github.com — DNS & WHOIS Analysis — Domain Analyzer Tools

● 📋 Domain Registration

PASS

Registrar	MarkMonitor Inc.
Registrar ID	292
Registry	Verisign
Registry ID	1264983250_DOMAIN_COM-VRSN
Created	Oct 09, 2007
Updated	Sep 07, 2024
Expires	Oct 09, 2026 (60 days left)
DNSSEC	✗ Unsigned
Status	client delete prohibited client transfer prohibited client update prohibited
RDAP Nameservers	dns1.p08.nsone.net dns2.p08.nsone.net dns3.p08.nsone.net dns4.p08.nsone.net ns-1283.awsdns-32.org ns-1707.awsdns-21.co.uk ns-421.awsdns-52.com ns-520.awsdns-01.net

● 🌐 DNS Records

PASS

SOA Records (1)

Name	Value	TTL
github.com	ns-1707.awsdns-21.co.uk awsdns-hostmaster.amazon.com 1 7200 900 1209600 86400	900

NS Records (8)

Name	Value	TTL
github.com	ns-520.awsdns-01.net	900
github.com	ns-421.awsdns-52.com	900
github.com	ns-1707.awsdns-21.co.uk	900
github.com	ns-1283.awsdns-32.org	900
github.com	dns4.p08.nsone.net	900
github.com	dns3.p08.nsone.net	900
github.com	dns2.p08.nsone.net	900
github.com	dns1.p08.nsone.net	900

A Records (1)

Name	Value	TTL
github.com	140.82.113.4	60

MX Records (1)

Name	Value	TTL
github.com	github-com.mail.protection.outlook.com	300

TXT Records (22)

Name	Value	TTL
github.com	MS=ms58704441	300
github.com	facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50	300
github.com	google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o	300
github.com	jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ	300
github.com	krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE	300
github.com	loom-site-verification=f3787154f1154b7880e720a511ea664d	300
github.com	miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9	300
github.com	serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue	300
github.com	shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o	300
github.com	stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f	300
github.com	v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.2 27.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all	300
github.com	google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks	300
github.com	docusign=087098e3-3d46-47b7-9b4e-8a23028154cd	300
github.com	calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP	300
github.com	atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8	300
github.com	apple-domain-verification=RyQhdzTl6Z6x8ZP4	300
github.com	anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm	300
github.com	adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b	300
github.com	TAILSCALE-xOzoDvFUzZr5YYVCQFuD	300
github.com	MS=ms44452932	300
github.com	MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805	300
github.com	00Dd0000000hHE0=1TBKg000000TN2r	300

CAA Records (7)

Name	Value	TTL
github.com	0 issue "digicert.com"	3600
github.com	0 issue "globalsign.com"	3600
github.com	0 issue "letsencrypt.org"	3600
github.com	0 issue "sectigo.com"	3600
github.com	0 issuewild "digicert.com"	3600
github.com	0 issuewild "letsencrypt.org"	3600
github.com	0 issuewild "sectigo.com"	3600

● 🔗 Parent Nameservers

PASS

Nameserver	IPv4	IPv6	Glue
dns1.p08.nsone.net	198.51.44.8	2620:4d:4000:6259:7:8:0:1	No
dns2.p08.nsone.net	198.51.45.8	2a00:edc0:6259:7:8::2	No
ns-1707.awsdns-21.co.uk	205.251.198.171	2600:9000:5306:ab00::1	No
dns4.p08.nsone.net	198.51.45.72	2a00:edc0:6259:7:8::4	No
ns-421.awsdns-52.com	205.251.193.165	2600:9000:5301:a500::1	Yes
ns-1283.awsdns-32.org	205.251.197.3	2600:9000:5305:300::1	No
dns3.p08.nsone.net	198.51.44.72	2620:4d:4000:6259:7:8:0:3	No
ns-520.awsdns-01.net	205.251.194.8	2600:9000:5302:800::1	No

