github.com Security Audit on CyberFurl

Preparing the security report

Privacy controls

CyberFurl can load analytics only after you opt in. Core product features work without analytics consent.

github.com Security Audit — DNS, Email & SSL Report

Security report

Completed

CyberFurl completed the core public checks, but the combined audit score is still calculating while the remaining weighted evidence is validated.

Unified external risk score across DNS, email, web, malware, breach exposure, and technical readiness signals. Final scoring will publish once the remaining evidence settles.

Monitor DomainCheck another

Latest report

Ready to share

8/23/2026, 4:06:13 PM UTC

Coverage

7/7 stages

100% collected

Leading signal

Still evaluating

Waiting for scored data

Priority area

Still evaluating

DNS settings need attention

Immediate priority

DNS settings need attention

DNSSEC is not enabled.

Email the full report to get the DNS fix checklist.

Score status

Latest saved external posture

8/23/2026, 4:06:13 PM UTC

—Combined scoreCalculating7/7 stages

Coverage7/7 stages

Signals5 surfaced

StatusScore will publish as the remaining evidence settles

Email security

CyberFurl checks the public email authentication records for github.com including SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting, and Conformance). These protocols determine whether emails from github.com can be trusted by receiving mail servers and whether they are likely to reach the inbox or be flagged as spam.

Email score

—/N/A

Risk level

Pending

Key finding

Email protection needs attention

Get the full email deliverability breakdown in the PDF report

Public findings

Issues at a glance

A public summary of the checks that surfaced the strongest visible signals in this report.

Check

Status

Severity

Explanation

DNS settings need attention

Review

warning

Business Impact: DNS hijacking risk and potential downtime. DNSSEC is not enabled.

Email protection needs attention

Review

warning

Business Impact: Attackers may impersonate your domain in phishing campaigns. Missing controls: SPF, DKIM, DMARC…

Web security needs attention

Review

warning

Business Impact: Increased exposure to browser-based attacks. Present: HSTS, CSP, X-Frame-Options, X-Content-Typ…

4 issues found that need attention

Get the full remediation workbook with step-by-step fixes delivered to your inbox.

View Complete Findings

Executive summary

CyberFurl is still gathering trustworthy public posture evidence for github.com. Keep this tab open while the combined audit stages finish collecting evidence.

Email the full report for the business summary, supporting context, and prioritized actions.

Control and exposure map

One primary exposure, one strongest control, and the remaining stages arranged as report rows instead of equal-weight dashboard tiles.

Primary exposure

DNS posture

Failed

DNS settings need attention

—

Scan failed · partial data

DNSSEC

Not enabled

Resolver and record checks were included in this audit.

DNSSEC

Off

Resolver health

Unknown

Strongest control

Email authenticity

SPF, DKIM, DMARC, and MX coverage were included.

—

Scan failed · partial data

Audit frame

Coverage

100% collected

7/7 stages

Signals

4 issues to review

Freshness

Ready to share externally

Checked today

Web security

Failed

Web security needs attention

—

Scan failed · partial data

HSTSPresent

CSPPresent

Present: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. Missing: Permi…

Malware intelligence

Limited detail

Threat telemetry is still being validated

—

Scan failed · partial data

Signals0

VerdictUnknown

Threat-feed telemetry and blacklist reputation were reviewed without an active hit.

Supporting evidence

Domain, infrastructure, and incident proof

Saved signals that support the scored audit without introducing another score layer.

Email Authentication (SPF, DKIM, DMARC)

Public section

Email security deep dive

Status

completed

Saved SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT, DANE, and MX evidence was included from the latest shared email scan.

Included in the current public preview

SPF recordMissing

DKIM selectorsMissing

DMARC pMissing

DMARC spNot set

DMARC pct100

DMARC ruaNot set

DMARC rufNot set

MX routes0

BIMIUnknown

MTA-STSUnknown

TLS-RPTUnknown

DANEUnknown

DMARC policyp= pct=100 rua= ruf=

DNS Configuration

Public section

DNS Records snapshot

Saved DNS records were included from the latest shared DNS scan.

Included in the current public preview

completed

SSL/TLS Certificate

Public section

SSL/TLS certificate panel

Saved certificate validity, protocol support, negotiated cipher, and transport-hardening evidence was included from the latest TLS scan.

