{
  "domain": "github.com",
  "records": {
    "ns": [
      "dns1.p08.nsone.net",
      "dns2.p08.nsone.net",
      "dns3.p08.nsone.net",
      "dns4.p08.nsone.net",
      "ns-1283.awsdns-32.org",
      "ns-1707.awsdns-21.co.uk",
      "ns-421.awsdns-52.com",
      "ns-520.awsdns-01.net"
    ],
    "a": [
      "140.82.116.4"
    ],
    "aaaa": null,
    "mx": [
      {
        "pref": 0,
        "host": "github-com.mail.protection.outlook.com"
      }
    ],
    "cname": null,
    "txt": [
      "00dd0000000hhe0=1tbkg000000tn2r",
      "adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b",
      "anthropic-domain-verification-4az7qn=if8ywurrqwlycgjdooumzhtxm",
      "apple-domain-verification=ryqhdztl6z6x8zp4",
      "atlassian-domain-verification=jjgw98akv2aeoyfxil/vfaoypkn3undesstrumg6c/3fp/iqhkv4hvv7wjylvef8",
      "calendly-site-verification=at0dqari7izvjtxqawhmqpmizpvobnf7aam5vkkxp",
      "docusign=087098e3-3d46-47b7-9b4e-8a23028154cd",
      "facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50",
      "google-site-verification=82le34flgtd15ojyhhlgf_6g72musjamlmvthbojpks",
      "google-site-verification=utm-3akmgubp6tqtgeuakynylyyavptnnsrdmwodr3o",
      "jamf-site-verification=xtapniyghf_e_xrdi8cjgq",
      "krisp-domain-verification=zlyik7xlhnaouqb2hpak1ply7dfkl1we",
      "loom-site-verification=f3787154f1154b7880e720a511ea664d",
      "miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9",
      "ms=6bf03e6af5cb689e315fb6199603babf2c88d805",
      "ms=ms44452932",
      "ms=ms58704441",
      "serval-domain-verification-ydryhj=qbkieakpweptvhh5fiicqtaue",
      "shopify-verification-code=t1ypwcmvnxzybycacpk1mpywofs72o",
      "stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f",
      "tailscale-xozodvfuzzr5yyvcqfud",
      "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.2\" \"27.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all"
    ],
    "caa": [
      "\\# 18 00 05 69 73 73 75 65 73 65 63 74 69 67 6f 2e 63 6f 6d",
      "\\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d",
      "\\# 21 00 05 69 73 73 75 65 67 6c 6f 62 61 6c 73 69 67 6e 2e 63 6f 6d",
      "\\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67",
      "\\# 22 00 09 69 73 73 75 65 77 69 6c 64 73 65 63 74 69 67 6f 2e 63 6f 6d",
      "\\# 23 00 09 69 73 73 75 65 77 69 6c 64 64 69 67 69 63 65 72 74 2e 63 6f 6d",
      "\\# 26 00 09 69 73 73 75 65 77 69 6c 64 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67"
    ],
    "soa": "dns1.p08.nsone.net. hostmaster.nsone.net. 1656468023 43200 7200 1209600 3600",
    "ds": null,
    "dnskey": null,
    "has_dnssec": false
  },
  "ns_hosts": [
    {
      "host": "dns1.p08.nsone.net",
      "ip": "198.51.44.8",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.44.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns1.p08.nsone.net",
      "ip": "2620:4d:4000:6259:7:8:0:1",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2620:4d:4000::/48",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns2.p08.nsone.net",
      "ip": "198.51.45.8",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.45.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns2.p08.nsone.net",
      "ip": "2a00:edc0:6259:7:8::2",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2a00:edc0:6259::/48",
      "country": "DE",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns3.p08.nsone.net",
      "ip": "198.51.44.72",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.44.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns3.p08.nsone.net",
      "ip": "2620:4d:4000:6259:7:8:0:3",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2620:4d:4000::/48",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns4.p08.nsone.net",
      "ip": "198.51.45.72",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "198.51.45.0/24",
      "country": "US",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "dns4.p08.nsone.net",
      "ip": "2a00:edc0:6259:7:8::4",
      "asn": 62597,
      "as_name": "NSONE - NSONE Inc",
      "prefix": "2a00:edc0:6259::/48",
      "country": "DE",
      "provider": "NS1",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1283.awsdns-32.org",
      "ip": "205.251.197.3",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.197.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1283.awsdns-32.org",
      "ip": "2600:9000:5305:300::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5304::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1707.awsdns-21.co.uk",
      "ip": "205.251.198.171",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.198.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-1707.awsdns-21.co.uk",
      "ip": "2600:9000:5306:ab00::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5306::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-421.awsdns-52.com",
      "ip": "205.251.193.165",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.193.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-421.awsdns-52.com",
      "ip": "2600:9000:5301:a500::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5301::/48",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-520.awsdns-01.net",
      "ip": "205.251.194.8",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "205.251.194.0/24",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    },
    {
      "host": "ns-520.awsdns-01.net",
      "ip": "2600:9000:5302:800::1",
      "asn": 16509,
      "as_name": "AMAZON-02 - Amazon.com, Inc.",
      "prefix": "2600:9000:5302::/47",
      "country": "US",
      "provider": "AWS Route 53",
      "kind": "dns",
      "anycast": true
    }
  ],
  "web_hosts": [
    {
      "host": "github.com",
      "ip": "140.82.116.4",
      "asn": 36459,
      "as_name": "GITHUB - GitHub, Inc.",
      "prefix": "140.82.116.0/24",
      "country": "US",
      "provider": "GITHUB - GitHub, Inc.",
      "kind": "",
      "anycast": false
    }
  ],
  "mx_hosts": [
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "40.93.192.4",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "40.80.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.11.15",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.11.19",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "52.101.9.20",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "52.96.0.0/12",
      "country": "US",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:c902::16",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:c902::2",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:f802::2",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    },
    {
      "host": "github-com.mail.protection.outlook.com",
      "ip": "2a01:111:f403:f908::",
      "asn": 8075,
      "as_name": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation",
      "prefix": "2a01:111:f000::/36",
      "country": "GB",
      "provider": "Microsoft 365",
      "kind": "mail",
      "anycast": true
    }
  ],
  "findings": [
    {
      "layer": "web",
      "severity": "medium",
      "title": "Single web origin IP",
      "detail": "The site resolves to exactly one IP with no CDN in front. That host is a hard single point of failure.",
      "evidence": [
        "github.com → 140.82.116.4 · AS36459 GITHUB - GitHub, Inc. · US"
      ],
      "remediate": "Put the origin behind a CDN/anycast layer, or publish multiple origins across networks."
    },
    {
      "layer": "web",
      "severity": "low",
      "title": "No CDN in front of the origin",
      "detail": "The origin is directly exposed: no anycast absorption, no edge caching, and the origin IP is visible for targeted attack.",
      "evidence": null,
      "remediate": "Front the site with a CDN (Cloudflare, Fastly, CloudFront, …)."
    },
    {
      "layer": "dns",
      "severity": "low",
      "title": "DNSSEC not enabled",
      "detail": "No DS record at the parent: responses are not cryptographically authenticated and can be forged by an on-path attacker or a poisoned resolver.",
      "evidence": null,
      "remediate": "Enable DNSSEC signing and publish a DS record at the registrar. (Automate key rollover — misconfigured DNSSEC can itself cause outages.)"
    }
  ],
  "grade": "B",
  "score": 82,
  "has_cdn": false
}