✓	Nameservers Listed at Parent	The parent TLD nameserver has 8 nameserver(s) listed for github.com. ns-520.awsdns-01.net ns-421.awsdns-52.com ns-1707.awsdns-21.co.uk ns-1283.awsdns-32.org dns1.p08.nsone.net dns2.p08.nsone.net dns3.p08.nsone.net dns4.p08.nsone.net
✓	Minimum Nameserver Count	8 nameservers found. Good redundancy.
✓	Public IP: dns1.p08.nsone.net	Nameserver dns1.p08.nsone.net has a public IP address.
✓	Public IP: dns2.p08.nsone.net	Nameserver dns2.p08.nsone.net has a public IP address.
✓	Public IP: ns-1707.awsdns-21.co.uk	Nameserver ns-1707.awsdns-21.co.uk has a public IP address.
✓	Public IP: dns4.p08.nsone.net	Nameserver dns4.p08.nsone.net has a public IP address.
✓	Glue Record: ns-421.awsdns-52.com	Glue record found for ns-421.awsdns-52.com: 205.251.193.165, 2600:9000:5301:a500::1
✓	Public IP: ns-421.awsdns-52.com	Nameserver ns-421.awsdns-52.com has a public IP address.
✓	Public IP: ns-1283.awsdns-32.org	Nameserver ns-1283.awsdns-32.org has a public IP address.
✓	Public IP: dns3.p08.nsone.net	Nameserver dns3.p08.nsone.net has a public IP address.
✓	Public IP: ns-520.awsdns-01.net	Nameserver ns-520.awsdns-01.net has a public IP address.
✓	Parent/Auth NS Consistency	The nameservers listed at the parent match those returned by the authoritative nameservers.

● 🖥️ Authoritative Nameservers

PASS

Nameserver	UDP	TCP	Auth	Recursion	IPv6	Latency
dns1.p08.nsone.net	✓	✓	✓	Closed	✓	11ms
dns2.p08.nsone.net	✓	✓	✓	Closed	✓	10ms
dns3.p08.nsone.net	✓	✓	✓	Closed	✓	11ms
dns4.p08.nsone.net	✓	✓	✓	Closed	✓	11ms
ns-1283.awsdns-32.org	✓	✓	✓	Closed	✓	20ms
ns-1707.awsdns-21.co.uk	✓	✓	✓	Closed	✓	21ms
ns-421.awsdns-52.com	✓	✓	✓	Closed	✓	21ms
ns-520.awsdns-01.net	✓	✓	✓	Closed	✓	20ms

✓	Authoritative Nameservers Found	Found 8 authoritative nameserver(s): ns-520.awsdns-01.net, ns-1707.awsdns-21.co.uk, ns-1283.awsdns-32.org, ns-421.awsdns-52.com, dns1.p08.nsone.net, dns4.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net
✓	All Nameservers Respond	All authoritative nameservers are responding to DNS queries.
✓	UDP DNS (Port 53)	At least one nameserver is responding to UDP DNS queries on port 53.
✓	TCP DNS (Port 53)	TCP DNS queries are supported. Required for large responses and DNSSEC.
✓	Authoritative Response	At least one nameserver returns an authoritative (AA) response for the zone.
✓	Open Recursion	Nameservers do not appear to answer recursive queries from outside. Good.
✓	Public IP Addresses	All nameservers have publicly routable IP addresses.
✓	IPv6 Support	At least one nameserver has an IPv6 (AAAA) address.
✓	NS Record Consistency	All authoritative nameservers return identical NS records.
✓	Multiple Network Diversity	Nameservers appear to be on different subnets/networks. Good resilience.

● 📄 SOA Record

WARNING

Primary NS (MNAME)	ns-1707.awsdns-21.co.uk
Email (RNAME)	awsdns-hostmaster.amazon.com
Serial	1
Refresh	7200 (2 hours)
Retry	900 (15 min)
Expire	1209600 (14 days)
Minimum TTL	86400 (1 day)

✓	SOA Record Exists	SOA record found for github.com.
✓	SOA MNAME	SOA MNAME (ns-1707.awsdns-21.co.uk) is listed as an authoritative nameserver.
✓	SOA RNAME	SOA contact email: awsdns-hostmaster@amazon.com
ℹ	SOA Serial Format	SOA serial is 1. The recommended format is YYYYMMDDNN (e.g., 2024010101).
⚠	SOA Serial Consistency	Authoritative nameservers return different SOA serial numbers. Zone transfer may be in progress or a secondary is lagging.
✓	SOA Refresh	SOA Refresh is 7200 seconds (2h). Reasonable value.
✓	SOA Retry	SOA Retry is 900 seconds.
✓	SOA Expire	SOA Expire is 1209600 seconds (14 days). Reasonable value.
✓	SOA Minimum TTL	SOA Minimum TTL (negative caching) is 86400 seconds.

● 📧 Mail Servers (MX)

WARNING

Priority	Hostname	IPv4	IPv6	PTR
0	github-com.mail.protection.outlook.com	52.101.10.1, 52.101.194.3, 52.101.41.4, 52.101.41.22	2a01:111:f403:f912::, 2a01:111:f403:c902::2, 2a01:111:f403:c92c::3, 2a01:111:f403:c902::16	mail-bn6pr02cu00301.inbound.protection.outlook.com, mail-ch1pr04cu00103.inbound.protection.outlook.com, mail-sj2pr05cu00204.inbound.protection.outlook.com, mail-sj2pr05cu00406.inbound.protection.outlook.com

✓	MX Records Exist	Found 1 MX record(s) for github.com.
⚠	MX Redundancy	Only one MX record found. A single mail server is a single point of failure. Consider adding a backup MX.
✓	MX Reverse DNS (PTR)	MX server(s) have PTR (reverse DNS) records. Many mail servers require rDNS for anti-spam.
✓	MX Consistency	All authoritative nameservers return consistent MX records.