Included in the current public preview

completed

IssuerCN=Sectigo Public Server Authentication CA DV E36,O=Sectigo Limited,C=GB

Valid fromMay 05, 2026

Valid toAugust 02, 2026

Days remaining38 days · Caution

TLS versionsTLSv1.3, TLSv1.2

Cipher suite gradeA

Negotiated cipherTLS_AES_128_GCM_SHA256

HSTSMissing

OCSP staplingUnknown

CT logsUnknown

Accepted cipherTLS_AES_128_GCM_SHA256

Certificate

SubjectCN=github.com

IssuerCN=Sectigo Public Server Authentication CA DV E36,O=Sectigo Limited,C=GB

TLS Protocols

TLSv1.3Supported

TLSv1.2Supported

TLSv1.1Not supported

TLSv1.0Not supported

Cipher Suites

Cipher

Protocol

Strength

TLS_AES_128_GCM_SHA256TLSv1.3strong

ECDHE-ECDSA-AES256-GCM-SHA384TLSv1.2strong

ECDHE-RSA-AES256-GCM-SHA384TLSv1.2strong

ECDHE-ECDSA-CHACHA20-POLY1305TLSv1.2strong

ECDHE-RSA-CHACHA20-POLY1305TLSv1.2strong

ECDHE-ECDSA-AES128-GCM-SHA256TLSv1.2strong

ECDHE-RSA-AES128-GCM-SHA256TLSv1.2strong

ECDHE-ECDSA-AES256-SHA384TLSv1.2strong

ECDHE-RSA-AES256-SHA384TLSv1.2strong

Subject Alternative Names (2)

github.comwww.github.com

Web Security Headers

Security Headers

Strict-Transport-Security

PRESENT

max-age=31536000; includeSubdomains; preload

Content-Security-Policy

PRESENT

default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/

X-Frame-Options

PRESENT

deny

X-Content-Type-Options

PRESENT

nosniff

Referrer-Policy

PRESENT

origin-when-cross-origin, strict-origin-when-cross-origin

X-XSS-Protection

PRESENT

Cache-Control

PRESENT

max-age=0, private, must-revalidate

Server

PRESENT

github.com

Permissions-Policy

MISSING ESSENTIAL

All Response Headers18 headers

Strict-Transport-Security

PRESENT

max-age=31536000; includeSubdomains; preload

Content-Security-Policy

PRESENT

X-Frame-Options

PRESENT

deny

X-Content-Type-Options

PRESENT

nosniff

Referrer-Policy

PRESENT

origin-when-cross-origin, strict-origin-when-cross-origin

X-XSS-Protection

PRESENT

Cache-Control

PRESENT

max-age=0, private, must-revalidate

Server

PRESENT

github.com

Accept-Ranges

PRESENT

bytes

Content-Encoding

PRESENT

gzip

Content-Language

PRESENT

en-US

Content-Type

PRESENT

text/html; charset=utf-8

Date

PRESENT

Mon, 13 Jul 2026 10:36:09 GMT

ETag

PRESENT

W/"c0b3868e57419a64eb843df5150652be"

Set-Cookie

PRESENT

empty value

Transfer-Encoding

PRESENT

chunked

Vary

PRESENT

X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With

X-GitHub-Request-Id

PRESENT

8826:279AEC:D9DFBC:13B6A5F:6A54BF99

Infrastructure & Other Headers10 headers

Accept-Ranges

PRESENT

bytes

Content-Encoding

PRESENT

gzip

Content-Language

PRESENT

en-US

Content-Type

PRESENT

text/html; charset=utf-8

Date

PRESENT

Mon, 13 Jul 2026 10:36:09 GMT

ETag

PRESENT

W/"c0b3868e57419a64eb843df5150652be"

Set-Cookie

PRESENT

empty value

Transfer-Encoding

PRESENT

chunked

Vary

PRESENT

X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With

X-GitHub-Request-Id

PRESENT

8826:279AEC:D9DFBC:13B6A5F:6A54BF99

Subdomains & Infrastructure

Public section

IP intelligence

Saved resolved IP, ASN, provider, and location evidence was included from the latest shared infrastructure snapshot.

