40.785 | 2026-06-23 05:50:41.176 |
| A | 4.225.11.194 | 2026-06-19 13:26:28.376 | 2026-06-23 00:31:57.685 |
| TXT | anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm | 2026-06-22 19:28:57.928 | 2026-07-23 06:00:25.006 |
| TXT | serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue | 2026-07-14 20:14:55.325 | 2026-07-23 06:00:25.006 |