● 🌍 WWW / Web

PASS

Target	Type	IPs
www.github.com	CNAME	140.82.113.4 CNAME chain: www.github.com → github.com

✓	WWW CNAME	www.github.com is a CNAME pointing to github.com, which resolves to 140.82.113.4. CNAME chain: www.github.com → github.com
✓	WWW vs Apex IP	www.github.com and github.com resolve to the same IP address(es).

● 🔒 DNSSEC

INFO

Enabled

No

Chain of Trust

Level	DS	DNSKEY	RRSIG	Status
.	—	✓	✓	PASS
com	✓	✓	✓	PASS
github.com	—	—	—	INFO

ℹ

DNSSEC Status

DNSSEC is not enabled for github.com. No DS or DNSKEY records found.

● 🛡️ Email Security

WARNING

SPF (Sender Policy Framework)

Record	v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all
All Mechanism	~all
DNS Lookups	8 / 10 max

DMARC (Domain-based Message Authentication)

Record	v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1
Policy (p=)	quarantine
Subdomain Policy (sp=)	reject
Percentage (pct=)	100%
Aggregate Reports (rua)	mailto:dmarc@github.com
Forensic Reports (ruf)	mailto:dmarc@github.com

CAA (Certificate Authority Authorization)

Flag	Tag	Value
0	issue	digicert.com
0	issue	globalsign.com
0	issue	letsencrypt.org
0	issue	sectigo.com
0	issuewild	digicert.com
0	issuewild	letsencrypt.org
0	issuewild	sectigo.com

✓	SPF Record	SPF record found. v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all
ℹ	SPF All Mechanism	SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement.
⚠	SPF DNS Lookup Count	SPF record uses approximately 8 DNS lookups. The RFC 7208 limit is 10.
✓	DMARC Record	DMARC record found. v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1
ℹ	DMARC Policy	DMARC policy is 'quarantine'. Failing emails will be sent to spam/junk folders.
✓	DMARC Reporting (rua)	Aggregate reports (rua) will be sent to: mailto:dmarc@github.com
✓	CAA Records	CAA records found (7). Certificate issuance is restricted.
ℹ	CAA iodef Tag	No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests.

● 📡 DNS Propagation

PASS

Status	Resolver	Location	Result	Latency
✓	Cloudflare (1.1.1.1)	US (Cloudflare)	140.82.114.4	11ms
✓	Cloudflare 2 (1.0.0.1)	US (Cloudflare)	140.82.114.4	11ms
✓	Comodo Secure (8.26.56.26)	US (Comodo)	140.82.116.3	20ms
✓	Google Public DNS 2 (8.8.4.4)	US (Google)	140.82.114.3	27ms
✓	Google Public DNS (8.8.8.8)	US (Google)	140.82.114.3	29ms
✓	OpenDNS 2 (208.67.220.220)	US (OpenDNS)	140.82.114.3	19ms
✓	Quad9 (9.9.9.9)	US (Quad9)	140.82.116.3	21ms
✓	Verisign (64.6.64.6)	US (Verisign)	140.82.113.4	16ms
✓	OpenDNS (208.67.222.222)	US (OpenDNS)	140.82.112.4	25ms
✓	Yandex.DNS (77.88.8.8)	RU (Yandex)	140.82.121.4	190ms

● 🔄 Reverse DNS (PTR)

INFO

IP Address	PTR Record	Forward Match
52.101.10.1	mail-bn6pr02cu00301.inbound.protection.outlook.com	✗ No match
52.101.194.3	mail-ch1pr04cu00103.inbound.protection.outlook.com	✗ No match
52.101.41.4	mail-sj2pr05cu00204.inbound.protection.outlook.com	✗ No match
52.101.41.22	mail-sj2pr05cu00406.inbound.protection.outlook.com	✗ No match

github.com — DNS Report

● 📋 Domain Registration

● 🌐 DNS Records

SOA Records (1)

NS Records (8)

A Records (1)

MX Records (1)

TXT Records (22)

CAA Records (7)

● 🔗 Parent Nameservers

● 🖥️ Authoritative Nameservers

● 📄 SOA Record

● 📧 Mail Servers (MX)

● 🌍 WWW / Web

● 🔒 DNSSEC

Chain of Trust

● 🛡️ Email Security

SPF (Sender Policy Framework)

DMARC (Domain-based Message Authentication)

CAA (Certificate Authority Authorization)

● 📡 DNS Propagation

● 🔄 Reverse DNS (PTR)