Included in the current public preview

completed

Resolved IPs (8)

140.82.112.4

185.199.108.133

140.82.113.4

140.82.113.17

185.199.108.154

185.199.109.153

140.82.113.6

140.82.114.23

Hosting Provider

Unknown

Organization

Unknown

ASN

Unknown

Country

Unknown

Infrastructure

Unknown

Reverse DNS

github.com

SubdomainDiscovery

Subdomain footprint

14 public hostnames were included in the latest saved enumeration snapshot.

Saved 7/13/2026, 10:36:38 AM UTC

Completed

Discovered14

Subdomain inventory (14)

Subdomain

IP Address

Status

github.com140.82.112.4Live

ns-1283.awsdns-32.org—Live

ns-520.awsdns-01.net—Live

ns-421.awsdns-52.com—Live

ns-1707.awsdns-21.co.uk—Live

www.github.com140.82.112.4Live

support.github.com185.199.108.133Live

shop.github.com140.82.113.4Live

services.github.com140.82.113.17Live

help.github.com140.82.113.17Live

docs.github.com185.199.108.154Live

blog.github.com185.199.109.153Live

api.github.com140.82.113.6Live

admin.github.com140.82.114.23Live

PortScan

Network exposure

3 open port(s) and 0 closed port(s) found in the latest saved port scan.

Saved 7/13/2026, 10:36:38 AM UTC

Completed

Total Open Ports

Total Closed Ports

Filtered / Blocked

Open Ports (3)

Unknown

open

22/TCP

Unknown

open

80/TCP

Unknown

open

443/TCP

All Scanned Ports7 total ports

Port

Protocol

Service

State

21tcp—filtered

25tcp—filtered

8080tcp—filtered

8443tcp—filtered

TracerouteAPI

Network route telemetry

Traceroute collected 0 hop(s) but did not confirm destination.

Saved 6/25/2026, 5:23:26 PM UTC

Completed

Hop Count

Route Reached

Avg RTT

0.0 ms

Min RTT

0.0 ms

Max RTT

0.0 ms

First Hop

Unknown

Final Hop

Unknown

WHOIS & Registration

Public section

WHOIS panel

Saved registrar, lifecycle, and nameserver evidence was included from the latest WHOIS lookup.

Included in the current public preview

completed

Registrar

MarkMonitor Inc.

Privacy Protection

Expiry Health

47 days · Caution

Created

Oct 9, 2007

Updated

Sep 7, 2024

Expires

Oct 9, 2026

Nameservers (8)

dns1.p08.nsone.net

198.51.44.8, 2620:4d:4000:6259:7:8:0:1

dns2.p08.nsone.net

198.51.45.8, 2a00:edc0:6259:7:8::2

dns3.p08.nsone.net

198.51.44.72, 2620:4d:4000:6259:7:8:0:3

dns4.p08.nsone.net

198.51.45.72, 2a00:edc0:6259:7:8::4

ns-1283.awsdns-32.org

205.251.197.3, 2600:9000:5305:300::1

ns-1707.awsdns-21.co.uk

205.251.198.171, 2600:9000:5306:ab00::1

ns-421.awsdns-52.com

205.251.193.165, 2600:9000:5301:a500::1

ns-520.awsdns-01.net

205.251.194.8, 2600:9000:5302:800::1

EPP Status Codes

clientUpdateProhibitedclientTransferProhibitedclientDeleteProhibited

Immediate priorities

DNS settings need attention

Business Impact: DNS hijacking risk and potential downtime.
DNSSEC is not enabled.

Warning

Next step

Email the full report to get the DNS fix checklist.

Email protection needs attention

Business Impact: Attackers may impersonate your domain in phishing campaigns.
Missing controls: SPF, DKIM, DMARC.

Warning

Next step

Email the full report to get the email authentication checklist.

Web security needs attention

Business Impact: Increased exposure to browser-based attacks.
Present: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. Missing: Permissions-Policy.

Warning

Next step

Email the full report to get the web hardening checklist.

Report context

Frequently Asked Questions

Is github.com safe?

CyberFurl has collected publicly observable security signals for github.com but a final composite score has not yet been computed. The report covers DNS, email authentication, web security headers, and SSL/TLS evidence gathered on August 23, 2026 at 4:06 PM UTC.

