github.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of github.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 179.43.157.32 | AS43440 | AS8075 | 95% | cert 17f8fd2e… served by 179.43.157.32 (AS43440) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 194.87.186.113 | AS48207 | AS8075 | 95% | cert 17f8fd2e… served by 194.87.186.113 (AS48207) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 89.169.5.204 | AS212706 | AS8075 | 95% | cert 17f8fd2e… served by 89.169.5.204 (AS212706) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 5.188.26.216 | AS200487 | AS8075 | 95% | cert 17f8fd2e… served by 5.188.26.216 (AS200487) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 144.31.198.34 | AS213877 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.198.34 (AS213877) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 178.17.48.25 | AS213887 | AS8075 | 95% | cert 17f8fd2e… served by 178.17.48.25 (AS213887) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 195.133.64.141 | AS210546 | AS8075 | 95% | cert 17f8fd2e… served by 195.133.64.141 (AS210546) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 93.183.124.67 | AS216071 | AS8075 | 95% | cert 17f8fd2e… served by 93.183.124.67 (AS216071) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 144.31.232.138 | AS213520 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.232.138 (AS213520) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 193.36.95.154 | AS51898 | AS8075 | 95% | cert 17f8fd2e… served by 193.36.95.154 (AS51898) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 193.187.92.64 | AS50867 | AS8075 | 95% | cert 17f8fd2e… served by 193.187.92.64 (AS50867) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 94.159.98.60 | AS215730 | AS8075 | 95% | cert 17f8fd2e… served by 94.159.98.60 (AS215730) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 77.110.117.80 | AS216127 | AS8075 | 95% | cert 17f8fd2e… served by 77.110.117.80 (AS216127) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 151.242.191.66 | AS209260 | AS8075 | 95% | cert b42b6ae8… served by 151.242.191.66 (AS209260) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 2.27.54.163 | AS215590 | AS8075 | 95% | cert 17f8fd2e… served by 2.27.54.163 (AS215590) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 91.199.160.81 | AS62212 | AS8075 | 95% | cert 17f8fd2e… served by 91.199.160.81 (AS62212) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 45.11.229.60 | AS58087 | AS8075 | 95% | cert 17f8fd2e… served by 45.11.229.60 (AS58087) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 64.188.115.115 | AS206134 | AS8075 | 95% | cert 17f8fd2e… served by 64.188.115.115 (AS206134) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 31.58.46.156 | AS202051 | AS8075 | 95% | cert 17f8fd2e… served by 31.58.46.156 (AS202051) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 144.31.196.226 | AS213520 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.196.226 (AS213520) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.4, 140.82.121.3, 140.82.112.3, 140.82.113.3 |
| 213.165.58.122 | AS213887 | AS8075 | 95% | cert 17f8fd2e… served by 213.165.58.122 (AS213887) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 181.215.41.84 | AS209630 | AS8075 | 95% | cert 17f8fd2e… served by 181.215.41.84 (AS209630) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 195.200.19.27 | AS216071 | AS8075 | 95% | cert 17f8fd2e… served by 195.200.19.27 (AS216071) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 92.242.164.239 | AS57043 | AS8075 | 95% | cert 17f8fd2e… served by 92.242.164.239 (AS57043) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
| 144.31.253.91 | AS213877 | AS8075 | 95% | cert 17f8fd2e… served by 144.31.253.91 (AS213877) carries SAN github.com which currently resolves through Microsoft (AS8075) at 140.82.121.3, 140.82.121.4, 140.82.112.3, 140.82.113.3 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 140.82.121.3 | 2026-05-25 21:30:03.372 | 2026-07-22 18:56:46.480 |
| A | 140.82.121.4 | 2026-05-25 21:32:03.363 | 2026-07-22 19:05:54.104 |
| TXT | jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | docusign=087098e3-3d46-47b7-9b4e-8a23028154cd | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| MX | 0 github-com.mail.protection.outlook.com | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | dns4.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | ns-520.awsdns-01.net | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | ns-1283.awsdns-32.org | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | MS=ms44452932 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | 00Dd0000000hHE0=1TBKg000000TN2r | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | TAILSCALE-xOzoDvFUzZr5YYVCQFuD | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | ns-421.awsdns-52.com | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | loom-site-verification=f3787154f1154b7880e720a511ea664d | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | dns3.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | dns1.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | ns-1707.awsdns-21.co.uk | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | MS=ms58704441 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| TXT | apple-domain-verification=RyQhdzTl6Z6x8ZP4 | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| NS | dns2.p08.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-22 19:05:54.104 |
| CAA | 0 issue "globalsign.com" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issue "digicert.com" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issuewild "sectigo.com" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| SRV | _sipfederationtls._tcp 10 1 5061 sipfed.online.lync.com | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issue "sectigo.com" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| CAA | 0 issuewild "digicert.com" | 2026-05-25 23:59:40.866 | 2026-07-22 19:05:54.104 |
| A | 140.82.114.3 | 2026-05-26 00:24:59.887 | 2026-06-22 05:50:51.900 |
| A | 140.82.112.3 | 2026-05-26 05:26:40.228 | 2026-07-17 07:27:25.407 |
| A | 140.82.113.4 | 2026-05-26 14:15:34.038 | 2026-06-21 10:39:47.045 |
| A | 140.82.112.4 | 2026-05-27 14:33:35.773 | 2026-06-23 19:33:17.514 |
| A | 140.82.113.3 | 2026-05-27 23:31:40.775 | 2026-07-15 22:12:37.107 |
| A | 140.82.114.4 | 2026-05-31 06:37:40.785 | 2026-06-23 05:50:41.176 |
| A | 4.225.11.194 | 2026-06-19 13:26:28.376 | 2026-06-23 00:31:57.685 |
| TXT | anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm | 2026-06-22 19:28:57.928 | 2026-07-22 19:05:54.104 |
| TXT | serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue | 2026-07-14 20:14:55.325 | 2026-07-22 19:05:54.104 |