{
  "domain": "github.com",
  "records": {
    "ns": [
      "dns1.p08.nsone.net",
      "dns2.p08.nsone.net",
      "dns3.p08.nsone.net",
      "dns4.p08.nsone.net",
      "ns-1283.awsdns-32.org",
      "ns-1707.awsdns-21.co.uk",
      "ns-421.awsdns-52.com",
      "ns-520.awsdns-01.net"
    ],
    "a": [
      "172.182.252.133"
    ],
    "aaaa": null,
    "mx": [
      {
        "pref": 0,
        "host": "github-com.mail.protection.outlook.com"
      }
    ],
    "cname": null,
    "txt": [
      "00dd0000000hhe0=1tbkg000000tn2r",
      "adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b",
      "anthropic-domain-verification-4az7qn=if8ywurrqwlycgjdooumzhtxm",
      "apple-domain-verification=ryqhdztl6z6x8zp4",
      "atlassian-domain-verification=jjgw98akv2aeoyfxil/vfaoypkn3undesstrumg6c/3fp/iqhkv4hvv7wjylvef8",
      "calendly-site-verification=at0dqari7izvjtxqawhmqpmizpvobnf7aam5vkkxp",
      "cursor-domain-verification-gtfwmt=1rflotitngx5qsxd5hvnktvm3",
      "docusign=087098e3-3d46-47b7-9b4e-8a23028154cd",
      "facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50",
      "google-site-verification=82le34flgtd15ojyhhlgf_6g72musjamlmvthbojpks",
      "google-site-verification=utm-3akmgubp6tqtgeuakynylyyavptnnsrdmwodr3o",
      "jamf-site-verification=xtapniyghf_e_xrdi8cjgq",
      "krisp-domain-verification=zlyik7xlhnaouqb2hpak1ply7dfkl1we",
      "loom-site-verification=f3787154f1154b7880e720a511ea664d",
      "miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9",
      "ms=6bf03e6af5cb689e315fb6199603babf2c88d805",
      "ms=ms44452932",
      "ms=ms58704441",
      "openai-domain-verification=dv-3nh33eqwdkotmiazlridvzo1",
      "serval-domain-verification-ydryhj=qbkieakpweptvhh5fiicqtaue",
      "shopify-verification-code=t1ypwcmvnxzybycacpk1mpywofs72o",
      "stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f",
      "tailscale-xozodvfuzzr5yyvcqfud",
      "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.2\" \"27.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all"
    ],
    "caa": [
      "0 issue \"digicert.com",
      "0 issue \"globalsign.com",
      "0 issue \"letsencrypt.org",
      "0 issue \"sectigo.com",
      "0 issuewild \"digicert.com",
      "0 issuewild \"letsencrypt.org",
      "0 issuewild \"sectigo.com"
    ],
    "soa": "dns1.p08.nsone.net. hostmaster.nsone.net. 1656468023 43200 7200 1209600 3600",
    "ds": null,
    "dnskey": null,
    "has_dnssec": false
  },
  "ns_hosts": [
    {
      "host": "dns1.p08.nsone.net",
      "ip": "198.51.44.8",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.44.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns1.p08.nsone.net",
      "ip": "2620:4d:4000:6259:7:8:0:1",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2620:4d:4000::/48",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns2.p08.nsone.net",
      "ip": "198.51.45.8",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.45.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns2.p08.nsone.net",
      "ip": "2a00:edc0:6259:7:8::2",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2a00:edc0:6259::/48",
      "country": "DE",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns3.p08.nsone.net",
      "ip": "198.51.44.72",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.44.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns3.p08.nsone.net",
      "ip": "2620:4d:4000:6259:7:8:0:3",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2620:4d:4000::/48",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns4.p08.nsone.net",
      "ip": "198.51.45.72",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.45.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns4.p08.nsone.net",
      "ip": "2a00:edc0:6259:7:8::4",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2a00:edc0:6259::/48",
      "country": "DE",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1283.awsdns-32.org",
      "ip": "205.251.197.3",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.197.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1283.awsdns-32.org",
      "ip": "2600:9000:5305:300::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5304::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1707.awsdns-21.co.uk",
      "ip": "205.251.198.171",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.198.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1707.awsdns-21.co.uk",
      "ip": "2600:9000:5306:ab00::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5306::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-421.awsdns-52.com",
      "ip": "205.251.193.165",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.193.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-421.awsdns-52.com",
      "ip": "2600:9000:5301:a500::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5301::/48",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-520.awsdns-01.net",
      "ip": "205.251.194.8",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.194.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-520.awsdns-01.net",
      "ip": "2600:9000:5302:800::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5302::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    }
  ],
  "web_hosts": [
    {
      "host": "github.com",
      "ip": "172.182.252.133",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "172.160.0.0/11",
      "country": "GB",
      "provider": "Microsoft Azure",
      "kind": "cloud",
      "anycast": true
    }
  ],
  "mx_hosts": [
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.11.13",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.41.125",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.42.18",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.9.87",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:c918::5",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:f803::1",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:f908::3",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:f90a::8",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    }
  ],
  "findings": [
    {
      "layer": "web",
      "severity": "medium",
      "title": "Single web origin IP",
      "detail": "The site resolves to exactly one IP with no CDN in front. That host is a hard single point of failure.",
      "evidence": [
        "github.com → 172.182.252.133 · AS8075 Microsoft Azure · GB"
      ],
      "remediate": "Put the origin behind a CDN/anycast layer, or publish multiple origins across networks."
    },
    {
      "layer": "web",
      "severity": "low",
      "title": "No CDN in front of the origin",
      "detail": "The origin is directly exposed: no anycast absorption, no edge caching, and the origin IP is visible for targeted attack.",
      "evidence": null,
      "remediate": "Front the site with a CDN (Cloudflare, Fastly, CloudFront, …)."
    },
    {
      "layer": "dns",
      "severity": "low",
      "title": "DNSSEC not enabled",
      "detail": "No DS record at the parent: responses are not cryptographically authenticated and can be forged by an on-path attacker or a poisoned resolver.",
      "evidence": null,
      "remediate": "Enable DNSSEC signing and publish a DS record at the registrar. (Automate key rollover — misconfigured DNSSEC can itself cause outages.)"
    }
  ],
  "grade": "B",
  "score": 82,
  "has_cdn": false
}