Is DNSSEC enabled on github.com?

No. CyberFurl found that DNSSEC is not enabled on github.com (status: unsigned). Without DNSSEC, DNS responses cannot be cryptographically verified, leaving the domain potentially vulnerable to cache-poisoning and man-in-the-middle attacks on DNS resolution.

Does github.com use HTTP security headers?

CyberFurl scanned the HTTP response headers served by github.com. 5/6. Properly configured security headers protect visitors from clickjacking, cross-site scripting, and information disclosure.

Does github.com use a valid SSL/TLS certificate?

CyberFurl verified the TLS configuration for github.com: certificate issued by CN=Sectigo Public Server Authentication CA DV E36,O=Sectigo Limited,C=GB. A trusted TLS certificate ensures that traffic between visitors and github.com is encrypted and that the server identity is verified.

Who is the registrar for github.com?

github.com is registered with MarkMonitor Inc.. The registration is scheduled to expire on Expires within 90 days. CyberFurl monitors WHOIS records to detect registrar changes, upcoming expirations, and domain status flags that could affect security.

When does github.com's domain registration expire?

According to CyberFurl's WHOIS lookup, the github.com registration expires on Expires within 90 days. Expired domains can be snatched by attackers for phishing or malware distribution. CyberFurl can alert you as the expiration date approaches.

How many subdomains were discovered for github.com?

CyberFurl's passive enumeration discovered 14 subdomains associated with github.com. Examples include: github.com, ns-1283.awsdns-32.org, ns-520.awsdns-01.net. The full inventory appears in the infrastructure evidence section. Unmonitored subdomains are a common blind spot — expired certificates or misconfigured services on forgotten subdomains can become silent entry points for attackers.

What ports are exposed on github.com?

CyberFurl's network scan found 3 open ports on github.com. Exposed services: 22/tcp (unknown), 80/tcp (unknown), 443/tcp (unknown). Open ports represent potential entry points for attackers. Unused services should be closed and exposed services kept patched and monitored continuously.

When was github.com last scanned by CyberFurl?

The current public report for github.com reflects security data collected on August 23, 2026 at 4:06 PM UTC. CyberFurl continuously refreshes public reports as new evidence is gathered. Enable continuous monitoring to receive real-time alerts the moment security-relevant changes are detected.

How does CyberFurl collect security information about github.com?

CyberFurl relies exclusively on publicly observable signals — no intrusive probing or credentials are required. Data sources include: DNS record queries (A, AAAA, MX, TXT, NS, CAA, PTR), SSL/TLS certificate inspection via standard TLS handshake, HTTP response header analysis, WHOIS registry lookups, passive subdomain enumeration, non-intrusive port reconnaissance, network route telemetry (traceroute), and public threat intelligence feeds.

Why can security findings change between scans for github.com?

Security posture is dynamic. Findings for github.com can change when: SSL/TLS certificates are renewed or expire, DNS records are updated (MX, SPF, DMARC, NS changes), new subdomains are provisioned or decommissioned, HTTP security headers are added or removed from server configuration, hosting or CDN infrastructure changes, or threat intelligence databases are updated with new indicators of compromise.

Can I monitor github.com for security changes?

Yes. CyberFurl's continuous monitoring tracks DNS record changes, SSL/TLS certificate expiry and reissuance, email authentication policy updates (SPF, DKIM, DMARC), WHOIS registration changes, new subdomain discoveries, open port changes, and threat intelligence hits for github.com. Enable continuous monitoring to receive alerts the moment security-relevant changes occur.

Learn More

DMARC DKIM DNSSEC CVE Database OWASP Top 10 DDoS Mitigation TLS/SSL Security

github.com External Security Audit & Risk Exposure Report

github.com Email Deliverability & DMARC Authentication

Issues at a glance

github.com Executive Summary & Key Threat Intelligence

github.com Attack Surface: DNS, Web & Exposure Analysis

DNS posture

Email Authentication (SPF, DKIM, DMARC)

DNS Configuration

SSL/TLS Certificate

Web Security Headers

Security Headers

Subdomains & Infrastructure

Open Ports (3)

WHOIS & Registration

github.com Vulnerability Fixes & Recommended Actions

Frequently Asked Questions

Related Reports

Learn More